PO6 Mailbox

Manage your PO6 email aliases, mailbox, and landing pages through natural language.

PO6 gives you short, memorable email addresses like you@po6.com or email on your own domain. This skill connects to the PO6 MCP server so you can manage everything conversationally.

Setup

1. Get a PO6 account and API key

1. Sign up at po6.com
2. Go to Dashboard > Mailbox > API Keys
3. Create a new API key with the scopes you need
4. Copy the key (starts with mcp_po6_)

2. Set your API key

export PO6_API_KEY="mcp_po6_your_key_here"

Or add it to your shell profile (~/.zshrc, ~/.bashrc) for persistence.

3. Add the MCP server

Add to ~/.openclaw/openclaw.json under mcpServers:

{
  "mcpServers": {
    "po6-mailbox": {
      "type": "streamable-http",
      "url": "https://mcp.po6.com",
      "headers": {
        "Authorization": "Bearer ${PO6_API_KEY}"
      }
    }
  }
}

Or run the included setup script:

./scripts/setup.sh

4. Restart OpenClaw

Restart to pick up the new MCP server.

Core Tasks

• "Check my inbox for unread emails"
• "Send an email to alice@example.com about the project update"
• "Search my emails for invoices from last month"
• "Reply to the latest email from Bob saying I'll be there at 3pm"
• "Create a draft email to the team about the new schedule"
• "List my aliases and show which ones are active"
• "Create a landing page for our spring sale using the marketing template"

Available Tools

Mailbox Management (13 tools)

Email Sending (4 tools)

Templates (2 tools)

Aliases & Domains (7 tools)

Landing Pages (13 tools)

Environment Variable Contract

API Key Scopes

When creating your API key, select the scopes you need. Start with read-only scopes and add write scopes as needed.

Rate Limits

External Endpoints

This skill communicates only with:

• https://mcp.po6.com — PO6 MCP server (all tool calls)

No other external endpoints are contacted.

Security & Privacy

• Secrets handling: Your API key is stored locally in your environment and never logged or sent to third parties. The key is transmitted only in the Authorization header over TLS to mcp.po6.com.
• Server-side hashing: API keys are SHA-256 hashed on the server. PO6 cannot see your key after creation.
• IP allowlists: Optionally restrict key usage to specific IP addresses (CIDR notation supported).
• Key expiration: Keys can be set to auto-expire on a date you choose.
• Confirmation for destructive actions: delete_email, publish_landing_page, unpublish_landing_page, archive_landing_page, and assign_landing_page_domain all require two-step confirmation before execution.
• Audit trail: All API calls are logged and visible in your PO6 dashboard.
• Scope isolation: Keys can be restricted to specific mailboxes and specific scopes, following the principle of least privilege.
• No external storage: No data is stored outside your PO6 account.

Troubleshooting

Support

• Documentation: po6.com/docs/mcp
• Dashboard: po6.com/dashboard
• Contact: support@po6.com