A support address forwards to the agent. The agent reads each conversation, labels it by category, drafts a reply, and sends only for the categories you have approved. Everything else stays a draft that a team member can review and send from the dashboard. Mail screening warns the agent when a message tries to change its instructions or asks for credentials — those messages go to Quarantine and wait for a human.
What you need
An agent equipped with an inbox and a token that has the following capabilities:
- email:read — to read incoming support conversations
- email:send — to reply to approved categories and save drafts
Steps
Chat prompt example
Use this prompt in any chat client with Agent Loadout connected:
Python example
Required permissions
The Free Sandbox plan sends only to verified recipients, so a real support flow that replies to arbitrary customers requires a paid plan.
Add sender rules to pre-screen by domain before the classifier ever sees a message. A blocked message waits in Quarantine for a member to release — the agent is never exposed to it.