{
  "version": 1,
  "name": "Inbox Check guest integration",
  "base_url": "https://check.live-direct-marketing.online",
  "authentication": "none",
  "registration_required": false,
  "start_url": "https://check.live-direct-marketing.online/docs#guest",
  "openapi_url": "https://check.live-direct-marketing.online/api/openapi.json",
  "instructions_url": "https://check.live-direct-marketing.online/llms.txt",
  "api": {
    "providers": "https://check.live-direct-marketing.online/api/providers",
    "create": {
      "method": "POST",
      "url": "https://check.live-direct-marketing.online/api/tests",
      "body": {
        "email": "YOUR_SENDER_EMAIL",
        "senderLinkReports": false,
        "placementChangeAlertsEnabled": false,
        "finalReportEnabled": false
      }
    },
    "read": {
      "method": "GET",
      "url": "https://check.live-direct-marketing.online/api/tests/{token}"
    }
  },
  "mcp": {
    "url": "https://check.live-direct-marketing.online/mcp",
    "transport": "streamable-http",
    "authentication": "none",
    "catalog_url": "https://check.live-direct-marketing.online/api/mcp/guest-tools",
    "tools": [
      "guest_providers_list",
      "guest_tests_create",
      "guest_tests_get"
    ],
    "config": {
      "mcpServers": {
        "inbox-check": {
          "url": "https://check.live-direct-marketing.online/mcp"
        }
      }
    }
  },
  "sdk": {
    "javascript": "https://check.live-direct-marketing.online/sdk/inbox-check.mjs",
    "python": "https://check.live-direct-marketing.online/sdk/inbox_check.py",
    "installation": "Download directly; no npm/PyPI dependency",
    "node": "18+",
    "python_version": "3.9+"
  },
  "webhooks": {
    "mode": "local-sdk-relay",
    "script": "https://check.live-direct-marketing.online/sdk/inbox-check-webhooks.mjs",
    "docs": "https://check.live-direct-marketing.online/docs#webhooks",
    "configure": "node inbox-check-webhooks.mjs configure --token SAVED_TEST_TOKEN --url https://YOUR_RECEIVER/hook --config ./inbox-check-webhook.json",
    "run": "node inbox-check-webhooks.mjs run --config ./inbox-check-webhook.json",
    "signature": "HMAC-SHA256(secret, timestamp + \".\" + rawBody)",
    "signature_header": "X-Inbox-Check-Signature",
    "timestamp_header": "X-Inbox-Check-Timestamp",
    "event": "check.completed",
    "delivery": "One POST after done/expired, no automatic retry; keep local process running. Not a hosted subscription."
  },
  "workflow": [
    "Discover guest instructions and tools from this manifest.",
    "Ask for or use the already authorized sender email and message; this is test input, not Check registration.",
    "Create once and retain token, send_to, results_url and expires_at.",
    "Send the user-approved message through their existing authorized mail service to every send_to address. Without sender access, return the addresses and let the human send.",
    "Poll the saved token; partial snapshots are not a final report. Inspect real results, authentication and verdict.",
    "For callback delivery, configure and run the local SDK relay against the user-provided receiver; verify its signature and deduplicate event.id."
  ],
  "constraints": [
    "Never request a Check account, key, Telegram or email-login confirmation for these guest operations.",
    "Managed monitoring/account/admin/list/delete operations remain separate and require their existing authorization.",
    "Test creation does not send mail. Do not claim delivery before measured results.",
    "Do not automatically repeat POST after an unknown network outcome.",
    "Respect HTTP429 and resetAt / Retry-After; read saved tokens instead of recreating tests.",
    "Keep report tokens, private webhook configuration and receiver secrets out of logs and public repositories."
  ]
}