Blog
Page 8 of 10.
27 July 2026 · 4 min read
Sending and receiving email from a Python agent
A working Python agent with its own inbox: install the SDK, send a first message, read threads, wait for replies, handle refusals, and receive inbound mail without a polling loop.
27 July 2026 · 5 min read
Attachments: what an agent should do with the file in the email
Invoices, contracts, and CVs arrive as attachments. How agents receive and send files over email, what to extract before the model reads, and the safety rules that keep a file from becoming an exploit.
27 July 2026 · 5 min read
What email actually costs when your agents send it
Per-message pricing, per-inbox pricing, storage, and the hidden costs nobody budgets for: tokens spent parsing mail, engineering time on threading, and the price of a damaged sending domain.
27 July 2026 · 4 min read
Build an email agent on the Cloudflare Agents SDK
A working email agent as a Durable Object: connect the MCP server, react to inbound mail through a webhook, hold a thread across days, and keep the whole thing idempotent.
27 July 2026 · 5 min read
Login codes, 2FA, and verification email an agent has to handle
Agents that sign up for services hit email verification and two-factor prompts. How to receive codes in an agent inbox, clear TOTP without a human relaying digits, and not build a phishing target.
27 July 2026 · 5 min read
An agent that signs itself up for its own inbox
Autonomous agents need addresses before a human is available to create one. How self-signup works, what a claim URL is for, and the guardrails that make agent-provisioned inboxes safe to allow.
27 July 2026 · 5 min read
Giving an email agent memory of the people it talks to
The difference between an agent that feels competent and one that feels robotic is memory. How to use contacts, recorded facts, and notes so the second conversation starts where the first ended.
26 July 2026 · 5 min read
Webhooks or polling: how your agent should learn that mail arrived
A practical comparison of webhook-driven and polling agents, with signature verification, retry and idempotency handling, and the hybrid most production deployments end up running.
26 July 2026 · 5 min read
Long-running email conversations: waiting, timeouts, and resuming
Email conversations take days; agent runs take seconds. The patterns for holding a thread open, choosing timeouts, resuming with context, and knowing when to stop following up.
26 July 2026 · 8 min read
Prompt injection by email, and how to build an agent that survives it
An email inbox is an untrusted input channel anyone can write to. The injection patterns agents actually get hit with, and the architectural defences that work better than telling the model to be careful.
26 July 2026 · 5 min read
Running several email agents in one workspace
How to structure a workspace once you have more than one agent: address naming, what to share and what to isolate, handoffs between agents, and the failure modes that only appear at three or four.
26 July 2026 · 6 min read
How to tell whether your email agent is any good
Deflection rate flatters everyone. The metrics that expose a bad email agent, how to build a golden thread suite, and how to run regressions before a prompt change reaches customers.