Anonymous bearer (one-call bootstrap)

The seeded mailnix-anonymous-bootstrap client mints a working sandbox bearer in one HTTP roundtrip. No signup, no credit card.

Why anonymous

The wedge: an AI agent should be able to send a traceable test message before its user has even told it which email service to use. The anonymous bootstrap removes signup as a step. One call returns a JWT and a fresh sandbox project; the agent starts working immediately.

The request

POST https://api.mailnix.ch/oauth/token
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials

# response
{
  "access_token":  "mnx_live_a8f3…",
  "token_type":    "Bearer",
  "expires_in":    3600,
  "scope":         "api:send api:read",
  "project":       "prj_7c2d"
}

The token is audience-bound to https://api.mailnix.ch/v1. For the MCP audience, add resource=https://mcp.mailnix.ch/mcp to the request body.

Project lifetime

An anonymous project auto-deletes after 7 days of inactivity. Any authenticated request resets the clock. Until you claim it, every send captures (no real provider relay), regardless of recipient.

Claim the project

Bind an email to the token to keep it. The MCP tool is account_claim(email); the REST equivalent is:

POST /v1/account/claim
Authorization: Bearer mnx_live_…
{ "email": "you@yourdomain.com" }

We email a magic link. Click it and the token converts to a real account; same token, same project, same trace history.