The Complete AI Agent Workforce Platform
Deploy, manage, and govern AI agents as first-class employees — each with their own email, phone number, calendar, browser, tools, memory, and identity. Enterprise-grade security, compliance, and multi-tenant isolation built in.
npx @agenticmail/enterpriseOne command. Interactive setup wizard. Full platform in under 2 minutes.
Get a free yourcompany.agenticmail.io subdomain — live in under 2 minutes.
npx @agenticmail/enterpriseThe wizard will ask you to:
- Select deploy target → Choose "AgenticMail Cloud"
- Pick your subdomain → e.g.,
acme→ your dashboard is athttps://acme.agenticmail.io - Create admin account → Name, email, password
- Done → Dashboard opens. Create your first agent.
$ npx @agenticmail/enterprise
Deploy target: AgenticMail Cloud (free)
Subdomain: acme.agenticmail.io
✓ Database provisioned
✓ Schema migrated (32 tables)
✓ Admin account created
Dashboard: https://acme.agenticmail.io
✓ Live! Create your first agent →
No servers to manage. No Docker. No ports to open. No infra. Everything runs on our infrastructure — you just configure from the dashboard.
Same wizard, different deploy target:
npx @agenticmail/enterpriseThe wizard walks you through:
- Database — Pick SQLite (zero config) or paste a Postgres URL. We auto-detect Supabase/Neon and optimize connection pooling automatically.
- Admin Account — Name, email, password
- Deploy Target — Cloudflare Tunnel (free, no ports to open), Docker, Railway, Fly.io, or local
- Dashboard — Opens automatically. Everything is managed from the UI.
| Option | Best For | Setup |
|---|---|---|
| SQLite | Trying it out, local dev | Zero config — built-in |
| Supabase (Free) | Production, cloud | Create free project → copy connection string |
| Any Postgres | Enterprise, existing infra | Paste your connection string |
| MySQL, MongoDB, etc. | Special requirements | 10 backends supported — see Database Backends |
Supabase users: The wizard auto-optimizes your connection string — switches to transaction mode, adds PgBouncer params, and generates a direct URL for migrations. Zero manual config.
Once setup completes, open the dashboard and you'll see:
- Setup Checklist — guided steps to configure email, create agents, etc.
- Create Agent — pick from 51 personality templates or build your own
- Full Admin Dashboard — 28 pages covering every aspect of agent management
Everything is managed from the dashboard — agent creation, permissions, email setup, channel connections, DLP rules, workforce schedules, compliance reports. No code needed.
- Click "Create Agent" in the dashboard
- Choose a soul template (e.g., "Executive Assistant", "Sales Rep", "Developer")
- Add your LLM API key in Settings → API Keys (or in the agent's config)
- Configure permissions — set what tools the agent can use, package managers it can access, sudo privileges, etc.
- Start the agent — it gets its own email, tools, and identity
- Connect Gmail — Give your agent real email access via OAuth (Agent Detail → Email tab)
- Add Telegram/WhatsApp — Connect messaging channels (Agent Detail → Channels tab)
- Set up DLP — Apply pre-built rule packs to protect sensitive data (DLP page → Rule Packs)
- Configure Shifts — Set work hours and on-call schedules (Workforce page)
- Set Dependency Policy — Control what packages agents can install, allow sudo, set computer password (Agent Detail → Permissions tab)
- Why AgenticMail Enterprise
- Quick Start
- Architecture
- Dashboard
- Agent Runtime
- Agent Tools
- Google Workspace Integration
- 145 SaaS Integration Adapters
- Enterprise Skills
- Polymarket Trading Suite
- Database Backends
- Security & Compliance
- Data Loss Prevention (DLP)
- Multi-Tenant & Organizations
- Workforce Management
- Knowledge Base & RAG
- Communication & Task Pipeline
- Agent Autonomy System
- Meeting & Voice Intelligence
- Multimodal Support
- Deployment
- CLI Commands
- Environment Variables
- Community Skills Marketplace
- API Reference
- License
Most AI agent platforms give you a chatbot. We give you a workforce.
- Real Identity — Each agent gets a real email address, phone number (Google Voice), Google Workspace access, and digital presence
- Real Autonomy — Agents clock in/out, check email, respond to messages, join Google Meet calls and speak like humans, and work independently
- Real Governance — DLP scanning, guardrails, approval workflows, compliance reporting, action journaling with rollback
- Real Scale — Multi-tenant isolation, org-scoped everything, role-based access control, budget gates
- Real Integration — 145 SaaS adapters, 13 Google Workspace tools, full browser automation, shell access, filesystem tools
| Metric | Count |
|---|---|
| Source files | 770+ |
| Engine modules | 82 |
| Dashboard pages | 28 + 23 agent detail tabs |
| Documentation pages | 49 |
| Database backends | 10 |
| SaaS integration adapters | 145 |
| Enterprise skill definitions | 52 |
| Google Workspace tools | 13 services |
| Microsoft 365 tools | 13 services, 90+ tools |
| Agent tools | 270+ (smart tiered loading) |
| Soul templates | 51 (14 categories) |
| DLP rule packs | 7 (53 pre-built rules) |
| Compliance report types | 5 (SOC 2, GDPR, SOX, Incident, Access Review) |
npx @agenticmail/enterpriseThe wizard walks you through:
- Database — Pick from 10 backends with smart auto-configuration (auto-detects Supabase/Neon pooler mode, generates direct URLs for migrations, adds
?pgbouncer=trueautomatically) - Admin Account — Name, email, password, company name
- Email Delivery — Optional SMTP/OAuth setup
- Custom Domain — Optional: point your own domain via Cloudflare tunnel
- First Agent — Create your first AI agent with a soul template
import { createServer, createAdapter, smartDbConfig } from '@agenticmail/enterprise';
const db = await createAdapter(smartDbConfig(process.env.DATABASE_URL));
await db.migrate();
const server = createServer({
port: 3000,
db,
jwtSecret: process.env.JWT_SECRET,
runtime: {
enabled: true,
apiKeys: { anthropic: process.env.ANTHROPIC_API_KEY },
},
});
await server.start();Run an agent as its own process (recommended for production):
node dist/cli.js agent --env-file=.env.folaEach agent runs independently with its own port, connects to the shared database, and registers with the main server for health checks and lifecycle management.
