Provision and govern email for every client's agents - from one place

How it works

1. 01One tenant for the agency

   You hold the account. Mailboxes, domains, and billing all live under it.

2. 02Provision per client with the management key

   Use the dashboard-issued sm_mgmt_ key to create mailboxes and provision across the fleet as you onboard each client. It's never callable by a connected agent.

   Shell

   Show example

   # Keys are issued from the dashboard, not over REST - the issuance surface is
   # deliberately not agent-callable, so a leaked key can never mint or revoke
   # another. To get one: Dashboard → API keys → pick the mailbox + a role
   # (read / read_write / management) + an optional expiry → copy the sm_live_…
   # secret (it is shown ONCE). Then set it for your agent and pass it as the
   # Bearer token on every REST + MCP call:
   export SAIRAPH_MAIL_KEY="sm_live_…"

3. 03Scope a key per agent

   Each agent gets a per-inbox key with the narrowest role it needs and an optional expiry. Revoke it the moment a client offboards.

4. 04Isolate and hand off

   Per-customer encryption and per-mailbox suppression keep clients separate; the dashboard gives each client a clean view of just their own mail.