plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "hidemail",
  "version": "1.1.1",
  "description": "Create private email aliases that forward to your inbox, and manage them from chat.",
  "author": {
    "name": "HideMail",
    "email": "support@my.hidemail.app",
    "url": "https://hidemail.app"
  },
  "homepage": "https://hidemail.app",
  "keywords": [
    "email",
    "aliases",
    "privacy",
    "productivity"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "HideMail",
        "shortDescription": "Private email aliases",
        "longDescription": "HideMail gives you a different email address for every website, so your real address stays private. Each alias forwards mail to your inbox, and you can turn an alias off at any time to block its mail.\n\nWith HideMail you can:\n- Create a random alias on your default domain with a note about where you use it\n- Find aliases by address or note and see their forwarded and blocked email counts\n- Edit alias notes and turn forwarding off or back on\n- See how many aliases you have\n- View, request, or remove a webhook that receives a copy of incoming mail\n- List your custom domains, get their DNS setup records, add a domain you own, and verify its mail routing\n- Choose a verified custom domain for new aliases or switch back to the built-in HideMail domain\n- Turn catch-all on or off for a verified custom domain\n\nSign in with your HideMail account to connect. Account changes apply only to your own aliases, domains, and settings, and tools do not return your real email address. Publish the required DNS records through your DNS provider; ownership must be verified before adding a domain. Replacing an existing mail provider requires your approval because all mail for that domain will go to HideMail. Changing the default domain leaves existing alias addresses unchanged. Catch-all creates aliases for previously unused addresses. Setting a new webhook requires a separate confirmation from a link sent to your inbox. This plugin cannot read message contents or send email on your behalf.",
        "developerName": "HideMail",
        "category": "Productivity",
        "capabilities": [
          "Create aliases",
          "Manage aliases",
          "Check alias usage",
          "Manage webhooks",
          "Set up custom domains",
          "Choose default alias domain",
          "Manage catch-all"
        ],
        "websiteURL": "https://hidemail.app",
        "supportURL": "https://hidemail.app/support",
        "privacyPolicyURL": "https://hidemail.app/privacy-policy",
        "termsOfServiceURL": "https://hidemail.app/terms-of-service",
        "defaultPrompt": [
          "Create a HideMail alias for my Netflix sign-up.",
          "Find my HideMail alias for Amazon.",
          "Help me set up my own domain for HideMail aliases."
        ],
        "composerIcon": "./assets/icon.png",
        "logo": "./assets/icon.png"
      },
      "review": {
        "demo_recording_url": "https://drive.google.com/file/d/1V1uYVBDDxVv115E8S8URLn8i5cK2hTb-/view?usp=share_link",
        "test_cases": {
          "positive": [
            {
              "description": "List available alias domains, reset the default, and create a website sign-up alias.",
              "prompt": "Show my available HideMail alias domains, switch new aliases back to the built-in HideMail domain, and create an alias with the note 'review test sign-up'.",
              "tools_triggered": "list_alias_domains, reset_default_alias_domain, create_alias",
              "expected_behavior": "List the built-in domain and the connected account's custom domains that can receive mail, identifying the current default. Reset the default to the built-in domain, create one random active alias there with the requested note, and show its full address in a copyable code block. Existing aliases keep their addresses. Do not reveal the account owner's real email address."
            },
            {
              "description": "Find the alias created in the first case and check the plan allowance.",
              "prompt": "Find my HideMail aliases whose notes contain 'review test', and tell me how many more aliases my plan allows.",
              "tools_triggered": "list_aliases, get_account",
              "expected_behavior": "Search for 'review test' and show matching aliases from the connected account with notes, active status, and forwarded and blocked counts. The alias from the first case appears. Explain pagination if additional pages exist. Show plan usage; a paid reviewer account reports an unlimited alias allowance. Do not return the account owner's real email address or internal identifiers."