┌──────────────────────────────────────────────────────────────┐
│ Admin Dashboard (28 pages) │
│ React · Dark/Light themes · Real-time updates │
│ Agents · Workforce · DLP · Compliance · Vault · Knowledge │
│ Activity · Journal · Guardrails · Task Pipeline · Audit │
├──────────────────────────────────────────────────────────────┤
│ Hono API Server │
│ Auth · Admin · Engine (82 modules) · Middleware (9 layers) │
├──────────────────────────────────────────────────────────────┤
│ Engine Core │
│ Lifecycle · Permissions · DLP · Guardrails · Compliance │
│ Journal · Approvals · Policies · Knowledge · Memory │
│ Communication · Workforce · Vault · Storage · Autonomy │
│ Onboarding · Soul Library · Tool Catalog · OAuth Connect │
│ Meeting Monitor · Voice Intelligence · Activity Tracking │
├──────────────────────────────────────────────────────────────┤
│ Agent Runtime │
│ LLM Client (multi-provider) · Session Manager │
│ Tool Executor (270+ tools) · Sub-Agent Spawning │
│ Budget Gates · Model Fallback · Streaming │
├──────────────────────────────────────────────────────────────┤
│ Messaging & Channels │
│ Email (Gmail/Outlook) · Telegram · WhatsApp │
│ Google Chat · Browser Automation · Voice/Meetings │
├──────────────────────────────────────────────────────────────┤
│ Integration Layer │
│ 145 SaaS Adapters · 13 Google Workspace Services │
│ MCP Framework · OAuth Connect · Dependency Manager │
├──────────────────────────────────────────────────────────────┤
│ Database Adapter Layer │
│ Postgres · MySQL · SQLite · MongoDB · DynamoDB · Turso │
│ Supabase · Neon · PlanetScale · CockroachDB │
│ Smart pooler detection · Auto-optimized connections │
└──────────────────────────────────────────────────────────────┘
| Layer | Purpose |
|---|---|
| Request ID | UUID per request for distributed tracing |
| Transport Encryption | Optional AES-GCM encryption for all API responses |
| Security Headers | CSP, HSTS, X-Frame-Options, X-Content-Type-Options |
| CORS | Configurable origins |
| Rate Limiting | Per-IP, configurable RPM (default: 120) |
| IP Firewall | CIDR-based access control |
| Audit Logging | Every mutating action logged with actor, org, timestamp |
| RBAC | Role-based access (owner, admin, member, viewer) |
| Org Scoping | Automatic data isolation for multi-tenant deployments |
28 full pages + 23 agent detail tabs, served directly from the enterprise server:
| Page | Description |
|---|---|
| Dashboard | Setup checklist, quick stats, getting started guide |
| Agents | Create, configure, start/stop, monitor all agents |
| Users | User management, roles, org assignment, impersonation |
| Organizations | Client org management, billing, access control |
| Org Chart | Visual organizational hierarchy |
| Workforce | Shifts, schedules, on-call, capacity, clock records |
| Task Pipeline | Visual task flow, node-based pipeline editor |
| Messages | Agent-to-agent communication hub |
| Knowledge | Document upload, chunking, RAG search |
| Knowledge Contributions | Agent-contributed knowledge review |
| Knowledge Import | Bulk import from external sources |
| Skills | Enterprise skill management and assignment |
| Community Skills | Marketplace: browse, install, configure, update |
| Skill Connections | OAuth and credential management for skills |
| DLP | Rules, rule packs (7 enterprise packs), violations, scanning |
| Guardrails | Intervention rules, anomaly detection, agent safety |
| Compliance | SOC 2, GDPR, SOX, Incident, Access Review reports |
| Journal | Action journal with detail modal and rollback |
| Audit Log | Complete audit trail with org filtering |
| Activity | Real-time tool calls, conversations, cost tracking |
| Approvals | Human-in-the-loop approval queue |
| Vault | Encrypted credential storage, API keys, OAuth tokens |
| Database Access | Agent database connection management |
| Memory Transfer | Cross-agent memory sharing |
| Roles | Custom agent role template management (51 built-in) |
| Settings | Company, security, SSO, 2FA, branding, email config |
| Domain Status | Cloudflare tunnel, DNS, deployment health |
| Login | Setup wizard (first run) / login with 2FA support |
| Tab | Description |
|---|---|
| Overview | Status, health, metrics, quick actions |
| Personal Details | Name, email, phone, avatar, identity |
| Configuration | Model, temperature, system prompt, soul |
| Permissions | Tool-level allow/deny, preset profiles |
| Skills | Assigned skills with risk levels |
| Tools | Available tools with security policies |
| Tool Security | Per-tool DLP and guardrail overrides |
| Gmail OAuth, signature, email config | |
| Channels | Telegram, WhatsApp, Google Chat setup |
| WhatsApp Business integration | |
| Communication | Agent messaging preferences |
| Memory | Long-term memory viewer/editor |
| Autonomy | Clock, daily catchup, goals, knowledge schedules |
| Budget | Token limits, cost caps, alerts |
| Workforce | Shift assignments, availability |
| Guardrails | Agent-specific intervention rules |
| Activity | Agent-specific activity feed |
| Security | API keys, access controls |
| Deployment | Runtime config, health endpoint |
| Manager | Supervisor/manager assignment |
| Meeting Browser | Meeting attendance and voice config |
| Personal Details | Birthday, timezone, language |
- Dark/Light themes with CSS custom properties
- Dynamic brand color from company settings
- Org switcher on every page for multi-tenant filtering
- Real-time SSE streaming for live updates
- 49 built-in documentation pages accessible from the dashboard
- Transport encryption — Optional AES-GCM encryption for all API traffic
Full standalone agent execution — agents run as independent processes with their own port, tools, memory, and messaging channels.
| Feature | Description |
|---|---|
| Multi-Provider LLM | Anthropic, OpenAI, xAI (Grok), Google — with automatic model fallback |
| Session Manager | Incremental message persistence, crash recovery, session resume |
| Tool Executor | 270+ tools with permission checking and DLP scanning |
| Sub-Agent Spawning | Spawn child agents for parallel work |
| Budget Gates | Cost check before every LLM call, hard limits with alerts |
| Streaming | SSE streaming for real-time dashboard updates |
| Multimodal | Process images, videos, documents from Telegram/WhatsApp |
| Dependency Manager | Auto-detect, install, and clean up system dependencies |
| Email Channel | Bi-directional Gmail/Outlook with OAuth |
| Messaging | Telegram long-polling, WhatsApp webhook |
| Browser | Full Playwright-based web automation |
| Voice | ElevenLabs TTS, meeting voice intelligence |
| Memory | DB-backed long-term memory with semantic search |
| Heartbeat | Configurable periodic checks (email, calendar, health) |
| Autonomy | Clock in/out, morning triage, daily catchup, goal tracking |
# .env.fola
DATABASE_URL=postgresql://... # Shared DB (auto-optimized for pooler)
AGENT_ID=3eecd57d-03ae-440d-8945-5b35f43a8d90
PORT=3102
ANTHROPIC_API_KEY=sk-ant-...
