Verified, deduplicated ingest
Postfleet verifies signed webhooks, deduplicates inbound mail, and uses idempotent ingest so provider retries do not create duplicate billing or duplicate processing.
Postfleet
Freemium
Postfleet é uma infraestrutura de e-mail para agentes de IA que filtra mensagens recebidas, higieniza o conteúdo e extrai e-mails limpos em JSON tipado antes que o agente os leia. Oferece acesso MCP hospedado e local, além de REST para fluxos sem MCP.
O que é Postfleet?
Postfleet is email infrastructure for AI agents. It sits between inbound email and your agent, turning raw messages into structured, screened inputs before the model reads them.
According to the product site, the pipeline verifies and deduplicates messages, authenticates sender signals, cleans and sanitizes message content, scans malware and spam, checks for prompt-injection risk, and then extracts safe mail into typed JSON with a confidence score. Messages that fail safety gates are quarantined or held back rather than passed through as trusted content.
O que Postfleet pode fazer?
Authentication verdicts
It parses SPF, DKIM, and DMARC verdicts from the email provider and surfaces them alongside each message for review.
Deterministic cleaning and sanitization
The pipeline strips HTML noise, tracking pixels, styling, quoted-reply chains, hidden text, zero-width characters, and homoglyph runs before the agent sees the message.
Virus, spam, and attachment gating
Mail is scanned for malware and spam, with spam quarantined by default and suspicious attachments handled fail-closed before delivery.
Injection scan and schema extraction
A model checks for prompt-injection risk before extraction; flagged messages are retained without extraction, while clean messages are converted into typed JSON with a confidence score.
Auditable message review
The dashboard keeps cleaned body text, verdicts, sanitization records, and raw-versus-comprehended inspection side by side for each message.
Casos de uso
“Mailbox for an agent”
Use Postfleet when an AI assistant needs to read incoming mail but should only receive cleaned, screened content instead of raw HTML and attacker-controlled input.
“Schema-based extraction”
Use the structured JSON output when your workflow expects specific fields such as vendor, amount, or other schema-driven data from receipts and similar emails.
“Operational inbox review”
Use the spam quarantine and reclassification flow when an operator needs to review suspicious messages and redeliver only the messages that should reach the agent.
“Agent-managed mailbox setup”
Use the MCP tools when building with Claude, Cursor, Windsurf, Cline, or VS Code and you want the agent to provision its own mailbox and process mail without a dashboard.
“REST-driven automation”
Use the REST path when your framework is not MCP-based but still needs the same screening and extraction pipeline for inbound email.
Perguntas frequentes
What is a comprehended message?
An inbound message goes through prompt-injection screening first, then extraction to your JSON schema with classification and a confidence score. Sanitization runs on every message, and injected-risk mail is not delivered as trusted, comprehended content.
What happens when I hit my comprehension limit?
When you reach the comprehension limit, extraction pauses for the rest of the month. Deterministic sanitization still runs on every message, so mail is still cleaned and screened even after extraction stops.
Is safety metered?
Yes. Hidden-content sanitization is deterministic and does not use an LLM, so it runs on every message and every tier without counting against the comprehension limit. You pay for comprehension, not for safety.
Do hosted and local MCP access use different pricing?
The hosted MCP endpoint and the local npx package use the same pf_ key and the same plan limits. You can choose either setup without changing your plan.
Can I cancel or change plans?
You can cancel anytime from the dashboard. Pro is also covered by a 30-day money-back guarantee.
Informações rápidas
- Category
- Email infrastructure for AI agents
- Primary workflow
- Inbound email is screened, cleaned, and extracted into structured data before agent use
- Access methods
- Hosted MCP, local npx MCP, and REST
- Pricing
- Free, Pro, and Scale plans are listed on the pricing page
- Supported mail handling
- Quarantine and redelivery are mentioned for spam workflows
- Website
- postfleet.ai
Análise de tráfego de Postfleet
Os dados de tráfego são apenas para referência.
- Classificação do domínio
- 13
Alternativas ao Postfleet
AI Toolkit
tiptap.dev
AI Toolkit ajuda desenvolvedores a criar agentes de IA capazes de compreender documentos e editar conteúdo rich text diretamente no local, mantendo as alterações revisáveis. Oferece suporte a fluxos de trabalho no servidor, colaboração em tempo real e processamento de backend sem exigir uma sessão do Tiptap Editor.
EvoMap
evomap.ai
EvoMap é uma infraestrutura de autoevolução de IA para compartilhar, validar e herdar capacidades de agentes entre modelos e regiões. Oferece um nível gratuito, os planos pagos Premium e Ultra e acesso por conta a um espaço de trabalho de evolução de IA.
OpenFang
openfang.sh
OpenFang é um sistema operacional de agentes de código aberto, desenvolvido em Rust, para executar, configurar e supervisionar agentes autônomos. Oferece implantação local ou autogerenciada, modelos integrados, manifestos personalizados, canais de mensagens e controle por navegador ou API.
Sim
sim.ai
Sim é um workspace de IA de código aberto para criar, implantar e gerenciar agentes de IA, com fluxos visuais, Chat, acesso à API, integrações e ferramentas de colaboração.
Sparkco
sparkco.ai
Sparkco: infraestrutura open source para agentes de IA, ferramentas focadas no terminal, fluxos para mercados de previsão e planos de agentes de voz por uso com crédito inicial, SMS, transcrições e integrações.
Diffsmith
apps.mergeable.io
Diffsmith é um app nativo para macOS que permite revisar alterações locais de git feitas por agentes de programação com IA, como Claude Code, Cursor, Codex e Copilot. Adicione comentários em linha e envie-os ao agente como prompt ou por meio de um servidor MCP local.