SirenoRELAY: a policy-boundary MCP that lets AI agents read only allowed mail and send only to allowed recipients

ismaelfaro · x · 2026-10-26

Sergio Carracedo released SirenoRELAY (v1.6.3), a policy-boundary MCP that sits between your mailbox and your AI agents — the tool holds upstream credentials while agents authenticate with bearer tokens.

The site demos an "find invoices and send to my financial assistant" scenario: policy-filtered access shows only allowed invoices, while direct credentials expose private conversations and unsafe payloads. Open source on GitHub.

Original post →

More from coding & agent

coding & agent channel →