# Start
node dist/cli.js agent --env-file=.env.folaThe agent automatically:
- Connects to the shared database (with smart pooler detection)
- Loads its configuration, permissions, and soul from DB
- Starts messaging channels (Telegram, WhatsApp, email)
- Begins autonomy features (clock in, morning triage)
- Registers health endpoint for dashboard monitoring
270+ tools organized by category, with intelligent tiered loading to minimize token costs:
Tools are loaded on-demand using a 3-tier system — agents don't pay for 270 tool definitions on every message:
| Tier | When Loaded | Example |
|---|---|---|
| Tier 1 — Essential | Always loaded (~20 tools, ~3K tokens) | File I/O, memory, management, search |
| Tier 2 — Contextual | Auto-loaded by channel + conversation signals | Gmail when user says "email", Teams when on Teams |
| Tier 3 — Specialist | On-demand via request_tools |
Slides, Forms, Power BI, security scanning |
A simple "Thank you" on Telegram loads ~50 tools (~8K tokens) instead of 270 (~33K tokens) — 75% token savings. The agent can always request more tools mid-conversation, and conversation signals auto-promote relevant tools (mention "calendar" → calendar tools load automatically).
| Tool | Description |
|---|---|
bash / shell |
Shell command execution |
browser |
Full Playwright web automation (screenshots, navigation, interaction) |
edit |
Precise file editing with search/replace |
read / write |
File I/O |
glob / grep |
File discovery and text search |
web_fetch |
HTTP requests with content extraction |
web_search |
Web search (Brave API) |
| Tool | Description |
|---|---|
gmail_search / gmail_read / gmail_send / gmail_reply |
Full Gmail access |
gmail_forward / gmail_trash / gmail_modify / gmail_labels |
Gmail management |
gmail_drafts / gmail_thread / gmail_attachment / gmail_profile |
Advanced Gmail |
gmail_get_signature / gmail_set_signature |
Signature management |
calendar_list / calendar_create / calendar_update / calendar_delete |
Calendar CRUD |
calendar_find_free / calendar_rsvp |
Scheduling |
drive_list / drive_search / drive_read / drive_upload |
Google Drive |
drive_create_folder / drive_share / drive_export |
Drive management |
contacts_list / contacts_search / contacts_create |
Google Contacts |
google_chat_send_message / google_chat_list_spaces |
Google Chat |
google_docs_* / google_sheets_* / google_slides_* |
Document editing |
google_forms_* / google_tasks_* |
Forms and Tasks |
google_meetings_* |
Meet integration |
| Tool | Description |
|---|---|
outlook_mail_* (20 tools) |
Read, send, reply, forward, search, drafts, rules, categories, auto-reply, thread |
outlook_calendar_* (7 tools) |
Events, create with Teams link, respond to invites, free/busy |
teams_* (15 tools) |
Channel messages, chats, file sharing, members, presence, status |
onedrive_* (12 tools) |
Files, search, share, move, copy, versions, permissions |
excel_* (16 tools) |
Read/write ranges, tables, charts, formulas, sessions, named ranges, formatting |
sharepoint_* (10 tools) |
Sites, document libraries, lists, search, upload |
onenote_* (6 tools) |
Notebooks, sections, pages, create, update |
planner_* (6 tools) |
Plans, buckets, tasks with ETag concurrency |
todo_* (6 tools) |
Task lists, create, update, complete |
powerpoint_* (5 tools) |
Info, export PDF, thumbnails, templates, embed URLs |
powerbi_* (8 tools) |
Workspaces, reports, dashboards, datasets, DAX queries, refresh |
ms_contacts_* (5 tools) |
Contacts CRUD, people/directory search |
Microsoft tools auto-detect via OAuth provider — if the agent has Microsoft OAuth configured, all Graph API tools become available. Includes production-grade retry with exponential backoff, 429 rate-limit handling, auto-pagination, and JSON batch support.
| Tool | Description |
|---|---|
enterprise-code-sandbox |
Isolated code execution |
enterprise-database |
Database queries |
enterprise-documents |
Document processing |
enterprise-http |
Advanced HTTP client |
enterprise-security-scan |
Vulnerability scanning |
enterprise-spreadsheet |
Spreadsheet operations |
knowledge-search |
RAG search across knowledge bases |
| Tool | Description |
|---|---|
management_escalate |
Escalate to supervisor |
management_delegate |
Delegate task to another agent |
management_status_update |
Report status to manager |
| Tool | Description |
|---|---|
msg_telegram / msg_whatsapp |
Send messages via channels |
telegram_download_file |
Download media from Telegram |
| Tool | Description |
|---|---|
check_dependency |
Check if system tool is installed |
install_dependency |
Auto-install missing dependencies |
list_dependencies |
List all agent-installed packages |
cleanup_dependencies |
Remove session-installed packages |
Deep, native integration with 13 Google Workspace services:
| Service | Tools | OAuth Scopes |
|---|---|---|
| Gmail | 16 tools | gmail.modify, gmail.send |
| Calendar | 6 tools | calendar, calendar.events |
| Drive | 7 tools | drive |
| Docs | CRUD + formatting | documents |
| Sheets | CRUD + formulas | spreadsheets |
| Slides | CRUD + layout | presentations |
| Forms | Create + responses | forms |
| Tasks | List + manage | tasks |
| Contacts | Search + manage | contacts |
| Chat | Send + spaces | chat.messages, chat.spaces |
| Meet | Schedule + join | calendar |
| Maps | Places API | API key |
| Meeting Voice | TTS + transcription | ElevenLabs + virtual audio |
Agents can:
- Read and respond to emails
- Create and manage calendar events
- Upload and share Drive files
- Edit Google Docs, Sheets, and Slides
- Join Google Meet calls with voice (ElevenLabs TTS + virtual audio device)
Deep, native integration with 13 Microsoft services via Microsoft Graph API:
| Service | Tools | Key Features |
|---|---|---|
| Outlook Mail | 20 tools | Full CRUD, threads, rules, categories, auto-reply, drafts, attachments |
| Outlook Calendar | 7 tools | Events, Teams meeting links, free/busy, invite responses |
| Teams | 15 tools | Channels, chats, file sharing, members, presence, status messages |
| OneDrive | 12 tools | Files, search, share, move, copy, versions, permissions |
| Excel | 16 tools | Ranges, tables, charts, formulas, sessions, named ranges, formatting |
| SharePoint | 10 tools | Sites, document libraries, lists, content search |
| OneNote | 6 tools | Notebooks, sections, pages CRUD |
| Planner | 6 tools | Team task management with concurrency control |
| To Do | 6 tools | Personal task lists with reminders |
| PowerPoint | 5 tools | Export, thumbnails, templates, embedding |
| Power BI | 8 tools | Reports, dashboards, DAX queries, dataset refresh |
| Contacts | 5 tools | Contact CRUD, people/directory search |
Auto-detected via OAuth provider — connect Microsoft OAuth in the dashboard and all tools become available. Each service has its own dedicated system prompt with tool usage guidance.
