Mailboxes and canonical workspaces
Discover Mail and an authorized Auth workspace. Mailbox IDs identify app records inside that workspace and are not workspace resource IDs. Bootstrap, collection, profile, dashboard and widget have different output shapes; inspect their contracts. Hosted, IMAP, Gmail and Microsoft 365 connections have separate setup requirements.
Compose, review and send
Create a draft, read it back and review recipients/content before sending. Immediate send and draft send can contact real recipients and cannot be recalled. A scheduled send is pending until an asynchronous sweep claims it; cancel only while pending and inspect the sent folder after uncertain outcomes.
Connection and recovery
Provider readiness and an OAuth URL do not establish an active connection. Complete explicitly approved consent and verify connections.get. A mailbox can exist even when OAuth URL creation fails. Disconnect keeps app-owned mail; mailbox deletion permanently removes it. Preserve uncertain outcomes before any repeated effect.
Action guides
- List Mail mailboxes
- Get Mail connection
- Create Mail draft
- Get Mail message
- Update Mail draft
- Send Mail draft
- Schedule Mail message
- Cancel scheduled Mail message
- List Mail messages
Evidence and limits
Identity, permissions, verified workspace grants, provider connection state, OAuth URL generation, mailbox Durable Object operations and content protection are synthetic ports.
Nexus AI and Auth archive are allowlisted in-process responses. No paid generation, billing, live OAuth, encryption custody, email delivery, asynchronous delivery or deployed outcome is proved. External network egress is refused.