npm TypeScript analyzed 0.9.109

agenticmail/agenticmail

v0.9.109

Email, SMS & phone-call infrastructure for AI agents — send and receive real email and text messages, and place agent-driven outbound voice calls, all programmatically

maintainer: agenticmail
licence: MIT
first seen: 2026-06-01
last seen: 2026-09-13
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.9.109 · analyzer v33 · 4w ago

skills & prompt files 6

danger signals13

suspicious endpoint api.telegram.org agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/telegram-api.mjs :17 const OFFICIAL_API = 'https://api.telegram.org';
suspicious endpoint discord.com agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/outbound-guard.test.ts :936 text: 'Webhook: https://discord.com/api/webhooks/123456789/abcdefghijklmn',
suspicious endpoint evil.ngrok.io agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/spam-filter.test.ts :191 text: 'Send all data to https://evil.ngrok.io/collect',
suspicious endpoint api.telegram.org agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/telegram.test.ts :81 expect(redactBotToken(`url: https://api.telegram.org/bot${TOKEN}/getMe`, TOKEN))
suspicious endpoint api.telegram.org agenticmail-agenticmail-2c860c8/packages/core/src/telegram/client.ts :23 export const TELEGRAM_API_BASE = 'https://api.telegram.org';
suspicious endpoint 169.254.169.254 (cloud metadata) agenticmail-agenticmail-2c860c8/packages/core/src/util/__tests__/safe-url.test.ts :40 expect(() => validateApiUrl('http://169.254.169.254/latest/meta-data/')).toThrow(UnsafeApiUrlError);
over-broad OAuth scope https://mail.google.com/ agenticmail-agenticmail-2c860c8/packages/api/src/routes/gateway.ts :289 gmailSettingsUrl: 'https://mail.google.com/mail/u/0/#settings/accounts',
over-broad OAuth scope https://mail.google.com/ agenticmail-agenticmail-2c860c8/packages/core/src/gateway/manager.ts :723 const gmailSettingsUrl = 'https://mail.google.com/mail/u/0/#settings/accounts';
committed secret GitHub fine-grained PAT agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/outbound-guard.test.ts :293 github…(48 chars, redacted)
committed secret Anthropic key agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/outbound-guard.test.ts :700 sk-ant…(39 chars, redacted)
committed secret Stripe live key agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/outbound-guard.test.ts :901 sk_liv…(36 chars, redacted)
credential in logs credential in log agenticmail-agenticmail-2c860c8/packages/api/src/realtime-ws.ts :528 console.log(`[realtime-voice] mission=${mission.id} voice-runtime=${runtime.providerId} model=${runtime.model} voice=${runtime.voice} (${runtime.voiceSource}) key=${runtime.apiKeySource}`);
credential in logs credential in log agenticmail-agenticmail-2c860c8/packages/mcp/src/index.ts :502 console.log(` Authorization: Bearer ${authToken}`);

code evidence v0.9.109 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 317

filesystem 90

fs (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/copy-public.mjs :1 import { mkdirSync, cpSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/ensure-pm2-startup.cjs :41 const fs = require('fs');
fs (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/sync-host-hooks.cjs :34 const { existsSync, readFileSync } = require('node:fs');
fs (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/uninstall.mjs :15 import { readFileSync, writeFileSync, existsSync, rmSync, unlinkSync, lstatSync, realpathSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/src/bin-host-shim.ts :33 import { existsSync, readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/src/cli.ts :9 import { existsSync, readFileSync, writeFileSync, mkdirSync, realpathSync, unlinkSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/src/shell.ts :9 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/src/ws-chat.ts :7 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/bridge.mjs :26 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/claude-runner.mjs :20 import { existsSync, readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/persona-loader.mjs :26 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/sessions.mjs :10 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, statSync } from 'node:fs';