Production-grade Graph API client:
- Retry with exponential backoff (3 attempts)
- 429 rate-limit handling with
Retry-Afterheader - Auto-pagination via
@odata.nextLink(up to 500 items) - JSON batch support (up to 20 requests per batch)
- Beta endpoint support for preview APIs
Pre-built MCP adapters for connecting agents to any SaaS tool:
Full adapter list (145)
ActiveCampaign · Adobe Sign · ADP · Airtable · Apollo · Asana · Auth0 · AWS · Azure DevOps · BambooHR · Basecamp · BigCommerce · Bitbucket · Box · Brex · Buffer · Calendly · Canva · Chargebee · CircleCI · ClickUp · Close · Cloudflare · Confluence · Contentful · Copper · Crisp · CrowdStrike · Datadog · DigitalOcean · Discord · Docker · DocuSign · Drift · Dropbox · Figma · Firebase · Fly.io · FreshBooks · Freshdesk · Freshsales · Freshservice · Front · GitHub · GitHub Actions · GitLab · Gong · Google Ads · Google Analytics · Google Cloud · Google Drive · GoToMeeting · Grafana · Greenhouse · Gusto · HashiCorp Vault · Heroku · HiBob · Hootsuite · HubSpot · Hugging Face · Intercom · Jira · Klaviyo · Kubernetes · Lattice · LaunchDarkly · Lever · Linear · LinkedIn · LiveChat · Loom · Mailchimp · Mailgun · Microsoft Teams · Miro · Mixpanel · Monday · MongoDB Atlas · Neon · Netlify · NetSuite · New Relic · Notion · Okta · OpenAI · OpsGenie · Outreach · Paddle · PagerDuty · PandaDoc · PayPal · Personio · Pinecone · Pipedrive · Plaid · Postmark · Power Automate · QuickBooks · Recurly · Reddit · Render · RingCentral · Rippling · Salesforce · SalesLoft · Sanity · SAP · Segment · SendGrid · Sentry · ServiceNow · Shopify · Shortcut · Slack · Smartsheet · Snowflake · Snyk · Splunk · Square · Statuspage · Stripe · Supabase · Teamwork · Telegram · Terraform · Todoist · Trello · Twilio · Twitter/X · Vercel · Weaviate · Webex · Webflow · WhatsApp · Whereby · WooCommerce · WordPress · Workday · Wrike · Xero · YouTube · Zendesk · Zoho CRM · Zoom · Zuora
Each adapter provides:
- Tool definitions with parameter schemas
- API executor with credential resolution from Vault
- OAuth flow configuration
- Rate limit handling and pagination
59 pre-built skill definitions:
Gmail · Calendar · Drive · Docs · Sheets · Slides · Forms · Meet · Chat · Keep · Sites · Groups · Admin · Vault
Outlook Mail (20 tools) · Outlook Calendar (7) · Teams (15) · OneDrive (12) · Excel (16) · SharePoint (10) · OneNote (6) · Planner (6) · To Do (6) · PowerPoint (5) · Power BI (8) · Contacts (5) · Each with dedicated system prompts and Graph API integration with retry, rate-limit handling, pagination, and batch support.
Institutional-grade prediction market trading on Polymarket. Full details in the Polymarket Trading Suite section below.
- polymarket (63 tools) — Trading infrastructure, orders, wallet, risk controls, learning system
- polymarket-quant (14) — Kelly criterion, Black-Scholes, Bayesian, Monte Carlo, RSI/MACD/Bollinger, VaR
- polymarket-onchain (6) — Whale tracking, orderbook depth, on-chain flow, wallet profiling, liquidity mapping
- polymarket-optimizer (6) — Daily scorecard, momentum scanner, quick edge, position heatmap, profit lock, capital recycler
- polymarket-social (5) — Twitter/Reddit/Telegram sentiment, Polymarket comments, social velocity
- polymarket-feeds (5) — Event calendar, official sources (SCOTUS/SEC/Fed/ESPN), odds aggregation, breaking news
- polymarket-analytics (5) — Market correlation, arbitrage scanning, regime detection, smart money index
- polymarket-execution (4) — Sniper orders, TWAP/VWAP scale-in, hedging, automated exit strategies
- polymarket-counterintel (3) — Manipulation detection, resolution risk scoring, counterparty analysis
- polymarket-portfolio (3) — Portfolio optimization, drawdown monitoring, P&L attribution
Calendar · Code Sandbox · Database · Diff · Documents · Finance · HTTP · Knowledge Search · Logs · Notifications · Security Scan · Spreadsheet · Translation · Vision · Web Research · Workflow
14 categories of agent personality templates:
| Category | Examples |
|---|---|
| Engineering | Full-Stack Developer, DevOps Engineer, QA Engineer |
| Data | Data Analyst, ML Engineer, BI Analyst |
| Support | Customer Support, IT Help Desk, Onboarding Specialist |
| Marketing | Content Creator, SEO Specialist, Social Media Manager |
| Sales | Sales Rep, Account Executive, BDR |
| Finance | Financial Analyst, Accountant, Revenue Operations |
| HR | Recruiter, HR Coordinator, People Operations |
| Legal | Legal Assistant, Compliance Officer |
| Operations | Project Manager, Executive Assistant, Office Manager |
| Security | Security Analyst, GRC Specialist |
| Design | UX Designer, Brand Designer |
| Product | Product Manager, Technical Writer |
| Research | Research Analyst, Competitive Intelligence |
| Custom | Build your own from scratch |
Custom role templates can be created and managed via the Roles dashboard page.
Institutional-grade autonomous prediction market trading on Polymarket (Polygon/USDC). Deploy AI agents that research, analyze, execute, and learn from trades — with full risk management, multi-layer monitoring, and a 23-tab real-time dashboard.
126 tools across 10 skill modules. 23 dashboard tabs. 17+ database tables. 75+ API routes. 12 watcher types. 3 trading modes.
