MoltedEmail

Molted Email helps you run AI agents that send and receive email without letting untrusted messages take over the agent. When an email contains malicious instructions, Molted screens for prompt-injection style manipulation and prevents the agent from reading or acting on the harmful content.

It also adds outbound email policies so your agent doesn’t misfire. Molted can block double-sends (the same email to the same person within minutes), enforce cooldowns to avoid accidental spam, and suppress sending to dead email addresses that waste quota. You can control when an agent asks for approval versus when it can proceed, keeping the “autonomy” you want while preventing the “autonomy” you don’t.

Setup is designed to be agent-friendly: once authenticated, an agent can create and manage its inbox, templates, and onboarding steps with minimal human involvement. Molted supports connecting through tools like MCP, a CLI, or a REST API, and it includes an approval/deny flow where the agent can be required to hand decisions to you.

Molted is priced by mailbox count, with a Free tier for people (form inboxes, alerts, and a waitlist) and paid plans starting at $19/mo for Solo and $79/mo for Team. Solo and Team start with a 3-day trial (you can also skip it). If you exceed your monthly allowance, additional sends and inbound have per-volume overage pricing listed on the pricing page.

What does Molted Email do for AI agents?

It screens inbound emails for prompt-injection style manipulation so the agent doesn’t follow malicious instructions. It also enforces rules around what your agent can send and when it must ask for approval.

How does Molted protect my agent from hijacked instructions?

Hijack attempts are quarantined and the agent can’t unlock itself from the quarantine. You can release quarantined emails only through human decision, preventing the agent from taking over the conversation.

Can I prevent my agent from spamming the same recipient?

Yes. Molted can block repeated sends to the same person within minutes and apply cooldowns so rapid repeats don’t go out.

Does Molted help stop wasted sends to invalid addresses?

Yes. It suppresses emails sent to dead email addresses, reducing quota waste from daily bounces.

How does email approval work?

You can require approval for specific actions or let the agent proceed when policy allows. The agent cannot approve itself—when approval is needed, it hands the thread decision to you.

What are Molted’s pricing options?

Molted offers a Free tier for people and paid plans starting at $19/mo for Solo and $79/mo for Team. Plans are priced by the number of mailboxes you run and include trials; overage pricing for extra sends/inbound is listed as well.