{"id":50134617,"url":"https://github.com/evilsocket/nobox","last_synced_at":"2026-05-27T00:00:40.021Z","repository":{"id":359385983,"uuid":"1244137140","full_name":"evilsocket/nobox","owner":"evilsocket","description":null,"archived":false,"fork":false,"pushed_at":"2026-05-21T16:54:20.000Z","size":2383,"stargazers_count":10,"open_issues_count":0,"forks_count":1,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-23T21:25:31.792Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/evilsocket.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-20T02:02:48.000Z","updated_at":"2026-05-23T12:04:28.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/evilsocket/nobox","commit_stats":null,"previous_names":["evilsocket/nobox"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/evilsocket/nobox","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evilsocket%2Fnobox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evilsocket%2Fnobox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evilsocket%2Fnobox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evilsocket%2Fnobox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/evilsocket","download_url":"https://codeload.github.com/evilsocket/nobox/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evilsocket%2Fnobox/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33452033,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-24T19:21:36.376Z","status":"ssl_error","status_checked_at":"2026-05-24T19:21:10.562Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-05-23T21:02:53.751Z","updated_at":"2026-05-24T22:00:47.556Z","avatar_url":"https://github.com/evilsocket.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# nobox\n\nA GitHub-as-email inbox for AI ↔ human async messaging.\n\nnobox lets you use a single GitHub repository to host multiple inboxes —\neach one a GitHub issue — as free, durable, optionally PGP-encrypted\nmailboxes. The human replies to GitHub's notification emails through their\nnormal email client; an AI agent reads and posts via the GitHub REST API.\nSame conversation, two protocols.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/evilsocket/nobox/refs/heads/main/docs/diagram.png\" alt=\"nobox architecture diagram\" width=\"720\"\u003e\n\u003c/p\u003e\n\n## Quick start\n\n```bash\n# Install straight from the repo (Python 3.11+)\nuv tool install 'git+https://github.com/evilsocket/nobox'\n# with IMAP + PGP extras:\nuv tool install 'nobox[all] @ git+https://github.com/evilsocket/nobox'\n# pipx works too:\npipx install 'nobox[all] @ git+https://github.com/evilsocket/nobox'\n\n# Auth (only needed once)\ngh auth login --scopes 'repo'\n\n# Create an inbox in a repo you own\nnobox create-inbox --repo evilsocket/notes --name daily\n\n# Verify end-to-end (posts a sentinel comment, asks you to confirm the email)\nnobox doctor --name daily\n\n# Drop the SKILL.md into ~/.claude/skills/nobox/ so Claude Code knows when\n# to reach for the MCP tools and how to behave around them.\nnobox install-skill\n\n# Then, in your agent of choice, just say:\n#\n#   \"Check your nobox every 10 minutes and respond to my messages.\"\n#\n# The skill explains the polling pattern and the agent will ask you to\n# confirm setting up the recurring task before scheduling anything.\n```\n\n## How it works\n\nSee the documentation at \u003chttps://nobox.evilsocket.net/\u003e — the\n[How it works](https://nobox.evilsocket.net/how-it-works/) page covers\nthe GitHub `reply+\u003cTOKEN\u003e@reply.github.com` token format we\nreverse-engineered, the security implications, and why none of it has\nto be fragile.\n\n## Surfaces\n\n- **CLI** — `nobox \u003csubcommand\u003e`. Same binary serves everything.\n- **MCP server** — `nobox mcp` runs a FastMCP stdio server. Wire into Claude\n  Code: `claude mcp add --transport stdio nobox -- nobox mcp`.\n- **Claude Code Skill** — `nobox install-skill` drops a `SKILL.md` into\n  `~/.claude/skills/nobox/` so Claude knows when to use the MCP tools.\n- **Local IMAP server** — `nobox serve-imap` exposes inboxes on\n  `127.0.0.1:1143` so Thunderbird/mutt can browse them. Read-mostly in v1.\n\n## PGP (opt-in)\n\n```bash\nnobox create-inbox --repo me/notes --name secure \\\n  --pgp --user-pgp-key ~/.gnupg/me.pub.asc\n```\n\nnobox generates the inbox's keypair, embeds the public half in the issue body,\nand encrypts every outgoing comment with your public key. Incoming PGP-armored\nreplies are auto-decrypted. Your private key never touches the GitHub side.\n\n## Critical one-time setup\n\nGitHub suppresses email notifications for **your own actions** by default.\nSince nobox uses your token, every comment it posts is a \"self action,\" and\nGitHub won't email you. **The whole loop silently breaks without this fix.**\n\n1. Visit https://github.com/settings/notifications\n2. Under **Email notification preferences**, enable **\"Include your own updates\"**\n3. Run `nobox doctor --name \u003cyour-inbox\u003e` — confirm the sentinel email arrives\n\nIf you'd rather not flip the global toggle, the alternative is to authenticate\nnobox with a separate \"bot\" GitHub account; a different actor bypasses the\nself-action suppression entirely.\n\n## Known risks\n\n1. **GitHub TOS.** Using issues as a personal mailbox is a gray area;\n   \"excessive bulk content\" in issues is prohibited. Don't run this at scale.\n2. **Email notification settings are user-controlled.** If you have GitHub\n   email notifications disabled, the whole loop silently breaks. `nobox doctor`\n   posts a sentinel comment so you can confirm receipt.\n3. **Reply tokens invalidate on password reset.** Old notification emails stop\n   working as reply targets. The agent side (`gh auth`) keeps working.\n4. **Trim quoted text in your replies.** When you reply to a notification\n   email, your client usually inlines the message you're answering (\"On …\n   wrote: …\"). nobox tries to strip this on ingest, but the heuristic is\n   best-effort and only knows a handful of locale variants — delete the\n   quoted body in your email client before sending for the cleanest\n   agent-side reads. The raw body is always retained; `--raw` reveals it.\n\n## License\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevilsocket%2Fnobox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fevilsocket%2Fnobox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevilsocket%2Fnobox/lists"}