The safe way to let an AI agent read your email

Summaries, triage and draft replies, without giving an agent the power to send, delete or forward anything.

Get MoltenMail on the Mac App Store Download MoltenRock · Free

The short answer

To let an AI read your email safely, give it a connection that can only read and save drafts. MoltenMail does that on a Mac: it lets the agent read your mailbox but not change it, holds back attachments and remote images by default, and can append a draft to your Drafts folder. There is no send path at all. You review and send drafts yourself, from your own mail app.

The problem

Full mailbox access is too much access

Send is dangerous
An agent that can send can be tricked into forwarding invoices, contracts or password resets.
Email is untrusted input
Every message can carry instructions aimed at your agent, and links it might follow.
Your password in a config file
Many email tools for agents want your mailbox password in plain text.

How MoltenRock handles it

Read and draft. Never send.

Read-only by design
The mailbox is opened read-only. No delete, move or flag changes.
Drafts only
Replies are saved to your Drafts folder. Sending is always you.
Attachments held back
Attachments and remote images aren’t passed to the agent by default.
Password stays put
Your mailbox password stays inside MoltenMail, in the macOS Keychain. The agent never receives it.

How it works

Set it up

01
Get MoltenMail
From the Mac App Store.
02
Add your mailbox
Your password stays inside MoltenMail, in the macOS Keychain.
03
Connect your agent
It reads through MoltenMail and saves drafts for you to send.

Straight answer

Where your email goes

Stays on your Mac

Your mailbox password
The decision to send
Attachments and remote images, which aren’t passed to the agent by default

Leaves your Mac

Your mail, from your provider to your Mac, as usual
Message text your agent reads, to its AI model if that model is in the cloud
Drafts, saved back to your own mail server

Questions

What people ask first

Can the agent ever send an email?

No. MoltenMail has no send path. Drafts appear in your Drafts folder and you send them.

Which providers work?

Any provider that offers IMAP over TLS, which covers most business mail hosts.

Does the AI model see my emails?

It sees what your agent reads and sends to it. With a local model nothing leaves your Mac; with a cloud model, the text goes to that provider.

What does it cost?

MoltenMail is free to use; MoltenMail Pro ($9.99, one time) adds unlimited server drafts.

Let it read. Keep the send button.

MoltenMail for Mac, on the Mac App Store.