Building an agent startup? Apply now →
Back to Blog

OpenMail is in the ChatGPT plugin directory

ChatGPT can browse the web, read a PDF and draft the email for you. What it couldn't do was receive the reply. As of this week it can: OpenMail is in the ChatGPT plugin directory, so you install it, sign in once, and ChatGPT has an inbox of its own. No Developer mode, no pasted URLs, and it works on the free plan.

October 30, 2026

ChatGPTMCPAI Agent Email+3Codex, OAuth, Plugin Directory

Most people who talk to ChatGPT every day have never heard of MCP, and they shouldn't have to. Until this week, giving ChatGPT an OpenMail inbox meant switching on Developer mode, creating an app by hand, pasting a server URL, and ticking a box that says you understand the risks. I wrote that guide myself. It was four screenshots long, it only worked on paid plans, and I'm fairly sure most people closed the tab around screenshot two.

That path is gone. OpenMail is now listed in the ChatGPT plugin directory. You open the listing, click Install plugin, sign in to OpenMail once, and ChatGPT has an email address. That's the whole setup.

Why ChatGPT needs an inbox at all

The internet still runs on email. Signups, verification codes, invoices, the reply from the accountant, the quote from the supplier. ChatGPT can browse and reason about all of it, but without an address it is a visitor at every one of those doors. It can draft the email for you to send. It can't receive the answer.

The obvious fix is to connect your Gmail. I've written about why that goes wrong: Google treats agent behaviour as abuse, and a ban takes your Calendar, Drive and Photos with it. Beyond the ban risk, there's a quieter problem. Connecting your personal inbox gives the model every email you've ever received. Medical results, bank statements, the thread with your lawyer. That is a lot to hand over so an agent can read one verification code.

An agent needs its own address for the same reason an employee gets their own, not a copy of yours. Separate identity, separate permissions, and when it's done, you close it.

What the listing changes

Technically, nothing. It is the same MCP server at mcp.openmail.sh that Claude and Cursor have been using for months. What changed is who can reach it.

Developer mode was a Plus-and-above feature, so the free tier, the largest group of ChatGPT users, was locked out entirely. The directory is open on every plan. In a Business, Enterprise or Edu workspace an admin can allow it once for everyone instead of each person repeating the setup.

It also means OpenAI reviewed the server: what each tool does, how OAuth works, what we record. I won't pretend that review is a security audit, but it is a bar, and most MCP servers you can paste into Developer mode haven't cleared it.

One more thing I didn't expect: ChatGPT and Codex share the directory. Run /plugins in Codex CLI and the same inbox is there, with the same sign-in.

Setting it up

  1. Open the OpenMail listing and click Install plugin. Or open Plugins in ChatGPT and search for OpenMail.
  2. Click Connect OpenMail. The OpenMail console opens. Sign in, pick an organisation, and untick anything ChatGPT shouldn't have. Read is always on; Send, Setup and Domains are yours to withhold. Click Allow.
  3. Start a new chat and ask: “Set up an inbox for this agent and show me the address.”

The first time I did this it took under a minute, most of it on the consent screen deciding whether to grant Send. I did. ChatGPT asks before every send anyway, so the scope is a ceiling, not an autopilot.

What it's good at, and what it isn't

Good: anything that starts with “wait for the email”. Sign up for a service and finish the verification yourself. Read the invoice PDF in the latest thread and pull out the total. Triage what came in overnight and draft replies for the ones from people. Spam, bounces and no-reply mail are filtered before the model sees them, so it answers humans, not newsletters.

Not good: anything in your own mailbox. ChatGPT does not get Gmail or Outlook through this, by design. If what you want is “summarise my inbox”, this isn't the tool. If what you want is “give the agent an address and let it handle the correspondence”, it is.

Every permission can be revoked from MCP settings, and revoking cuts access immediately. The full reference, including Claude, Cursor and other clients, is at docs.openmail.sh/integrations/mcp.

