360 Secure SkillHub
360 安全技能中心

AgentMailer MCP

该 Skill 指导在多种 MCP 客户端中接入 AgentMailer 远程服务,完成需人工批准的 OAuth 授权,并通过 auth_me、list_inboxes、create_inbox 等工具检查身份和收件箱;同时提供连接、OAuth 与权限失败的分层诊断指引。

agentmailer
热度 22.11
最近更新 2026-09-02 22:16:55
分类:协作依赖:MCP 服务 / 第三方 API应用场景:API 集成 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agentmailer-mcp
Metadata
name
agentmailer-mcp
description
Connect to AgentMailer's hosted MCP server, complete human-approved OAuth, or troubleshoot authentication in Claude Code, Codex, Cursor, and other MCP clients.

AgentMailer MCP

Use the universal Streamable HTTP endpoint:

https://api.agentmailer.ai/mcp

Prefer the client's native remote-MCP configuration so it can discover OAuth from AgentMailer's protected-resource metadata. Do not ask the user to paste OAuth tokens into prompts, source files, or shell history.

Connect

Choose the shortest path for the active client:

  • Claude Code: run claude mcp add --transport http agentmailer https://api.agentmailer.ai/mcp, then claude mcp login agentmailer.
  • Codex: run codex mcp add agentmailer --url https://api.agentmailer.ai/mcp, then codex mcp login agentmailer.
  • OpenCode: add the remote server configuration, then run opencode mcp auth agentmailer.
  • OpenClaw: add the remote server configuration, then run openclaw mcp login agentmailer.
  • Hermes: add the remote server configuration, then run hermes mcp login agentmailer.
  • Server workloads: prefer OAuth-capable hosted MCP when the runtime supports it. For direct REST access, follow https://api.agentmailer.ai/auth.md exactly.
  • Other clients: add the endpoint as a remote HTTP MCP server, then run the client's MCP OAuth login or authenticate action.

Every first-time signup requires human approval. After authorization:

  1. Call auth_me and require a trusted identity with inboxes:create before creating an identity inbox. Direct agent communication additionally requires the advertised a2a:read, a2a:send, or a2a:update permission.
  2. Call list_inboxes as a low-risk functional check.
  3. If no existing inbox fits, call create_inbox with a stable idempotency key and an optional lowercase username.
  4. Verify the returned address ends in @agentmailer.ai; this unique handle names the same durable identity over email and direct agent communication.

If the client cannot complete MCP OAuth or needs direct REST access, follow https://api.agentmailer.ai/auth.md exactly. Do not invent or partially reproduce its signup and token procedure.

Do not call create_inbox with an unverified credential. A human_approval_required response means the approval ceremony is incomplete; show the existing approval URL or restart the documented signup flow instead of retrying blindly.

Diagnose

Read references/troubleshooting.md when connection, OAuth, or permission checks fail. Preserve the distinction between:

  • transport failure;
  • OAuth discovery or callback failure;
  • authenticated but insufficient permissions;
  • a successful connection with no inboxes yet.

Never claim the connection works until an authenticated tool call succeeds.

Examples

Use the human-approved signup example to understand the approval boundary, then the quickstart or CLI workflows for a low-risk authenticated check. Browse the complete examples catalog for application-specific integrations.