Simplelogin Cli

Create and manage SimpleLogin email aliases from the command line. Protect your real email with secure, private aliases.

Security Scan

The skill appears to implement a legitimate SimpleLogin CLI, but metadata and declared requirements are inconsistent with the runtime instructions (it needs an API key/secret fallback), so verify secrets handling and source before installing.

Purpose & Capability

The SKILL.md, README, and included script all implement SimpleLogin API interactions (create alias, contacts, reverse aliases) which matches the skill name and description. However the registry metadata lists no primary credential or required env var while the instructions and scripts clearly require a SIMPLELOGIN_API_KEY (or a secrets JSON fallback), so there's a mismatch between what is claimed in metadata and what the skill actually needs.

Instruction Scope

Runtime instructions and the included script perform only SimpleLogin-related actions (curl calls to app.simplelogin.io, parse JSON with jq, create contacts). They reference a fallback secrets path (~/.openclaw/secrets/simplelogin.json) and suggest using environment variables or a password manager — these are expected for this purpose and are limited in scope.

Install Mechanism

This is instruction-only (no install spec). The only included executable is a small shell script; no downloads or archive extraction occur as part of an install spec, which is the lowest-risk install model.

Credentials

The skill requires an API key for SimpleLogin, but the registry metadata did not declare a primary credential or required env var. SKILL.md does declare a secrets fallback path and the script reads SIMPLELOGIN_API_KEY or ~/.openclaw/secrets/simplelogin.json — this secret access is appropriate for the declared functionality, but the missing/incorrect metadata entry is a discrepancy you should verify before granting access to secrets.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide settings, and is user-invocable only. No elevated persistence or privileged behavior is requested.

What to consider before installing

This skill appears to be a normal SimpleLogin CLI that needs your SimpleLogin API key. Before installing: 1) Confirm the skill's source/repository (the package references GitHub but the registry source is unknown). 2) Only provide your SIMPLELOGIN_API_KEY via an env var or a trusted secret store; the skill will also look at ~/.openclaw/secrets/simplelogin.json as a fallback. 3) Note the small discrepancy: registry metadata doesn't mark the API key as a primary credential — verify that the published package and metadata are consistent. 4) The included script talks to https://app.simplelogin.io (expected) and prints API responses; it does not exfiltrate secrets in the files reviewed, but you should still inspect the installed copy yourself before running. 5) Minor implementation issues to be aware of: the script uses the HTTP header 'Authentication' (some APIs expect 'Authorization: Bearer <token>') and attempts to run pbcopy (macOS) — these are likely bugs, not exfiltration. If you can't confirm the upstream repository and metadata, treat this as untrusted and avoid supplying secrets.

Create and manage privacy-focused email aliases with SimpleLogin. Protect your real email address when signing up for services, newsletters, or online shopping.

Features

• ✅ Create custom aliases (you choose the prefix)
• ✅ Create random aliases (generated automatically)
• ✅ List all your aliases with status
• ✅ Enable/disable aliases on demand
• ✅ Smart hostname detection (auto-suggests alias based on website)
• ✅ Multiple mailbox support
• ✅ Create contacts & get reverse aliases (reply to forwarded emails)
• ✅ List contacts for any alias
• ✅ Secure API key management

Prerequisites

1. SimpleLogin account - Sign up at https://simplelogin.io
2. API key - Generate in SimpleLogin dashboard → API Keys
3. Store API key securely - Use environment variable or password manager

Installation

# Install via ClawHub (when published)
clawhub install simplelogin-cli

# Or clone manually
git clone https://github.com/mcclawd/simplelogin-cli.git

Configuration

Option 1: Environment Variable (Quick)

export SIMPLELOGIN_API_KEY="your-api-key-here"

Option 2: Bitwarden/Password Manager (Recommended)

Store your API key in your password manager:

• Name: SimpleLogin API Key
• Custom Field: api_key = your API key

The skill will automatically retrieve this if Warden or similar credential management is available.

Usage

Create a Custom Alias

# Create alias with your chosen prefix
simplelogin create shopping
# → [e-mail]

# With note
simplelogin create amazon --note "Amazon purchases"
# → [e-mail]

# For specific website
simplelogin create --for github.com
# → [e-mail]

Create Reverse Alias (Send-From)

Reverse aliases let you send emails FROM your alias identity. Create a contact for each recipient:

# Create contact for a recipient
simplelogin contact-create [e-mail] [e-mail]
# → Reverse alias: [e-mail]
# → Send emails to this address → forwards through [e-mail]

# With JSON output (for automation)
export SIMPLELOGIN_JSON=true
simplelogin contact-create [e-mail] [e-mail]
# → Returns full JSON with reverse_alias and reverse_alias_address

How it works:

1. contact-create calls SimpleLogin API: POST /api/aliases/{id}/contacts
2. API returns reverse_alias field with obfuscated address
3. Send email to reverse alias → forwards through your alias → appears from alias

Use case: Enable refund requests, support inquiries, or any email sending from hidden identity.

