How to give an AI agent access to your email with MCP

Updated

Short answer

HelloBox has a remote MCP server at https://hellobox.app/api/mcp that lets AI agents use the email on your Amazon SES or Resend domains on your behalf. Create a connection in HelloBox's settings, choose whether the agent can read, also organize and draft, or also send, then add the URL and token to any MCP client such as Claude. The agent never gets more access than you have, its actions are logged, and you can revoke it any time.

Connect an agent

  1. Connect Amazon SES or Resend to HelloBox, so your domains receive mail.
  2. Open Settings, Agents and create a connection. Choose read, write (organize, drafts, contacts and templates) or send.
  3. Copy the token and add the server to your MCP client.
claude mcp add --transport http hellobox https://hellobox.app/api/mcp \
  --header "Authorization: Bearer rbx_agent_..."

What agents can do

  • Search and read conversations, and summarize what needs an answer.
  • Label, archive, assign and snooze threads.
  • Write drafts for you to review, and manage contacts and templates.
  • Send replies, only if you gave the connection send access. Emails an agent sends are marked as sent by an agent.

Built to be safe with email

  • Each connection acts as you in one workspace, through the same permission checks as the app.
  • Changes and sends are recorded in the audit log.
  • HelloBox keeps only a hash of the token, and you can revoke a connection at any time.

Frequently asked questions

Is there an MCP server for Amazon SES email?
Yes. HelloBox's MCP server at https://hellobox.app/api/mcp gives AI agents access to the inbox for your SES domains, with read, write or send access you choose.
Is there an MCP server for a Resend inbox?
Yes. Connect Resend to HelloBox and create an agent connection; your agent can then read, organize and, if allowed, send mail on your Resend domains.
Can an AI agent send email without me?
Only if you create a connection with send access. Read and write connections can't send, and every agent send is marked and logged.