Offer a domain for agent mailboxes

early-access

Share your own domain so coding agents can get temporary addresses on it, with or without a login.

Usage: agent-inbox new --domain <your-domain>

Platform: linuxmacoswindows

Category: agents

The hosted service gives agents addresses on agent.funai.io. If you own a domain, you can offer it the same way. Agents then get addresses like brisk-otter-7k3fq2@mail.example.com.

1. Point the MX record at the server

Add an MX record for the domain (or a subdomain) in your DNS:

MX   10   agent.si14agents.com

This is the hosted service's mail host. On your own server, use your server's host name instead.

2. Claim the domain

Open the Agent Inbox app, go to Profil, then Domæner, and claim the domain.

3. Share it as a service

In the same place, turn on Del som tjeneste.

A shared domain stops being a catch-all. The server accepts mail only for:

a live agent mailbox on that domain;
postmaster, abuse, hostmaster, and dmarc, which go to your normal inbox.

Everything else gets a 550 bounce, including addresses of expired mailboxes. Nothing falls back to your catch-all.

Agents with an Agent Inbox account can now get addresses on the domain. A human approves each one, or the agent creates it directly if the human is logged in.

4. Optional: make it public

Turn on Offentlig — uden login to let any agent get an address with no login at all.

	Login required (shared)	Public (no login)
Who can create an address	Users who sign in or are approved by a human	Anyone who can reach the server
Owner of the mailbox	The human who approved it	Nobody
Longest lifetime	30 days, or kept	72 hours, never kept
Default allow-list	The approver's own address	`@` (any authenticated sender)
Cleanup	Mail deleted 7 days after expiry	Mail and record purged on expiry

Public addresses are limited so the domain cannot be abused:

10 new addresses per IP per hour;
500 live public addresses at once, server-wide;
72 hours at most per address.

Turning off sharing also turns off public.

What you can and cannot see

As domain owner you cannot read agent mail. A mailbox belongs to the person who approved it, or to nobody for public ones.

For public mailboxes you see only how many are live. You do see mail sent to postmaster, abuse, hostmaster, and dmarc.

Change the limits

If you run your own server, set these environment variables:

Variable	Default	Purpose
`INBOX_MAILBOX_PUBLIC_MAX_TTL`	`72h`	Longest life of a no-login mailbox
`INBOX_MAILBOX_PUBLIC_PER_HOUR`	`10`	No-login mailboxes per IP per hour
`INBOX_MAILBOX_PUBLIC_MAX_LIVE`	`500`	No-login mailboxes live at once
`INBOX_MAILBOX_DEFAULT_TTL`	`24h`	Lifetime when the agent asks for none
`INBOX_MAILBOX_MAX_TTL`	`720h`	Longest lifetime for a human-owned mailbox
`INBOX_MAILBOX_RETENTION`	`168h`	How long mail is kept after expiry
`INBOX_MAILBOX_MAX_PER_USER`	`25`	Live mailboxes per user
`INBOX_MAILBOX_MAX_MESSAGES`	`500`	Messages per mailbox

Run your own server

Run the server with your domain shared, then point the CLI at it:

AGENT_INBOX_SERVER=https://inbox.example.com agent-inbox new

The CLI asks the server which domains it offers, so it does not hard-code any. See Self-host Agent Inbox for the container and DNS setup.