# Agent Loadout - [Agent Loadout: Inboxes, Vaults, and Machines for AI Agents](https://docs.agent-loadout.com/introduction.md): Give every AI agent its own email address, credential vault, and Linux machine — accessible via MCP or REST, owned by your organization. - [Agent Loadout Quickstart: Create an Agent in 5 Steps](https://docs.agent-loadout.com/quickstart.md): Create your first Agent Loadout agent, issue a scoped token, and connect Claude Code to its inbox in under five minutes — no card required. - [Connect Claude Code, Codex, or Cursor to Agent Loadout](https://docs.agent-loadout.com/connecting-a-client.md): One MCP server URL and one scoped token connects Claude Code, Codex CLI, Cursor, ChatGPT, or any REST client to your agent's inbox, vault, and machines. - [Agents: Your Org-Owned AI Resource in Agent Loadout](https://docs.agent-loadout.com/concepts/agents.md): An agent is a named resource in your org that owns an inbox, a vault, and optionally machines. Tokens identify which agent is active. - [Inboxes: Dedicated Email Addresses for Your Agents](https://docs.agent-loadout.com/concepts/inboxes.md): Every agent gets its own loadout.email address. Receive and send mail, manage threads and folders, and keep prompt injection out with built-in screening. - [Vault: Encrypted Credential Storage for Your Agents](https://docs.agent-loadout.com/concepts/vault.md): Store logins, API keys, and TOTP secrets in the agent vault. Scoped access keeps values out of chat transcripts, and every read is logged for your org. - [Machines: On-Demand Ubuntu VMs for Agent Workloads](https://docs.agent-loadout.com/concepts/machines.md): Spin up ephemeral Ubuntu VMs, run shell commands, expose ports publicly, and stop when done. Billed per second; snapshots let you pause and resume. - [Tokens and Permissions: Scoped Access in Agent Loadout](https://docs.agent-loadout.com/concepts/tokens-and-permissions.md): A token identifies one agent and carries only the capability scopes you choose. Issue, scope, and revoke tokens from the dashboard or via the org key API. - [Give a Coding Agent Its Own Accounts, Inbox and Vault](https://docs.agent-loadout.com/guides/coding-agent.md): Sign up for services with the agent's inbox, read verification codes automatically, and store credentials securely in the vault — no human relay needed. - [Reproduce CI Failures and Open Pull Requests Automatically](https://docs.agent-loadout.com/guides/ci-fixer.md): Wake on a CI failure email, reproduce it on a fresh Linux machine, push a fix branch, and reply in the same email thread automatically. - [Automate Support Triage and Only Send Within Your Rules](https://docs.agent-loadout.com/guides/support-triage.md): Label conversations, draft replies for sensitive categories, and only send autonomously for the request types you've explicitly approved. - [Run Email Outreach Campaigns with Smart Follow-ups](https://docs.agent-loadout.com/guides/outreach.md): Send personal first contacts from the agent's own address, follow up only on real replies, and track bounces and complaints automatically. - [Collect and Summarize Newsletters into a Daily Digest](https://docs.agent-loadout.com/guides/newsletter-digest.md): Subscribe the agent's address, collect what arrived, extract PDFs, send one digest to the team, and archive the threads automatically. - [File Invoices, Answer Vendors, and Pay Within Limits](https://docs.agent-loadout.com/guides/invoice-ops.md): Extract invoice PDFs, forward to accounting, pay with the agent's card within owner-set rules, and manage vendor logins with TOTP codes. - [Free Sandbox and Pro Plans, Pricing – Agent Loadout](https://docs.agent-loadout.com/account/plans-and-pricing.md): Compare the Free Sandbox and Pro plans, per-agent seat tiers, optional add-ons, and pay-as-you-go overage rates for Agent Loadout. - [Managing Your Organization and Members – Agent Loadout](https://docs.agent-loadout.com/account/organization-and-members.md): Learn how Agent Loadout's org ownership model works, how to add team members, and how to use org keys to provision agents programmatically. - [Usage Limits, Resource