Again, it requires his passport which he cannot mail out of Iraq. He is stuck until he leaves Iraq and as I mentioned earlier, embassies and consulates in the Middle East normally only service residents of the country they are in.
Then let your friend do it online although you've already stated he cannot mail his passport. The certificate of entry is issued by the relevant embassy on a case by case basis assuming your friend complies with the current criteria.
If you mean a visa waiver or 'tourist' visa, they're on hold as no-one that would qualify for that is able to enter. That may change when the next phase is announced but to now that's anyone's guess.
There are several consulates around the Middle East but for the most part they only provide services to people holding residency in the country where they are based. I believe as a US citizen he is going to need to apply at a US located embassy or consulate. Brits apply to London.
The ask:thailand community, consisting of multiple Q/A groups with over 100,000 members, powers this platform. It is not an official government resource. Our members actively contribute to this resource, and while we strive for accuracy, we cannot guarantee its complete reliability. Assistance to travelers is provided as a community service.