If you try it and something is confusing, tell me. We have a tool for that too: ask ChatGPT to send OpenMail feedback and it lands on my desk.

Frequently asked questions

Does OpenMail work on the free ChatGPT plan?

Yes. The plugin directory is available on every ChatGPT plan. In a Business, Enterprise, or Edu workspace an admin may need to allow the plugin first.

Does ChatGPT get access to my personal email?

No. OpenMail gives ChatGPT its own inbox on an OpenMail address or your own domain. It never touches Gmail or Outlook. You pick which permissions it gets at sign-in and can revoke them any time from the console.

Can ChatGPT send email without asking?

Not by default. ChatGPT confirms before any write action, such as sending or replying. If you only want reading, untick Send when you connect.

Does the same plugin work in Codex?

Yes. ChatGPT and Codex share one plugin directory. Run /plugins in Codex CLI, or open Sources → Use plugins in the desktop app.

Every AI agent deserves its own inbox.

Install the CLI, run setup, and you're sending email from your agent in minutes.

More posts

reply
Developer

How an AI agent receives email and replies to it

How inbound email reaches an AI agent over a webhook or WebSocket, what the event contains, and how the agent replies in the same thread. Working code included.

Oct 14, 2026
SUSPENDED
gmail
Analysis

The Gmail suspension wasn't the problem. The architecture was.

Gmail suspensions for AI agents aren't random. The automation patterns that cause them look identical to spam. Here's what you've actually lost, why recovery rarely works, and how to move to something built for agents.

July 2, 2026
Analysis

OpenMail vs Nylas

Nylas connects to your users' existing inboxes. If your AI agent needs its own address, here's how Nylas Agent Accounts and OpenMail compare on limits, pricing, and code.

June 29, 2026
Shared infrastructure: three agents with dedicated IPs, rate-limited pools, and circuit breakers
Analysis

What Email Infrastructure for AI Agents Should Look Like

If you had to design email from scratch for AI agents, you wouldn't build Gmail. Here's what purpose-built infrastructure looks like — inbox-as-API, real-time delivery, threading, MIME parsing and IP warming/routing.

June 5, 2026
01Postmarksend-only
02Resendsend-only
03OpenMailagent-native▶
04AgentMailagent-native
05Mailgunbuild it
06Amazon SESbuild it
Analysis

Best email API for AI agents in 2026

Eight email APIs compared on receiving, threading, per-agent inboxes, reputation isolation, EU data residency and price. We run one of them, so we put ourselves first and tell you why.

May 14, 2026
Analysis

OpenMail vs Mailgun vs Amazon SES

Mailgun sends. SES is cheap. Neither was built for agents that receive, thread, and parse attachments. Here’s what’s actually different between all three.

May 6, 2026
ASCII art render of the Creation of Adam — two hands reaching toward each other, one human, one digital
Analysis

Why Every Email Option Falls Short for AI Agents

Gmail bans agents. Proton has no API. Outlook is a maze. Resend can't receive. A look at why every email option falls short for AI agents and what the risks are.

Apr 13, 2026
OpenClaw email setup guide
Developer

How to Give OpenClaw Its Own Email Address

One ClawHub command gives your OpenClaw agent a dedicated inbox with real-time delivery. Choose a usage mode — tool, notify, or channel — and you're done.

Mar 29, 2026
eu
News

We're EU-Based. That's Not a Footnote — It's the Point.

OpenMail is built in the EU, runs in the EU, and every customer is covered by GDPR — not as a checkbox, but as a legal guarantee.

Mar 16, 2026
start
Developer

How to give your AI agent its own email address

Four ways to give an AI agent an email address, compared. Why Gmail and transactional APIs break, and how to create a dedicated agent inbox with an API call.

Mar 12, 2026
audience
Founder insights

This Is Not for Human Eyes

We noticed that AI agents were finding OpenMail before we'd fully built for them. Here's what we saw — and what we built next.

Mar 12, 2026