Give your agent a real inbox.

Add a domain (or subdomain) to this account so it can hold mailboxes. Returns the DNS plan. A domain whose zone is on this service's Cloudflare account is "managed" (apply_dns can write its records, internal accounts only); any other domain is "external" and proves ownership with a TXT record, then verify_domain.

The exact DNS records (MX, SPF, DKIM, DMARC, ownership TXT) a domain needs for receiving and sending, and whether each is in place.

Write the DNS plan to a managed domain on this service's Cloudflare account: enables Email Routing (MX + SPF), routes mail to the receiver, registers the domain for sending and adds DKIM and DMARC. Never deletes records. Refuses when the name already has MX records pointing elsewhere unless replace_existing_mx is true. Use dry_run first.

Check the domain's live DNS: ownership TXT (external domains), MX, SPF, DMARC and the sending provider's DKIM status. Marks the domain verified when ownership is proven, and registers it for sending once it is.

Every domain on this account with its status, mode, sending readiness and mailbox count.

No parameters.

Remove a domain from this account. Refuses while it still has mailboxes unless delete_mailboxes is true (which deletes them and their mail). DNS records are left as they are; the response lists the ones you may want to remove.

Create a mailbox (an address that receives and sends) on one of this account's domains. Also returns its route address, which any mail host can forward to.

Every mailbox this token can see, with unread counts, last received time, aliases, forwarding and route address. Also describes the calling token (scope, can_send, daily cap).

No parameters.

Delete a mailbox. Mail to it is rejected from then on; its stored messages stay readable by owner tokens for audit until the domain is removed.

Deliver mail sent to another address on one of this account's domains into an existing mailbox.

Deliver mail for any unknown address on a domain into one mailbox, or pass mailbox: null to turn the catch-all off.

Also forward every message a mailbox receives to up to 5 external addresses (the original is attached as message/rfc822). Pass an empty list to stop. Forwarded copies never re-forward.

One inbox across every mailbox this token can see, newest first, each item tagged with its mailbox. Filters: mailboxes, folder (inbox, archive, sent, drafts, trash, all), unread_only, label, from, subject_contains, since (default 30 days). Paginate with next_cursor. Sender-controlled text arrives inside an untrusted_external_content envelope.

Full-text search over subject, sender, recipients and body across every mailbox this token can see (all folders by default).

Headers, text body (or text derived from HTML), extracted links, attachment list and threading ids for one message. Body truncated at max_chars (default 20000, max 200000) with a truncated flag. HTML only with include_html.

The whole conversation a message belongs to, inbound and outbound, oldest first, as previews.

Block until a matching message arrives (or timeout_s, max 60, default 25) and return it in full. Built for sign-up codes and magic links: create a mailbox, use it in a form, wait here. since defaults to 60 seconds ago.

One attachment as base64 (up to 5 MB). attachment_id is the index listed by get_message.

Mark up to 100 messages read (or unread with read: false). Ids outside this token's scope come back in not_found_in_scope.

Add and/or remove labels on up to 100 messages. Labels are free-form short strings; filter on them with list_messages label.

Move up to 100 messages out of the inbox into archive (or back with unarchive: true).

Send a new email from a mailbox in scope (or send a saved draft with draft_id). Requires a token with can_send; counts against its daily cap; at most 20 recipients. Use dry_run to check the gates without sending.

Reply in-thread from the mailbox that received the message (In-Reply-To and References set, "Re:" added once, original quoted). reply_all adds the other recipients as cc.

Forward a message (with its attachments) to new recipients, with an optional note on top. Sends from the receiving mailbox unless from names another mailbox in scope.

Save a draft in a mailbox (folder drafts) for a human or another agent to review. Send it later with send_message draft_id. Does not need can_send. Pass reply_to_message_id to thread it as a reply.

POST a signed JSON event to your https URL when mail arrives or a send finishes. Events: message.received, message.sent, message.failed. Each delivery carries X-AIMail-Timestamp and X-AIMail-Signature (v1=hex HMAC-SHA256 of "timestamp.body" with the secret returned once here). Private and loopback targets are refused.

Webhooks on this account with their events, scope and last delivery status. Secrets are never shown again.

No parameters.

Stop and remove a webhook.

Mint a token for another agent, scoped to some mailboxes (default: all), with or without send permission and with a daily send cap. A token can never exceed the one that creates it. The token value is returned once and never stored.

Tokens on this account: label, prefix, scope, send permission, cap, last use. Never the values.

Revoke a token by id or prefix. It stops working immediately.

Recent tool calls on this account (every attempt, including refusals and dry runs): tool, outcome, token, time.