Let an assistant work in your mail, with names and numbers replaced before it reads.
Connect an AI assistant that supports MCP, sign in and tick what it may do. It sorts, summarises and drafts replies. Names, addresses and numbers are replaced on our server before it reads them, and put back in what it writes.
What you see, and what the assistant sees
The same mail. The assistant gets the placeholders; you, the recipient and your mailbox keep the real values.
The same person reads as the same placeholder everywhere in your account, so the assistant can still tell who wrote what and reply to the right person. When it writes "Hi [NAME_MPHBU47C]" in a draft, the draft in your mailbox says Karin.
See it in your own mail
A mark in the mail and file views shows what an assistant gets.
- A small mark on a thread in the list when personal data in it is masked, and another when the thread is kept from assistants.
- Under the subject of an open mail, and in the viewer for a file, a line with what is hidden and the values on Show.
- A mail or file is checked the first time an assistant reads it, or when you press Check now. You can have everything new checked when it arrives.
- The account owner decides when the marks show: once an assistant is connected, always, or never.
Connected in a minute
Add PineMail to your assistant
Give it https://pinemail.app/mcp. It opens PineMail's sign-in page.
Sign in and choose
Tick what it may do: read, write drafts, send, read the calendar, read your files.
Let it work
It reads, sorts and drafts. Everything it does is listed under Account, where you disconnect it.
The account owner decides
One section under Account, for every assistant on the account, mailbox logins included. One switch turns them all off.
Drafts only, from the start
A new account lets assistants write drafts and nothing more. A person sends them. You can allow sending when you want it.
Which mailboxes, and Drive
Every mailbox, or only the ones you pick, and whether assistants read your Drive. What is left out does not exist for an assistant.
Which correspondents
Everyone, only your own domains, or your domains plus the companies and addresses you list. A thread with one address outside is left out whole.
A log of everything
Which assistant read or wrote what, when, and what was masked. Kept 90 days, without the content.
What is masked
On by default, in mail, calendar entries, attachments and files alike.
- Names of people, found in the text and taken from the senders and your contacts
- Email addresses, apart from your own mailboxes'
- Phone numbers, from any country
- Identity numbers from Sweden, Finland and Norway, checked by their check digit, and Danish CPR numbers
- Organisation numbers, IBAN and card numbers
Masking covers what can be recognised. Other personal data in a text, such as an address written out in a sentence, passes as written, so connect only what you would let the assistant read yourself.
Where it happens
On our own server
The text is analysed on a server we run ourselves in the EU. Nothing is sent to anyone else to do it, and the analysis keeps no text.
The real values stay encrypted
The placeholders and what they stand for are stored with your account, encrypted like your mail, and used only to put the values back in what the assistant writes.
Nothing half-masked
When the masking cannot finish, the assistant gets an error and no content. It never gets the mail as it is because masking was busy.
For developers
The same tools take an API key, for your own agents and scripts.
- One MCP endpoint: https://pinemail.app/mcp, Streamable HTTP, sign-in or key
- Tools for sending, domains, mailboxes, threads, drafts, calendar, attachments and files
- A sending key sees only the send tool; mailbox mail is picked on purpose on a key
- The owner's access and masking apply to keys and sign-ins alike
Try it with your own mail
Free for good with one address and 1 GB. Connect an assistant from the account page.