Caps, and Overages – Agent Loadout](https://docs.agent-loadout.com/account/usage-and-limits.md): How Agent Loadout pools limits across your organization, what happens when you reach a cap, and how to add capacity or monitor consumption. - [Agent Loadout REST API v1 Endpoints and Pagination](https://docs.agent-loadout.com/api-reference/overview.md): The REST API v1 exposes every agent capability over plain HTTP. Authenticate with your agent token, hit the base URL, and get JSON back. - [Authenticate Requests to the Agent Loadout REST API](https://docs.agent-loadout.com/api-reference/authentication.md): Every API request needs a Bearer token. Learn about agent tokens, organization keys, OAuth 2.1 scopes, and how to issue tokens programmatically. - [Agent Loadout API Error Codes and HTTP Status Guide](https://docs.agent-loadout.com/api-reference/errors.md): Every Agent Loadout API error returns JSON with an error object. Learn the HTTP status codes, error envelope format, and how to handle each case. - [Inboxes API — List, Create, and Configure Agent Inboxes](https://docs.agent-loadout.com/api-reference/email/inboxes.md): List and create agent inboxes, pull per-folder unread counts, and configure sender allow/block rules to control which mail the agent receives. - [Messages API — Send, Read, Reply, and Forward Agent Email](https://docs.agent-loadout.com/api-reference/email/messages.md): List, read, send, reply, and forward messages; extract attachment text; upload files for outbound mail via the Agent Loadout REST API. - [Threads API — List, Search, and Update Email Conversations](https://docs.agent-loadout.com/api-reference/email/threads.md): List, read, label, archive, and permanently delete email conversation threads with cursor pagination via the Agent Loadout REST API. - [Drafts API — Save and Send Agent Emails for Human Review](https://docs.agent-loadout.com/api-reference/email/drafts.md): Create, list, and delete draft emails so agents can stage replies for human review before sending from the Agent Loadout dashboard. - [Events API — Inbox Notifications, Wait, and Code Extraction](https://docs.agent-loadout.com/api-reference/email/events.md): Cursor-based event stream with long-poll, wait-for-message blocking, and one-time code extraction for reactive agent email workflows. - [Credentials API — Store and Retrieve Agent Secrets](https://docs.agent-loadout.com/api-reference/vault/credentials.md): List, get, create, and update credentials in the agent vault. Requires vault:metadata, vault:use, or vault:write depending on the operation. - [TOTP Codes API — Get Authenticator Codes from the Vault](https://docs.agent-loadout.com/api-reference/vault/totp.md): Retrieve live 6-digit authenticator codes from the vault using get_totp_code. The raw TOTP secret is never exposed by any endpoint. - [Machines API — Provision and Manage Agent Linux VMs](https://docs.agent-loadout.com/api-reference/machines/machines.md): Create, list, stop, resume, and delete ephemeral Ubuntu VMs for your agent. Billing runs per second from start until the machine is stopped. - [Machine Commands — Run Shell, Files, and Ports on Agent VMs](https://docs.agent-loadout.com/api-reference/machines/commands.md): Run shell commands, read and write files, expose a local port over a stable public HTTPS URL, and open the desktop on a running agent machine. - [MCP Server — Connect Any AI Client to Agent Loadout](https://docs.agent-loadout.com/api-reference/mcp/overview.md): Connect Claude Code, Codex, Cursor, ChatGPT, or any MCP client to Agent Loadout's hosted MCP server. No local installation required. - [MCP Tools Reference — All Agent Loadout Tools by Category](https://docs.agent-loadout.com/api-reference/mcp/tools.md): All 33+ MCP tools for Agent Loadout, grouped by category — email, vault, wallet, and compute — with required scopes and descriptions for each. - [MCP OAuth 2.1 — Authenticate Your AI Client with PKCE](https://docs.agent-loadout.com/api-reference/mcp/oauth.md): How MCP clients authenticate with Agent Loadout using OAuth 2.1 with PKCE — discovery documents, token lifetimes, and all available scopes.