Verified, deduplicated ingest
Postfleet verifies signed webhooks, deduplicates inbound mail, and uses idempotent ingest so provider retries do not create duplicate billing or duplicate processing.
Postfleet
Freemium
Postfleet è un’infrastruttura email per agenti AI che filtra i messaggi in arrivo, ne sanifica il contenuto ed estrae email pulite in JSON tipizzato prima che l’agente le legga. Supporta MCP in hosting e locale, oltre a REST per flussi senza MCP.
Cos'è Postfleet?
Postfleet is email infrastructure for AI agents. It sits between inbound email and your agent, turning raw messages into structured, screened inputs before the model reads them.
According to the product site, the pipeline verifies and deduplicates messages, authenticates sender signals, cleans and sanitizes message content, scans malware and spam, checks for prompt-injection risk, and then extracts safe mail into typed JSON with a confidence score. Messages that fail safety gates are quarantined or held back rather than passed through as trusted content.
Cosa può fare Postfleet?
Authentication verdicts
It parses SPF, DKIM, and DMARC verdicts from the email provider and surfaces them alongside each message for review.
Deterministic cleaning and sanitization
The pipeline strips HTML noise, tracking pixels, styling, quoted-reply chains, hidden text, zero-width characters, and homoglyph runs before the agent sees the message.
Virus, spam, and attachment gating
Mail is scanned for malware and spam, with spam quarantined by default and suspicious attachments handled fail-closed before delivery.
Injection scan and schema extraction
A model checks for prompt-injection risk before extraction; flagged messages are retained without extraction, while clean messages are converted into typed JSON with a confidence score.
Auditable message review
The dashboard keeps cleaned body text, verdicts, sanitization records, and raw-versus-comprehended inspection side by side for each message.
Casi d'uso
“Mailbox for an agent”
Use Postfleet when an AI assistant needs to read incoming mail but should only receive cleaned, screened content instead of raw HTML and attacker-controlled input.
“Schema-based extraction”
Use the structured JSON output when your workflow expects specific fields such as vendor, amount, or other schema-driven data from receipts and similar emails.
“Operational inbox review”
Use the spam quarantine and reclassification flow when an operator needs to review suspicious messages and redeliver only the messages that should reach the agent.
“Agent-managed mailbox setup”
Use the MCP tools when building with Claude, Cursor, Windsurf, Cline, or VS Code and you want the agent to provision its own mailbox and process mail without a dashboard.
“REST-driven automation”
Use the REST path when your framework is not MCP-based but still needs the same screening and extraction pipeline for inbound email.
Domande frequenti
What is a comprehended message?
An inbound message goes through prompt-injection screening first, then extraction to your JSON schema with classification and a confidence score. Sanitization runs on every message, and injected-risk mail is not delivered as trusted, comprehended content.
What happens when I hit my comprehension limit?
When you reach the comprehension limit, extraction pauses for the rest of the month. Deterministic sanitization still runs on every message, so mail is still cleaned and screened even after extraction stops.
Is safety metered?
Yes. Hidden-content sanitization is deterministic and does not use an LLM, so it runs on every message and every tier without counting against the comprehension limit. You pay for comprehension, not for safety.
Do hosted and local MCP access use different pricing?
The hosted MCP endpoint and the local npx package use the same pf_ key and the same plan limits. You can choose either setup without changing your plan.
Can I cancel or change plans?
You can cancel anytime from the dashboard. Pro is also covered by a 30-day money-back guarantee.
Informazioni rapide
- Category
- Email infrastructure for AI agents
- Primary workflow
- Inbound email is screened, cleaned, and extracted into structured data before agent use
- Access methods
- Hosted MCP, local npx MCP, and REST
- Pricing
- Free, Pro, and Scale plans are listed on the pricing page
- Supported mail handling
- Quarantine and redelivery are mentioned for spam workflows
- Website
- postfleet.ai
Analisi del traffico di Postfleet
I dati sul traffico sono solo a scopo di riferimento.
- Domain Rating
- 13
Alternative a Postfleet
BetterClaw
www.betterclaw.io
BetterClaw è uno strumento no-code per creare, distribuire e gestire agenti AI tramite un’interfaccia visiva, con supporto BYOK e controlli di sicurezza integrati. È pensato per i team che vogliono eseguire flussi di lavoro pianificati tra strumenti collegati senza dover mantenere un’infrastruttura.
Agentinel
agentinel.habitwala.in
Agentinel è un livello di sicurezza locale per agenti di coding autonomi: verifica le richieste di installazione prima dell’esecuzione e blocca i pacchetti npm sospetti usando un database OSV offline ed euristiche, senza chiamate al cloud.
Ollama
ollama.com
Esegui modelli open in locale o nel cloud per programmazione, automazione, analisi e flussi di lavoro con agenti.
Kilo Code
kilo.ai
Kilo Code è un plugin di programmazione AI multi-agente per JetBrains IDE. Aiuta gli sviluppatori a eseguire e gestire agenti di programmazione AI, esaminare le modifiche in worktree isolati e scegliere da un ampio catalogo di modelli senza uscire dall’IDE.
AI Toolkit
tiptap.dev
AI Toolkit aiuta gli sviluppatori a creare agenti AI in grado di comprendere i documenti e modificare i contenuti rich text direttamente sul posto, mantenendo le modifiche verificabili. Supporta workflow lato server, collaborazione in tempo reale ed elaborazione backend senza richiedere una sessione di Tiptap Editor.
Superset
superset.sh
Superset è uno strumento desktop per eseguire in parallelo più agenti di coding AI sul proprio computer. Permette agli sviluppatori di separare il lavoro in Git worktree isolati, rivedere le modifiche e far avanzare le attività senza aspettare un agente alla volta.