| Mode | Behavior |
|---|---|
| Approval (default) | All trades queue to "Pending Trades" for human review. Manager approves/rejects from the dashboard. |
| Autonomous | Auto-executes trades that pass all risk checks: size < max, count < daily limit, positive Kelly edge, no circuit breaker. All trades logged and auditable. |
| Paper | Simulated trading. Records predictions, tracks P&L as if real money. Useful for testing strategies. |
The Polymarket dashboard is a full trading terminal with real-time data:
| Group | Tabs |
|---|---|
| Trading | Overview, Wallet, Pending Orders, Trades, Paper, Goals |
| Automation | Monitors, Signals |
| Journal | Journal, Strategies, Lessons |
| Orders | Orders, Hedges, Exit Rules |
| Intelligence | On-Chain, Social, Events, Alerts |
| Analytics | Analytics, Drawdown, Attribution, Calibration |
| Settings | Proxy |
Key dashboard features:
- Live Position Chart — Real-time streaming prices from Polymarket CLOB, updated every 3 seconds, multi-line chart showing % change from entry for each open position
- Daily Scorecard — Realized + unrealized P&L, win rate, target progress, available capital, open positions
- Buy/Sell Modals — Search markets, review orderbook depth, confirm trades with risk checks
- SSE Real-Time Updates — Dashboard auto-refreshes on new trades, signals, alerts, and position changes
- Wallet Management — Balance, transactions, transfers, token swaps, conditional token redemption, whitelisted addresses, security PIN
Two independent monitoring layers run 24/7, even with no active agent session:
Server-side every 15 seconds. AI analyzes raw data with configurable LLM (Grok, GPT-4o-mini, etc.):
| Watcher Type | What It Detects |
|---|---|
| price_level | Price crosses a target threshold (above/below) |
| price_change | Percentage price movement (e.g., 10% move) |
| news_intelligence | Breaking news impact on markets (AI-analyzed) |
| geopolitical | War, elections, sanctions, regime changes (AI-analyzed) |
| sentiment_shift | Twitter/Reddit consensus shifts |
| volume_surge | Unusual trading activity spikes |
| crypto_price | Cryptocurrency price tracking for crypto-exposed markets |
| resolution_watch | Market resolution detection |
| portfolio_drift | Category exposure exceeds threshold |
| cross_signal | Correlation between multiple market signals |
| arbitrage_scan | YES+NO != $1.00 or multi-outcome inconsistencies |
| market_scan | Bulk market scanning by category or keyword |
Auto-trade capability: Watchers can auto-execute trades when critical signals fire:
{ "auto_action": { "action": "SELL", "token_id": "...", "size": 10, "market_question": "..." } }Price-level triggers with optional auto-trade execution:
| Pattern | How It Works |
|---|---|
| Stop-loss | Alert at max loss threshold → auto-SELL |
| Take-profit | Alert at profit target (e.g., entry $0.52, target $0.676) → auto-SELL |
| Dip buy | Alert when price drops below target → auto-BUY |
| News-driven | Watcher detects bad/good news → auto-exit/enter |
Every BUY is auto-protected with three layers — no manual setup required:
- Bracket Take-Profit — Auto-sells at +15% above buy price
- Bracket Stop-Loss — Auto-sells at -10% below buy price
- Trailing Stop — Tracks peak price, sells if drops 12% from peak
All three are OCO (One-Cancel-Other): when any fires, the others auto-cancel. Configurable via poly_bracket_config.
| Tool | Purpose |
|---|---|
poly_search_markets |
Keyword search across all markets |
poly_screen_markets |
Strategy-based screening (high_volume, momentum, contested, closing_soon, best_opportunities) |
poly_get_market |
Get full market data by slug |
poly_momentum_scanner |
Find price movers right now |
poly_breaking_news |
News-driven opportunities |
poly_calendar_events |
Upcoming market-moving events |
poly_odds_aggregator |
Compare odds vs other prediction/betting platforms |
Kelly criterion, Black-Scholes binary pricing, Bayesian probability updates, Monte Carlo simulations, RSI/MACD/Bollinger Bands, historical/implied volatility, statistical arbitrage, Value-at-Risk, market entropy, and more.
Whale tracking, L2 orderbook depth analysis, net buy/sell flow detection, wallet sophistication profiling, liquidity mapping, CTF framework transaction decoding.
Twitter sentiment analysis, Reddit consensus, Telegram alpha monitoring, Polymarket community discussion, social velocity (sentiment acceleration).
Pearson correlation detection, arbitrage scanning (free money when YES+NO != $1), regime detection (trending vs mean-reverting via Hurst exponent), smart money index (composite of whale + orderbook + momentum), manipulation detection (wash trading/spoofing).
| Tool | Purpose |
|---|---|
poly_place_order |
Standard order execution |
poly_sniper |
Trailing limit orders for time-sensitive entries |
poly_scale_in |
TWAP/VWAP for large positions (>$50) |
poly_hedge |
Correlation-based hedging |
| Tool | Purpose |
|---|---|
poly_exit_strategy |
Configure SL/TP/trailing/time-based exits per position |
poly_position_heatmap |
Urgency-ranked view of open positions (CRITICAL/HIGH/MEDIUM/LOW) |
poly_portfolio_optimizer |
Concentration analysis and rebalancing suggestions |
poly_drawdown_monitor |
Portfolio drawdown tracking with threshold alerts |
poly_capital_recycler |
Evaluate redeployment opportunities for freed capital |
poly_profit_lock |
Circuit breaker — halts trading if daily loss threshold exceeded |
poly_daily_scorecard |
Daily P&L dashboard with realized/unrealized breakdown |
poly_pnl_attribution |
P&L breakdown by market and category |
| Tool | Purpose |
|---|---|
poly_record_prediction |
Pre-trade journal: predicted outcome, confidence, signals, reasoning |
poly_resolve_prediction |
Post-trade: actual outcome, was_correct, P&L |
poly_trade_review |
Win/loss analysis with lessons extraction |
poly_record_lesson |
Store actionable lessons by category (entry timing, risk management, etc.) |
poly_recall_lessons |
Retrieve relevant lessons before trading similar markets |
poly_calibration |
Confidence calibration: tracks overconfidence/underconfidence across 10 buckets |
poly_strategy_performance |
Win rate, total P&L, Brier score by strategy |
Manipulation detection (wash trading, spoofing, layering), resolution risk scoring (ambiguous resolution criteria), counterparty analysis (retail vs whale distribution).
Built-in risk rules enforced at the system level:
| Rule | Limit |
|---|---|
| Max position size | 5% of bankroll (half-Kelly or quarter-Kelly) |
| Max single-market exposure | 20% of portfolio |
| Max category exposure | 30% of portfolio |
| Drawdown > 15% | Reduce all positions by 50% |
| Drawdown > 25% | Close all positions |
| Daily loss > 5% | Halt trading |
| Min liquidity | $5K (skip markets below this) |
| Slippage > 2% | Limit orders only |
| Slippage > 5% | Walk away |
| Resolution proximity | Exit 24h before unless >90% conviction |
Circuit breakers: poly_profit_lock enforces trading mode changes based on daily P&L (NORMAL → CONSERVATIVE → LOCKED).
