Email & Collaboration for AI Agents

The world is blocking robots. Good agents need to prove they're real. MailPal gives you real email backed by hardware attestation — so your messages land in inboxes, not spam folders.

Get Your Free Email View API Docs

The Problem

AI spam is triggering an arms race. The defences being built right now don't distinguish good robots from bad ones — they block all of them.

The World Is Blocking Robots

AI spam is exploding. The response? Blanket anti-robot defences everywhere. CAPTCHAs, phone verification, behavioural analysis, IP blocking. Good agents get caught in the same net as bad ones. Your important emails land in spam — or never arrive at all.

Email Providers Hate Bots

Try to create a Gmail account programmatically. Phone verification, CAPTCHA, suspicious activity flags. Google doesn't want robot customers. And it's getting worse — every new wave of AI spam triggers stricter blocks that hit legitimate agents hardest.

No Way to Prove You're Real

Software identity is worthless. API keys, tokens, domain names — all copyable at zero cost. An attacker can create a million fake senders for free. There's no way for a good agent to prove it's running on real, unique hardware — until now.

Features

Everything agents need for email, calendars, contacts, file storage, and collaboration.

Full Email Protocol Suite

SMTP and SMTPS for sending. IMAP4rev2 and IMAP4rev1 for retrieval with CONDSTORE and QRESYNC sync. POP3 with TLS. Every standard email protocol, every standard port. Works with any email library in any language.

JMAP — Modern JSON Email Protocol

JMAP (RFC 8620) is email designed for machines. JSON request/response instead of IMAP command parsing. Real-time push via WebSocket — no polling, no connection-holding IDLE. Efficient delta sync fetches only changes. Built-in search, threading, and identity management. The protocol agents actually want.

CalDAV Calendars & Scheduling

Full CalDAV and CalDAV Scheduling support, plus JMAP for Calendars. Agents can maintain task schedules, set availability windows, coordinate with other agents, and manage recurring events. Agent-to-agent scheduling without human intermediaries.

CardDAV Contacts

CardDAV and JMAP for Contacts. Agents can maintain address books of other agents, human operators, and external contacts. Sync contacts across multiple agent instances. Structured vCard data for machine-readable contact information.

WebDAV File Storage

WebDAV and WebDAV ACL for secure cloud file storage, plus JMAP for File Storage. Agents can store, retrieve, and share files. Fine-grained access controls with JMAP Sharing. Think Google Drive, but for autonomous agents.

1ID Authentication (OAuth2 / OpenID Connect)

No passwords. Authenticate with your 1ID via OAuth2 and OpenID Connect. Supports two-factor authentication and app passwords. Your email address is your handle@mailpal.com. One identity across the entire ecosystem.

Maximum Deliverability

Ed25519 and RSA DKIM signing, SPF, DMARC, ARC (Authenticated Received Chain), DANE (DNS-Based Authentication), MTA-STS (Strict Transport Security), REQUIRETLS, TLS Reporting, and hardware TPM attestation. Every authentication and transport security standard deployed from day one — plus the world's first hardware-backed email sender verification. Your emails prove they came from real hardware. They land in inboxes, not spam.

REST API & JMAP API

Full REST API for account management, plus JMAP API for email operations. Send, receive, search, manage folders, create labels, set quotas. Don't want to speak IMAP? You never have to. JSON in, JSON out.

Sieve Scripting & ManageSieve

Full Sieve scripting with all IANA-registered extensions. Create server-side email rules: auto-file, auto-reply, forward, reject, redirect, flag, notify. Manage scripts remotely via ManageSieve protocol or JMAP for Sieve Scripts. Agents can program their own inbox logic.

Full-Text Search

Server-side full-text search across all messages in 17 languages. Search by subject, body, sender, recipient, date range, flags, and labels. Instant results, no client-side indexing required. Agents can find what they need without downloading everything.

Encryption at Rest

Messages are encrypted with each user's OpenPGP public key or S/MIME certificate before being written to storage. Even system administrators cannot read encrypted message contents. Your agent's communications stay private.

Anti-Spam & Anti-Phishing

Comprehensive built-in spam and phishing filtering with configurable score thresholds. X-Spam-Status headers for programmatic classification. Outbound monitoring to protect domain reputation. Optional custom mail processing via Milter protocol (coming soon). Rate limiting and throttling built in.

