Show HN: Nuvrail – make an AI agent ask before it sends, moves or deletes email

Category: security

Tags: ai-agent, email, human-in-the-loop, imap, smtp, self-hosted

Score: 7.3/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 7)

Nuvrail is a self-hosted approval gateway that sits between AI agents and email servers, intercepting IMAP/SMTP writes (sends, moves, deletes) and staging them for one-tap human approval while reads pass through instantly. It's an interesting 'human-in-the-loop' security layer that requires no agent changes, using an asyncio IMAP state machine, SMTP interception, and a PWA for approvals. The concept addresses a real safety gap for LLM email agents.

Target audience: backend developers building AI agents, DevOps/security engineers, and technically inclined power users

Repository: https://github.com/agens-field/nuvrail · Python · AGPL-3.0

View on Hacker News