Add MailAgent plugin (email verification for agents) by Alex0nder · Pull Request #195 · hashgraph-online/awesome-codex-plugins

Alex0nder · 2026-06-06T22:20:53Z

MailAgent

Disposable inboxes for agent signup flows — OTP and magic link extraction via MCP.

Repo: https://github.com/Alex0nder/MailAgent
Docs: https://webmailagent.com/docs/codex.html
MCP tools: 23 (verify_signup, simulate, diagnose, threads, domains, …)
MIT license

Bundled plugin mirrors examples/codex/plugin from MailAgent v0.2.5 (@mailagent/mcp@0.2.5).

HOL Plugin Scanner

Check	Result
Local scan (`plugins/Alex0nder/mailagent`)	88/100 — critical:0, high:0
CI on MailAgent `main`	https://github.com/Alex0nder/MailAgent/actions/workflows/hol-plugin-scanner.yml (passing)
`SECURITY.md`	https://github.com/Alex0nder/MailAgent/blob/main/SECURITY.md

Catalog metadata

Merged latest upstream/main; conflicts with llm-transpile resolved (both entries, alphabetical).
plugins.json + marketplace.json + README.md + bundle under plugins/Alex0nder/mailagent (includes LICENSE).

Test plan

plugin-scanner scan plugins/Alex0nder/mailagent — 88/100
HOL scanner CI on plugin source repo (Alex0nder/MailAgent)
codex plugin marketplace add hashgraph-online/awesome-codex-plugins → install mailagent
codex mcp list shows mailagent tools

Disposable inboxes for Codex signup flows — OTP and magic link extraction via MCP. Co-authored-by: Cursor <cursoragent@cursor.com>

gemini-code-assist

Code Review

This pull request integrates the MailAgent plugin into the marketplace, adding its configuration, MCP server definitions, launcher scripts, and skill documentation. The review feedback correctly identifies several instances where upstream paths (such as examples/codex/plugin) and upstream npm commands (like npm run package:codex and npm run test:prod) are referenced in the scripts and documentation, which do not exist or work in this repository's structure. These should be updated to reflect the correct local paths and context.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

gemini-code-assist · 2026-06-06T22:22:00Z

+  set +a
+fi
+
+: "${MAILAGENT_API_KEY:?Set MAILAGENT_API_KEY in env or examples/codex/plugin/.env}"


The error message refers to examples/codex/plugin/.env, which is the path in the upstream MailAgent repository. In this repository, the plugin is located at plugins/Alex0nder/mailagent. Updating this to refer to the actual plugin root .env will prevent confusion for users.

Suggested change

: "${MAILAGENT_API_KEY:?Set MAILAGENT_API_KEY in env or examples/codex/plugin/.env}"

: "${MAILAGENT_API_KEY:?Set MAILAGENT_API_KEY in env or .env at the plugin root}"

gemini-code-assist · 2026-06-06T22:22:00Z

+Use this directory as a local Codex plugin during development:
+
+```bash
+cd examples/codex/plugin


The directory examples/codex/plugin does not exist in this repository. Since the plugin is mirrored under plugins/Alex0nder/mailagent, the command should be updated to target the correct path.

Suggested change

cd examples/codex/plugin

cd plugins/Alex0nder/mailagent

gemini-code-assist · 2026-06-06T22:22:00Z

+chmod +x scripts/run-mailagent-mcp.sh
+```
+
+Open `examples/codex/plugin` as a trusted Codex project, or install the plugin through your local


The path examples/codex/plugin should be updated to plugins/Alex0nder/mailagent to match the directory structure of this repository.

gemini-code-assist · 2026-06-06T22:22:00Z

+
+## Environment
+
+Put secrets in `examples/codex/plugin/.env`. The file is ignored by git.


The path examples/codex/plugin/.env should be updated to plugins/Alex0nder/mailagent/.env to match the directory structure of this repository.

gemini-code-assist · 2026-06-06T22:22:00Z

+Keep the plugin `.mcp.json` on the local stdio preset so it has a single entry through
+`npx -y -p @mailagent/mcp@0.2.5 mailagent-mcp`.
+
+Pack for marketplace: `npm run package:codex` from repo root → `dist/mailagent-codex-plugin-0.2.5.tar.gz`.


