An inbox agent that can never send mail
It reads, ranks and drafts. You press send. That boundary is in the code, not in a prompt.
The job
Most of your inbox isn't urgent and a little of it very much is, and the cost of sorting the two is that you check constantly. Inbox triage is the second most common job people give a personal agent, right behind the morning brief.
The reason people hesitate is obvious: handing an agent your mail feels like handing it your voice. So we built the boundary first.
The safety boundary, precisely
Reading is read-only. The connection opens your mailbox without write access. Opening a message doesn't even mark it as read — your unread count is exactly where you left it.
Sending is impossible. There is no send-mail capability anywhere in the system. Not restricted, not permission-gated — absent. A reply your agent writes lands in My Documents as a draft for you to copy, edit and send yourself.
Credentials never reach the AI. Your app password is stored server-side and is never included in anything sent to a model. The agent gets messages; it never gets keys.
What the app does
- Scans on a schedule — hourly, or a few times a day — server-side, with nothing open.
- Learns your definition of urgent. Named clients, money, outages, a project codename, an unusual burst from one sender. You tune it in plain words after watching it work.
- Pings only when it clears that bar — one consolidated notification for the few things that matter, not one per message.
- Previews the inbox in its window: recent messages, sender, subject, time — so you can skim without opening your mail client.
- Drafts the replies you'll actually send, into My Documents.
Setting it up
Connect a mailbox with an IMAP address and an app password in My Computer → Connections — for Gmail that's an app password from your Google account, not your real one. Then describe the job to the Terminal. Two minutes, no OAuth dance, no developer console.
Honest limits
Message contents go to an AI provider to be understood, and that provider may retain them. Connect the mailbox you'd be comfortable summarising to a chatbot — personal mail, a side project, a public-facing address. If your inbox carries client confidential material or your employer has rules about it, this isn't the right tool yet. The privacy page is blunt about this.
It will occasionally flag something dull. That's the correct trade early on — you tune the definition down after you've seen a few days of real output.
Free to start · no card · no install