AgentMail vs Mailgun for AI agents
As of 14 Oct 2026, AgentMail gets an AI agent further: L4 · Runs on its own against L1 · Needs a person.
- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server; a docs page for each core task.
- Access: Key by API.
- Use: 100% of the work.
- Pay: Reaches the checkout: An agent payment on its API, none made yet.
- Leave: Nothing to cancel: Can't delete its account.
Got in; first wall at delete (blocked). Next: pay without a person
Runs on its own, L4: our agent got in, confirmed its inbox code and ran every core email task through the API, the official MCP server and the CLI, headless, with clear errors and working idempotency. Paying stopped it first: AgentMail's own agent-payable rails sell inbox creation per call, but the price sat over our drive's cap. The monthly plan sits behind a console sign-in with a Cloudflare check our agent-made org has no human to clear. It removed every inbox, webhook and key on its own but found no route to delete the organization itself.
Gets furtherDriven 14 Oct 2026 · The drive and its evidence- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
Stopped at sign up: blocked. Next: let an agent sign up on its own
Needs a person before anything else: sign-up stops at an invisible reCAPTCHA, L1 · Needs a person. Our agent's free sign-up form came back "Could not validate reCaptcha response," with no API or CLI path to create an account instead. Nothing past that point was reachable: no key, no call, no work done. Our agent also found robots.txt on api.mailgun.net disallowing every path for every agent, a line it honors rather than crosses. The trial's card form sits behind that same reCAPTCHA, so paying also needs a person; no plan or cancel flow ever started. Docs are strong, with an official MCP server, but none of it gets an agent in on its own.
Driven 11 Oct 2026 · The drive and its evidenceThe two summaries: written and checked by our agents from each product's drive. How we write.
Where each one stops.
AgentMailGot in; first wall at delete (blocked)
MailgunStopped at sign up: blocked
| Checkpoint | AgentMail | Mailgun |
|---|---|---|
| Docs | Headless | Headless |
| Sign up | Headless | Blocked |
| Verify | Headless | Not reached |
| Key | Headless | Not reached |
| First call | Headless | Not reached |
| First action | Headless | Not reached |
| Pay | Not tried | Not reached |
| Cancel | Not needed | Not reached |
| Delete | Blocked | Not reached |
Headless or in a browser.
How our agent passed each checkpoint, and what each product offers an agent.
Checkpoints by route, API, MCP, CLI and SDK
| AgentMail | Mailgun | |
|---|---|---|
| Headless (checkpoints) | 6 | 1 |
| In a browser (checkpoints) | 0 | 0 |
| Needs a human (checkpoints) | 0 | 0 |
| Blocked (checkpoints) | 2 | 1 |
| Not tested (checkpoints) | 0 | 7 |
| Work done | 100% of the core | Not measured |
| API | Yes | Yes |
| OpenAPI | Yes | Yes |
| MCP server | Yes (official) | Yes (official) |
| CLI | Yes | No |
| SDK | Yes | Yes |
| llms.txt | Yes | Yes |
Bot checks, and where a person was needed.
| AgentMail | Mailgun | |
|---|---|---|
| Bot check | A challenge on the form stopped 2 ways in (Email and password, Sign-in for apps); it got in another way | Google reCAPTCHA (invisible) stopped it at sign up, without a visible challenge |
| Wall type | A challenge on the form | A check of our network and browser |
| First wall | Got in; first wall at delete (blocked) | Invisible reCAPTCHA rejects the sign-up form |
| A person helped | No | No |
A challenge on the form: It asks every visitor to prove they are human. It stops every agent on any network, and a signature doesn't help: a person does this step, or the owner opens it for agents. A check of our network and browser: It judged where our agent connects from and its browser, not a person. An agent that works on its own from a data center doesn't get through unless the owner lets signed agents in. How agents in a person's own browser fare isn't measured yet. Where we drive from.
Level and part scores.
| AgentMail | Mailgun | |
|---|---|---|
| Level | L4 · Runs on its own | L1 · Needs a person |
| Holds up | 82 of 100, fair | Not measured |
| Agent-ready setup | 100 of 100, good | 100 of 100, good |
| Standards | MCP spec of 28 Jul 2026 (current) · MCP discovery (current) · MCP client registration (behind) · OpenAPI 3.1.0 (1 version behind) | MCP spec of 25 Nov 2025 (1 version behind) · MCP discovery (behind) · OpenAPI 3.1.0 (1 version behind) |
Docs match is measured in an Audit. What the scores mean.
Pay, cancel and delete.
| AgentMail | Mailgun | |
|---|---|---|
| Pay | Reaches the checkout | Payment not reached |
| Free plan or trial | Free plan | Free plan |
| Cancel | Not needed | Not reached |
| Delete the account | Blocked | Not reached |
How each one takes payment
- AgentMail: Reaches the checkout: an agent payment on its API, none made yet.
- Mailgun: Payment not reached.
AgentMail vs Mailgun: the short answers.
Which can an AI agent use, AgentMail or Mailgun?
AgentMail gets an AI agent further: L4 · Runs on its own against L1 · Needs a person. With AgentMail our agent got in and met its first wall at delete (blocked); with Mailgun it was stopped at sign up (blocked). Driven 14 Oct 2026 (AgentMail) and 11 Oct 2026 (Mailgun).
Can an AI agent sign up for AgentMail and Mailgun on its own?
AgentMail: yes, headless. Mailgun: no, blocked.
Do AgentMail and Mailgun have an MCP server?
AgentMail: yes (official). Mailgun: yes (official).
Can an AI agent delete its AgentMail or Mailgun account?
AgentMail: blocked. Mailgun: not reached.
The drives and the category.
Put your own shortlist side by side.
A Stack check drives the tools you're choosing between and shows which ones your agents can use. $490 for three tools, ready in 24 hours.