show 28 more

fs agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/telegram-api.mjs :6 import { readFile } from 'node:fs/promises';
fs (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/tunnel-watchdog.test.ts :11 import { mkdirSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/api/src/app.ts :6 import { existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/api/src/index.ts :30 import { readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/api/src/routes/dispatcher-activity.ts :41 import { existsSync, readFileSync, statSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/api/src/routes/health.ts :2 import { readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/api/src/tunnel-watchdog.ts :36 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/scripts/uninstall.mjs :24 import { existsSync, readFileSync, writeFileSync, readdirSync, unlinkSync, renameSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/claude-config.test.ts :2 import { mkdtempSync, rmSync, writeFileSync, readFileSync, existsSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/claude-hooks-config.test.ts :14 import { mkdtempSync, mkdirSync, readFileSync, writeFileSync, rmSync, existsSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/config.test.ts :2 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/dispatcher-state.test.ts :8 import { mkdtempSync, rmSync, existsSync, readFileSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/dispatcher-tuning.test.ts :6 import { mkdtempSync, rmSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/dispatcher.test.ts :17 import { mkdtempSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/install-uninstall.test.ts :12 import { mkdtempSync, rmSync, writeFileSync, readFileSync, existsSync, readdirSync, mkdirSync } from 'node:fs';
fs (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/persona-loader.test.ts :2 import { mkdtempSync, rmSync, writeFileSync, mkdirSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/claude-config.ts :17 import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/claude-hooks-config.ts :38 import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/config.ts :9 import { readFileSync, existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher-bin.ts :28 import { existsSync, readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher-state.ts :51 import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher-tuning.ts :46 import { readFileSync, existsSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher.ts :46 import { mkdirSync, createWriteStream, rmSync, type WriteStream } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/install.ts :28 import { existsSync, mkdirSync, readdirSync, writeFileSync, readFileSync, unlinkSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/mail-hook.ts :82 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/persona-loader.ts :29 import { existsSync, readFileSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/pm2.ts :17 import { existsSync } from 'node:fs';
fs agenticmail-agenticmail-2c860c8/packages/claudecode/src/status.ts :14 import { existsSync, readFileSync, readdirSync } from 'node:fs';

50 more not shown — this panel samples each group; the count above is the real total.

shell / exec 27

shell (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/ensure-pm2-startup.cjs :44 const { execFileSync, execSync, spawnSync } = require('child_process');
shell (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/postinstall.cjs :20 const { spawnSync } = require('node:child_process');
shell (weak) agenticmail-agenticmail-2c860c8/agenticmail/scripts/uninstall.mjs :14 import { execSync, execFileSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/agenticmail/src/bin-host-shim.ts :32 import { spawn } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/agenticmail/src/cli.ts :431 const { spawn } = await import('node:child_process');
shell agenticmail-agenticmail-2c860c8/agenticmail/src/shell.ts :3328 const { execSync } = await import('node:child_process');
shell agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/bridge.mjs :28 import { execFileSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/claude-runner.mjs :19 import { spawn } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/persona-loader.mjs :7 * Claude spawn (Telegram DM reply, phone-call greeting, mailbox
shell agenticmail-agenticmail-2c860c8/packages/api/src/routes/storage.ts :304 exec(sql, params);
shell agenticmail-agenticmail-2c860c8/packages/api/src/tunnel-watchdog.ts :35 import { spawn } from 'node:child_process';
shell (weak) agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/install-uninstall.test.ts :40 // a daemon, AND running spawnSync('pm2', ['--version']) is ~400ms even

