# Postfleet

> Email infrastructure for AI agents. Inbound mail is parsed, classified, and
> screened for prompt injection before your agent reads it; outbound send is
> idempotent with optional human-in-the-loop approval. Every API endpoint lives
> under the canonical /api/v1/ prefix (base URL https://api.postfleet.ai).

## Docs

- [Quickstart](/docs/quickstart): Get an API key, send your first email, receive inbound mail via webhook, and connect over MCP.
- [Authentication & key scoping](/docs/auth): Bearer pf_ keys, mailbox-bound scoping, the data-plane vs control-plane split, and anti-enumeration 404s.
- [Sending & idempotency](/docs/sending): POST /api/v1/send, the single-recipient rule, client_id duplicate protection with the full replay table, and provider-unknown semantics.
- [Drafts & human-in-the-loop](/docs/drafts): Voluntary vs. forced drafts, the pending_approval flow, content_hash concurrency at approval, tombstones, and the MCP draft tools.
- [Send lists](/docs/lists): Allow/blocklist precedence, address normalization, exact-label matching, and the 403 send_blocked_by_list shape.
- [Webhooks](/docs/webhooks): The message.received event, event_id dedup, the custom HMAC signature recipe with a copy-pasteable verifier, at-least-once retries, and dead-letter redrive.
- [MCP setup](/docs/mcp): Configure the Postfleet MCP server with a bearer key, the full tool list, and how to handle the 202 pending-approval outcome.
- [API reference](/docs/api): The full /api/v1 REST surface — every endpoint, grouped by resource, with a link to the machine-readable OpenAPI description.

## Notes

- Every page above is fetchable as verbatim markdown at /docs/<slug>/raw.
- All examples use the canonical /api/v1/ prefix and bearer pf_ keys.