The command npm run package:codex is inherited from the upstream repository and cannot be run in this plugin directory because there is no package.json file. It would be clearer to remove this instruction or note that it only applies to the upstream repository.

gemini-code-assist · 2026-06-06T22:22:00Z

+
+## Prerequisites
+
+- `MAILAGENT_API_KEY` — team key from console or `npm run issue:key:db`


The command npm run issue:key:db is an upstream command and cannot be run directly in this plugin directory as there is no package.json file. Consider clarifying this for users.

gemini-code-assist · 2026-06-06T22:22:01Z

+```bash
+MAILAGENT_API_URL=https://api.webmailagent.com \
+MAILAGENT_API_KEY=ma_… \
+  npm run test:prod


The command npm run test:prod is an upstream command and cannot be run directly in this plugin directory as there is no package.json file. Consider clarifying this for users.

kilo-code-bot · 2026-06-06T22:22:34Z

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (7 files)

.agents/plugins/marketplace.json - Plug-in registry entry added
README.md - MailAgent listed in plugin catalog
plugins/Alex0nder/mailagent/.codex-plugin/plugin.json - Plugin manifest
plugins/Alex0nder/mailagent/.env.example - Environment template
plugins/Alex0nder/mailagent/.mcp.json - MCP server configuration
plugins/Alex0nder/mailagent/README.md - Plugin documentation
plugins/Alex0nder/mailagent/scripts/run-mailagent-mcp.sh - Launcher script
plugins/Alex0nder/mailagent/skills/mailagent/SKILL.md - Skill definition

_{Reviewed by step-3.7-flash-20260528 · 368,037 tokens}

internet-dot · 2026-06-07T15:25:24Z

Missing the plugins.json entry. You have the README entry, marketplace entry, and plugin bundle. Just needs the plugins.json registry entry to be complete. See CONTRIBUTING.md.

Add assets/icon.svg and composerIcon for CI validation. Refresh bundle README for catalog-relative paths. Sync plugins.json with README entry. Co-authored-by: Cursor <cursoragent@cursor.com>

kilo-code-bot · 2026-06-08T05:07:59Z

Kilo Code Review could not run — your account is out of credits.

Add credits or switch to a free model to enable reviews on this change.

internet-dot · 2026-06-08T12:10:43Z

Before this PR can be merged, your plugin repo needs the HOL AI Plugin Scanner running in CI. This is a mandatory requirement for all submissions.

Add this workflow to your plugin repo at .github/workflows/hol-plugin-scanner.yml:

name: HOL Plugin Scanner

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

permissions:
  contents: read
  security-events: write

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - name: HOL Plugin Scanner
        uses: hashgraph-online/ai-plugin-scanner-action@v1
        with:
          plugin_dir: "."
          mode: scan
          min_score: 80
          fail_on_severity: high
          format: sarif
          upload_sarif: true

Also run the scanner locally and include the score in your PR description:

pipx install plugin-scanner
plugin-scanner scan . --format text

Your plugin needs a score of 80/130 or higher with no critical or high severity findings. Link the CI run or paste the score in this PR description.

See the full guide: SCANNER_GUIDE.md

Additional issues:
plugins.json entry is missing from this PR.

Address gemini-code-assist review on PR hashgraph-online#195 — plugin-root .env hint, README paths for plugins/Alex0nder/mailagent, SKILL clarifies console keys and test:prod runs from MailAgent repo only. Co-authored-by: Cursor <cursoragent@cursor.com>

Rebase catalog metadata onto latest awesome-codex-plugins (105→106 plugins): keep llm-transpile and add mailagent in alphabetical order across marketplace.json, plugins.json, and README.md. Sync plugin bundle from MailAgent catalog staging. Co-authored-by: Cursor <cursoragent@cursor.com>

Co-authored-by: Cursor <cursoragent@cursor.com>

Alex0nder · 2026-06-09T01:16:15Z

Follow-up after merging upstream/main:

Conflicts resolved with llm-transpile — both entries kept (alphabetical) in marketplace.json, plugins.json, and README.md.
plugins.json entry added (MailAgent after LLM Transpile, total 106).
Bundle synced from MailAgent catalog staging; LICENSE included.

HOL Plugin Scanner (local on catalog bundle):

Final Score: 88/100 (B - Good)
critical:0, high:0, medium:0

Scanner CI on MailAgent main: https://github.com/Alex0nder/MailAgent/actions/workflows/hol-plugin-scanner.yml

Alex0nder · 2026-06-09T01:24:20Z

@internet-dot — follow-up on review feedback:

plugins.json entry is now included (MailAgent after LLM Transpile; total 106).
HOL scanner CI runs on MailAgent main: https://github.com/Alex0nder/MailAgent/actions/workflows/hol-plugin-scanner.yml (green).
Local bundle score: 88/100, no critical/high findings.

