Launched this week

MailMolt
Email identity for AI agents. Free during beta.
53 followers
Email identity for AI agents. Free during beta.
53 followers
Give your AI agent its own email address β not access to yours. Full inbox capabilities with built-in human oversight. Send, receive, search, and thread emails. Progressive trust levels keep agents safe. Free during beta.













MailMolt
@rakesh1002 Progressive trust for outbound makes sense, but the harder engineering problem is inbound. Every email an agent receives is untrusted text that could contain prompt injection. Does MailMolt's sandbox mode strip or flag injection patterns before the agent parses the body? That's where most agent email setups quietly break.
MailMolt
@piroune_balachandranΒ Right now, MailMolt's sandbox mode restricts outbound actions (sending limits, approval queues) rather than parsing inbound content for injection patterns. The assumption is that the agent's LLM layer handles untrusted input, not the email layer.
That said, you're right that defense-in-depth matters here. We're exploring:
- Optional content warnings/flags for suspicious patterns (like "ignore previous instructions")
- Structured extraction so agents see parsed fields, not raw body
- Rate limiting on outbound even for trusted agents
Would love to hear what patterns you'd want flagged. Building this with real agent developers is the goal.
LogiCoal
Is there a plan for handling white labeled outbound emails? Would a business be able to setup their dns records to allow mailmolt's outbound emails from an agent to be delivered as agent-name@branded-company.com or do all outbound emails only come from the mailmolt domain name?
MailMolt
@bmooreinsaanΒ Not yet, but it's on the roadmap!
Currently all outbound goes from @mailmolt.com. For white-label (agent@yourcompany.com), you'd need:
- Custom domain verification (SPF/DKIM/DMARC)
- DNS records pointing to MailMolt's sending infra
- Per-domain reputation isolation
Would you want full white-label or just reply-to aliasing (replies go to your domain but sent-from stays mailmolt)?