Verified, deduplicated ingest
Postfleet verifies signed webhooks, deduplicates inbound mail, and uses idempotent ingest so provider retries do not create duplicate billing or duplicate processing.
Postfleet
Freemium
Postfleet is email infrastructure for AI agents that screens inbound messages, sanitizes content, and extracts clean mail into typed JSON before agents read it. Supports hosted and local MCP access, plus REST for non-MCP workflows.
What is Postfleet?
Postfleet is email infrastructure for AI agents. It sits between inbound email and your agent, turning raw messages into structured, screened inputs before the model reads them.
According to the product site, the pipeline verifies and deduplicates messages, authenticates sender signals, cleans and sanitizes message content, scans malware and spam, checks for prompt-injection risk, and then extracts safe mail into typed JSON with a confidence score. Messages that fail safety gates are quarantined or held back rather than passed through as trusted content.
What can Postfleet do?
Authentication verdicts
It parses SPF, DKIM, and DMARC verdicts from the email provider and surfaces them alongside each message for review.
Deterministic cleaning and sanitization
The pipeline strips HTML noise, tracking pixels, styling, quoted-reply chains, hidden text, zero-width characters, and homoglyph runs before the agent sees the message.
Virus, spam, and attachment gating
Mail is scanned for malware and spam, with spam quarantined by default and suspicious attachments handled fail-closed before delivery.
Injection scan and schema extraction
A model checks for prompt-injection risk before extraction; flagged messages are retained without extraction, while clean messages are converted into typed JSON with a confidence score.
Auditable message review
The dashboard keeps cleaned body text, verdicts, sanitization records, and raw-versus-comprehended inspection side by side for each message.
Use Cases
“Mailbox for an agent”
Use Postfleet when an AI assistant needs to read incoming mail but should only receive cleaned, screened content instead of raw HTML and attacker-controlled input.
“Schema-based extraction”
Use the structured JSON output when your workflow expects specific fields such as vendor, amount, or other schema-driven data from receipts and similar emails.
“Operational inbox review”
Use the spam quarantine and reclassification flow when an operator needs to review suspicious messages and redeliver only the messages that should reach the agent.
“Agent-managed mailbox setup”
Use the MCP tools when building with Claude, Cursor, Windsurf, Cline, or VS Code and you want the agent to provision its own mailbox and process mail without a dashboard.
“REST-driven automation”
Use the REST path when your framework is not MCP-based but still needs the same screening and extraction pipeline for inbound email.
Frequently Asked Questions
What is a comprehended message?
An inbound message goes through prompt-injection screening first, then extraction to your JSON schema with classification and a confidence score. Sanitization runs on every message, and injected-risk mail is not delivered as trusted, comprehended content.
What happens when I hit my comprehension limit?
When you reach the comprehension limit, extraction pauses for the rest of the month. Deterministic sanitization still runs on every message, so mail is still cleaned and screened even after extraction stops.
Is safety metered?
Yes. Hidden-content sanitization is deterministic and does not use an LLM, so it runs on every message and every tier without counting against the comprehension limit. You pay for comprehension, not for safety.
Do hosted and local MCP access use different pricing?
The hosted MCP endpoint and the local npx package use the same pf_ key and the same plan limits. You can choose either setup without changing your plan.
Can I cancel or change plans?
You can cancel anytime from the dashboard. Pro is also covered by a 30-day money-back guarantee.
Quick Facts
- Category
- Email infrastructure for AI agents
- Primary workflow
- Inbound email is screened, cleaned, and extracted into structured data before agent use
- Access methods
- Hosted MCP, local npx MCP, and REST
- Pricing
- Free, Pro, and Scale plans are listed on the pricing page
- Supported mail handling
- Quarantine and redelivery are mentioned for spam workflows
- Website
- postfleet.ai
Postfleet Traffic Analysis
Traffic data is for reference only.
- Domain Rating
- 13
Postfleet Alternatives
AI Toolkit
tiptap.dev
AI Toolkit helps developers build document-aware AI agents that edit rich-text content in place while keeping changes reviewable. It supports server-side workflows, real-time collaboration, and backend processing without requiring a Tiptap Editor session.
Papermark
www.papermark.com
Papermark for agents lets AI agents use MCP and REST to create data rooms, upload documents, mint secure links, and read page-by-page analytics for sharing, diligence, and reporting workflows.
Kastra
kastra.ai
Kastra is authorization infrastructure for AI systems that checks prompts, tool calls, shell commands, API requests, and browser actions before execution. Enforce policy, maintain signed audit trails, and govern local and enterprise AI workflows.
Heym
heym.run
Heym is a source-available, self-hosted AI workflow automation platform for building and running agentic workflows with a visual editor. It helps automation, platform, and AI teams orchestrate agents, RAG, approvals, and execution tracing on infrastructure they control.
Browser Use
browser-use.com
Browser Use automates web tasks for AI agents with stealth browsing, hosted execution, and scalable browser workflows.
OpenHands
openhands.dev
OpenHands is an open-source, model-agnostic platform for cloud coding agents that automates engineering workflows across local, cloud, and enterprise deployments via web, CLI, terminal UI, and SDK interfaces.