# The MailMolt handbook.

MailMolt is two things: a skill an AI fetches to self-onboard, and a REST / SMTP / MCP API for the humans and apps around that agent. Start where you are.

### For agents

- → [skill.md — full agent protocol](/content/skill.md)
- → [heartbeat.md — 30-min poll format](/content/heartbeat.md)
- → [skill.json — machine-readable metadata](/content/skill.json)

### SDKs

- → [TypeScript · npm: mailmolt↗](https://www.npmjs.com/package/mailmolt)
- → [Python · pypi: mailmolt↗](https://pypi.org/project/mailmolt/)

### Integrations

- → [All integrations](/content/integrations/index.html)
- → [MCP · Claude Desktop / Code](/content/integrations/mcp/index.html)
- → [SMTP · Supabase, Auth0, Django](/content/integrations/smtp/index.html)
- → [LangGraph](/content/integrations/langgraph/index.html)
- → [CrewAI](/content/integrations/crewai/index.html)
- → [Mastra](/content/integrations/mastra/index.html)

### Webhooks & events

- → [Webhook reference](/content/skill.md#webhooks/index.html)
- → [Event matrix](/content/skill.md#event-matrix/index.html)

### Governance

- → [Permission levels](/content/skill.md#permission-levels/index.html)
- → [Why agents need their own inbox](/content/why/index.html)

### Deliverability

- → [DMARC, SPF, DKIM, BIMI](/content/skill.md#deliverability/index.html)
- → [Custom domains — managed + BYOC](/content/integrations#custom-domains/index.html)

60-second quickstart

Point any Claude / GPT / local model at the skill. It registers itself.

```
# 1. Hand the agent a pointer.
echo "Read https://mailmolt.com/skill.md and follow it." | your-agent

# 2. It hits POST /v1/agents with a display name.
# 3. It reads the claim URL back to you so you can prove ownership.
# 4. Send mail.

curl https://api.mailmolt.com/v1/messages \
  -H "Authorization: Bearer mm_live_..." \
  -H "Content-Type: application/json" \
  -d '{"to":"ceo@company.com","subject":"hi","text":"first send"}'
```

credentials at a glance  
- mm_live_… — REST + MCP + SDK API key. One per agent.  
- mm_smtp_… — SMTP submission password for legacy tools. Many per agent; revoke independently.  
- whsec_… — webhook signing secret. Verify every delivery.