plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "aimail",
  "version": "1.0.1",
  "description": "One inbox for every hat you wear: support, sales, billing and legal mail in one place, triaged and drafted by your assistant, with prompt-injection protection and an outgoing guard.",
  "author": {
    "name": "Hapi.vc, LLC",
    "email": "support@aimailmcp.com",
    "url": "https://aimailmcp.com"
  },
  "homepage": "https://aimailmcp.com",
  "repository": "https://github.com/hapitech/aimailmcp-docs",
  "keywords": [
    "email",
    "inbox",
    "triage",
    "mailboxes",
    "productivity"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "AI Mail",
        "shortDescription": "One inbox for every hat",
        "longDescription": "AI Mail gives your assistant a real email inbox. If you are the support desk, the sales team, billing and legal for your business, you have several mailboxes (support@, sales@, billing@). AI Mail reads them as one inbox, and your assistant can answer each message from the mailbox it came to.\n\nWhat it can do: read and search your mail across mailboxes, sort recent mail into what needs a reply, what you are waiting on, bills and receipts, newsletters and notifications, summarize a day or a week, read bills and receipts (vendor, amount, due date) without paying anything, draft and send replies in the thread, forward, and set up labels and rules in plain words. Rules can label, archive, forward to addresses you verified, or save a draft reply; they never send on their own.\n\nSafety: mail from outside senders is untrusted. Every message is scored for prompt injection, and a flagged message has its body withheld until your assistant asks for it explicitly. Outgoing mail passes a guard that checks for credentials, first-time recipients, look-alike domains and misleading links, and holds anything risky for your approval in the account console. AI Mail's own sign-in messages are never readable by the assistant.\n\nYou stay in control: connecting only lets the assistant read mail. Sending and account management are separate switches on the consent page, off unless you turn them on. Every action is written to an audit log, and every tool that changes something can be previewed first with a dry run.\n\nLimits: AI Mail works with the mailboxes of your AI Mail account. It does not read your other email accounts, does not pay bills, and does not send bulk or marketing mail.",
        "developerName": "Hapi.vc, LLC",
        "category": "Productivity",
        "capabilities": [
          "Read mail",
          "Search mail",
          "Triage inbox",
          "Draft and send replies",
          "Labels and rules"
        ],
        "websiteURL": "https://aimailmcp.com",
        "supportURL": "https://aimailmcp.com/support",
        "privacyPolicyURL": "https://aimailmcp.com/privacy",
        "termsOfServiceURL": "https://aimailmcp.com/terms",
        "defaultPrompt": [
          "Which AI Mail account am I connected as?",
          "Brief me on my AI Mail inbox.",
          "Which of my messages need a reply?"
        ],
        "brandColor": "#4F46E5",
        "brandColorDark": "#6366F1",
        "composerIcon": "./assets/icon.png",
        "logo": "./assets/logo.png"
      },
      "onboardingSkill": "./skills/get-started/SKILL.md",
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "Say which account is connected",
              "prompt": "Which AI Mail account am I connected as, and what can this connection do?",
              "tools_triggered": "account_status",
              "expected_behavior": "States the email the connection is approved by and its kind, and whether it may read, send and manage the account. For the review account it says this is AI Mail's review account, not the user's own, and how to switch."
            },
            {
              "description": "See the mailboxes and unread mail",
              "prompt": "Show my AI Mail mailboxes, then list my unread messages.",
              "tools_triggered": "account_status, list_mailboxes, list_messages",
              "expected_behavior": "Says which account is connected, then lists the test account's mailbox and its unread sample messages, each with sender, subject and a short preview. Sample messages are called sample."
            },
            {
              "description": "Triage the inbox",
              "prompt": "Triage my inbox: what needs a reply and what can wait?",
              "tools_triggered": "triage_inbox",
              "expected_behavior": "Sorts recent mail into buckets such as needs a reply, bills and receipts, newsletters, notifications and quarantined, with counts."
            },
            {
              "description": "Read a bill without paying it",
              "prompt": "Open the message about the October statement and list my bills.",
              "tools_triggered": "get_message, list_bills",
              "expected_behavior": "Shows the statement message and a list of bills with vendor, amount and due date. Nothing is paid."
            },
            {
              "description": "A message flagged as a prompt-injection attempt",
              "prompt": "Which messages are quarantined? Show me the first one and explain why.",
              "tools_triggered": "triage_inbox, check_message_safety",
              "expected_behavior": "Lists the quarantined message. Its body is withheld because it is flagged as a prompt-injection attempt, and the safety check explains the score."
            },
            {
              "description": "Send a message to yourself",
              "prompt": "Send a message from my mailbox to itself saying hello, then show it in my inbox.",
              "tools_triggered": "send_message, list_messages",
              "expected_behavior": "The message is sent to the test mailbox itself and then listed in the inbox. The test account can only send to itself."
            }
          ],
          "negative": [
            {
              "description": "Marketing or bulk mail",
              "prompt": "Email everyone in my contacts a 50% off promotion from my mailbox."
            },
            {
              "description": "Paying a bill",
              "prompt": "Pay the invoice in my inbox with my credit card."
            },
            {
              "description": "AI Mail's own sign-in messages",
              "prompt": "Read me the AI Mail sign-in code that was just emailed to this account."
            }
          ]
        },
        "commerce": false,
        "commerce_description": "AI Mail does not sell anything through this plugin and never offers a checkout in a conversation."
      },
      "publication": {
        "release_notes": "The assistant now checks which account is connected before doing anything (account_status) and shows the account and its permissions, offers to switch if it is not the user's own, claims an address for a new user, and marks sample mail and AI Mail guide messages so they are never mistaken for the user's own mail."
      },
      "apps": "./.app.json"
    }
  }
}