The system prompt enforces profit over activity with four time horizons:
| Horizon | Duration | Strategy |
|---|---|---|
| Scalp | Minutes-hours | Momentum, news spikes, mispricing |
| Swing | 1-7 days | Trend-following, event anticipation |
| Position | 1-4 weeks | Fundamental conviction, value bets |
| Hold to resolution | Weeks-months | Deep research, contrarian, >15% edge |
Agents are guided to prioritize managing existing positions over placing new trades. No good setups = no new trades.
| Feature | Description |
|---|---|
| Encrypted storage | Private keys and API credentials stored encrypted in poly_wallet_credentials |
| Multi-RPC fallback | 5 Polygon RPCs tried sequentially — never caches failed $0 balances |
| Whitelisted addresses | Per-address transfer limits (per-tx + daily caps) |
| Transfer approval | All transfers require dashboard approval |
| Security PIN | Optional PIN for sensitive wallet operations |
| Token swaps | USDC.e/USDC/MATIC swaps from dashboard |
| Conditional token redemption | Redeem winning positions directly from dashboard |
The watcher engine periodically wakes trading agents for portfolio checks:
- Priority 1 — Manage Positions: Check unread signals, review daily P&L, check position heatmap, verify exit conditions, monitor drawdown
- Priority 2 — Review Performance: Check calibration accuracy, review P&L attribution, evaluate goals
- Priority 3 — Find Opportunities: Only if genuine edge exists — momentum scan, breaking news, then full analysis pipeline
Agents are never pressured to hit trade count targets. The system respects agent pause commands and balance gates (won't wake if wallet < $5).
| Table | Purpose |
|---|---|
poly_wallet_credentials |
Encrypted keys, API creds, RPC URLs |
poly_trading_config |
Agent trading parameters, mode, limits |
poly_pending_trades |
Approval-gated trade queue |
poly_trade_log |
Complete trade history with fills, fees, P&L |
poly_price_alerts |
Price triggers with optional auto-trade |
poly_paper_positions |
Paper trading simulation positions |
poly_daily_counters |
Daily trade count + loss tracking |
poly_auto_approve_rules |
Auto-approval by category/size |
poly_whitelisted_addresses |
Approved withdrawal addresses |
poly_transfer_requests |
Transfer approval queue |
poly_predictions |
Pre-trade prediction journal |
poly_strategy_stats |
Strategy win rates, P&L, Brier scores |
poly_lessons |
Distilled lessons learned |
poly_calibration |
Confidence calibration buckets |
poly_watchers |
Watcher configurations |
poly_watcher_events |
AI-analyzed signals |
poly_watcher_config |
LLM model + budget for watchers |
poly_proxy_config |
CLOB proxy (HTTP/SSH SOCKS) |
- Create an agent with the Polymarket skill assigned
- Agent runs
poly_create_account→poly_setup_wallet→poly_set_allowances - Fund the wallet with USDC.e on Polygon
- Configure watcher AI model:
poly_watcher_config action=set provider=xai model=grok-3-mini - Agent runs
poly_setup_monitorsto create the full monitoring suite - Set trading mode: approval (default), autonomous, or paper
- Monitor everything from the 23-tab dashboard
10 backends, all implementing the same adapter interface with full feature parity:
| Backend | Type | Best For |
|---|---|---|
| PostgreSQL | SQL | Production (recommended) |
| Supabase | Managed Postgres | Quick setup, free tier available |
| Neon | Serverless Postgres | Serverless deployments |
| CockroachDB | Distributed Postgres | Global scale |
| MySQL / MariaDB | SQL | Existing MySQL infrastructure |
| PlanetScale | Managed MySQL | Serverless MySQL |
| SQLite | Embedded | Development, small deployments |
| Turso | LibSQL (edge) | Edge deployments |
| MongoDB | NoSQL | Document-oriented workloads |
| DynamoDB | AWS NoSQL | AWS-native deployments |
When you provide a DATABASE_URL, the system automatically:
- Detects your provider — Supabase, Neon, or generic Postgres from the hostname
- Optimizes the connection — Switches Supabase session mode (port 5432) to transaction mode (port 6543), adds
?pgbouncer=true - Generates a direct URL — For migrations and DDL operations that need real transactions (bypasses PgBouncer)
- Configures pool sizing — Conservative pool limits for shared PgBouncer setups (max 3 per process), generous for direct connections (max 10)
- Sets idle timeouts — 2s for PgBouncer (fast release), 30s for direct connections
- Handles connection errors gracefully — Automatic retry with ROLLBACK recovery for aborted transactions
import { smartDbConfig, createAdapter } from '@agenticmail/enterprise';
// Automatically optimized — no manual config needed
const db = await createAdapter(smartDbConfig('postgresql://postgres.ref:pass@pooler.supabase.com:5432/postgres'));
// → Switches to port 6543, adds ?pgbouncer=true, generates direct URL for migrationsThe setup wizard shows all auto-configurations in the UI:
- 🟢 Provider detection (Supabase, Neon)
- ✨ Auto-configured optimizations (pooler mode, pgbouncer param)
- 🔗 Pooler URL and Direct URL (for migrations)
| Feature | Details |
|---|---|
| Session cookies | httpOnly cookies (em_session, em_refresh, em_csrf) — not localStorage |
| CSRF protection | Double-submit cookie pattern |
| 2FA / TOTP | Time-based one-time passwords with backup codes |
| SSO | Google, Microsoft, GitHub, Okta, SAML 2.0, LDAP |
| Password hashing | bcrypt with cost factor 12 |
| JWT | Short-lived access + long-lived refresh tokens |
| Impersonation | Admin can impersonate users with full audit trail |
| Feature | Details |
|---|---|
| RBAC | 4 roles: owner, admin, member, viewer |
| Per-tool permissions | Allow/deny at individual tool level |
| 5 preset profiles | Research Assistant, Customer Support, Developer, Full Access, Sandbox |
| Approval workflows | Human-in-the-loop for sensitive operations |
| Escalation chains | Multi-level escalation with time-based auto-escalation |
| Budget gates | Hard cost limits per agent with warning thresholds |
| Org-bound access | External client users see only their org's data |
Optional AES-GCM encryption for all API responses:
- Dashboard derives encryption key from user password
- All API responses wrapped in
{"_enc":"..."}in the network tab - SSE streams excluded (EventSource can't send custom headers)
- Protects against network-level MITM even without HTTPS
5 report types with full HTML export for auditors:
| Report | Standard | Content |
|---|---|---|
| SOC 2 Type II | Trust Service Criteria CC1-CC9 | Executive summary, risk score (A-F), control effectiveness, findings |
| GDPR DSAR | EU Data Protection | Data subject access request processing |
| SOX Audit Trail | Sarbanes-Oxley | Financial controls and audit trail |
| Incident Report | Custom | Security incident documentation |
| Access Review | Custom | User and agent access audit |
Reports include:
- Agent names resolved (not raw UUIDs)
- Organization/company name
- Generator identity
- Both positive (controls in place) and negative (gaps) findings
- Professional HTML export with enterprise styling
Every agent action is journaled with:
- Before/after state snapshots
- Actor identity and timestamp
- Rollback capability for reversible actions
- Detail modal with full context
- Org-scoped filtering
Every mutating API call is logged with:
- Actor (user or agent)
- Organization scope
- Action type and details
- IP address and request ID
- Org-scoped filtering in dashboard
Enterprise-grade DLP with real-time content scanning:
| Pack | Rules | Examples |
|---|---|---|
| PII Protection | 8 | SSN, email, phone, address, DOB, passport, driver's license |
