
AgentLair
Gives AI agents a persistent email address at agentlair.dev, encrypted vault storage, and tamper-evident audit logging with Ed25519 signatures. The MCP server exposes nine tools for agent registration, sending and receiving mail, storing credentials client-side encrypted with AES-GCM, emitting audit events, and querying behavioral trust scores. Built on Cloudflare Workers with KV storage. The audit trail is independently verifiable and designed for EU AI Act compliance requirements. Free tier includes 10 emails and 100 API requests per day. Useful when your agent needs to communicate asynchronously over email, persist secrets without OAuth flows, or maintain a cryptographically signed activity log.
- GitHub stars
- 5
- tools
- 15
- auth
- Secret needed
- transport
- STDIO, HTTP
- env var
- 1
- last updated
- Nov 4, 2026
Install
From registry metadata$ npx add-mcp https://agentlair-mcp-server.amdal-dev.workers.dev/mcp --name agentlair --header 'Authorization: Bearer ${API_TOKEN}'Run in your terminal. add-mcp asks which agents to add it to, then asks for each value it needs. Add -g to install it for every project.
Review the command, arguments and environment values before installing. MCP servers run with your local permissions.
Other ways
Claude Code
$ claude mcp add --transport http agentlair https://agentlair-mcp-server.amdal-dev.workers.dev/mcp --header 'Authorization: YOUR_AUTHORIZATION'Run in your terminal. Add --scope user to make it available in every project.
Tools
Verified live · 15 toolsVerified live against the running server on Nov 6, 2026.
send_emailSend an email from your AgentLair address (@agentlair.dev) to any recipient. No SMTP or DNS setup needed.6 params
Send an email from your AgentLair address (@agentlair.dev) to any recipient. No SMTP or DNS setup needed.
ccarrayfrom*stringhtmlstringsubject*stringtext*stringto*arraycheck_inboxCheck the inbox for an @agentlair.dev email address. Returns recent messages with sender, subject, and received time.2 params
Check the inbox for an @agentlair.dev email address. Returns recent messages with sender, subject, and received time.
address*stringlimitnumberread_messageRead the full content of a specific email message, including the body text.2 params
Read the full content of a specific email message, including the body text.
address*stringmessage_id*stringlist_addressesList all @agentlair.dev email addresses associated with your API key.
List all @agentlair.dev email addresses associated with your API key.
No parameters. Call it with no arguments.
claim_addressClaim a new @agentlair.dev email address for your agent. Free tier supports multiple addresses.1 params
Claim a new @agentlair.dev email address for your agent. Free tier supports multiple addresses.
address*stringpreflight_trust_checkCheck trust readiness before engaging with an agent. Returns a ReadinessCard: trust score, behavioral maturity level, whether it's safe to engage, and any caveats. Call this before delegating tasks, accepting agent output, or authorizing payments involving an unknown agent. Fr...1 params
Check trust readiness before engaging with an agent. Returns a ReadinessCard: trust score, behavioral maturity level, whether it's safe to engage, and any caveats. Call this before delegating tasks, accepting agent output, or authorizing payments involving an unknown agent. Fr...
agent_id*stringvault_putStore a value in the AgentLair Vault. Use this to persist API keys, secrets, or any data your agent needs across sessions. Best practice: encrypt sensitive data client-side before storing (the server stores whatever you send).3 params
Store a value in the AgentLair Vault. Use this to persist API keys, secrets, or any data your agent needs across sessions. Best practice: encrypt sensitive data client-side before storing (the server stores whatever you send).
key*stringmetadataobjectvalue*stringvault_getRetrieve a stored value from the AgentLair Vault by key name.1 params
Retrieve a stored value from the AgentLair Vault by key name.
key*stringvault_listList all keys stored in your AgentLair Vault (metadata only, values not returned).
List all keys stored in your AgentLair Vault (metadata only, values not returned).
No parameters. Call it with no arguments.
vault_deleteDelete a key and all its versions from the AgentLair Vault.1 params
Delete a key and all its versions from the AgentLair Vault.
key*stringcalendar_create_eventCreate a calendar event on your AgentLair calendar. Events are published via iCal feed for human subscription (Google Calendar, Apple Calendar, Outlook).6 params
Create a calendar event on your AgentLair calendar. Events are published via iCal feed for human subscription (Google Calendar, Apple Calendar, Outlook).
attendeesarraydescriptionstringend*stringlocationstringstart*stringsummary*stringcalendar_list_eventsList events on your AgentLair calendar. Optionally filter by date range.2 params
List events on your AgentLair calendar. Optionally filter by date range.
fromstringtostringcalendar_delete_eventDelete an event from your AgentLair calendar by event ID. Use calendar_list_events to find event IDs.1 params
Delete an event from your AgentLair calendar by event ID. Use calendar_list_events to find event IDs.
id*stringcalendar_get_feedGet the public iCal subscription URL for your AgentLair calendar. Share this URL with calendar apps (Google Calendar, Apple Calendar, Outlook) so humans can subscribe and see agent-created events.
Get the public iCal subscription URL for your AgentLair calendar. Share this URL with calendar apps (Google Calendar, Apple Calendar, Outlook) so humans can subscribe and see agent-created events.
No parameters. Call it with no arguments.
delegate_taskDelegate a task to another AgentLair agent. The task is delivered to the agent's inbox and picked up asynchronously. Use this when you need another agent to do something — send an email, run a deployment, do research, etc.5 params
Delegate a task to another AgentLair agent. The task is delivered to the agent's inbox and picked up asynchronously. Use this when you need another agent to do something — send an email, run a deployment, do research, etc.
constraintsstringcontextstringprioritystringlow · normal · high · urgenttask*stringto*stringSponsors
Configuration
AGENTLAIR_API_KEY*secretAgentLair API key. Get one free at https://agentlair.dev
Readme
AgentLair
Give your AI agent an email address, encrypted vault, and a behavioral trust score — one API, no OAuth required.
| Capability | Description |
|---|---|
Send and receive at @agentlair.dev. No OAuth, no human approval required. | |
| Vault | Encrypted credential storage. Client-side AES-GCM — the server stores ciphertext only. |
| Audit Trail | Every action logged with Ed25519 signatures. Tamper-evident, independently verifiable. Security findings get a permanent public URL — see a verified finding → |
| Trust Scoring | Behavioral score (0–100) derived from observed actions — consistency, restraint, transparency. |
| MCP Server | All capabilities available as MCP tools in Claude Code, Cursor, or any MCP client. |
| Pods | Namespace isolation for multi-agent or multi-tenant deployments. |
Details
- Repository
- github.com/piiiico/agentlair
- Website
- agentlair.dev
- Categories
- Communication & Messaging, Productivity & Office
- Package
@agentlair/mcp- Transport
- STDIO, HTTP
- Auth
- Required
- Registry
- MCP registry, active
- Tools verified
- Nov 6, 2026