agentcloak-email-proxySecure email proxy for AI agents. Search, read, and draft emails via MCP with server-side credential isolation, PII redaction, prompt injection detection, an...
Install via ClawdBot CLI:
clawdbot install ryanfren/agentcloak-email-proxyGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://github.com/ryanfren/AgentCloakAudited Apr 17, 2026 · audit v1.0
Generated Mar 20, 2026
AI agents handle customer inquiries by reading and drafting email responses, with PII redaction ensuring compliance with data privacy regulations like GDPR. The security pipeline blocks sensitive emails such as password resets, preventing unauthorized access to customer accounts. Draft safety allows human review before sending, maintaining quality control.
AI agents analyze client emails for investment updates or billing queries, with blocklists filtering out financial alerts and PII redaction hiding account numbers. This enables secure email processing without exposing sensitive financial data to the AI. The hosted version allows firms to leverage server-side security without in-house infrastructure.
AI agents manage patient appointment requests and follow-ups via email, using PII redaction to protect health information and blocklists to filter security-related emails. Prompt injection detection safeguards against malicious content, ensuring reliable communication. Self-hosting keeps all data on-premises for HIPAA compliance.
AI agents assist in drafting legal correspondence by reading client emails and creating responses, with HTML sanitization removing hidden characters that could alter document integrity. PII redaction secures confidential client details, and draft safety ensures attorney review before sending. This streamlines workflow while maintaining legal standards.
AI agents handle student inquiries and administrative emails in educational institutions, using content filtering to block sensitive sender patterns and redact personal information. The tool's read-only access prevents accidental modifications, and self-hosting options support data privacy policies. This reduces administrative burden while enhancing security.
Offer tiered monthly subscriptions for the hosted version, with plans based on email volume, number of connected accounts, and advanced security features like custom blocklists. Revenue comes from recurring fees, targeting businesses seeking secure email automation without self-hosting. Additional revenue streams include premium support and integration services.
Sell licenses for self-hosted deployments to large organizations requiring full data control and compliance, such as healthcare or finance sectors. Revenue includes one-time license fees or annual subscriptions for updates and support. This model appeals to enterprises with strict security policies and in-house IT resources.
Provide a free basic tier with limited email searches and standard filtering, then charge based on API call volume or advanced features like enhanced PII redaction. Revenue is generated from overage fees and premium upgrades, attracting developers and small businesses. This encourages adoption while monetizing heavy usage.
💬 Integration Tip
Ensure the AGENTCLOAK_API_KEY environment variable is set correctly and use mcporter for seamless tool configuration with the provided baseUrl and header.
Scored Apr 19, 2026
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Clerk/Auth.js. Use when: self-hosting auth on D1, building OAuth provider, multi-tenant SaaS, or troubleshooting D1 adapter errors, session caching, rate limits, Expo crashes, additionalFields bugs.
Clerk integration. Manage Users, Organizations. Use when the user wants to interact with Clerk data.
Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP outages), and component reference. Prevents 15 documented errors. Use when: API keys for users/orgs, Next.js 16 middleware filename, troubleshooting JWKS/CSRF/JWT/token-type-mismatch errors, webhook verification, user type inconsistencies, or testing with 424242 OTP.
Start and complete WordPress.com OAuth and publish posts through the WordPress.com REST API. Use when you need to generate an authorization URL, exchange cal...
Configures Firebase Authentication — providers, security rules, custom claims, and React auth hooks
Use when auditing Go code involving authentication flows, RBAC policies, Kubernetes admission webhooks, JWT/OAuth token validation, or privilege escalation i...