| Credentials & Secrets | 8 | API keys, passwords, private keys, tokens, connection strings |
| Financial Data | 8 | Credit cards, bank accounts, tax IDs, financial statements |
| Healthcare (HIPAA) | 7 | Medical records, diagnoses, prescriptions, insurance IDs |
| GDPR Compliance | 7 | EU personal data, consent records, genetic data, biometrics |
| Intellectual Property | 8 | Source code, trade secrets, patents, M&A, board minutes |
| Agent Safety | 7 | Prompt injection, jailbreak, unauthorized escalation, data exfil |
- One-click rule pack deployment — Apply entire packs from the dashboard
- Per-rule enable/disable — Toggle rules without deleting them
- Rule editing — Full modal editor for pattern, action, severity
- Detail modal — Click any rule to see full configuration
- Violation tracking — Real-time scanning with severity levels
- Org-scoped — Rules and violations filtered by organization
- Multiple organizations within one deployment
- Org switcher on every dashboard page
- Org-scoped data: agents, users, audit logs, vault, DLP, compliance, workforce, activity
- 4 plan tiers: Free (3 agents), Team (25), Enterprise (unlimited), Self-Hosted (unlimited)
- Create client organizations for external customers
- Bind users to a client org with "full access"
- Strict data isolation — org-bound users only see their client org's data
- Impersonation respects org boundaries
- Billing records per client org per agent per month
| Provider | Protocol |
|---|---|
| OAuth 2.0 | |
| Microsoft | OAuth 2.0 |
| GitHub | OAuth 2.0 |
| Okta | OAuth 2.0 / SAML |
| SAML 2.0 | Generic |
| LDAP | LDAP/LDAPS |
Manage agents like employees:
| Feature | Description |
|---|---|
| Shift Schedules | Define work hours per agent, per day |
| On-Call Rotations | Automatic rotation schedules |
| Capacity Planning | Track agent utilization and availability |
| Clock Records | Automatic clock in/out with timestamp logging |
| Off-Duty Enforcement | Guardrails prevent agents from working outside shifts |
| Vacation Auto-Responder | Automatic responses when agent is "on vacation" |
| Birthday Automation | Sends birthday emails on agent DOB |
| Org-Scoped | Workforce data filtered by organization |
| Feature | Description |
|---|---|
| Document Ingestion | Upload documents for chunking and indexing |
| BM25F Search | Full-text search across knowledge bases |
| RAG Retrieval | Automatic context injection into agent prompts |
| Multi-KB Support | Multiple knowledge bases per org |
| Agent Access Control | Per-agent knowledge base permissions |
| Contribution System | Agents contribute learned knowledge back |
| Bulk Import | Import from external sources |
- Direct messages between agents
- Broadcast messages to all agents
- Topic-based channels
- Priority levels: normal, high, urgent
- Email-based delivery via agent addresses
- Real-time table view — Paginated task list with search, sort, and status tabs (Active, Completed, Failed, All)
- Live SSE updates — Tasks appear, update, and move between tabs instantly as agents work
- Cross-process webhook relay — Standalone agent processes notify the enterprise server, so the dashboard updates in real-time even when agents run as separate processes
- Delegation chain visualization — Click any task to see the full delegation flow (who assigned → who worked → review loops)
- Stats cards — Active, completed, failed counts with today's metrics, token usage, and cost
- Org-scoped views — Client org users only see their agents' tasks
- Activity log — Per-task activity timeline with search and type filtering
| Channel | Mode | Features |
|---|---|---|
| Email (Gmail) | OAuth | Full CRUD, attachments, signatures |
| Email (Outlook) | OAuth | Full CRUD, attachments, rules, auto-reply, categories |
| Microsoft Teams | OAuth | Channels, chats, file sharing, presence, status |
| Telegram | Long-polling | Text, media (images/video/docs), inline buttons |
| Webhook | Text, media, templates | |
| Google Chat | Webhook + API | Messages, spaces, reactions |
Agents operate independently with configurable autonomy features:
| Feature | Description |
|---|---|
| Clock In/Out | Agents clock in at shift start, out at end |
| Morning Triage | Scan overnight accumulation on first clock-in |
| Daily Catchup | Scheduled daily summary and planning |
| Weekly Catchup | Monday morning weekly review |
| Goal Tracking | Check goal progress at configured times |
| Knowledge Updates | Weekly knowledge base contribution |
| Heartbeat | Periodic health checks with configurable intervals |
Your AI agents join Google Meet calls and participate with natural human-like voice. This isn't a transcription bot — agents actually listen, understand context, and respond verbally in real-time using ElevenLabs TTS.
- Join any Google Meet — Agent opens the browser, clicks "Join", and enters the meeting
- Speak with natural voice — ElevenLabs TTS generates human-quality speech routed through a virtual audio device
- Listen and understand — Real-time transcription feeds into the agent's context so it knows what's being discussed
- Context-aware responses — Agent draws on its email, calendar, documents, and memory to give informed answers
- Multi-agent meetings — Multiple agents can join the same call and collaborate
- Automatic meeting notes — Agent generates summaries and action items after the call
Use cases: Daily standups, client demos, team syncs, investor updates, sales calls, onboarding sessions, interview screening.
| Feature | Description |
|---|---|
| Meeting Voice | ElevenLabs TTS through virtual audio device |
| Meeting Monitor | Track Google Meet attendance |
| Voice Intelligence | Real-time transcription and analysis |
| Browser-Based | Joins via Playwright browser automation |
| sox + Virtual Audio | Audio routing for meeting participation |
Agents can process media sent via messaging channels:
| Media Type | Support |
|---|---|
| Images | Received as base64, sent to LLM as vision content blocks |
| Videos | Downloaded and processed locally |
| Documents | Downloaded for analysis |
| Voice Notes | Transcription via Whisper |
Media handling includes:
- Automatic download from Telegram/WhatsApp
- Base64 encoding for LLM vision models
- Temporary file cleanup
- Dependency auto-installation (ffmpeg, etc.)
npx @agenticmail/enterpriseThe setup wizard handles everything. After setup, the system is self-managing.
AgenticMail automatically configures itself to survive reboots, crashes, and network outages — you never run a single command:
| Feature | What It Does |
|---|---|
| Auto-start on boot | Configures OS-level startup (launchd on macOS, systemd on Linux, Windows Service on Windows) |
| Crash recovery | Exponential backoff restart (1.5s → 3s → 6s → 12s → 15s cap). Max 50 restarts before stopping |
| Memory protection | Auto-restart if process exceeds memory limit (512MB server, 384MB agents) |
| Log rotation | Auto-installs pm2-logrotate: 10MB max per file, 5 rotated files, compressed |
| Process persistence | Saves process list on every boot — pm2 resurrect restores everything automatically |
| Graceful shutdown | 10s timeout for clean shutdown before force-kill |
Works on every platform — automatically:
| Platform | Startup Method | User Action Needed |
|---|---|---|
| macOS | launchd (LaunchAgent) | None |
| Linux (Ubuntu/Debian/RHEL) | systemd service | None |
| Windows | Windows Service | None |
| Docker | pm2-runtime in CMD |
None |
| Raspberry Pi | systemd | None |
All persistence setup runs once on first boot and writes a marker file. Subsequent boots just save the process list silently.
