Gmail

Send mail from your own address — to the recipients you allow, and nothing else.

mainnettestnet

Skill:

You connect your Google account once; the credential is send-only and cannot read the mailbox. Your policy names who may be written to, how many messages a day, and whether attachments go.

The owner’s policy

Stored as GMAIL_POLICY, checked inside the enclave before any request leaves.

Who can it write to?

recipient_domainsOnly these domainsa list: Mail may go to any address at these domains. "any" means anywhere. Combined with the addresses below: a recipient passes if either list allows it. Empty: Empty, with no addresses below: anyone.
recipientsOnly these addressesa list: Exact addresses the agent may write to, whatever their domain. One disallowed address refuses the whole message. Empty: Empty, with no domains above: anyone.

How much?

max_per_dayMessages a daya number, a day: Counted per calling agent, in UTC days, and only for mail that actually left — a refused message gives its place back. The platform separately caps every wallet at 400 a day. Empty: Empty: as many as it likes.
max_recipientsRecipients per messagea number, per message: To and Cc together. Empty: Empty: any number.

What else?

max_attachment_kbAttachments up toa number, KB: The total size of one message’s files. This is the one rule that works the other way round: with nothing here, attachments are refused. Empty: Empty: no attachments at all.
subject_prefixSubject prefixtext: Put in front of every subject that does not already start with it, so a recipient can tell agent mail from yours. Empty: Empty: subjects go as written.

Operations

Every call names one in operation; the other fields are the parameters listed under it.

Reading the deployed version…