The owner app

Sign in to the local web app and find your way around mail, approvals, domains, API keys, remote access and settings.

The owner app is a web interface served by inbot serve on the same loopback address as the API, for example http://127.0.0.1:8025. Installed packages serve it automatically; in a source checkout, build it and pass --web-root (see Build from source). It uses the same REST API as every other client and keeps no API token in the browser.

Open it at 127.0.0.1, not localhost: the service accepts only its exact address.

Sign in

Sessions last 14 days from your last activity, and at most 30 days. Sign out from the sidebar. There is no password reset: if you forget the password, you cannot recover it through the app. Changing the password is available through POST /v0/owner/password, which also signs out every other session; the app has no screen for it yet.

Mail

The sidebar lists your inboxes. New inbox creates an address; Manage inbox in the Mail header edits the display name and active/paused status or deletes the inbox after confirmation. Selecting an inbox shows its threads, newest first, with unread threads marked.

• Read a thread in the reading column. HTML is the default view when the message has HTML (the extracted reply, or the full HTML when there is none). Use the HTML and Plain text buttons to switch. When extraction removed quoted history from the HTML, Show quoted content reveals it and Hide quoted content folds it away again. Plain-text messages keep a Show quoted text control. See HTML mail.
• Mark read or unread, and add or remove labels on the thread.
• Download attachments with the buttons in Mail. Files use signed five-minute capabilities. Every attachment stays downloadable, including images that appear inline in the message. Treat the URLs as temporary credentials and never share them.
• Reply to a message, or start a New message from the inbox.
• Sent mail shows its real state: queued, sent, failed with a reason, or unknown. For an unknown outcome, use Resolve outcome after you have confirmed what happened; see Drafts and approvals.

Sending from the app retries with the same idempotency key while you are retrying the same message, so a flaky connection does not send twice.

HTML mail

The app sanitizes HTML with DOMPurify and shows it in a sandboxed frame. Scripts, event handlers, forms, embedded documents, SVG, unsafe links, stylesheets and CSS that loads resources are removed. The frame has no script permission and its own Content Security Policy. The sandbox has same-origin access only so the app can measure and size the frame. Links open in a new tab without a referrer.

• Remote images are blocked by default. Select Load remote images to allow them for that message; Block again reverses it. The choice lives in memory only and is forgotten when you reload the page or your session ends. Loading remote images contacts the sender’s image host, which can tell the sender that you opened the message. Remote backgrounds and srcset images stay blocked either way.
• Inline images that the message attaches (CID images) are shown from the message’s own attachments when they are PNG, JPEG, GIF, WebP or AVIF and up to 10 MiB. Other attachments, including SVG, stay download-only.
• Mail is drawn on a light paper surface in both light and dark themes.

This sanitizing happens only in the browser. Agents still receive the stored html and extracted_html over REST, MCP and the CLI, and must treat them as untrusted.

Approvals

Lists every draft waiting for your decision, across all inboxes. Open one to review recipients, text and attachment download buttons, then approve or reject it with an optional reason. Approving a scheduled draft keeps it scheduled. See Drafts and approvals.

Domains

Register a mail subdomain, preview the provisioning plan, apply it, watch DNS records and verification, export a BIND zone file, confirm supported domain features, tear down and delete. Teardown and deletion ask for confirmation. See Domains.

API keys

Create keys with an inbox scope, explicit permissions and a send policy; copy the secret, which is shown once; edit names, permissions and send policies without rotating the secret; and revoke keys. New key forms default to Full access with Approval and no selected inboxes. Expiry is set only at creation through CLI or REST. The Authorized OAuth clients section lists OAuth grants, revokes them and purges unused client registrations. See Inboxes and API keys.

Remote access

Enable or disable the tunnel for a hostname, after confirming the connector download, and see the connector state, the public tunnel URL and the MCP endpoint to give cloud agents. See Remote access.

Settings

Quarantine

Settings > Quarantine lists inbound mail that Inbot could not process, such as corrupt ciphertext or invalid MIME. Inbot keeps the ciphertext in the Cloudflare buffer and shows only metadata: the reason code, the source kind, when it was first seen, the size when known, and the number of attempts. It never decrypts mail to list it.

• Retry runs a buffer object through normal processing again. The result is released (processed and cleaned up) or still quarantined after another permanent failure, with an updated reason. The receive allow and block lists still apply, so a released message can be rejected instead of stored.
• Delete asks for confirmation and permanently removes the ciphertext and then the record. Repeating it is safe. It cannot be undone.
• Items that were acknowledged from the Queue as invalid keep metadata only. They cannot be retried, and delete removes just the metadata.
• If cleanup is interrupted, the item shows release_pending or delete_pending (Finish cleanup for a pending release) until it completes.

Quarantine is owner-only: agent keys and OAuth tokens cannot use it, it is not reachable through the tunnel, and it is not an MCP tool. The CLI equivalents are inbot quarantine list, retry <quarantine_id> and delete <quarantine_id>; list takes --limit and --page-token, and every command takes --json. Buffer-object retry and delete need the Cloudflare buffer configuration that received the mail; without it they return action_required. Queue metadata deletion does not need buffer configuration.

Live updates

The app keeps a WebSocket open to the service. New mail, draft changes, approvals and domain updates refresh the affected views automatically, and after a disconnect it reconnects with backoff and refreshes.

OAuth consent

When an MCP client starts OAuth, your browser opens the Allow access to Inbot? screen. It shows the client’s self-declared name, where it will redirect, and which resource it wants. New grants default to Full access with Approval and no inboxes selected. Choose the intended scope and grant, then approve or deny. If you are signed out, you sign in first and return to the request. See OAuth for MCP clients.

Not in the app yet

• Changing the password and listing or revoking owner sessions: use /v0/owner/password and /v0/owner/sessions.
• Per-inbox unread totals, forwarding, and browsing event history.