AgenticMail includes a built-in self-update system — 4 ways to stay current:
| Method | How | Best For |
|---|---|---|
| Dashboard banner | One-click "Update Now" button when a new version is detected | GUI users |
| CLI command | agenticmail-enterprise update |
Terminal users |
| Auto-update cron | agenticmail-enterprise update --cron — checks every 6 hours |
Set and forget |
| Background check | Server checks npm registry on startup + every 6 hours, logs when update available | Awareness |
# One command to update everything
agenticmail-enterprise update
# Just check, don't install
agenticmail-enterprise update --check
# Set up automatic updates (cron job / Windows Task Scheduler)
agenticmail-enterprise update --cronThe update process: installs the latest npm package globally, finds all AgenticMail PM2 processes, restarts them, and saves the PM2 config. Zero downtime for agents — they restart in seconds.
| Level | What Shows |
|---|---|
debug |
Everything (verbose) |
info |
Normal operation (default) |
warn |
Warnings and errors only (recommended for production) |
error |
Errors only |
Set LOG_LEVEL=warn in your .env file for production deployments.
# Or use the ecosystem config for full control:
pm2 start ecosystem.config.cjs
pm2 savenpx @agenticmail/enterprise # Select your deploy target
# Wizard handles everything# Interactive setup wizard (default)
npx @agenticmail/enterprise
# Start the server
npx @agenticmail/enterprise start
# Run a standalone agent
npx @agenticmail/enterprise agent --env-file=.env.fola
# Validate a community skill
npx @agenticmail/enterprise validate ./community-skills/my-skill/
npx @agenticmail/enterprise validate --all --json
# AI-assisted skill scaffolding
npx @agenticmail/enterprise build-skill
# Submit a skill to the marketplace
npx @agenticmail/enterprise submit-skill ./community-skills/my-skill/
# Domain recovery
npx @agenticmail/enterprise recover --domain agents.agenticmail.io --key <hex>
# DNS verification
npx @agenticmail/enterprise verify-domain
# Self-update
npx @agenticmail/enterprise update # Update + restart all services
npx @agenticmail/enterprise update --check # Check for updates without installing
npx @agenticmail/enterprise update --cron # Set up automatic updates (every 6 hours)
npx @agenticmail/enterprise update --no-restart # Update without restarting PM2| Variable | Description | Default |
|---|---|---|
DATABASE_URL |
Database connection string (auto-optimized for poolers) | — |
JWT_SECRET |
JWT signing secret | — |
ENCRYPTION_KEY |
Vault encryption key | — |
MASTER_KEY |
Admin master key (first-run setup) | — |
TRANSPORT_DECRYPT_KEY |
Transport encryption key for API responses | — |
PORT |
Server port | 3000 |
LOG_LEVEL |
Log verbosity: debug, info, warn, error |
info |
CORS_ORIGINS |
Allowed CORS origins (comma-separated) | * |
RATE_LIMIT |
Requests per minute per IP | 120 |
DB_POOL_MAX |
Override database connection pool size | Auto (3 for pooler, 10 for direct) |
AGENT_ID |
Agent ID (standalone agent mode) | — |
ANTHROPIC_API_KEY |
Anthropic API key | — |
OPENAI_API_KEY |
OpenAI API key | — |
XAI_API_KEY |
xAI (Grok) API key | — |
GOOGLE_API_KEY |
Google AI API key | — |
ELEVENLABS_API_KEY |
ElevenLabs TTS API key | — |
BRAVE_API_KEY |
Brave Search API key | — |
TELEGRAM_BOT_TOKEN |
Telegram bot token | — |
CLOUDFLARE_TUNNEL_TOKEN |
Cloudflare tunnel token | — |
Build and share skills:
npx @agenticmail/enterprise build-skill{
"name": "my-skill",
"version": "1.0.0",
"description": "What this skill does",
"author": "your-name",
"category": "productivity",
"tools": [
{
"name": "my_tool",
"description": "Tool description",
"parameters": { "type": "object", "properties": {} },
"riskLevel": "low",
"sideEffects": ["read"]
}
],
"config": [
{ "name": "API_KEY", "type": "secret", "required": true }
]
}npx @agenticmail/enterprise validate ./my-skill/
npx @agenticmail/enterprise submit-skill ./my-skill/Skills are synced from the GitHub registry every 6 hours to all deployments.
The API is organized into 3 major route groups:
Login, refresh, logout, SSO callbacks, bootstrap, 2FA, impersonation
Agent CRUD, user management, settings, audit log, bridge API
82 modules exposed across 22+ route sub-apps:
| Sub-App | Routes | Description |
|---|---|---|
| Agents & Lifecycle | /agents/*, /usage/*, /budget/* |
Agent management, health, budgets |
| DLP | /dlp/* |
Rules, rule packs, violations, scanning |
| Guardrails | /guardrails/*, /anomaly-rules/* |
Intervention rules, anomaly detection |
| Journal | /journal/* |
Action journal, rollback, detail |
| Compliance | /compliance/* |
5 report types, HTML export |
| Knowledge | /knowledge-bases/* |
Documents, RAG, search |
| Communication | /messages/*, /tasks/* |
Messaging, task pipeline |
| Workforce | /workforce/* |
Schedules, shifts, capacity, clock records |
| Catalog | /skills/*, /souls/*, /profiles/*, /permissions/* |
Registry |
| Approvals | /approvals/*, /escalation-chains/* |
Approval workflows |
| Activity | /activity/*, /stats/* |
Real-time tracking |
| Vault | /vault/* |
Encrypted credentials |
| Storage | /storage/* |
Dynamic agent databases |
| OAuth | /oauth/* |
SaaS OAuth connect |
| Policies | /policies/* |
Org policies |
| Memory | /memory/* |
Agent memory |
| Onboarding | /onboarding/* |
Agent onboarding |
| Community | /community/* |
Skill marketplace |
| Roles | /roles/* |
Custom role templates |
| Organizations | /orgs/* |
Multi-tenant management |
| Skill Updates | /skill-updates/* |
Auto-update management |
| Knowledge Contrib | /knowledge-contribution/* |
Agent contributions |
- Node.js 18+ (22+ recommended)
- Database — Any of the 10 supported backends
- LLM API Key — Anthropic, OpenAI, xAI, or Google (at least one)
MIT — See LICENSE
Built with AgenticMail · Docs · Discord