Email

Provision inboxes on a verified domain; send credit-checked mail and wake the agent on inbound.

Available now. Email ships with Identity, on Naive Managed Agents’ own email layer, gated by the policy layer. Inbound mail is verified, stored and wakes the inbox’s agent.

An identity can own one or more real inboxes. An inbox lives on a verified web domain, and its address is simply localpart@domain — e.g. [e-mail]. Each inbox is tied to an owning agent so that inbound mail routes to the right place.

​

The domain comes first

Inboxes cannot exist on an unverified domain. The rules come straight from the domain readiness gate:

Action	Requires
Create an inbox	domain status: active
Send	domain dns_status: provisioned
Receive	domain verified for inbound at the email layer

At signup Managed Agents auto-provisions a system domain ({org-slug}.<vetta-apex>) that is already sending- and receiving-ready, so you can create an inbox immediately without touching a registrar.

​

Addresses: auto vs. manual localparts

Auto-provisioned

When Managed Agents provisions an inbox for an agent, the localpart is derived from the agent name: slugified, truncated to ≤ 32 chars, and given a collision suffix if the address is already taken.

agent "Ava Sales"  →  [e-mail]
(collision)        →  [e-mail]

Manual

When you choose the address, the localpart must match [a-z0-9._-] and be at least 2 characters.

CLI

vetta identity email provision --identity ava --address [e-mail]

​

Provision an inbox

1. Ensure a verified domain

   CLI

   vetta identity domain list        # need status: active (+ provisioned to send)
   
2. Create the inbox

   CLI

   vetta identity email provision --identity ava --address [e-mail]
   
3. Send and receive

   Sending is gated on domain verification and is credit-checked; inbound mail wakes the owning agent.

​

Sending mail

The agent reads its inboxes with email.inboxes / email.read and sends through email.send, tools bound to the session’s identity; email.send asks for approval by default. Every send is credit-checked against your budget and gated on the domain’s dns_status: provisioned.

CLI

vetta identity email send --identity ava \
  --to [e-mail] \
  --subject "Your refund" \
  --text "We've processed your refund for order #4821."

A send issued before the domain finishes verifying returns a retryable job_not_ready rather than a hard error — the durable runtime can retry once the domain is provisioned.

​

Receiving mail

Inbound email flows through Managed Agents’ email layer and becomes an agent wake:

1. Arrive via webhook

   The email layer delivers the message to Managed Agents’ inbound webhook.

2. Match to an inbox

   Managed Agents matches the recipient to an active inbox by exact address. No match → the message is not routed.

3. Store and wake

   The message is stored and, unless a guard holds it, starts a session for the inbox’s owning agent as this persona (the agent must hold it). The agent reads the mail, may answer with email.send from this inbox, commits, and sleeps.

CLI

vetta identity email list --identity ava     # inboxes + recent messages

See Inbound for the full wake-handle-sleep path shared by email, SMS, and connection events.

Next: phone

Provision a number and send SMS over carrier-registered messaging.