Temporary email, as an API.

# Tool: disposable email (sixty9 mail)

You have access to a disposable email API at https://mail.sixty9.tech. Use it whenever you need to
receive a verification email, OTP link, or signup confirmation without a real inbox.

## Auth
- No API key. A mailbox id IS the credential.
- Every read call takes:  Authorization: Bearer <token>
- The prefix is picked automatically from the domain:
    bx_<boxId>                      -> 1timetech domains (oletters.com, rommiui.com, ...)
    gm_<base64url({a,sid})>          -> guerrillamailblock.com
    gr_<base64url(address)>          -> grabmail domains (grabmail.io, mixozia.com, linqmail.com)
    zv_<base64url(address)>          -> zenvex domains (vyno.me, znvx.me, souss.dev, *.edu.pl)
- Easiest: POST /token {"address": "..."} and use the token it returns.

## Standard workflow
0. GET /status     -> providers + domains with verified true/false + receive mode
   GET /verify?address=x@d -> is that mailbox reachable right now, how many messages
1. GET /health     -> confirm service + provider health, list valid domains
2. POST /accounts {"address":"bot1@oletters.com"} -> {"id":"<boxId>","address":"...","token":"..."}
3. POST /token    {"address":"bot1@oletters.com"} -> {"token":"bx_<boxId>","id":"<boxId>"}
4. wait ~5-10s, then poll GET /messages with the Bearer token every 5s (max 24 tries,
   back off to 10s after 6 empty polls)
5. GET /messages/<messageId>                    -> full body: .text and .html[0]
6. Extract the OTP/link from .text or .html[0], then finish your task.

## Rules
- Creating the same address twice returns the SAME id (idempotent) - safe to retry.
- Never invent domains: take them from GET /health -> .domains, and prefer the ones
  /status marks verified=true.
- POOL DOMAINS (gmail.com, googlemail.com, +gmail.com, +googlemail.com): the typed
  address is IGNORED. The call returns a real pooled Gmail inbox - always use the
  address in the response, not the one you asked for.
- Premium: POST /gmail (empty body) returns a random REAL gmail inbox from a shared
  pool. Its messages are other people's mail - use it only for throwaway testing,
  never for anything private, and never send mail from it.
- If a call returns 502, retry once after 3s. If it still fails, report the failure;
  do not fabricate an email body.
- Poll politely: one request every 5s per mailbox. Do not run parallel pollers.

## Endpoints (all same origin)
GET  /health                     -> {ok, domains[], premiumDomains[]}
GET  /status                     -> {counts, verifiedDomains[], untestedDomains[],
                                     poolDomains[], providers[], domains[]}
GET  /verify?address=            -> {ok, provider, messages, verified}
GET  /llms.txt                   -> compact plain-text briefing for agents
GET  /domains                    -> [{domain,isActive,isPrivate,isPremium}]
POST /accounts  {address}        -> {id, address}
POST /token     {address}        -> {token, id, address}
GET  /messages      (Bearer)     -> {hydra:member:[{id,from,to,subject,intro,createdAt,hasAttachments}], totalItems}
GET  /messages/{id} (Bearer)     -> {..., text, html[], attachments[]}
GET  /sources/{id}  (Bearer)     -> raw html
POST /gmail                      -> {id, address, token}

## Example (curl)
ID=$(curl -s -X POST https://mail.sixty9.tech/accounts -H 'content-type: application/json' \
  -d '{"address":"bot1@oletters.com"}' | jq -r .id)
curl -s https://mail.sixty9.tech/messages -H "Authorization: Bearer bx_$ID" | jq '.hydra:member[0]'