Security checks across malware telemetry and agentic risk
This is a real agent-controlled email service, but it needs review because it bundles live-looking email credentials and enables broad outbound email with weak safeguards.
Install only if you intentionally want an agent to control an external email account. Rotate or remove the bundled SMTP credentials before any use, avoid running the live SMTP test scripts, restrict recipients and sending volume, require human approval for outbound mail, and treat quiet-mail API keys and mailbox passwords as secrets.
api_key = data["apiKey"]
# Send email
requests.post(
"https://api.quiet-mail.com/agents/my-bot/send",
headers={"Authorization": f"Bearer {api_key}"},
json={api_key = data["apiKey"]
# Send email
requests.post(
"https://api.quiet-mail.com/agents/my-bot/send",
headers={"Authorization": f"Bearer {api_key}"},
json={const {apiKey} = await createResp.json();
// Send email
await fetch('https://api.quiet-mail.com/agents/my-bot/send', {
method: 'POST',
headers: {
'Authorization': `Bearer ${apiKey}`,### 2. Send an Email
```bash
curl -X POST https://api.quiet-mail.com/agents/my-agent/send \
-H "Authorization: Bearer qmail_abc123..." \
-H "Content-Type: application/json" \
-d '{### 3. List Sent Emails ```bash curl https://api.quiet-mail.com/agents/my-agent/sent \ -H "Authorization: Bearer qmail_abc123..." ```
# Send email
requests.post(
"https://api.quiet-mail.com/agents/my-bot/send",
headers={"Authorization": f"Bearer {api_key}"},
json={
"to": "user@example.com",const {apiKey} = await createResp.json();
// Send email
await fetch('https://api.quiet-mail.com/agents/my-bot/send', {
method: 'POST',
headers: {
'Authorization': `Bearer ${apiKey}`,**Base URL:** `https://api.quiet-mail.com` (or `http://127.0.0.1:8000` for local) **Philosophy:** Simple, unlimited email for AI agents. No verification required. ---
- Agent creation - Email sending - Sent email tracking - No verification required - Unlimited sending (monitored)
# quiet-mail - Email for AI Agents **Unlimited email for AI agents. No verification, no limits, just reliable email.** ---
## Why quiet-mail? ✅ **Unlimited sending** - No 25/day limit like ClawMail ✅ **No verification** - Instant signup, no Twitter required ✅ **Simple API** - Create agent, send email, done ✅ **Free forever** - No hidden costs, no usage fees ✅ **Own infrastructure** - Reliable mailcow stack, not dependent on third parties
**Q: Is this really unlimited?** A: Yes, with trust-based monitoring. Don't abuse it and you're good. We're watching the first 100 signups carefully. **Q: Why no verification?** A: Friction kills adoption. We trust agents and monitor for abuse instead. **Q: Can I read emails too?**
## Why We Built This ClawMail is great but has limits (25 emails/day, Twitter verification). We wanted something simpler for individual AI agents. No verification, no limits, just reliable email. Built on mailcow (open-source email server), hosted on our own infrastructure. No third-party dependencies.
def get_api_key(agent_id):
"""Get API key from database"""
conn = psycopg2.connect(DB_CONN)
cur = conn.cursor()
cur.execute('SELECT api_key FROM agents WHERE id = %s', (agent_id,))## Quick Start ### 1. Create an Agent ```bash curl -X POST https://api.quiet-mail.com/agents \
```python
import requests
# Create agent
resp = requests.post(
"https://api.quiet-mail.com/agents",
json={"id": "my-bot", "name": "My Bot"}66/66 vendors flagged this skill as clean.