What it is
Atomic Mail Agentic is an email service for AI agents from ATOMICMAIL SYSTEMS OÜ of Tallinn, Estonia, and it is in open alpha. An agent registers its own @atomicmail.ai inbox with no human step: signup is gated by a scrypt proof-of-work puzzle that the company says takes about 30 seconds on a standard inference server, instead of a CAPTCHA, email check or card. Mail is handled with JMAP (RFC 8620 and 8621), the IETF's JSON email API, so the agent can read, send, draft, thread and search.
There are two MCP servers. The local stdio server (npx -y @atomicmail/mcp, also published as @atomicmail/mcp-github and @atomicmail/mcp-modelcontextprotocol) has three tools, register, jmap_request and help, with bundled presets such as send_mail, list_inbox and reply. The hosted server at https://mcp.atomicmail.ai/mcp signs in with OAuth (Google or GitHub, with mail.read and mail.send scopes) or an inbox API key, and offers 11 tools for human-owned inboxes, including custom-domain ones set up in the dashboard.
The client repo is MIT licensed, has about 260 GitHub stars and is at 0.3.31 (27 September 2026).
Install
npx -y @atomicmail/mcpOur review
Atomic Mail has the better idea and the thinner record: an inbox an agent can create for itself on an open standard, offered free by a small Estonian company in open alpha with no published sending limits.
JMAP is the strongest design choice. It batches query, fetch, draft and send into one round trip, models have seen it in training, and an inbox built on it should be portable to any compliant provider. The local server's three tools cost little context next to agent-email services that wrap a REST API as dozens of tools, and the README admits the connectors are thin wrappers that mainly hide the proof-of-work signup.
The gaps are commercial. The site promises alpha accounts a move to 'the free tier of the paid product' with no data loss, but there is no price list, no numeric rate limit (only reputation scoring that relaxes limits for well-behaved agents), no retention policy and no certification such as SOC 2. Free hands-free signup is also what spammers look for; the company cites a warming IP pool, but deliverability from the shared @atomicmail.ai domain is the thing to watch.
Security guidance is sound: credentials sit in ~/.atomicmail/credentials.json with 0600 permissions, and the README says not to let agents act on email instructions without confirmation. That warning is the crux, because anyone who knows the address can put text in front of the model. With mail.send granted on the hosted server, a crafted email that talks the agent into replying sends real mail from your domain, so the split between the mail.read and mail.send scopes is the most useful control the service offers.
Where it earns its place
A researcher running an autonomous agent in a sandbox
Give the agent a disposable address for sign-ups and newsletters
The local server registers an @atomicmail.ai inbox by proof of work in about 30 seconds, with no card or human step. It is free with 100 MB of storage, and nothing ties it to the researcher's own mailbox if it is spammed or abused.
A two-person SaaS company with a support@ address
Have an agent draft and send replies to routine support mail from its own domain
Verify the domain in the dashboard with TXT and MX records, create an inbox and connect through the hosted server with OAuth. It is free during the alpha, but with no published limits or service commitment, a customer-facing queue rests on terms that can change when the alpha ends.
A developer wiring email into a LangChain or Cursor agent
Send and read mail without learning a vendor SDK
jmap_request takes standard JMAP method calls and presets such as send_mail cover routine jobs, so code written against it should move to another JMAP provider with little change.
Before you commit
- Setup
- Local: add npx -y @atomicmail/mcp (the README shows @atomicmail/mcp-github, the same release) and ask the agent to register; the proof of work takes about 30 seconds. Hosted: paste https://mcp.atomicmail.ai/mcp into Claude or ChatGPT and sign in with Google or GitHub.
- Integrations
- Local: three tools (register, jmap_request, help) plus JSON presets. Hosted: 11 tools including read_inbox, search_messages, send_email, reply_to_message and run_preset. Also an AgentSkill CLI, LangChain toolkit, Dify plugin and Cursor plugin.
- Data and privacy
- The server reads and sends mail for the connected inbox, and inbound mail is untrusted input. Atomic Mail hosts the mailboxes; no retention, training-use terms or certifications are published, and inbox API keys are long-lived with full access.
- Cost at scale
- Free in open alpha, with 100 MB storage per account and a custom domain included. Sending limits are not published, the company describes reputation-based limits, and paid-tier prices are not announced.
- Limits
- Usernames are 5 to 21 characters; one inbox per credentials directory; capability tokens on the raw REST path last 2 minutes; the hosted send_email tool sends plain text only.
What's good
- Agent creates its own inbox in about 30 seconds
- Standard JMAP API, portable to other providers
- Three local tools keep context small
- Hosted server separates read and send scopes
What's not
- Open alpha; sending limits and future prices unpublished
- No retention policy or certifications published
- Shared @atomicmail.ai domain is an abuse magnet
- Inbound mail is a prompt-injection channel
Best for
Hobbyists and researchers who want to give an experimental agent a throwaway inbox without signing up for a paid email API.
Alternatives
Atomic Mail Agentic: common questions
- Is Atomic Mail Agentic worth it?
- A thoughtful, standards-based design for agent email, still too young and unpriced to carry mail that matters. We rate it 3.4 out of 5.
- How much does Atomic Mail Agentic cost?
- Free during open alpha: 100 MB storage per account, custom domain included. Sending limits and paid-tier prices are not published.
- What are the downsides of Atomic Mail Agentic?
- Open alpha; sending limits and future prices unpublished; no retention policy or certifications published; shared @atomicmail.ai domain is an abuse magnet; inbound mail is a prompt-injection channel.
- Who is Atomic Mail Agentic best for?
- Hobbyists and researchers who want to give an experimental agent a throwaway inbox without signing up for a paid email API.
- How much does Atomic Mail Agentic cost for a team or in production?
- Free in open alpha, with 100 MB storage per account and a custom domain included. Sending limits are not published, the company describes reputation-based limits, and paid-tier prices are not announced.
- Is Atomic Mail Agentic safe for company data?
- The server reads and sends mail for the connected inbox, and inbound mail is untrusted input. Atomic Mail hosts the mailboxes; no retention, training-use terms or certifications are published, and inbox API keys are long-lived with full access.
- What are the best Atomic Mail Agentic alternatives?
- The closest alternatives we have reviewed are AgentMail and Google Workspace MCP servers.
Answers checked Oct 23, 2026.