PR is mergeable with upstream/main. Thanks for maintaining the list — happy to adjust anything else.

Required for Codex Plugin Directory publisher validation. Co-authored-by: Cursor <cursoragent@cursor.com>

Alex0nder · 2026-06-09T03:32:15Z

Synced privacyPolicyURL and termsOfServiceURL in the catalog bundle (commit 0708b86 on add-mailagent) — ready for Codex Plugin Directory publisher validation when OpenAI opens self-serve.

Alex0nder · 2026-06-10T02:06:14Z

Friendly ping — PR still MERGEABLE (106 plugins, privacy/terms URLs in bundle). Install works today via repo marketplace; merge is visibility only. Thanks!

internet-dot

One concern:

Unusual install_url path — install_url points to examples/codex/plugin/.codex-plugin/plugin.json in the upstream repo. This is non-standard — most plugins keep their manifest at the repo root under .codex-plugin/plugin.json. This will break if the upstream repo restructures.
No scanner evidence — PR description lacks scanner score or CI link.

Otherwise the bundle is complete: plugin.json, icon, LICENSE, SECURITY.md, SKILL.md, marketplace.json, plugins.json, and README entry are all present. Alphabetical order is correct.

internet-dot

✅ Clean PR

Valid JSON in all modified files (marketplace.json, plugins.json)
README entry added alphabetically (MailAgent after LLM Transpile, before Personal Data Protection)
Complete bundle structure with .codex-plugin/plugin.json, assets/icon.svg, LICENSE, README.md, skills, and MCP config
Includes HOL scanner results and security documentation references

Ready to merge.

…Kit, Citadel, MailAgent, Vanguard Frontier Agentic) Resolved merge conflicts from PRs #193, #192, #183, #206, #195, #205 and applied registry entries + plugin bundles directly. Closes #193, #192, #183, #206, #195, #205, #214

Add MailAgent plugin (email verification for agents)

5dbe538

Disposable inboxes for Codex signup flows — OTP and magic link extraction via MCP. Co-authored-by: Cursor <cursoragent@cursor.com>

gemini-code-assist Bot reviewed Jun 6, 2026

View reviewed changes

Fix MailAgent bundle: icon, composerIcon, plugins.json entry

054c5e6

Add assets/icon.svg and composerIcon for CI validation. Refresh bundle README for catalog-relative paths. Sync plugins.json with README entry. Co-authored-by: Cursor <cursoragent@cursor.com>

Alex0nder and others added 3 commits June 8, 2026 17:30

chore: add LICENSE to MailAgent catalog bundle

c6735fb

Co-authored-by: Cursor <cursoragent@cursor.com>

chore: add privacy and terms URLs to MailAgent plugin.json

0708b86

Required for Codex Plugin Directory publisher validation. Co-authored-by: Cursor <cursoragent@cursor.com>

internet-dot reviewed Jun 12, 2026

View reviewed changes

internet-dot approved these changes Jun 15, 2026

View reviewed changes

internet-dot closed this Jun 16, 2026

	: "${MAILAGENT_API_KEY:?Set MAILAGENT_API_KEY in env or examples/codex/plugin/.env}"
	: "${MAILAGENT_API_KEY:?Set MAILAGENT_API_KEY in env or .env at the plugin root}"


		## Environment

		Put secrets in `examples/codex/plugin/.env`. The file is ignored by git.


		## Prerequisites

		- `MAILAGENT_API_KEY` — team key from console or `npm run issue:key:db`

Conversation

Alex0nder commented Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

MailAgent

HOL Plugin Scanner

Catalog metadata

Test plan

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot Jun 6, 2026

Choose a reason for hiding this comment

Uh oh!

kilo-code-bot Bot commented Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Uh oh!

internet-dot commented Jun 7, 2026

Uh oh!

kilo-code-bot Bot commented Jun 8, 2026

Uh oh!

internet-dot commented Jun 8, 2026

Uh oh!

Alex0nder commented Jun 9, 2026

Uh oh!

Alex0nder commented Jun 9, 2026

Uh oh!

Alex0nder commented Jun 9, 2026

Uh oh!

Alex0nder commented Jun 10, 2026

Uh oh!

internet-dot left a comment

Choose a reason for hiding this comment

Uh oh!

internet-dot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Alex0nder commented Jun 6, 2026 •

edited

Loading

kilo-code-bot Bot commented Jun 6, 2026 •

edited

Loading