Your Inbox, safely shared with agents.
Let AI agents draft and reply to your email without giving them your whole inbox. Agents see only the messages you allow, and you see everything they do.
Share your inbox in four steps.
Write plain-English rules for what each agent can read, draft and send. No agent gets your whole inbox.
Connect Gmail to Clam
Clam classifies your email into categories your rules can use, like travel or receipts. It never stores the email content.
Create a Shell for each agent
A Shell is one agent's slice of your inbox, with access rules you write in plain English. A travel agent's Shell might say: read my flight and hotel emails, and draft replies but never send them.
Install your agent connector
One click connects your agent to Clam's MCP server. It gets the email tools it already knows, but only for the emails you allowed.
Put your agents to work
Your agents triage new mail, sum up long threads, draft replies and archive what's done, all inside their Shell. A deterministic policy check lets each one do only what your rules allow, and Clam logs every move.
One inbox, a Shell for every job.
Each Shell starts as plain-English rules. Clam compiles them into Cedar policies and checks every request to your inbox against them.
Travel Assistant
Read flight, hotel and booking emails and build my itinerary. Draft replies to hosts for me to review. Never send.
Family Organizer
Read email from family, school and events. Forward the urgent ones as soon as they arrive. Never write new messages.
Project Manager
Watch work email and newsletters for competitor moves, then draft notes I can drop into the project. Do not send.
Investing Assistant
Read investment alerts and price moves and summarise them for me. Never send or forward.
Shopping Assistant
Read shopping, promotions and receipts, and pick out the real discounts. Never send.
Expense Tracker
Read receipts, utility bills and work bills. Draft a note when a charge looks wrong. Never send.
Your rules, enforced on every call.
Allowed actions pass through and everything else is blocked. Clam logs every read, draft and blocked attempt, with the exact policy rule that decided it.
Least privilege
An agent gets only what its Shell's rules allow.
No email stored
Clam proxies requests. Gmail stays the source of truth.
Full audit trail
Every action an agent takes or attempts, with the decision and the rule behind it.
Live decision log
ChatGPT search "invoice 1043"
Mar 28, 2024, 2:30 PM
Claude read verification codes
Mar 28, 2024, 2:30 PM
Gemini send draft → vendor@newco.io
Mar 28, 2024, 2:30 PM
Hermes delete conversation
Mar 28, 2024, 2:30 PM
'%20d='M24.626%2016.121c3.61%200%206.193%202.82%206.193%207.243s-.713%208.412-1.896%2016.883c-.849%205.934-2.303%2014.995-2.91%2018.762%201.165-2.227%203.894-7.433%204.378-8.41%205.717-11.538%2011.675-21.845%2013.392-24.574%202.276-3.643%204.279-5.102%207.377-5.102%201.609%200%203.523.813%204.472%201.896%201.286%201.47%201.554%203.841%201.51%206.425-.068%203.963-.582%2010.282-1.287%2017.326-.313%203.136-.918%209.537-1.326%2013.83%203.66-6.547%2010.432-18.59%2013.163-22.794%202.38-3.666%204.774-6.026%207.992-6.026%202.776%200%206.197%201.962%205.993%207.177-.3%207.699-1.41%2024.466-1.916%2031.99%203.405-4.956%207.877-12.293%209.554-15.05%201.695-2.789%203.435-5.043%206.075-5.12%202.709-.078%204.523%201.764%204.606%204.607.082%202.844-1.612%206.042-3.862%209.672-2.44%203.94-5.172%208.156-8.496%2012.093-3.323%203.937-6.378%206.93-11.039%206.93-4.175%200-7.112-2.775-7.316-7.854-.106-2.661.397-8.385.777-12.858.44-5.18.971-10.18%201.343-13.488-3.67%206.719-11.393%2020.789-14.868%2026.281-3.4%205.374-5.058%207.267-8.647%207.268s-5.165-2.586-5.216-6.478c-.058-4.222%203.113-29.568%204.187-38.013-1.74%203.725-6.02%2012.869-8.704%2018.307-2.596