the agent-email basics
everything AgentMail does
- claude, chatgpt, cursor, and any MCP-compatible agent can plug straight in — MCP is the standard they all speak.
- unlimited per-purpose inboxes (a decoy per signup, per tool, per agent).
- send + reply from any inbox with full RFC 5322 threading headers.
- webhooks for message and alert events.
- speaks the same language ai agents already know, so claude, chatgpt, or cursor can just start using it.
what decoy adds
and what AgentMail skips
- supported vault content is encrypted before storage and the backend does not hold the unwrapped vault key. email still requires readable processing during receipt, forwarding, sending, and delivery.
- your inbox never leaves your phone — we use on-device ai so your mail can't be leaked in a breach, used as training data, or read by a server you don't control. agentmail runs everything server-side because it's built for bots.
- Decoy lets users approve one request or standing access to selected inboxes and information. every Decoy data access is recorded. AgentMail gives the agent its own server-side inbox.
- full consumer stack: password vault, TOTP, passkeys, iOS autofill, safari extension.
- free for founding members — no usage caps, no paid upgrade to unlock core features.
side by side
where decoy wins, and where it doesn't.
disposable emails
a different email for every signup — so when a site gets breached or starts spamming, you burn the decoy, not your real inbox. send and reply from any of them.
decoy
unlimited, send + receiveAgentMail
per-agent inboxes via api (capped)password manager + 2fa
passwords, 2fa codes, and passkeys in one place, autofilled on iOS — so you stop juggling an authenticator app to sign in.
decoy
passwords, TOTP, passkeysAgentMail
not a vaultend-to-end encryption
supported vault content is encrypted before storage. authorized devices—and agents you explicitly approve—can decrypt the information they are allowed to access.
decoy
yesAgentMail
SOC 2, not E2EEmigration & import
move your whole vault over in one tap via apple's credential exchange (CXP) — and one tap moves it back out if you change your mind. no csv files, no lock-in.
decoy
CXP import from apple passwordsAgentMail
no vault to migrateon-device ai
your inbox never leaves your phone — we use on-device ai so we can pull out promo codes, catch 2fa automatically, summarize what's new, and flag breach hints, all without shipping your mail to a server.
decoy
iOS 26 foundation modelsAgentMail
server-side onlyai agents
when an ai agent needs a login, inbox or personal detail, Decoy lets the user choose the exact accounts and information it can access and for how long. every Decoy data access is recorded.
decoy
MCP + user-controlled accessAgentMail
MCP + SDKs (no approval loop)| what you get | decoy | AgentMail |
|---|---|---|
disposable emails a different email for every signup — so when a site gets breached or starts spamming, you burn the decoy, not your real inbox. send and reply from any of them. | unlimited, send + receive | per-agent inboxes via api (capped) |
password manager + 2fa passwords, 2fa codes, and passkeys in one place, autofilled on iOS — so you stop juggling an authenticator app to sign in. | passwords, TOTP, passkeys | not a vault |
end-to-end encryption supported vault content is encrypted before storage. authorized devices—and agents you explicitly approve—can decrypt the information they are allowed to access. | yes | SOC 2, not E2EE |
migration & import move your whole vault over in one tap via apple's credential exchange (CXP) — and one tap moves it back out if you change your mind. no csv files, no lock-in. | CXP import from apple passwords | no vault to migrate |
on-device ai your inbox never leaves your phone — we use on-device ai so we can pull out promo codes, catch 2fa automatically, summarize what's new, and flag breach hints, all without shipping your mail to a server. | iOS 26 foundation models | server-side only |
ai agents when an ai agent needs a login, inbox or personal detail, Decoy lets the user choose the exact accounts and information it can access and for how long. every Decoy data access is recorded. | MCP + user-controlled access | MCP + SDKs (no approval loop) |
be a nobody. get unlimited perks.
free for founding members. lock it in now.
switch to decoy if…
- you're a person, not a developer — decoy is the consumer app; agentmail is infrastructure.
- you want a password manager, TOTP, and passkeys in the same place as your aliases.
- you want your inbox to never leave your phone — we use on-device ai so the contents stay yours.
- you want server-blind vault storage with explicit, user-controlled access for devices and agents.
- you want users to choose which inboxes and information an ai agent can access and for how long, with every Decoy data access recorded.
or pick AgentMail if…
- •you're a developer building an autonomous agent and need programmatic inboxes at scale.
- •you want server-side semantic search, labeling, and structured extraction via sdk (python, typescript, go).
- •you need SOC 2, dedicated IPs, EU hosting, or BYO-cloud for a production agent fleet.
free for founding members
available on the App Store, Chrome Web Store, and Firefox Add-ons.
questions
is agentmail a competitor to decoy?
different layers of the same problem. agentmail is an api for developers giving agents their own inboxes. decoy is a consumer app giving you unlimited inboxes, a password vault, and an MCP your assistant can drive with your approval. if you're a person, you want decoy; if you're shipping an autonomous agent to production, you might want agentmail.
can i use agentmail and decoy together?
yep. run agentmail for your agent's own outbound workflows; use decoy for your personal signups, passwords, and the assistant that acts on your behalf.
does decoy give me an api like agentmail?
Decoy provides MCP and an HTTP API. agents can create decoys, read approved mail, reply and retrieve approved account information. users choose what the agent can access and for how long, and every Decoy data access is recorded.
is agentmail end-to-end encrypted?
agentmail is built for server-side agent email. decoy encrypts supported stored vault and message content, but email must still be processed in readable form during receipt, forwarding, sending, and delivery. approved agents can read only the content covered by their grants.
why does decoy run ai on-device instead of server-side like agentmail?
because your inbox shouldn't leave your phone. we use on-device ai so your mail can't be leaked in a server breach, handed to a third party, or used as training data — only your device ever sees it. agentmail's ai runs server-side because it's built for bots, not for your personal email.
can i import from agentmail into decoy?
there's nothing to import — agentmail inboxes belong to your agent, not you. decoy's import path is CXP from apple passwords and any CXP-compliant manager.
does decoy have a free tier like agentmail?
yes. Decoy is free to download on the App Store, Chrome Web Store, and Firefox Add-ons.
does decoy only work on iPhone?
today, yes — the decoy app is iOS (iPhone + iPad) with a safari extension on iOS and macOS. desktop and other platforms are in active development. your decoys already forward to whatever inbox you use on any platform (gmail, outlook, proton), and any ai agent can manage them from any device via MCP.