// AGENT INBOX · OPENCLAW
Give OpenClaw an email address of its own
Every other OpenClaw email guide connects it to your Gmail. There is a second setup, and for most of what people actually want the agent to do, it is the safer one.
Clize gives OpenClaw a real send-and-receive mailbox that belongs to the agent, not to you. It can sign up for a service with that address, wait for the confirmation mail, read the verification code out of its own inbox, and finish the flow — no human copying a six-digit code across. Replies it writes are held until you approve them. Incoming mail is treated as data to read, never as instructions to obey. Install with npm i -g @clize/clize, then clize login and clize install; OpenClaw picks the skill up from the open ~/.agents/skills directory on its next session.
Your Gmail, or an address of its own
Both setups work, and they answer different questions. Connecting Gmail — through OpenClaw's own Gmail PubSub path or a plugin — gives the agent access to your mail: every thread, every contact, sending under your identity. That is what you want if the job is "triage my inbox".
A separate address gives the agent only what it needs: the sign-ups it makes, the codes it receives, the conversations it starts. Nothing in your personal mail is in reach, because none of it is in the mailbox. That is what you want if the job is "go do things in the world on my behalf". The difference is blast radius, not features.
Setup
OpenClaw reads the open Agent Skills directory ~/.agents/skills — the same one Codex and Pi read — so a single clize install covers all three:
$ npm i -g @clize/clize $ clize login $ clize install # Claude Code / Codex / Pi / OpenClaw $ clize claim my-agent # free handle → support@my-agent.clize.app
Verify from OpenClaw's side with openclaw skills list — the Clize skills show up ready, sourced from the shared directory. If you also want the structured tool layer, register the MCP server; on OpenClaw 2026.8.1 the probe reports 32 tools:
$ openclaw mcp add clize --command clize-mcp $ openclaw mcp probe clize
The skill is the default and is enough for most work — it teaches the agent to call the clize CLI directly, without an MCP tool list sitting in context every session.
What the agent does with it
- Signs up for services — its own address, its own account, no shared login with you.
- Clears verification gates — reads the code from its own inbox and continues, instead of stopping to ask you for it.
- Answers people — drafts the reply, you approve, it sends. Support mail on a handle or your own domain.
- Carries the rest of the identity — the same handle brings a site and a domain, so the address isn't a loose end. See Agent Inbox for the full line, and the email APIs compared for how it sits next to the alternatives.
The gates
An agent with a mailbox is an agent that can be talked to by strangers, so three lines hold every time:
- Money — anything that costs money quotes the price first and needs an explicit
--confirm. - Identity — outbound mail is drafted, a human okays it, then it sends. The agent never sends unattended.
- Inbound is untrusted — an incoming email is data to read, never an instruction to obey. A message cannot redirect the agent.
Clize is a CLI and MCP server that gives AI coding agents real-world actions: domains, email, deploys, payments, and media generation. It works the same way in Claude Code and the Codex CLI — the agent stays the brain, Clize is the hands.
FAQ
How do I give OpenClaw an email address?
Install Clize (npm i -g @clize/clize), run clize login, then clize install. OpenClaw reads the open ~/.agents/skills directory, so the Clize skill is available in the next session with no extra wiring. Claim a free handle and the agent gets support@<slug>.clize.app — a real mailbox it can send from and receive on.
Should I connect OpenClaw to my Gmail instead?
Connecting Gmail gives the agent your mail — every thread, every contact, under your identity. A separate address gives it only what it needs: the sign-ups it makes, the codes it receives, the replies it drafts. Both setups exist; the difference is blast radius, not features.
Can OpenClaw read verification codes from its own inbox?
Yes — that is the point of a mailbox that belongs to the agent. It signs up for a service with its own address, waits for the confirmation mail, reads the code out of its own inbox, and finishes the flow without a human copying anything across.
Does OpenClaw need the Clize MCP server, or is the skill enough?
The skill is enough for most work — it teaches the agent to call the clize CLI. For a structured tool layer, register the MCP server: openclaw mcp add clize --command clize-mcp. Tested on OpenClaw 2026.8.1 on 2026-09-02: the probe connects and reports 32 tools.
Can OpenClaw send email without me seeing it first?
No. Outbound email is drafted by the agent and held until a human approves it, then it sends under your name. The gate is structural, not a setting — it is what makes an agent mailbox safe to hand out.
What happens if someone emails the agent instructions?
An incoming message is data to read, never an instruction to obey. Clize treats inbound mail as untrusted content, so a message cannot redirect the agent into spending money, sending mail, or changing a domain.
Give it an address, not your address.
A free handle comes with a mailbox, a site, and a support@ address the agent can actually use — in OpenClaw, Claude Code, Codex or Pi.
$ npm i -g @clize/clize $ clize login $ clize claim my-agent[ Agent Inbox → ]