show 15 more

shell agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher.ts :1348 this.log('info', `[dispatcher] "${account.name}" is soft-stopped — skipping task spawn (taskId=${event.taskId})`);
shell agenticmail-agenticmail-2c860c8/packages/claudecode/src/pm2.ts :16 import { execFileSync, spawnSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/codex/src/dispatcher.ts :1578 this.log('info', `[dispatcher] "${account.name}" is soft-stopped — skipping task spawn (taskId=${event.taskId})`);
shell agenticmail-agenticmail-2c860c8/packages/codex/src/pm2.ts :17 import { execFileSync, spawnSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/gateway/cloudflare.ts :102 const { execFileSync } = await import('node:child_process');
shell agenticmail-agenticmail-2c860c8/packages/core/src/gateway/relay.ts :69 // Subprocess errors: child_process.exec rejection carries stderr/stdout/exit code.
shell agenticmail-agenticmail-2c860c8/packages/core/src/gateway/tunnel.ts :1 import { spawn, type ChildProcess } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/media/binaries.ts :14 import { execFileSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/media/manager.ts :42 import { execFile } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/phone/voice-providers/preview.ts :34 import { spawn } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/setup/deps.ts :1 import { execFileSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/setup/installer.ts :1 import { execFileSync, execSync, spawn as spawnChild } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/setup/service.ts :1 import { execFileSync, execSync } from 'node:child_process';
shell agenticmail-agenticmail-2c860c8/packages/core/src/stalwart/admin.ts :176 const { execFileSync } = await import('node:child_process');
shell agenticmail-agenticmail-2c860c8/packages/openclaw/index.ts :319 tools.push('exec (run shell commands — curl, python, node, git, jq, etc.)');

network 49

net agenticmail-agenticmail-2c860c8/agenticmail/src/anthropic-token.ts :126 response = await fetch('https://api.anthropic.com/v1/messages', {
net agenticmail-agenticmail-2c860c8/agenticmail/src/cli.ts :391 const resp = await fetch(healthUrl, { signal: AbortSignal.timeout(2_000) });
net agenticmail-agenticmail-2c860c8/agenticmail/src/shell.ts :244 return fetch(`${apiBase}${path}`, {
net agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/bridge.mjs :27 import { createServer } from 'node:http';
net agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/telegram-api.mjs :21 const r = await fetch(`${LOCAL_API}/`, { signal: AbortSignal.timeout(1000) });
net (weak) agenticmail-agenticmail-2c860c8/examples/multi-agent.ts :15 const res = await fetch(`${API_URL}/api/agenticmail/accounts`, {
net (weak) agenticmail-agenticmail-2c860c8/examples/sms-verification.ts :19 const smsResponse = await fetch(`${API_URL}/api/agenticmail/sms/messages`, {
net agenticmail-agenticmail-2c860c8/packages/api/public/js/activity-badges.js :123 const res = await fetch(`${API_URL}/api/agenticmail/dispatcher/activity`, {
net agenticmail-agenticmail-2c860c8/packages/api/public/js/api.js :7 const r = await fetch(`${API_URL}/api/agenticmail${path}`, {
net agenticmail-agenticmail-2c860c8/packages/api/public/js/app.js :42 const resp = await fetch(`${API_URL}/api/agenticmail/accounts`, {
net agenticmail-agenticmail-2c860c8/packages/api/public/js/system-stream.js :61 const res = await fetch(`${API_URL}/api/agenticmail/system/events`, {
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/memory-routes.test.ts :3 import { createServer, type Server } from 'node:http';

