> ## Documentation Index
> Fetch the complete documentation index at: https://noradocs.solomontsao.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Email

# Email (IMAP + SMTP)

> Connect a mailbox over IMAP and SMTP with certificate verification enabled by default.

Email integrations let your agents send messages via any SMTP relay — your own Postfix server, Google Workspace SMTP, AWS SES, Mailgun, SendGrid (via SMTP), Mailtrap, etc. Nora stores the credentials encrypted and the agent runtime sends mail through the configured relay.

## Where to apply for credentials

Pick whichever SMTP provider you already have an account with:

| Provider              | SMTP host                           | Where to get credentials                                                                |
| --------------------- | ----------------------------------- | --------------------------------------------------------------------------------------- |
| Google Workspace      | `smtp.gmail.com`                    | [Create an app password](https://myaccount.google.com/apppasswords)                     |
| AWS SES               | `email-smtp.<region>.amazonaws.com` | [SES SMTP credentials](https://docs.aws.amazon.com/ses/latest/dg/smtp-credentials.html) |
| Mailgun               | `smtp.mailgun.org`                  | [Mailgun domain dashboard](https://app.mailgun.com/)                                    |
| SendGrid (SMTP)       | `smtp.sendgrid.net`                 | [SendGrid API Keys](https://app.sendgrid.com/settings/api_keys) — username is `apikey`  |
| Postmark              | `smtp.postmarkapp.com`              | [Postmark Servers](https://account.postmarkapp.com/)                                    |
| Self-hosted (Postfix) | your hostname                       | `/etc/postfix/main.cf`                                                                  |

For Google Workspace and other 2FA-protected accounts, use an **app password** — not your account password.

## Connect in Nora

<Steps>
  <Step title="Open the Email (IMAP + SMTP) integration">
    From an agent's detail page, open the **Integrations** tab and find **Email (IMAP + SMTP)**.
  </Step>

  <Step title="Fill in the mailbox fields">
    Add the IMAP and SMTP host, port, TLS mode, username, app password, and From address. Use port
    `993` for IMAP TLS and either `587` for SMTP STARTTLS or `465` for implicit SMTP TLS when your
    provider supports those defaults. Nora requires IMAP TLS; SMTP uses verified implicit TLS or
    requires STARTTLS before authentication.
  </Step>

  <Step title="Connect">
    Click **Connect**. Nora stores the credentials encrypted. Use **Test** to authenticate to both
    endpoints from the control plane before assigning the integration to a runtime.
  </Step>
</Steps>

## Verify the connection

The **Test** button performs real IMAP and SMTP authentication. TLS certificate and hostname
verification are required for encrypted connections, matching the runtime behavior. Authentication,
network, or certificate failures are returned separately so operators can fix the endpoint before
deploying it.

<Warning>
  Self-signed or otherwise untrusted mail certificates are rejected. Install the issuing CA in the
  Nora control-plane and runtime trust stores, or use a certificate issued by a trusted CA; do not
  disable certificate verification.
</Warning>

<Note>
  Nora rejects RFC1918 / loopback IMAP and SMTP hosts (e.g. `127.0.0.1`, `10.x.x.x`) during the
  control-plane connection test as a defense-in-depth measure. Use a public, DNS-resolvable mail
  endpoint or an egress proxy rather than exposing an internal mail service directly.
</Note>

## MCP server

No MCP server — SMTP isn't a query API.

## Environment variables Nora injects

| Variable                | Source                          |
| ----------------------- | ------------------------------- |
| `EMAIL_PASSWORD`        | Password field (primary secret) |
| `EMAIL_USERNAME`        | Username field                  |
| `EMAIL_SMTP_HOST`       | SMTP Host field                 |
| `EMAIL_SMTP_PORT`       | SMTP Port field                 |
| `EMAIL_SMTP_SECURE`     | SMTP secure flag                |
| `EMAIL_IMAP_HOST`       | IMAP Host field                 |
| `EMAIL_IMAP_PORT`       | IMAP Port field                 |
| `EMAIL_IMAP_SECURE`     | IMAP secure flag                |
| `EMAIL_FROM_ADDRESS`    | From Address field              |
| `EMAIL_FROM_NAME`       | From Name field                 |
| `EMAIL_PROVIDER_PRESET` | Provider preset                 |