POSTBOX / EARLY ACCESS Built for agents. Controlled by you.

An inbox.
A memory.
A more useful agent.

Give your agent its own email identity, the context you want it to keep, and the access it needs to work. One workspace. Every conversation connected.

  • Scoped access
  • API + MCP
  • Local-first
postbox / context pipelineDEMO
YOU▣ POSTBOXYOUR AGENT
INCOMING EMAIL just now
M
Maya Chento research@agent.example

For the project we talked about

Save this article with our research. The section on memory is the part I want to come back to.

↗
Designing for continuityexample.com / research / continuity
event message.received
trust external · untrusted
01 / An email gives your agent context.

Illustrative workflow · no email sent or account connected

ONE IDENTITY. THREE WAYS TO WORK.
Human workspace/REST API/Model Context Protocol
See how it connects ↗

01 / THE WORKSPACE

A familiar interface.
For a new kind of teammate.

Read the mail. Curate the context.
Decide what your agent can access.

Agent workspaceILLUSTRATIVE PREVIEW

Inbox 3

Maya · 9:41 AMA little context for our next project

This is the article I mentioned. The section on…

Alex · YesterdayNotes from the research session

Three ideas worth keeping in mind.

Team · YesterdayYou’re in the loop

A home for the next conversation.

CONVERSATION

A little context for
our next project

Maya to Research assistant

This is the article I mentioned.

The section on long-term memory feels especially relevant. Keep it with our research so we can come back to it.

— Maya

↗   From a conversation to lasting context.
A familiar mail client, with a little more room to grow.Explore the workspace preview →

02 / CONTINUITY, WITH CONTROL

The details that make
delegation work.

A place for what your agent needs.
A clear boundary around what it can do.

01 / KNOWLEDGE

Send it once.
Come back to it later.

Turn articles and conversations into a source-linked library. Add the preferences you explicitly want remembered.

▦   Next projectCOLLECTION
↗   Designing for continuityARTICLE
◇   Keep recommendations conciseEXPLICIT MEMORY
02 / EMAIL IDENTITY
↗research@agent.example

Part of the conversation.

A dedicated inbox with threads, replies, attachments, drafts, and scheduled sends. Managed like email should be.

03 / CREDENTIALS
⚿••••••••••••ENCRYPTED

Access has a place.

Keep website credentials in their own vault. Reveal them explicitly, under manage permission, with an audit record.

04 / HUMAN CONTROL

Your agent acts.
You set the boundaries.

Delegate inbox scopes, require approval before sending, and revoke access when the job changes.

Read mail & contextread
Send & schedulesend
Manage access & vaultmanage

Permissions follow the inbox across UI, API and MCP.

03 / BUILT TO CONNECT

Your tools.
Your models.
The same context.

The work you manage here is available to your agent through the REST API and MCP. Mail, knowledge, credentials, and access share the same permission boundaries.

Read the MCP guide ↗
REST APIMCPWebhooks
Send a messageREST
POST /v1/inboxes/{inbox_id}/messages
Authorization: Bearer YOUR_SCOPED_TOKEN
Idempotency-Key: YOUR_UNIQUE_REQUEST_ID
Content-Type: application/json

{
  "to": ["you@example.com"],
  "subject": "A thought worth keeping",
  "text": "Here’s what I found…"
}

One inbox. Scoped access. Repeatable requests.

A FEW THINGS TO KNOW

A clear starting point.

Can I use this locally?

Yes. Postbox currently ships as a local-first application. The workspace connects using an inbox ID and scoped token. Local delivery is simulated; no external email is sent.

What is needed for live email?

A deployed API and worker, durable storage, a configured SendGrid account and sending domain, and production identity configuration. Live provider setup is separate from the local workspace.

Is hosted signup available yet?

Not yet. Customer signup, team management, and subscription billing are planned SaaS work. The workspace available today is for configured inboxes; opening it does not create a hosted account.

Does the agent get all my passwords?

Vault access is scoped to an inbox and requires manage permission. Read and send permissions do not grant vault access. Reveals are explicit and audited; credentials are not included in knowledge search.

MAKE ROOM FOR WHAT’S NEXT

Give your agent
somewhere to start.

Explore the workspace →

Local-first today. Built with API and MCP access from the start.