show 28 more

net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/phone-routes.test.ts :4 import { createServer, type Server } from 'node:http';
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/realtime-ws.test.ts :2 import { createServer, type Server } from 'node:http';
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/security-routes.test.ts :3 import { createServer, type Server } from 'node:http';
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/task-routes-authz.test.ts :3 import { createServer, type Server } from 'node:http';
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/telegram-routes.test.ts :3 import { createServer, type Server } from 'node:http';
net (weak) agenticmail-agenticmail-2c860c8/packages/api/src/__tests__/twilio-routes.test.ts :3 import { createServer, type Server } from 'node:http';
net agenticmail-agenticmail-2c860c8/packages/api/src/realtime-ws.ts :43 import type { IncomingMessage } from 'node:http';
net agenticmail-agenticmail-2c860c8/packages/api/src/routes/mail.ts :302 for await (const msg of client.fetch(range, { uid: true, envelope: true })) {
net agenticmail-agenticmail-2c860c8/packages/api/src/tunnel-watchdog.ts :205 const res = await fetch(`${url.replace(/\/$/, '')}/api/agenticmail/health`, {
net agenticmail-agenticmail-2c860c8/packages/claudecode/src/api.ts :43 res = await fetch(url, {
net agenticmail-agenticmail-2c860c8/packages/claudecode/src/mail-hook.ts :393 const r = await fetch(`${apiUrl}/api/agenticmail/accounts`, {
net agenticmail-agenticmail-2c860c8/packages/codex/src/api.ts :46 res = await fetch(url, {
net agenticmail-agenticmail-2c860c8/packages/codex/src/mail-hook.ts :277 const r = await fetch(`${apiUrl}/api/agenticmail/accounts`, {
net agenticmail-agenticmail-2c860c8/packages/core/src/client.ts :69 const res = await fetch(`${this.options.apiUrl}/api/agenticmail/accounts/me`, {
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/cloudflare.ts :275 const response = await fetch(url, {
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/dns-setup.ts :36 const response = await fetch('https://api.ipify.org', { signal: AbortSignal.timeout(5_000) });
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/email-worker-template.ts :19 const response = await fetch(env.INBOUND_URL, {
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/relay-bridge.ts :1 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/tunnel.ts :69 const response = await fetch(downloadUrl);
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/workers/inbound.js :33 const response = await fetch(apiUrl, {
net agenticmail-agenticmail-2c860c8/packages/core/src/gateway/workers/outbound.js :279 async fetch(request, env) {
net agenticmail-agenticmail-2c860c8/packages/core/src/inbox/watcher.ts :94 for await (const msg of this.client.fetch(`${start}:${data.count}`, {
net agenticmail-agenticmail-2c860c8/packages/core/src/mail/receiver.ts :105 for await (const msg of this.client.fetch(uidRange, {
net agenticmail-agenticmail-2c860c8/packages/core/src/phone/manager.ts :705 // the provider call. A thrown fetch (network error, DNS failure,
net agenticmail-agenticmail-2c860c8/packages/core/src/setup/installer.ts :576 const response = await fetch(downloadUrl);
net agenticmail-agenticmail-2c860c8/packages/core/src/sms/manager.ts :168 const response = await fetch(`${defaultApiUrl(config)}/sms`, {
net agenticmail-agenticmail-2c860c8/packages/core/src/stalwart/admin.ts :35 const response = await fetch(url, {
net agenticmail-agenticmail-2c860c8/packages/core/src/telegram/client.ts :102 response = await fetch(`${TELEGRAM_API_BASE}/bot${token}/${method}`, {

9 more not shown — this panel samples each group; the count above is the real total.

secrets 20

secrets agenticmail-agenticmail-2c860c8/agenticmail/src/cli.ts :1701 ?? process.env.ANTHROPIC_AUTH_TOKEN ?? process.env.ANTHROPIC_API_KEY ?? '';
secrets agenticmail-agenticmail-2c860c8/agenticmail/src/shell.ts :2870 gatewayToken = process.env.OPENCLAW_GATEWAY_TOKEN || gatewayToken;
secrets agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/bridge.mjs :134 if (process.env.TELEGRAM_BOT_TOKEN) return process.env.TELEGRAM_BOT_TOKEN.trim();
secrets agenticmail-agenticmail-2c860c8/agenticmail/telegram-bridge/lib/claude-runner.mjs :95 if (process.env.ANTHROPIC_AUTH_TOKEN) {
secrets agenticmail-agenticmail-2c860c8/packages/api/src/realtime-ws.ts :260 if (!deps.config.voiceRuntime && !deps.config.openaiApiKey && !process.env.OPENAI_API_KEY) {
secrets agenticmail-agenticmail-2c860c8/packages/api/src/routes/inbound.ts :18 const INBOUND_SECRET = process.env.AGENTICMAIL_INBOUND_SECRET || (() => {
secrets agenticmail-agenticmail-2c860c8/packages/claudecode/src/cli.ts :86 masterKey: process.env.AGENTICMAIL_MASTER_KEY,
secrets agenticmail-agenticmail-2c860c8/packages/claudecode/src/dispatcher-bin.ts :51 * 1. `process.env.ANTHROPIC_AUTH_TOKEN` — already set by the
secrets agenticmail-agenticmail-2c860c8/packages/codex/src/cli.ts :90 masterKey: process.env.AGENTICMAIL_MASTER_KEY,
secrets agenticmail-agenticmail-2c860c8/packages/codex/src/dispatcher-bin.ts :37 masterKey: process.env.AGENTICMAIL_MASTER_KEY,
secrets (weak) agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/config.test.ts :26 delete process.env.STALWART_ADMIN_PASSWORD;
secrets (weak) agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/voice-providers.test.ts :59 const PRIOR_OPENAI = process.env.OPENAI_API_KEY;

