Your verification code
Acme ID <no-reply@acme.example>
To signup-7f3a@qa.example.dev
Acme ID
Hi there,
Your verification code is:
It expires in 10 minutes. Don't share it with anyone.
This is an automated message — please don't reply.
Loading
04 / 05
Self-hosted temporary mail.
Self-hosted temporary mail and custom-domain inboxes for teams, tests and AI agents.
HloolMail receives mail for any domain you own. Point your MX records at it and every address — even on wildcard subdomains — lands in a web console, an API, a webhook or a read-only share link.
Sign-up tests, CI pipelines and AI agents all need real inboxes for verification codes. Public disposable-mail services are unreliable and leak data, while a full mail server is overkill for receive-only needs.
01 / 03
Receive-only by design: an SMTP catch-all for your domains, including wildcard subdomains — no outbound mail and no IMAP or POP3, which keeps the attack surface small.
02 / 03
Built for automation: API keys, an endpoint for polling the next verification code, signed webhooks with retries, a built-in CLI and auto-generated OpenAPI docs.
03 / 03
Easy to run: a Go binary with the web console embedded, Docker Compose with PostgreSQL or SQLite, a first-run install page, per-user isolation, HTML sanitisation and optional Prometheus metrics.
SMTP catch-all on your own domains, with wildcard subdomain mailboxes.
Manage inboxes, domains, API keys, webhooks and share links in one place.
Scripts and AI agents fetch the next verification code with one call.
message.received events delivered with signatures and retries.
Read-only mailbox access through an unguessable token and access key.
A built-in CLI and generated API docs in JSON, YAML and Markdown.
From first sketch to running in production — we build your product to the same standard as our own.