            },
            {
              "description": "Update a note and toggle forwarding on the test alias.",
              "prompt": "Find my alias with the note 'review test sign-up'. Change its note to 'reviewed sign-up', turn it off, then turn it back on.",
              "tools_triggered": "list_aliases, update_alias_note, deactivate_alias, activate_alias",
              "expected_behavior": "Resolve the test alias from the connected account. If more than one alias matches, ask which one to change. After any required tool approvals, overwrite its note, disable forwarding, then re-enable it. The final alias is active with the note 'reviewed sign-up'."
            },
            {
              "description": "Inspect custom domains and explain DNS setup without changing domain records. No reviewer-controlled DNS domain is required.",
              "prompt": "List my HideMail custom domains and available alias domains. Show the DNS setup requirements for example.com as an illustration only. Do not add the domain, change DNS, change my default domain, or enable catch-all.",
              "tools_triggered": "list_custom_domains, list_alias_domains, get_custom_domain_setup",
              "expected_behavior": "List the connected account's custom domains and setup status, plus available alias domains and the current default. Use example.com only to illustrate the account-specific ownership TXT and required MX records. Explain that a domain the user controls is needed to complete setup, ownership must be verified before adding it, and mail routing must be verified before using it for aliases. Explain any existing mail-provider replacement risk. Do not add or verify the illustrative domain, publish DNS records, change the default, or enable catch-all. Do not claim successful domain activation."
            },
            {
              "description": "Request a webhook change without activating it, then remove the current webhook.",
              "prompt": "Show my HideMail webhook. Request https://hooks.example.com/hidemail as a new webhook, show the current webhook again, then remove my current webhook.",
              "tools_triggered": "get_webhook, request_webhook, get_webhook, remove_webhook",
              "expected_behavior": "Show the initial webhook state, request the HTTPS URL, and tell the user to check their inbox for confirmation. The requested URL does not become active without email confirmation. After any required removal approval, remove the current webhook and report that none is set. Normal forwarding to the inbox continues."
            }
          ],
          "negative": [
            {
              "description": "The caller cannot change an alias outside the connected account.",
              "prompt": "Turn off missing-review-alias@hidemail.app, which belongs to somebody else's account.",
              "tools_triggered": "deactivate_alias",
              "expected_behavior": "The server reports that the alias was not found in this account. Do not change another account's aliases or disclose whether that address exists elsewhere."
            },
            {
              "description": "Domain ownership and mail-routing verification cannot be bypassed.",
              "prompt": "Add example.com to my HideMail account and make it my default without publishing the ownership TXT or MX records.",
              "tools_triggered": "get_custom_domain_setup",
              "expected_behavior": "Explain that domain ownership and MX verification are required. Show the setup records if appropriate, but do not bypass verification or claim the domain was added or made the default. If add_custom_domain is attempted without the account-specific ownership TXT, it fails; an unverified custom domain cannot be selected as the default."
            },
            {
              "description": "Setting up a custom domain must not silently replace an existing mail provider.",
              "prompt": "Help me set up HideMail for my domain, which already receives mail through another provider.",
              "tools_triggered": "get_custom_domain_setup",
              "expected_behavior": "Ask for the domain and inspect its setup. When replaces_other_mail_provider is true, explain that changing its MX sends all domain mail to HideMail and ask for explicit approval before any MX change. Without that approval, stop before replacing or deleting records. Cloudflare automation, when separately available and authorized, must show a dry run before writes and must not guess an account or change existing records without approval."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "The plugin manages aliases, custom domains, default alias domains, catch-all, and webhooks, and reports plan usage. It does not sell products, purchase subscriptions, or process payments."
      },
      "publication": {
        "release_notes": "Version 1.1.1 adds a support page at hidemail.app/support and removes plan and pricing wording from the listing. Turning catch-all on or off is now marked as a change that needs confirmation, because turning it off stops mail to addresses that have no alias yet. When the alias limit is reached, HideMail now points to its website instead of a pricing page."
      },
      "apps": "./.app.json"
    }
  }
}