A command-line tool for using the Inkbox service from a terminal. Inkbox handles identities, email, phone and text messages, encrypted storage, contacts, notes, and webhooks.

It helps with mailbox imports, email and SMS workflows, contact management, encrypted vault operations, mail-client setup, signing keys, and webhook tasks.

It gives scripts and developers a consistent way to access Inkbox data and services without manually using a web interface. JSON output is available when another program needs to process the results.

inkbox-cli — Skill for Claude Code by inkbox-ai/inkbox

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add inkbox-ai/inkbox --skill inkbox-cli

Clone the repo

git clone --depth 1 https://github.com/inkbox-ai/inkbox

Made for: Claude Code.

Or install inkbox, the plugin that ships this one along with the rest of its 9 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/inkbox-ai/inkbox/inkbox-cli/github.svg)](https://agentmods.dev/skills/inkbox-ai/inkbox/inkbox-cli)

Your own site

<a href="https://agentmods.dev/skills/inkbox-ai/inkbox/inkbox-cli"><img src="https://agentmods.dev/badge/skills/inkbox-ai/inkbox/inkbox-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/inkbox-ai/inkbox/inkbox-cli"><img src="https://agentmods.dev/badge/skills/inkbox-ai/inkbox/inkbox-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 81 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 15,535 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium MCP Rug Pull · line 46
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Fix: Pin the version: npx @scope/[email protected]
medium Agent Snooping · line 95
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00081	$0.15535
Opus 5.5	$0.00032	$0.06214
Sonnet 5.5	$0.00016	$0.03107
Haiku 4.5	$0.00008	$0.01554

Measured 3d ago against content hash 000dc28e693d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

inkbox-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/inkbox-cli/SKILL.md · 1,106 lines

How it starts

The opening of the file, as written. The whole thing — 1,106 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Inkbox CLI

Command-line interface for the Inkbox API — identities, email, phone, text/SMS, encrypted vault, mailboxes, phone numbers, signing keys, and webhook utilities.

Auth & Runtime

Set credentials via env vars or global flags:

export INKBOX_API_KEY="ApiKey_..."
export INKBOX_VAULT_KEY="my-vault-key"   # only needed for vault decrypt/create flows

Global options:

--api-key <key>      Inkbox API key (or set INKBOX_API_KEY)
--vault-key <key>    Vault key for decrypt operations (or set INKBOX_VAULT_KEY)
--base-url <url>     Override API base URL
--json               Output as JSON instead of formatted tables

If INKBOX_API_KEY is missing and --api-key is not passed, the CLI exits with an error.

Prefer --json when the result will be parsed or fed into another tool. Use the default table/record output when the user wants a quick human-readable summary. With --json, success stays on stdout and API failures write one structured error object to stderr, retaining error.detail and error.retryAfterSeconds.

Install & Local Repo Usage

Published package:

npm install -g @inkbox/cli

Or run without a global install:

npx @inkbox/cli <command>

Requires Node.js >= 22.

Inside this repository, prefer running the local source instead of assuming a global install:

npm --prefix cli run dev -- <command>

Examples:

npm --prefix cli run dev -- --json identity list
npm --prefix cli run dev -- email list -i support-bot --limit 10

High-Risk Operations

These commands can send real traffic or mutate real resources. Confirm with the user before running them:

signup create
a2a invites create, a2a invites revoke, and a2a invites accept
email send
email drafts send
text send
phone call
identity delete
email delete
email delete-thread
email drafts delete
vault delete
identity update --mail-filter-mode ... / --phone-filter-mode ... (admin-only; flips allow/block semantics for that identity's channel)
mailbox update --filter-mode ... (DEPRECATED channel path; admin-only)
number release
number update --filter-mode ... (DEPRECATED channel path; admin-only)
phone incoming-action <action> / number update --incoming-call-action ... (changes what answers that identity's inbound calls — hosted_agent makes the platform voice agent pick up)
identity signing-key rotate <handle> (rotates that identity's webhook signing key)
signing-key create (DEPRECATED org-level path)

Read the full file on GitHub · 1,106 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago Changed 000dc28e693d
14d ago Changed · +2 lines 7b3efe9f76f8
16d ago Changed · +10 lines 3e3356571e09
18d ago Changed · +8 lines 780426106528
19d ago Changed · +11 lines fac435758137
21d ago Changed · +45 lines b0e3358fddcd
22d ago Changed · +32 lines cc3434b67e8b
24d ago Changed · +71 lines 8cd1afebab5d
25d ago Changed · +17 lines 337b9c57591c
1mo ago First seen · 910 lines · 81 tokens per session scan A 35978b0f6888

Subscribe to this mod's changes

inkbox-cli is a skill published in the GitHub repository inkbox-ai/inkbox (103 stars, last pushed yesterday), licensed MIT. It adds 81 tokens to every session and 15,535 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Productivity agent-communication agent-infrastructure agent-tools ai-agents ai-infrastructure communications-api

email-agent

Deploy or update the Email Agent on Omnara, an agent with its own email address that people can email, Cc, or @mention, built on Primitive's hosted email functions and MCP server. Use when the user asks to deploy, set up, update, customize, or remove the email agent.

omnara-ai/omnara · 65 tokens

aident-loadout

Run multi-step work across apps the user connected in Aident Loadout: live action schemas, connection checks, cost preflight, and approval before side effects.

sickn33/agentic-awesome-skills · 37 tokens

browser-agent

Build and deploy a Browser Agent on Omnara, a long-running agent that signs in to web apps with stored credentials and works in a real browser, overnight if needed. Interviews the user about the job, sign-ins, schedule, and Slack or Discord first. Use when the user asks to build, deploy, set up, update, or remove a…

omnara-ai/omnara · 77 tokens

sre-agent

Deploy or update the SRE Agent on Omnara, a production investigator that diagnoses issues across AWS and source code and reports the likely cause with evidence. Use when the user asks to deploy, set up, update, or remove the SRE agent.

omnara-ai/omnara · 55 tokens

linkedin-signal-agent

Deploy or update the LinkedIn Signal Agent on Omnara, an agent that scrapes LinkedIn posts (keyword search plus tracked company and profile feeds) and delivers a daily digest. Use when the user asks to deploy, set up, update, or remove the LinkedIn signal agent.

omnara-ai/omnara · 63 tokens

posthog-analytics-agent

Deploy or update the PostHog Analytics Agent on Omnara, an agent that queries a PostHog project through PostHog's MCP server and delivers a daily usage report. Use when the user asks to deploy, set up, update, or remove the PostHog analytics agent.