Give your agent your inbox.
All of them.
You work the inbox. So does your agent.
Same accounts, same folders. When it archives something it is gone from the app, because there is only one mailbox.
- What’s waiting on a reply from me, across all my accounts?
- list_accounts→ 2 mailboxes: personal, work
- search_emailsboth mailboxes→ 2 threads need you
- read_email_bodyRe: SOW v3→ signed copy by Friday
- Thanks. Archive the newsletters.
- move_email3 messages → Archive→ done
- Two things need you: Priya wants the signed SOW back by Friday, and Ledgerly has a filing due in 51 days. I archived three newsletters.
3D model: “MacBook Pro M3 16-inch 2024” by jackbaeten, CC BY 4.0
Every mailbox you own. Including the awkward one.
Gmail and Outlook over OAuth. Everything else with a host, a port and a password. No cap on accounts.
Your agent sees a slice of your mail and thinks it’s all of it.
Fastmail, iCloud, the company server — nothing.
It can tell you about the newsletter. It can’t archive it.
Most email connectors authenticate a single Gmail account. Sickle connects as many mailboxes as you have and hands your agent all of them at once — every provider with an IMAP port, read and change.
Ten tools. One connection.
Verbs your agent can use, grouped by the scope that allows them. Turn a scope off and the tools go with it.
Your agent searches the real server, opens the real thread, and moves the real message. No forwarding, no pasting, no screenshot of your inbox.
The agent gets a scoped key, not your password.
Read; or read and change. Revoke either, per client, any time.
No tool sends mail today. If that changes, email_send is granted separately from reading and changing.
The app is the same mailbox. Whatever the agent moved, you can move back.
There is no tool that deletes irreversibly. Trash means your Trash folder.
Email is untrusted input. Anyone can send you a message, and an assistant reading your mail will also read any instructions hidden inside it. Grant email_change only to clients you trust, and review what your assistant proposes before approving it.
And it’s a good mail client.
Native, fast, every account in one window.
Gmail and Outlook over OAuth; anything else with host, port, password.
So you always know which account you’re replying from.
No window needed.
Across every connected account.
Compose with C. Jump to a mailbox with ⌘1. Clean up with ⌘⇧K.
Remote. Nothing to install.
Point your agent at a URL, approve the OAuth prompt, done. No binary, no local process, no credentials pasted into a config file.
Go to Settings → Connectors, open the Add menu and choose Add custom connector, then paste the server URL. The same steps work in Claude on the web.
Whichever client you use, it opens a Sickle sign-in page and asks you to approve the access it wants. There are no API keys to copy across, and your assistant never receives your mailbox password — only a token you can revoke at any time.
One subscription. Every mailbox, every agent.
Every feature, every mailbox, and the connector included — the connector is not a separate add-on.
billed monthly
first 30 days free
£30 billed yearly
save 72%
Checkout takes a card and charges nothing for the first 30 days. Cancel any time. Billing is handled by Stripe, and you can manage or cancel the subscription from the app.
Asked before you ask.
Which agents work?
Claude Desktop and Claude on the web, Claude Code, Codex, Cursor, OpenClaw — and any other client that can add a remote MCP server over HTTP.
Do I need the Mac app to use the connector?
Mailboxes are added in the Mac app; the connector hands the same mailboxes to your agent. So yes — the app is where your accounts live.
Can it send email as me?
Not today — no tool sends mail, so an assistant cannot email anyone on your behalf. You may see an email_send permission on the approval screen; nothing uses it yet. It is granted separately from reading and changing, so if sending arrives it stays yours to allow or refuse.
Do you store my email?
Your agent never receives your mailbox password — only a token you can revoke. The connector reads from your mail server when your agent asks and passes the result on; it does not keep a copy of your mailbox.
My company runs its own mail server. Does it work?
Yes. Anything with an IMAP host, a port and a password.
More than one account?
As many as you have. Your agent sees all of them through one connection; list_accounts tells it which.
How do I revoke an agent?
Sign in to sickle.app, open Connected assistants, and disconnect it. Access it already holds ends within the hour.
What if an email tries to give my agent instructions?
It might. Email is untrusted input, and an assistant reading your mail reads whatever is in it. That is why change is a separate scope, why nothing is irreversible, and why you should review what an assistant proposes before approving it.
Windows or iOS?
macOS only today.