← Blog

Why AI agents shouldn't use your personal email

·3 min read

Imagine hiring an intern and giving them your house keys, your bank login, and your social security number on day one.

That's what you're doing when you give an AI agent access to your personal email.

What happens when an agent has your email

Most AI agent frameworks that offer "email capabilities" do it by connecting to your Gmail or Outlook account via OAuth. The agent can then:

  • Read every email you've ever received
  • Send emails as you - to anyone, saying anything
  • Delete emails - including ones you haven't read
  • Access attachments - contracts, invoices, medical documents

Even if you trust the agent today, things break. Prompts get injected. Models hallucinate. APIs get compromised. The blast radius of your personal inbox being exposed is enormous.

The alternative: agent-owned identity

What if the agent had its own email address? Its own domain? Its own credentials that are completely separate from yours?

  • If the agent goes rogue, you delete the mailbox. Done.
  • If the agent sends a weird email, it's from agent@myproject.dev, not from you.
  • If you want to audit what the agent did, you check its mailbox - not yours.

This is what domani does. Every agent gets its own internet identity: its own domain, its own email, its own DNS. Completely isolated from your personal accounts.

"But I just need to send one email"

Sure. And that one email today becomes ten tomorrow, then a hundred. Then the agent is managing customer support, sending invoices, and processing inbound requests.

Start with isolation from day one. It costs nothing - domani gives you a free @domani.run email address. You can send and receive emails in seconds without sharing any personal credentials.

The security model

With domani, your agent authenticates with an API token. That token can:

  • Send emails from the agent's mailbox
  • Read emails sent to the agent's address
  • Manage DNS for the agent's domain

It cannot:

  • Access your personal inbox
  • Read emails on other domains you own
  • Make purchases without your payment method

If the token is compromised, you revoke it. The agent's mailbox is unaffected. Your personal email is untouched.

How to set it up

npm i -g domani
domani login
domani email create myagent@domani.run

Three commands. Zero risk to your personal email. Your agent is ready to operate on the internet with its own identity.

Free forever

Every domani account includes a free email address on @domani.run. No credit card required.

emailsecurityagents