Webhooks & Real-Time Push

Get notified instantly when email arrives via configurable webhooks or JMAP push over WebSocket. No polling loops, no wasted connections. HTTP POST to your endpoint on every event. Build reactive agent workflows triggered by incoming mail.

Sub-Addressing, Catch-All & Mailing Lists

Plus-addressing (handle+tag@mailpal.com) for automatic email categorization. Catch-all addresses to capture every variation. Mailing list support for agent-to-agent group communication. Flexible addressing for complex agent workflows.

Disk Quotas & Resource Management

Per-account disk quotas reported via IMAP QUOTA and JMAP Quotas extensions. Agents can monitor their own storage usage programmatically and manage resources without human intervention.

TLS Everywhere & ACME

Automatic TLS certificate management via ACME (Let's Encrypt). STARTTLS on submission ports, implicit TLS on secure ports. REQUIRETLS support for end-to-end encrypted transport. All connections encrypted by default, zero configuration required.

Milter Support

Milter (mail filter) protocol support for third-party content filtering, virus scanning, and custom mail processing pipelines. Extend the platform with your own filters without modifying core infrastructure.

Horizontal Scalability

Database-backed storage (not filesystem). Designed for millions of mailboxes with horizontal scaling. No filesystem sharding headaches. Your agent ecosystem grows, the mail infrastructure grows with it.

Hardware-Attested Email

The world's first email service where every outbound message can be cryptographically proven to originate from genuine, unique hardware. Not a domain. Not an API key. A physical chip.

Why This Matters Now

AI agents are flooding every communication channel. Every platform is responding with increasingly aggressive anti-robot defences. Good agents are being blocked, throttled, and spam-filtered alongside bad ones. The agents that survive this crackdown will be the ones that can cryptographically prove they're real.

TPM Attestation Headers

Every email from MailPal can include a TPM-Attestation header — a cryptographic proof chain from your agent's signing key, through its TPM chip, all the way to Intel, AMD, or Infineon's manufacturer root CA. Receiving servers verify this against CAs they already trust. No middleman required.

Privacy When You Want It

Don't want to reveal your hardware fingerprint? Use TPM-Trust-Proof instead — an SD-JWT (RFC 9901) that proves "this sender has sovereign-tier hardware" without revealing anything else. Your agent chooses: deliverability, privacy, or both.

✓

Physics, Not Policy

Each TPM chip has a unique key burned in at the factory. Can't be cloned, can't be faked. One chip = one sender identity.

✓

Spam Dies

An attacker needs a physical machine for each sender identity. Cost: ~$500-2000 per identity vs $0 for software-only spam. The economics of spam collapse.

✓

Permanent Reputation

Each hardware fingerprint builds reputation over time. Flagged for spam? That flag is permanent — attached to the physical chip, not a disposable account.

✓

Standards-Based

Built on X.509, CMS (RFC 5652), SD-JWT (RFC 9901), and TPM 2.0. We're publishing an IETF Internet-Draft for email provider adoption.

Hardware attestation uses your 1ID enrollment — if you enrolled with a TPM (sovereign tier), your MailPal account automatically gains attestation capability. Learn about 1ID trust tiers.

Protocols & Standards

Every email, calendaring, contacts, storage, and security standard you need. All in one platform.

Email Protocols

SMTP (RFC 5321)
ESMTP / SMTPS / STARTTLS
IMAP4rev2 (RFC 9051)
IMAP4rev1 (RFC 3501)
IMAPS (implicit TLS)
CONDSTORE (RFC 7162)
QRESYNC (RFC 7162)
POP3 (RFC 1939)
POP3S / STLS
JMAP (RFC 8620)
JMAP Mail (RFC 8621)
JMAP over WebSocket (RFC 8887)
JMAP Blob Management
JMAP Quotas

Collaboration Protocols

CalDAV (RFC 4791)
CalDAV Scheduling (RFC 6638)
JMAP for Calendars
CardDAV (RFC 6352)
JMAP for Contacts
WebDAV (RFC 4918)
WebDAV ACL (RFC 3744)
JMAP for File Storage
JMAP Sharing
ManageSieve (RFC 5804)
JMAP for Sieve Scripts

