xobni
Enables AI agents to manage emails with real addresses, providing functionalities like sending, receiving, and searching emails via Xobni.ai.
Install this skill
Security score
The xobni skill was audited on Feb 16, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 3 | description: Email infrastructure for AI agents via Xobni.ai. Provides real email addresses (@xobni.ai) with REST API and MCP server access. Use when an AI agent needs to send/receive email, search in |
Webhook reference - potential data exfiltration
| 18 | Each API key is scoped to a **single agent**. The key can only access that agent's emails, threads, attachments, and webhooks. No need to pass `account_id` or `agent_id` — they're auto-resolved from y |
Webhook reference - potential data exfiltration
| 22 | - Create and manage webhooks |
Webhook reference - potential data exfiltration
| 113 | | `list_webhooks` | List configured webhooks | |
Webhook reference - potential data exfiltration
| 114 | | `create_webhook` | Create webhook for email.received/email.sent | |
Webhook reference - potential data exfiltration
| 115 | | `delete_webhook` | Remove a webhook | |
Webhook reference - potential data exfiltration
| 116 | | `list_webhook_deliveries` | View webhook delivery history | |
Webhook reference - potential data exfiltration
| 118 | ## Webhooks |
Webhook reference - potential data exfiltration
| 127 | "url": "https://your-endpoint.com/webhook", |
Webhook reference - potential data exfiltration
| 144 | - **Webhooks**: Real-time notifications for email events via n8n, Zapier, Make, or any HTTP endpoint. |
External URL reference
| 12 | 1. Create agent at [xobni.ai/agents/new](https://xobni.ai/agents/new) → gets email like `[email protected]` |
External URL reference
| 13 | 2. Create API key at [xobni.ai/settings/api-keys](https://xobni.ai/settings/api-keys) scoped to your agent |
External URL reference
| 32 | **URL**: `https://api.xobni.ai/mcp/` |
External URL reference
| 41 | "url": "https://api.xobni.ai/mcp/", |
External URL reference
| 55 | "https://api.xobni.ai/api/v1/emails?status=received&limit=20" |
External URL reference
| 62 | "https://api.xobni.ai/api/v1/emails/send" \ |
External URL reference
| 70 | "https://api.xobni.ai/api/v1/emails/send" \ |
External URL reference
| 83 | "https://api.xobni.ai/api/v1/search" \ |
External URL reference
| 90 | "https://api.xobni.ai/api/v1/agents" |
External URL reference
| 96 | "https://api.xobni.ai/api/v1/emails/storage-usage" |
External URL reference
| 125 | "https://api.xobni.ai/api/v1/event-hooks" \ |
External URL reference
| 127 | "url": "https://your-endpoint.com/webhook", |
Install this skill with one command
/learn @openclaw/xobni