%205.262-6.951%2014.354-10.111%2019.592-2.277%203.773-4.835%206.591-8.627%206.592s-5.932-2.55-5.932-6.65c0-4.099%201.187-10.929%202.462-19.4.637-4.1%201.364-8.565%202.185-13.302.6-3.428%201.644-9.46%202.286-13.163-2.916%204.54-8.164%2012.715-9.761%2015.177-1.776%202.74-3.37%204.736-6.01%204.737C1.733%2050.627%200%2048.352%200%2045.71c0-2.64%201.343-4.677%203.524-8.26%202.8-4.605%207.834-10.881%2010.591-14.176%203.25-3.884%206.499-7.153%2010.51-7.154'/%3e%3cdefs%3e%3clinearGradient%20id='a'%20x1='133.245'%20x2='24.92'%20y1='109.046'%20y2='-12.556'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20offset='.255'%20stop-color='%230082fb'%20style='stop-color:%230082fb;stop-color:color(display-p3%200%20.5098%20.9843);stop-opacity:1'/%3e%3cstop%20offset='.697'%20stop-color='%230064e0'%20style='stop-color:%230064e0;stop-color:color(display-p3%200%20.3922%20.8784);stop-opacity:1'/%3e%3cstop%20offset='1'%20stop-color='%230040dc'%20style='stop-color:%230040dc;stop-color:color(display-p3%200%20.251%20.8627);stop-opacity:1'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e)
Muse read calendar invite
Mar 28, 2024, 2:30 PM
Grok read label:Payroll
Mar 28, 2024, 2:30 PM
Muse search from:vendor.com
Mar 28, 2024, 2:30 PM
Secure at every layer.
Clam stores no email content. Your Google tokens stay with Clerk, our authentication platform, never in our database. Every agent request passes a deterministic Cedar policy check before it reaches Gmail, and our models can label mail, never act on it. Traffic uses TLS 1.2 and 1.3, data is encrypted at rest with AES-256, and our services talk over a private WireGuard network.Read our security manifesto.
- CASA AL1ValidatedOct 2026 · TAC Security
SOC 1In auditExpected Nov 2026
SOC 2In auditExpected Dec 2026
CASA AL1 assessed by TAC Security · SOC reports expected Q4 2026
Where Clam is going
Clam opens as a capped beta on Gmail in mid November. These are the milestones after it.
MVP
Capped Beta Launch
Early adopters get access by invitation and tell us what to fix.
GA
General Availability and Outlook support
Clam opens to everyone. Connect an Outlook mailbox to Clam as well as Gmail.
V2.0
Clam for Business
Clam for Business brings company-wide rules, approvals and audit trails to Google Workspace and Microsoft 365.
MVP
Mid November 2026
Capped Beta Launch
Early adopters get access by invitation and tell us what to fix.
GA
Mid December 2026
General Availability and Outlook support
Clam opens to everyone. Connect an Outlook mailbox to Clam as well as Gmail.
V2.0
Q1 2027
Clam for Business
Clam for Business brings company-wide rules, approvals and audit trails to Google Workspace and Microsoft 365.
Frequently asked questions
No. Clam proxies requests. Gmail stays the source of truth, so there is no second copy of your mailbox to worry about.
Yes. Data is encrypted in transit and at rest, and every agent request is checked against your rules before anything is returned.
Only what that Shell's rules allow. The agent uses normal email tools (read, search, draft, send) and Clam blocks everything else.
In plain English. Describe what the agent may read, draft, or send, and Clam turns that into enforceable policy on every request.
Any MCP-compatible agent, including Claude, ChatGPT, Codex, OpenClaw, Gemini, and Grok. You point the agent at the Shell's hosted MCP endpoint.
Yes. Pause or delete a Shell and that agent loses access immediately, without touching your other Shells or your Gmail connection.
Yes. Every action and decision is in the audit log: what the agent did, what it tried, and which rule allowed or blocked it.
Still have questions?
Email us at support@useclam.ai
Give your agents an inbox you control
Share your inbox with your first agent in minutes and see every action it takes.
Get started with
