AI Agent Email Safety & Approvals | AutoEmails MCP
How AutoEmails stops AI agents sending without permission: three action levels, yes-in-chat confirmation, 15-minute Stop links, test-before-live and opt-out p
Three levels
Read (mcp:read): look at anything in the workspace.
Draft (mcp:write): create and edit drafts, variables and tests to your own team — all reversible.
Live (mcp:admin): send, switch on, add contacts, spend credits, save keys — always asks you first.
Safety model
Your agent can never send on its own. Anything real-world returns a plain summary first; it only happens after you reply yes, from the same signed-in owner or admin, within 15 minutes.
Live sends require a current test within 24 hours. Changing the copy means a new authorised test; for outreach, changing the finding or enrolment settings also invalidates the test.
A verified sending domain, the daily sending cap, sending hours and unsubscribes always apply. Opted-out contacts are never re-added.
Keys and secrets
Integration keys passed to connect_integration are stored only in the integration's protected settings. They're removed from saved confirmations and never shown back to the agent, in receipts or logs.
Workspace boundaries
Each connection is tied to one approved workspace. Agents cannot read or act in another workspace, and /inbox (the separate email client) is off-limits; replies live in Inbound.
Can my AI agent send emails without me approving?
No. Sending, switching on automations, adding contacts, spending Decision Maker credits and saving integration keys all return a summary first and only happen after you reply yes. The workspace owner also gets an email receipt with a 15-minute Stop link.
Why use AutoEmails instead of my normal mailbox?
Normal mailboxes and assistants can't send bulk outreach safely. AutoEmails is an email sending provider: it sends through ADS, the AutoEmails Delivery System, with warmed pools, daily allowances, automatic blocking after delivery failures, unsubscribe handling, lead finding and reply tracking — your agent just decides and writes.
Will campaigns my agent builds show up in AutoEmails?
Yes. Agents write the same campaign, email, scan and automation records as the web app, so everything appears exactly as if you had built it yourself.
Do I need to uninstall the plugin to change permissions?
No. Disconnect the connected account, connect again, approve the permissions, then press Refresh tools.
Frequently asked questions
Can my AI agent send emails without me approving?
No. Sending, switching on automations, adding contacts, spending Decision Maker credits and saving integration keys all return a summary first and only happen after you reply yes. The workspace owner also gets an email receipt with a 15-minute Stop link.
Why use AutoEmails instead of my normal mailbox?
Normal mailboxes and assistants can't send bulk outreach safely. AutoEmails is an email sending provider: it sends through ADS, the AutoEmails Delivery System, with warmed pools, daily allowances, automatic blocking after delivery failures, unsubscribe handling, lead finding and reply tracking — your agent just decides and writes.
Will campaigns my agent builds show up in AutoEmails?
Yes. Agents write the same campaign, email, scan and automation records as the web app, so everything appears exactly as if you had built it yourself.
Do I need to uninstall the plugin to change permissions?
No. Disconnect the connected account, connect again, approve the permissions, then press Refresh tools.
About AutoEmails and Leo
AutoEmails is an AI email marketing platform built around Leo, an autonomous AI email marketing agent. Leo analyses your business, finds the right audience, writes and designs emails, launches campaigns and reports on replies, meetings, orders and revenue.
The platform covers three engines in one account: Outreach, which finds new companies or decision makers and emails them with personalised plain-text messages and follow-ups; Marketing, which sends designed HTML newsletters and campaigns to your own contacts; and Automations, which run triggered email journeys such as welcome series, abandoned cart recovery and re-engagement.
Leo works autonomously within guardrails. It can suggest and launch campaigns, resend to non-openers, expand targeting when a lead scan falls short and pause sending when deliverability signals such as bounce or spam-complaint rates rise. Every action is logged with an evidence trail so you can see what Leo did and why.
AutoEmails connects to Shopify, WooCommerce, WordPress, Calendly, Google Analytics, Google Search Console and custom e-commerce stores, so campaigns can be measured on real outcomes: replies and booked meetings for lead generation, and orders and revenue for e-commerce.
Pricing is capacity-based in British pounds, starting with a free plan. You can start free at autoemails.com without a credit card, let Leo scan your business and review the first campaign before anything is sent.
More from Leo actions
- AutoEmails MCP | Run Email Outreach From Your AI Agent — Connect ChatGPT, Codex, Claude or Cursor to AutoEmails via MCP: find leads, write emails, send tests and go live with bulk sending — you approve every send.
- AutoEmails MCP Troubleshooting | Fix Agent Errors — Fixes for common AutoEmails MCP errors in ChatGPT, Codex, Claude and Cursor: OAuth setup, missing tools, permissions, test_required and unverified domains.
- AutoEmails MCP Reference | Every Agent Action — Every action AI agents (ChatGPT, Codex, Claude, Cursor) can take in AutoEmails via MCP, with inputs and which ones ask you to confirm.
- AutoEmails Merge Tags For AI Agents | Variables Guide — Every merge tag an AI agent can use in AutoEmails — {{first_name}}, {{company_name}}, {{booking_link_1}} — plus fallbacks, workspace variables and per-lead cu
- How AI Agents Run Outreach In AutoEmails | Playbook — The exact procedure an AI agent follows to build and launch cold outreach in AutoEmails: businesses vs decision makers, questions to ask, variables, writing r
- update_outreach_campaign | AutoEmails MCP Action — Change any operational setting of a draft, paused or LIVE outreach campaign: name, sender, audience, sectors, subsector, towns, countries, keywords, exclude t
- update_marketing_settings | AutoEmails MCP Action — For a DRAFT newsletter: set audience_id (from list_audiences: 'all_eligible', a list id, or a segment id), exclude_list_ids, from_email (must be a workspace s
- Meet Leo, Your AI Email Marketing Agent | AutoEmails — Create newsletters, find prospects and build automations with Leo, your AI email marketing agent. Your brand, your voice, your approval. Start free with AutoEmails.