Send email without giving the agent a mailbox password.

Quasentra keeps SMTP credentials encrypted and allows delivery only to recipient domains saved in the connector.

Example business requirement

A support agent may email customers at approved company domains, but a prompt injection must not redirect confidential data to an attacker's address.

1. Configure the dashboard connector

• SMTP host and port: your provider's SSL endpoint, commonly port 465.
• Allowed recipient domains: exact domains such as company.com.
• From address: the dedicated mailbox that recipients will see.
• Username and password: encrypted after saving and never displayed again.

2. Create the agent tool

def email_send(to: str, subject: str, body: str) -> dict:
    result = security.execute(
        agent_id="support-agent",
        session_id="ticket-100",
        action="email.send",
        arguments={"to": [to], "subject": subject, "body": body},
        idempotency_key="ticket-100-resolution-email",
    )
    return result["output"]

Recommended permission

permissions = {
    "email.send": "REQUIRE_APPROVAL",
}

Show the reviewer the recipients, subject and relevant body content. After approval, retry the exact same operation; changing a recipient creates a different request.

Verify safely

1. Use a dedicated least-privilege mailbox and staging recipient.
2. Send one email to an allowed domain.
3. Try a different domain and confirm it is rejected.
4. Confirm the mailbox password never reaches the agent or response.
5. Remember that connector validation checks configuration only—it does not send an email.