Guides · Tag
security
17 guides tagged security.
Comparisons · Sep 30, 2026
Can You Use Temp Mail for an AI Agent?
Can I use a temp mail for my AI agent? Rarely. Signups block disposable domains, public inboxes leak codes, and expired addresses kill account recovery.
Inboxes · Sep 29, 2026
DMARC Policy for an Autonomous Email Sender
DMARC for AI agent senders: why a fresh agent subdomain should start at p=reject, when that flips, and what sp, np and alignment actually cover.
Controls · Sep 28, 2026
AI Agent Hallucinated an Email Address? Fix the Source
An AI agent's hallucinated email address either bounces or reaches a stranger. Take recipients from records, not model output, and gate the rest.
Developers · Sep 28, 2026
Handling PDF Attachments in an Agent Inbox
How to handle PDF attachments in an AI agent's email: upload in three calls, pass only att_ IDs to the model, and read inbound files in code, not in context.
Controls · Sep 27, 2026
Restrict Which Domains Your Agent Can Email
Restrict which domains your agent can email with an allowlist it cannot argue with: the policy call, how recipients match, and what a denied send returns.
Controls · Sep 27, 2026
How to Revoke an Agent's Email Access Instantly
How to revoke an agent's email access: five kill switches ranked by blast radius, the exact calls, and what happens to mail already queued or held.
Inboxes · Sep 26, 2026
Stripping Quoted Reply Text Before the Model Sees It
Strip quoted reply text before an email agent reads it: client quote markers, a parsing order, and the replies where the quote is the message.
Developers · Sep 26, 2026
Verify a Signed Email Webhook Before Trusting It
An unverified webhook is an open instruction channel into your agent. Verify the signature in order, and keep the payload from the model until it passes.
Integrations · Sep 26, 2026
Email MCP Server Comparison: Who Filters tools/list
An email MCP server comparison on one property: does a narrower credential shrink tools/list? 18 servers audited, 182 registry endpoints probed.
Email for Agents · Sep 26, 2026
An Email Address Is an Agent's First Identity
AI agent identity starts with an email address. What a mailbox proves, what DKIM and DMARC never check, and what A2A, OAuth and AP2 still leave to email.
Controls · Sep 26, 2026
MCP Tool Filtering Should Be Required
MCP lets a server hide tools a token cannot use but never requires it. The case for mcp tool filtering by scope as a MUST, and the objections.
Controls · Sep 26, 2026
The Agent Email Threat Model
Assets, actors, trust boundaries and eight threats for an agent with an email address, with the layer where each control binds and where ours stops short.
Controls · Sep 23, 2026
Read-Only Email Access for an AI Agent
Read-only email access for an AI agent is five scope strings. The exact list, what the MCP session holds, and three ways the grant quietly leaks.
Controls · Sep 21, 2026
Scoped Credentials for Agent Email: Read, Draft, Send
Give an agent the smallest useful email permission: project and inbox scoping, one-time secrets, draft-only grants, rotation, and revocation you can verify.
Comparisons · Sep 21, 2026
Evaluate Agent Email Provider Security Without SOC 2
Twelve questions that judge an agent email provider's security from its public API reference in ten minutes, plus the cases where a SOC 2 report still wins.
Controls · Sep 21, 2026
The MCP Tool Surface Is the Permission Boundary
How the MCP tool surface permission boundary is computed per request, what a filtered tools/call returns, and three ways the tool list shrinks under you.
Controls · Sep 21, 2026
Prompt Injection by Email: What Actually Helps
Any stranger can email your agent. What an email-borne injection looks like, why message text must never grant permission, and the controls that limit damage.