Is Nodemailer safe to use in your test suite?
Nodemailer is a small, send only library with a good safety record. The danger in a test suite is never the package itself, it is the transport you hand it and the credentials sitting in CI.
The InboxDome Blog
Practical guides on temporary email, inbox privacy and email testing, written by the team that runs the service.
More posts
What is email sandboxing?
A sandbox catches the mail your application sends before it reaches anyone real. That makes most template bugs cheap to find, and makes a few delivery bugs impossible to see.
Is Guerrilla Mail safe? What it protects, and what it does not
Guerrilla Mail keeps junk out of your real inbox, and it is honest about its limits. The catch is the addressing model: the address is the only thing between a stranger and your mail.
What is a temporary email address?
A temporary email address is a working inbox you did not have to sign up for and that deletes itself soon after. Here is the mechanism, the good uses, and the bad ones.
WordPress send email not working: the likely causes, in order
Five reasons WordPress stops sending mail, ranked by how often they are the culprit, plus the one test that tells you whether the message ever left your server at all.
How does email pixel tracking work, and how do you switch it off
A tracking pixel is an ordinary remote image with a web address unique to you. Here is what the sender learns when it loads, how to spot one, and how to stop it.
How does MCP work, message by message
MCP is JSON-RPC over stdio or HTTP. A client opens a session, asks what tools exist, then calls one. Here is each message, then a hosted server to point your agent at.
How websites detect temporary email, and how to build that check
Three cheap signals do almost all the work: a public domain blocklist, what DNS says the domain can receive, and how the signup behaves. Here is how to implement each one and test it.
Email testing with Playwright, end to end
Give every Playwright test its own real, receivable inbox: a fixture, a signup spec that waits for the verification code, assertions on the mail itself, and what to change for CI.
How to test OTP verification end to end
A concrete recipe for OTP tests that do not flake: a real receivable address per test run, a long poll instead of a sleep, assertions on the mail itself, and CI wiring.
How does Mailtrap work?
Mailtrap catches the mail your application sends before it reaches anyone. Here is how to point your app at it, how to read messages back from the API, and the one thing a sandbox can never prove.
How to make a throwaway email
Open a temporary inbox, copy the address, paste it into the form. Plus the two alternatives worth knowing, and the signups where a throwaway address will cost you more than it saves.
How to create a test email address that actually receives mail
A working test address takes about ten seconds and no account. Here is the fastest way to get one, why made up addresses fail, and when a temporary inbox is the wrong tool.
The best email alias services, and when you want a temp inbox instead
An honest look at the best email alias options: SimpleLogin, addy.io, Firefox Relay and Apple Hide My Email, plus the cases where a disposable inbox is simply the better call.
The best email MCP server for your agent, honestly compared
Email MCP servers do three different jobs: send mail, inspect a sending platform, or receive real mail in a test. Here is which server fits which job, and where each one stops.
SPF, DKIM and DMARC, explained by what a receiver actually does
Three DNS records, one verdict. What each one proves, the order a receiving server applies them, and why a message can pass SPF and still fail DMARC.
The best email API depends on which job you actually have
Three different products hide behind one search. This is an honest roundup of sending APIs, inbound APIs and email testing APIs, including the cases where InboxDome is the wrong tool.
The best email testing tools, and which one your test suite actually needs
Mailpit, Ethereal, Mailtrap, Mailosaur, MailSlurp, Litmus and InboxDome do three different jobs. Pick the job first, then the tool, and know where each one stops.
The best disposable email services, and when each one wins
There is no single winner here. Public inboxes, timed throwaways and forwarding aliases solve three different problems, and picking the wrong one is how people lose an account.
Temp mail alternatives, and how to pick the right one
Throwaway inboxes, forwarding aliases and developer test inboxes solve three different problems. Here is what each one is genuinely good at, and where ours is the wrong answer.
Let your AI agent test email flows end to end
Claude Code, Cursor and any MCP client can create a real inbox, trigger your signup, read the OTP and assert on the email. No mocks, no manual copy-paste.
Testing email on your own domain
Point a domain you own at InboxDome so test inboxes read like real addresses on your brand. Verify ownership with a TXT record, then route the mail.
Testing email webhooks: verify the signature, then trust the payload
Get a push notification the moment mail arrives, verify the HMAC signature correctly, and avoid the raw-body bug that makes signature checks silently useless.
How to test a password reset email end to end
Drive a real password reset flow in a test: receive the mail, pull the reset link out of it, follow it, and set a new password. Without a mail server.
Test that your WooCommerce order emails actually arrive
WooCommerce order confirmations fail silently more often than any other transactional email. Check delivery, content and SPF/DKIM/DMARC, by hand or in CI.
Put the guides to work
Grab a disposable inbox in one click, no signup. Or test your app's email in CI: the API free tier is 100 inbox tests a month, no card.