MCP Email Server with Human Confirmation and Audit Logs
Soft-Lie-434 · reddit · 2026-08-15
The author released Gigamail, an MCP-based email server designed to prevent destructive agent actions.
Features & Mechanisms:
- Two-phase confirmation: Send and delete require human approval via a one-time token (5 min expiry) returned in a preview.
- Permission separation: 15 free read tools for agents; 3 safe writes are logged; 6 destructive tools go through the gate.
- Security isolation: Credentials stay in the CLI, never touching the MCP channel.
- Adversarial testing: Resisted prompt injection attempts for exfiltration, mass delete, and privilege escalation.
Status: v0.1, AGPL 3.0, install via clone (PyPI pending).
More from coding & agent
- AI finds edge cases better than humans in code generation — Al_Grigor · 2026-08-15
- Open-Source IsoCity: Build Isometric City Simulations with NextJS and Canvas — tom_doerr · 2026-08-15
- Building agent taste from logged attention: memory and pipeline stacks — apocalyptic_cc · 2026-08-15
- Dev shares agent tool to reduce problem-solving anxiety — pbaylies · 2026-08-15
- User asks for smallest coding LLM that runs locally on 24GB M4 MacBook Pro — trawasthi_ai · 2026-08-15
- Running an Agent on Ubuntu Touch: Always-on Sensor Access and Long-term Memory — Valuable-Run2129 · 2026-08-15