Setup checklist#
- ☐ Grant the agent read scope first; add draft scope, then send scope only for defined categories.
- ☐ Issue per-agent tokens so access can be revoked individually.
- ☐ Require approval for messages to new external recipients.
- ☐ Log every action with the reasoning the agent produced.
Audit checklist#
- ☐ Confirm you are not: granting full send access on day one.
- ☐ Confirm you are not: no kill switch when the agent misclassifies a thread.
Ongoing monitoring#
- ☐ Weekly: review provider dashboards (Postmaster Tools, SNDS) and bounce logs
- ☐ Monthly: re-run the setup verification after any vendor or DNS change
- ☐ Quarterly: full audit against this checklist
Frequently asked questions#
What is MCP in email?
Model Context Protocol lets AI clients call tools like 'search inbox' or 'draft reply' through a standard interface. MailMaid exposes an MCP server with scoped tokens.