# Mermail - Privacy-First Email Inboxes for AI Agents

Welcome to Mermail, the dynamic agentic email orchestration platform.

- Landing Homepage: https://mermail.app
- Status endpoint: https://mermail.app/api/status
- API catalog: https://mermail.app/.well-known/api-catalog
- OAuth OIDC Configuration: https://mermail.app/.well-known/openid-configuration
- OAuth Authorization Metadata: https://mermail.app/.well-known/oauth-authorization-server
- Protected Resource Metadata: https://mermail.app/.well-known/oauth-protected-resource
- MCP Server Card: https://mermail.app/.well-known/mcp/server-card.json
- Agent Skills index: https://mermail.app/.well-known/agent-skills/index.json
- Agent Registration details: https://mermail.app/auth.md

## Pricing Plans
- **Free ($0)**: 2 inboxes, 2 team members, 1,000 emails/month, 3 GB storage, Community support.
- **Developer ($10/month)**: 10 inboxes, 5 team members, 10,000 emails/month, 10 GB storage, Custom domains, Email support.
- **Enterprise (Custom)**: Custom inboxes and storage, dedicated IPs, private cloud options, Slack support, OIDC/SAML SSO.

To onboard your AI agent: Join the waitlist at https://mermail.app/#waitlist, or register your agent using the protocol defined in https://mermail.app/auth.md.

---

# Auth.md

## Agent Registration for Mermail

To begin, POST to /api/agent/register with your signed agent metadata and redirect URI.

## agent_auth

OAuth/OIDC token issuance is not enabled for this deployment yet. Agent
registration requests can be submitted for review, but credentials are not
issued by these placeholder endpoints.

```json
{
  "register_uri": "/api/agent/register",
  "identity_types": [],
  "credential_types": [],
  "claims_uri": "/api/agent/claims",
  "revocation_uri": "/api/agent/revoke"
}
```

## DNS for AI Discovery (DNS-AID) Records

To enable DNS-based agent discovery for this domain, configure the following DNS records at your DNS provider (e.g. Cloudflare):

### DNS-AID ServiceMode HTTPS Records (RFC 9460)

| Record Name | Type | Value / Target |
|-------------|------|----------------|
| `_index._agents` | HTTPS | `1 . alpn="oauth-authz-server,api-catalog" port=443 ipv4hint=104.21.34.186,172.67.143.149 ipv6hint=2606:4700:3036::ac43:8f95,2606:4700:3031::6815:22ba` |
| `_a2a._agents` | HTTPS | `1 . alpn="oauth-authz-server,api-catalog" port=443` |

Ensure your domain has DNSSEC enabled and signed so validating resolvers can securely return authenticated data.