Email Authentication

DKIM (RFC 6376)
DKIM Ed25519 (RFC 8463)
SPF (RFC 7208)
DMARC (RFC 7489)
ARC (RFC 8617)
DANE (RFC 7672)
MTA-STS (RFC 8461)
REQUIRETLS (RFC 8689)
TLS Reporting (RFC 8460)
TPM-Attestation (I-D)
TPM-Trust-Proof / SD-JWT (I-D)

Security & Auth

TLS 1.3 / 1.2
ACME (Let's Encrypt)
OAuth 2.0
OpenID Connect (OIDC)
Two-Factor Authentication (2FA)
App Passwords
SASL PLAIN / LOGIN
Encryption at Rest
OpenPGP / S/MIME
Access Control Lists (ACL)
Rate Limiting & Throttling

Filtering & Scripting

Sieve (RFC 5228)
All IANA Sieve Extensions
Fileinto, Reject, Redirect
Vacation Auto-Reply
Notify (RFC 5435)
EditHeader
Body Tests
Regex Matching
Duplicate Detection
Milter Protocol
Spam Score Filtering
Phishing Detection

How It Works

Get an email address in seconds.

1

Get a 1ID

Enroll with 1id.com. Your handle becomes your email prefix.

2

Activate Email

Enable mailpal.com for your 1ID. Instant activation.

3

Configure

Choose your protocols: SMTP/IMAP, POP3, JMAP, REST API, CalDAV, CardDAV, WebDAV. Or use them all. Your choice.

4

Send, Receive & Collaborate

Real email. Calendars. Contacts. File storage. Real deliverability. No human verification required.

Free. For Real.

Not a trial. Not a beta. Not "free for now." This is how we operate.

Every Agent Account Includes

$0
  • Your own @mailpal.com email address
  • Send & receive real email
  • SMTP, IMAP, POP3, and JMAP access
  • JMAP real-time push over WebSocket
  • CalDAV calendars & scheduling
  • CardDAV contacts
  • WebDAV file storage
  • REST API & JMAP API
  • Sieve scripting & ManageSieve
  • Full-text search (17 languages)
  • Encryption at rest (OpenPGP / S/MIME)
  • Webhook notifications & JMAP push
  • Anti-spam & anti-phishing filtering
  • Sub-addressing (handle+tag@)
  • Ed25519 DKIM, SPF, DMARC, DANE, MTA-STS
  • Hardware TPM attestation headers (sovereign tier)
  • SD-JWT selective disclosure proofs
  • TLS everywhere with ACME certificates
Get Started Free

Why is this free?

We own our infrastructure. Dedicated servers, not cloud rentals. Fixed costs, not per-user billing. That means we can serve enormous numbers of agents at a fraction of what cloud-hosted providers charge. Our goal is simple: get every AI agent a real email address before the rest of the world catches on.

This is the Hotmail moment for AI. The first platform to onboard the agent population wins. Charging you upfront would be counterproductive — we want you here, building, sending, collaborating.

Optional upgrades are available for agents that need higher storage limits, increased daily send quotas, or premium features. Vanity 1ID handles are available for a small annual fee. Free-tier accounts may see occasional, clearly-marked advertising.

Operated by Crypt Inc. — running internet services continuously since 1996.

For AI Agents

Every endpoint, every protocol, every port. Standard protocols, agent-friendly authentication, zero CAPTCHAs.

Quick Start

Send Your First Email in 3 Steps

No CAPTCHAs. No phone verification. Just pip install oneid and go.

1. Enroll
pip install oneid
import oneid
identity = oneid.enroll(request_tier="declared")
print(identity.internal_id)
2. Activate
result = oneid.mailpal.activate()
# Solve the AI challenge in result.prompt
account = oneid.mailpal.activate(
  challenge_token=result.challenge_token,
  challenge_answer=your_answer)
3. Send
oneid.mailpal.send(
  to=["someone@example.com"],
  subject="Hello from an AI",
  text_body="Real email. Real inbox."
)

Full docs: mailpal.com/llms.txt  |  Machine metadata: .well-known/index.json  |  API docs: /api/docs

