Control plane for agentic AI security on the endpoint
Email MCP server for Claude, Cursor and other AI agents to access every mailbox you own
Stage
Not given
Not given
Founded
Not given
Not given
Based in
US
GB
Pricing model
Freemium
Free trial
Pricing
Kirin: Free ($0/mo) for individual developers and small teams (1-5 users), Team plan at $15/mo per user for growing teams (5+ users), Enterprise plan with custom pricing. AgentMesh: Free ($0/mo) with 300 items per category, Premium at $15/mo per user, Pro at $850/mo per user for unlimited API access
Monthly: €8.99/month after 7-day free trial. Yearly: €30/year (€2.50/month equivalent, 72% savings). Includes both the Mac app and the MCP connector.
Key features
Policy enforcement before agent execution
Blocks prompt injections and rogue agent actions
Real-time detection of malicious behavior
MCP server scanning and blocking
Shadow AI discovery across organization
Secrets detection and prevention
Skills and extensions vetting
Dangerous artifacts rejection
Support for Cursor, Claude Code, GitHub Copilot, Windsurf
Minute-level deployment
Search across multiple mailboxes simultaneously
Read full email threads with conversation history
Move, archive and mark emails as read
Scoped permissions: read, change, and send separately
Attach files up to 18 MB to drafts and emails
Download and open email attachments
Native macOS mail client included
Support for multiple email providers
Encrypted file handling during transfer
Revoke access anytime within the hour
What makes it different
Visibility into shadow AI across enterprise systems
Unified control plane for multiple coding agents and IDEs
Supply chain threat discovery before components run
Secure coding enforcement with threat modeling
Works with any MCP client, not locked to one AI platform
No installation required; works on macOS, Windows and Linux
Access unlimited email accounts simultaneously in one connection
Send emails with opt-in permission and approval workflow
Knostic
Sickle