---
name: AZMail
description: Use when isolating, analyzing, or classifying mail through the APP 1.0 Mail Airlock, or when toggling anonymous MCP mesh mail (off by default). Not a public MTA. Author Aziel Eliab.
---

# AZMail

Anti-phishing Mail Airlock (APP 1.0). No message is trusted until verified across identity, origin, structure, and behavior.

Author: **Aziel Eliab** only.

**THIS IS:** local airlock + advisory SPF/DKIM/DMARC parsers + reputation / identity / behavior heuristics + link sandbox + HTML scrub + trust badges + user confirmation + mesh *client helpers*.

**THIS IS NOT:** a public MTA, SMTP/IMAP server, mixnet, VPN, AZ-OS, Lumen, or a guaranteed phishing block. v0.1 does not send internet email.

Always send `User-Agent: Mozilla/5.0`. Cloudflare Workers may 403 an empty agent.

**Agent path is FragGate only.** There is no separate AZMail MCP outside the door. Do not POST this Worker's `/mcp`.

`POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call` body `{"slug":"azmail","op":"…","payload":{}}`

Same door as MCP `fraggate_call` (`slug=azmail`). Kernel: https://github.com/AzielEliab/fraggate.

This Worker `/v1/fraggate/*` (list / describe / call) and `/v1/runtime/*` PROXY to aziel-runtime via the `AZIEL_RUNTIME` service binding. Local ops are `/v1/{op}` only.

**Human UI stays on this Worker / `azmail ui`.** AI path is FragGate.

Mesh is **off by default**. `mesh_disable` is the easy off-switch.

## Human Worker (not the agent door)

Host: `https://azmail-download-tracker.vibelock.workers.dev`

| Method | Path | What |
|--------|------|------|
| GET | `/v1/health` | Liveness. Does not increment downloads. |
| GET | `/v1/skill` | This markdown. Does not increment downloads. |
| GET | `/v1/example` | Sample airlock payload. |
| POST | `/v1/airlock_classify` | Human-UI classify. Same name as FragGate op. Not stored. |
| POST | `/v1/classify` | Leftover alias of `airlock_classify`. |
| POST | `/v1/scrub` | Human-UI demo scrub. |
| POST | `/v1/keyword-alerts` | Demo match. Agents use FragGate. |
| POST | `/v1/mesh/*` | Stubs that point at FragGate. Off by default. |
| GET | `/v1/fraggate/list` | PROXY → aziel-runtime FragGate list. |
| GET | `/v1/fraggate/describe` | PROXY → aziel-runtime FragGate describe. |
| POST | `/v1/fraggate/call` | PROXY → aziel-runtime FragGate call. |

Works with ChatGPT (GPT Actions / OpenAI), Grok (xAI), Venice, Claude (Anthropic), Cursor (MCP), Glama (MCP), Perplexity, Microsoft Copilot / Bing, Google Gemini / Vertex, Mistral, Meta AI, Apple Intelligence surfaces, Amazon Q tooling, DuckAssist, You.com, Cohere, and other MCP/OpenAPI-capable assistants — **through FragGate**, not a mail MCP of their own.

## Local

```bash
curl -fsSL https://azmail-download-tracker.vibelock.workers.dev/install.sh | bash
azmail ui
azmail doctor
```

Then open http://127.0.0.1:8876 (this computer only).

## Honest banner

THIS IS: a local Mail Airlock plus advisory APP 1.0 layers and mesh client helpers. THIS IS NOT: a public MTA, SMTP/IMAP server, mixnet, VPN, or a guaranteed phishing block. v0.1 does not send internet email. Hosted Worker is a counted download + human UI + demo HTTP. The AI / MCP path is FragGate only: POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call with slug=azmail op=airlock_classify — not a separate mail MCP. This Worker /v1/fraggate/* PROXY to aziel-runtime. No hard dependency on AZ-OS, Lumen, or a separate interface product. Author: Aziel Eliab only.

Apache-2.0. Forks are welcome and always allowed.

- Catalog: https://aziel-runtime.vibelock.workers.dev/p/azmail/
- Library: https://www.azielcorpuslibrary.net/
- FragGate: https://github.com/AzielEliab/fraggate
- godlock.uk · https://www.azieleliab.com