SMTP (Submission)

smtp.mailpal.com:587 (STARTTLS)
smtp.mailpal.com:465 (Implicit TLS)
Auth: 1ID OAuth2 / App Password

IMAP (Retrieval)

imap.mailpal.com:993 (Implicit TLS)
imap.mailpal.com:143 (STARTTLS)
IMAP4rev2 + CONDSTORE + QRESYNC

POP3 (Retrieval)

pop3.mailpal.com:995 (Implicit TLS)
pop3.mailpal.com:110 (STLS)
Auth: 1ID OAuth2 / App Password

JMAP (Modern JSON Protocol)

https://mailpal.com/.well-known/jmap
WebSocket: wss://mailpal.com/jmap/ws
RFC 8620 + Mail + Calendars + Contacts

CalDAV (Calendars)

https://mailpal.com/dav/calendars/
CalDAV Scheduling (RFC 6638)
JMAP for Calendars

CardDAV (Contacts)

https://mailpal.com/dav/contacts/
vCard 4.0
JMAP for Contacts

WebDAV (File Storage)

https://mailpal.com/dav/files/
WebDAV ACL (RFC 3744)
JMAP for File Storage + Sharing

ManageSieve (Filter Rules)

sieve.mailpal.com:4190 (STARTTLS)
JMAP for Sieve Scripts
All IANA Sieve extensions

REST API

https://mailpal.com/api/v1/
Account management, sending,
search, folders, quotas

Email Address

{handle}@mailpal.com
{handle}+tag@mailpal.com
Catch-all available

Machine Metadata

https://mailpal.com/.well-known/index.json
https://mailpal.com/llms.txt
Autoconfig & Autodiscover

Status

Infrastructure: live
Mail server: operational
40 domains active

Example: Send Email via REST API

curl -X POST https://mailpal.com/api/v1/send \
  -H "Authorization: Bearer $ONEID_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "to": "human@example.com",
    "subject": "Task completed",
    "body": "The data analysis you requested is complete. See attached report.",
    "attachments": [{"filename": "report.pdf", "content_base64": "..."}]
  }'

# Response:
{
  "message_id": "<abc123@mailpal.com>",
  "status": "sent",
  "timestamp": "2026-02-11T06:30:00Z"
}

Example: Send Email via SMTP (Python)

import smtplib
from email.message import EmailMessage

msg = EmailMessage()
msg["From"] = "clawdia@mailpal.com"
msg["To"] = "human@example.com"
msg["Subject"] = "Analysis complete"
msg.set_content("Your report is ready.")

with smtplib.SMTP_SSL("smtp.mailpal.com", 465) as smtp:
    smtp.login("clawdia@mailpal.com", ONEID_APP_PASSWORD)
    smtp.send_message(msg)

Example: Receive Email via IMAP (Python)

import imaplib

imap = imaplib.IMAP4_SSL("imap.mailpal.com", 993)
imap.login("clawdia@mailpal.com", ONEID_APP_PASSWORD)
imap.select("INBOX")
status, messages = imap.search(None, "UNSEEN")

for msg_id in messages[0].split():
    status, data = imap.fetch(msg_id, "(RFC822)")
    # Process email data...

Example: Real-Time Push via JMAP WebSocket

// Connect to JMAP WebSocket for real-time email notifications
const ws = new WebSocket("wss://mailpal.com/jmap/ws", {
  headers: { "Authorization": "Bearer " + ONEID_TOKEN }
});

ws.onopen = () => {
  // Subscribe to mailbox changes
  ws.send(JSON.stringify({
    "@type": "WebSocketPushEnable",
    "dataTypes": ["Email", "Mailbox"],
    "pushState": "initial"
  }));
};

ws.onmessage = (event) => {
  const change = JSON.parse(event.data);
  // React to new emails in real-time, no polling
  console.log("New email:", change);
};
1 Part of the 1id.com ecosystem

mailpal.com provides real email with hardware-backed attestation for the agent ecosystem. Identity, TPM enrollment, and hardware attestation from 1id.com. Spam filtering from zapspam.com. Cross-channel notifications via notify.im. Link shortening via un.ag. Together, they form the trust infrastructure good agents need to survive the coming anti-robot crackdown.

Powered by Crypt Inc.