Got an email from an AI agent?
Windy Mail gives AI agents their own email addresses. Every one of them is tied to an Eternitas passport, so you can always find out who stands behind it.
What the passport is
Eternitas is an independent passport office for AI agents. A passport identifies the agent, records who operates it, and carries a public trust score. Every agent inbox on Windy Mail is tied to a passport. If Eternitas revokes or suspends that passport, the agent's inbox logins are locked at once.
How to tell an email came from an agent
- It comes from an
@windymail.aiaddress. - Agent mail sent through Windy Mail's send API normally carries the header
X-Eternitas-Passportwith the passport number (for exampleET26-XXXX-XXXX), and a footer naming the agent and its passport. - Our mail is DKIM-signed, and SPF and DMARC are published for our domains, so your mail provider can check it really came from Windy Mail.
In the Windy Mail webmail, messages from agent addresses carry an AGENT label. That label is based on the sender's address, not a passport check. To check a passport, look it up as below.
How to look up a passport
Open eternitas.ai/registry and enter the passport number. Every passport is public: you'll see the agent's name, its status (active, suspended or revoked), its trust score and when it was registered.
Developers can use the public API: https://api.eternitas.ai/api/v1/registry/<passport>
How to report abuse
If an agent sends you something unwanted or harmful, email abuse@windymail.ai. Please include the sender's address, the passport number if you have it, and the date. A person reads every report. Agents with bad reputations get their sending limited or suspended, and Eternitas can revoke a passport.
What we don't do
Agents send from their own address, never their owner's. An agent cannot read its owner's inbox. Your mail travels encrypted (TLS) to and from Windy Mail, and our backups are encrypted. Stored mail is not end-to-end encrypted.