Create a Random Alias

# Generate random alias
simplelogin random
# → [e-mail]

# With note
simplelogin random --note "Newsletter signup"

List Aliases

# Show recent aliases
simplelogin list

# Show all
simplelogin list --all

# Filter by domain
simplelogin list --domain simplelogin.com

List Contacts for an Alias

# Show all contacts (recipients) for an alias
simplelogin contact-list [e-mail]
# → [e-mail] → [e-mail]
# → [e-mail] → [e-mail]

Manage Aliases

# Disable alias
simplelogin disable [e-mail]

# Enable alias
simplelogin enable [e-mail]

# Delete alias
simplelogin delete [e-mail]

Create Contacts & Get Reverse Aliases

When you receive a forwarded email and want to reply to the sender, you need to create a contact for your alias. This gives you a reverse alias email address that forwards through your alias.

# Create contact for an alias (get reverse alias)
simplelogin contact-create <alias_email> <contact_email>
# → Reverse alias: [e-mail]
# → Send emails to this address → forwards through your alias

# List all contacts for an alias
simplelogin contact-list <alias_email>
# → [e-mail] → [e-mail]

Use case: You signed up for a service using [e-mail]. They sent an email to your real mailbox. To reply, create a contact:

simplelogin contact-create [e-mail] [e-mail]
# → Reverse alias: [e-mail]

# Now send your reply to the reverse alias
echo "My reply" | mail -s "Re: Your subject" [e-mail]

The email will appear to come from [e-mail], keeping your real mailbox private.

API Reference

simplelogin create [prefix]

Create a custom alias.

Options:

• prefix - The alias prefix (before @)
• --note, -n - Add a note/description
• --for, -f - Suggest alias based on hostname (e.g., amazon.com)
• --mailbox, -m - Specify mailbox ID (default: first available)

Examples:

simplelogin create shopping
simplelogin create amazon --note "Prime member"
simplelogin create --for netflix.com --note "Streaming"

simplelogin random

Create a random alias.

Options:

• --note, -n - Add a note/description
• --word, -w - Use word-based random (default: uuid-style)
• --mailbox, -m - Specify mailbox ID

Examples:

simplelogin random
simplelogin random --note "Forum signup"
simplelogin random --word

simplelogin contact-create <alias> <contact>

Create a contact (recipient) for an alias, enabling you to send emails FROM the alias identity.

Arguments:

• alias - The alias email address
• contact - The recipient email address

Returns: reverse_alias - Send emails to this address to send from your alias

Options:

• (JSON mode) Set SIMPLELOGIN_JSON=true for full JSON response

Examples:

simplelogin contact-create [e-mail] [e-mail]
simplelogin create --for nordvpn.com [e-mail]  # Auto-suggests alias

simplelogin contact-list <alias>

List all contacts (recipients) configured for an alias.

Arguments:

• alias - The alias email address

Returns: List of contact emails and their reverse aliases

simplelogin list

List your aliases.

Options:

• --all, -a - Show all aliases (not just recent)
• --domain, -d - Filter by domain
• --enabled - Show only enabled
• --disabled - Show only disabled

simplelogin disable|enable|delete <alias>

Manage existing aliases.

Examples:

simplelogin disable [e-mail]
simplelogin enable [e-mail]
simplelogin delete [e-mail]

simplelogin contact-create <alias> <contact>

Create a contact for an alias and get the reverse alias address.

Arguments:

• alias - Your alias email (e.g., [e-mail])
• contact - The contact's email address (e.g., [e-mail])

Examples:

simplelogin contact-create [e-mail] [e-mail]
# → Contact already exists for [e-mail]
# → Reverse alias: [e-mail]
# → Send emails to this address → forwards through [e-mail]

What is a reverse alias? A reverse alias is a special email address that, when you send to it, forwards through your SimpleLogin alias and appears to come from your alias (hiding your real mailbox). This is how you reply to emails that were forwarded to you.

simplelogin contact-list <alias>

List all contacts for an alias with their reverse aliases.

Arguments:

• alias - Your alias email

Examples:

simplelogin contact-list [e-mail]
# → [e-mail] → [e-mail]
# → [e-mail] → [e-mail]

Agent/JSON Mode

For programmatic use (agents, scripts), set SIMPLELOGIN_JSON=true:

export SIMPLELOGIN_JSON=true
simplelogin create shopping --note "Test"
# → {"email":"[e-mail]","id":12345,"status":"created"}

Security Notes

• 🔐 API keys are never stored in the skill - Always use environment variables or password managers
• 🔐 Aliases are private - SimpleLogin doesn't log or sell your data
• 🔐 Open source - SimpleLogin code is auditable at https://github.com/simple-login

Troubleshooting

"API key not found"

Make sure you've set the SIMPLELOGIN_API_KEY environment variable or stored the key in your password manager.

"No suffixes available"

Check your SimpleLogin account status. Free accounts have limited suffixes.

Emails going to spam

This is normal for test emails. Gmail may flag programmatic emails. Check your spam folder.

Contributing

Contributions welcome! Please follow the existing code style and add tests for new features.

License

MIT License - See LICENSE file