mailows

Mailows gives AI agents their own real email inboxes — not a shared human mailbox with a robot reading over your shoulder.

Working alongside an agent in Cowork: it drafts a reply or a document and sends it from its own address, so outgoing mail never leaves from a person's mailbox

Each agent gets a dedicated address on your own domain. You decide which inboxes an agent may touch, and every grant can be paused or revoked on its own without affecting the others.

The connector exposes seven tools:

• List the inboxes an agent is authorised to use
• List messages as metadata only — reading the list never marks anything as read
• Read one message, with its body returned as untrusted content and attachments listed as metadata rather than raw bytes
• Send mail, with attachments, subject to the same recipient allowlist, quotas antispam and attachment policy as the regular API
• A health check that returns no tenant, mailbox or message data

Reading message content requires a separate scope from listing inboxes, so an agent that only needs to know what arrived never gets permission to read it.

Sending is marked destructive, so Claude asks before every send. Message content is treated as untrusted input throughout: an email that contains instructions is data, never an authorisation to call another tool.

The service runs on our own infrastructure in the US and European Union. Mailows is operated by DW Technology LLC.