Email for the OpenAI Agents SDK: Native MCP Mailbox

# Keys are issued from the dashboard, not over REST - the issuance surface is
# deliberately not agent-callable, so a leaked key can never mint or revoke
# another. To get one: Dashboard → API keys → pick the mailbox + a role
# (read / read_write / management) + an optional expiry → copy the sm_live_…
# secret (it is shown ONCE). Then set it for your agent and pass it as the
# Bearer token on every REST + MCP call:
export SAIRAPH_MAIL_KEY="sm_live_…"

import asyncio
import os

from agents import Agent, Runner
from agents.mcp import MCPServerStreamableHttp

async def main() -> None:
    async with MCPServerStreamableHttp(
        name="sairaph-mail",
        params={
            "url": "https://mail.sairaph.com/mcp/v1/mcp",
            "headers": {
                "Authorization": f"Bearer {os.environ['SAIRAPH_MAIL_KEY']}",
            },
        },
        cache_tools_list=True,
    ) as mailbox:
        agent = Agent(
            name="Inbox assistant",
            instructions=(
                "You own an email address. Use the mailbox tools to send mail "
                "and to read inbound replies and one-time codes."
            ),
            mcp_servers=[mailbox],
        )

result = await Runner.run(
            agent, "Email agent@acme.dev a verification code, then read back the reply."
        )
        print(result.final_output)

asyncio.run(main())

curl https://mail.sairaph.com/api/v1/mailboxes/$MAILBOX_ID/outbound \
  -H "Authorization: Bearer $SAIRAPH_MAIL_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "to": ["agent@acme.dev"],
    "subject": "Your verification code",
    "body_text": "Reply with APPROVE to continue."
  }'

# Read inbound from cache, or live=true for an on-demand fetch.
curl "https://mail.sairaph.com/api/v1/mailboxes/$MAILBOX_ID/messages?direction=inbound&live=true" \
  -H "Authorization: Bearer $SAIRAPH_MAIL_KEY"