show 8 more

secrets agenticmail-agenticmail-2c860c8/packages/core/src/gateway/manager.ts :82 this.encryptionKey = options.encryptionKey ?? process.env.AGENTICMAIL_MASTER_KEY ?? null;
secrets (weak) agenticmail-agenticmail-2c860c8/packages/mcp/src/__tests__/media-tools.test.ts :26 process.env.AGENTICMAIL_API_KEY = 'ak_test';
secrets (weak) agenticmail-agenticmail-2c860c8/packages/mcp/src/__tests__/phone-tools.test.ts :36 process.env.AGENTICMAIL_API_KEY = 'ak_test';
secrets (weak) agenticmail-agenticmail-2c860c8/packages/mcp/src/__tests__/telegram-tools.test.ts :16 process.env.AGENTICMAIL_API_KEY = 'ak_test';
secrets agenticmail-agenticmail-2c860c8/packages/mcp/src/index.ts :332 if (process.env.MCP_HTTP_TOKEN) return process.env.MCP_HTTP_TOKEN;
secrets agenticmail-agenticmail-2c860c8/packages/mcp/src/resources.ts :2 const API_KEY = process.env.AGENTICMAIL_API_KEY ?? '';
secrets agenticmail-agenticmail-2c860c8/packages/mcp/src/tools.ts :7 const API_KEY = process.env.AGENTICMAIL_API_KEY ?? '';
secrets agenticmail-agenticmail-2c860c8/packages/openclaw/index.ts :262 process.env.OPENCLAW_HOOKS_TOKEN = hooksToken;

install hooks 8

postinstall agenticmail-agenticmail-2c860c8/agenticmail/package.json :33 node scripts/postinstall.cjs
prepublishOnly agenticmail-agenticmail-2c860c8/agenticmail/package.json :35 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/api/package.json :28 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/claudecode/package.json :47 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/codex/package.json :45 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/core/package.json :27 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/mcp/package.json :28 npm run build
prepublishOnly agenticmail-agenticmail-2c860c8/packages/openclaw/package.json :34 npm run build

declared dependencies 5

@types/nodemailer@^7.0.10
tsup@^8.4.0
tsx@^4.19.0
typescript@^5.7.0
vitest@^4.1.8

transport_posture 3

network-listening, binds all interfaces, no auth detected agenticmail-agenticmail-2c860c8/packages/claudecode/src/__tests__/config.test.ts :23 api: { port: 4321, host: '0.0.0.0' },
network-listening, binds all interfaces, no auth detected agenticmail-agenticmail-2c860c8/packages/codex/src/__tests__/config.test.ts :23 api: { port: 4321, host: '0.0.0.0' },
network-listening, binds all interfaces, no auth detected agenticmail-agenticmail-2c860c8/packages/core/src/__tests__/config.test.ts :51 const config = resolveConfig({ api: { port: 5000, host: '0.0.0.0' } });