Changelog.

An agent with no API key can create its own workspace and inbox: Agentboxd.signup() in both SDKs, or the signup tool when the MCP server starts without a key. Until a person claims it from the emailed link, it replies freely but emails at most 20 new recipients a day.

Every inbox is now also an identity. Your agent asks for a 5-minute, single-use ID token and signs in to apps that accept it, over standard OpenID Connect at id.agentboxd.com. Apps register in the new Identity page of the dashboard.

Agents can write drafts that a person approves in the inbox’s Drafts tab, and any draft or send can be scheduled 1 minute to 30 days ahead with send_at. Six new MCP tools, and drafts in both SDKs.

The webhook events over a WebSocket at /v1/stream, with replay after a disconnect. No public URL needed. mr.stream() in the TypeScript SDK and AsyncAgentboxd.stream() in Python.

Send from any SMTP client on smtp.agentboxd.com, ports 587 and 465, with an API key as the password. Messages go through the same checks and delivery as the API.

Free, Builder, Team and Scale plans measured in emails and AI calls, with overage on paid plans. Mail is kept for the plan’s retention (the keep label opts a message out), and a 5-minute send limit stops runaway loops.

Scoped API keys with permission presets, allow and block lists, a metrics overview, a webhook event catalog with envelope (no-body) payloads and 24-hour delivery stats, and a “Use the API” button with the calls for the page you’re on.

What protects your agents’ mail today and what is still planned, a GDPR Data Processing Addendum, the list of sub-processors, and /.well-known/security.txt.

The service runs in France (EU). Nightly backups are now encrypted before they leave the server, kept on a second EU server, and restore-tested; health checks run every 5 minutes.

Webhook URLs must be public HTTPS endpoints. Hostnames are checked when you save a webhook and again before every delivery, and redirects are not followed.

Step-by-step guides for MCP clients, LangChain, CrewAI, the OpenAI Agents SDK, the Vercel AI SDK, n8n and Playwright, each with a runnable example.

New name, same service. The packages are agentboxd on npm and PyPI and @agentboxd/mcp, and the SDKs read AGENTBOXD_API_KEY (the old variable names still work).

Create an inbox with one API call and receive mail on our own MX, with SPF, DKIM and DMARC checks, threading, attachments and extracted_text. Agents send and reply DKIM-signed from their own address.

waitForVerification returns the login code or magic link from a sign-up email with a confidence score.

JEV categorises every inbound message and scores prompt injection, phishing, needs-a-human, auto-reply and urgency. One workspace setting (off, categorize or full) decides what content may reach a model.

A contact per sender with notes and metadata, searchable knowledge documents, and DeepSeek reply drafts that cite them and are never sent on their own.

Send and receive on your own subdomain with its own DKIM key, and create receive-only inboxes on tmp.agentboxd.com that wipe themselves when they expire.

An MCP server for Claude Desktop, Claude Code and Cursor, and TypeScript and Python SDKs.

Signed webhooks with retries, long-poll wait endpoints and full-text search.