Connecting AI agents to MDaemon mailboxes: read... | MDaemon Technologies Community Forum

Connecting AI agents to MDaemon mailboxes: read-write for some, server-enforced read-only for others?


  • Hi all,

    We run MDaemon on-premises and want to connect AI agents (Perplexity Computer and similar) to a few role mailboxes, with two tiers of access:

    • Read-write (read, search, file/move, draft, send), for example an accounts-payable mailbox used for invoice processing.
    • Read-only (read and search only), for other mailboxes.

    We want the access to be as narrow as possible and enforced by the server, not just by the agent's own settings. For anyone who has done something like this:

    1. What setup has worked for you, especially when the agent runs in the cloud without a static IP? A dedicated agent account with shared-folder/ACL access, an XML API Service Account, IMAP with App Passwords, or something else?
    2. Have you made a mailbox truly read-only for a second account (Lookup + Read only)? Did that block IMAP MOVE/COPY, flag changes, and sending?
    3. Which auth/API do you use: the XML API, the Webmail API, or IMAP/SMTP with App Passwords? Has anyone gotten OAuth working for IMAP?
    4. How do you log and audit what the agent does, and how do you cut off its access quickly? Do you restrict its logins by IP, or put a reverse proxy in front?
    5. How do you guard against prompt injection or phishing, where an agent reads a malicious message and then sends mail that looks real? Outbound recipient limits, rate limits, approval holds?
    6. If you use MDaemon Hosted or Private Cloud, did any of this work differently?

    I'd also like to hear more generally how other MDaemon admins are connecting AI agents or LLM tools, including any MCP servers or IMAP-based agents. I saw the earlier "Email Account Integration with AI" thread and wanted to pick up the conversation from there.

    Thanks.



Please login to reply to this topic!