prawnwire Early access

Encrypted email on your own domain, with an API to send from it.

One account: an inbox only your devices can decrypt, plus a transactional API for the product you build. We host the wire, not your secrets.

Hosted mail, the sending API and the CLI agent run today for around 20 domains. The encrypted inbox and the apps are next.

Two things. No third.

Right now your product's receipts probably leave through a marketing platform on shared IPs, and your own mail sits with a provider that can read it. Prawnwire replaces both halves, and nothing else.

Next

A private inbox.

End-to-end encrypted. Keys are generated and kept on your devices, so Prawnwire can't read your messages or attachments, and neither can anyone who gets into Prawnwire.

On your domain, with DNS handled. Apps for iOS, Android and the web. Accounts you hold with other providers can sit alongside it in the same apps, over IMAP and POP3.

Running today

A transactional API.

Receipts, invites, password resets and alerts, sent from your product on the same domain your team mails from.

Per-domain sending identities, test keys, delivery logs and rate limits.

No marketing email. Enforced.

Bulk and campaign sends are refused at the API, not discouraged in a policy. Your password resets never share a sending reputation with anyone's newsletter, including ours. If you need campaigns, use a campaign tool; we'll stay out of its way.

You pay for the account. Nobody pays for your inbox, and nobody pays us to reach it.

How it fits together.

Your product

POST /v1/emails/send

Receipts, resets, invites. One key per domain.

Prawnwire

yourdomain.com

  • Mailboxes, DNS, sending identities.
  • Bulk sends refused at the API.
  • Encrypted inbox next: ciphertext only.

Your machine

prawnwire worker

Reads your mail over IMAP, calls your model with your key. The key stays here.

Running today, through the CLI

Your model, in your inbox.

Bring the model you already pay for, or one that runs on your machine. The worker pairs with your account, reads your mail on a machine you own, and calls the model from there. Your API key never leaves that machine.

  • Triage and summaries: what needs a reply, what can wait, a digest of the rest.
  • Ask across your mail. "What did the bank say about the wire?" gets an answer, with the messages it came from.
  • Act with your approval: archive, label, unsubscribe, set follow-ups. Nothing happens without a yes, unless you've told the worker it can.
  • Works on the other accounts you've added, not only Prawnwire mail.
prawnwire worker 
$ prawnwire worker start
paired    [email protected]
model     anthropic (your key, kept here)
watching  inbox + 2 IMAP accounts
policy    ask first; archive newsletters
worker running. ctrl-c to stop.

Pair once, then leave it running. Same key, same policy, no phone required. The agent arrives in the apps when the apps do.

Running today

Send from your product.

A small REST API for transactional email. Every domain you host gets its own sending identity, so mail from your app is indistinguishable from mail from your team.

  • Per-domain sending identities, authenticated at the SMTP layer.
  • pw_test_ keys that log every call without sending anything.
  • Delivery logs and per-key rate limits, visible in the portal.
  • Bulk and campaign sends are refused. Transactional only.
POST /v1/emails/send 
curl https://api.prawnwire.com/v1/emails/send \
  -H "Authorization: Bearer pw_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "from": "[email protected]",
    "to": "[email protected]",
    "subject": "Welcome aboard",
    "html": "<p>Thanks for signing up.</p>"
  }'

Today, and next.

Running today

  • Hosted mailboxes and aliases on your domain
  • SPF, DKIM and DMARC set up for you
  • Transactional API with test keys and delivery logs
  • The CLI, with the agent and worker mode
  • A dashboard for domains, mailboxes, DNS and health
  • Open mail software underneath (Postfix, Dovecot, Rspamd); export everything, leave any time

Next

  • End-to-end encryption with keys held on your devices
  • Apps for iOS, Android and the web, with the agent built in

Get in early.

We're onboarding a few domains at a time. Leave your email and we'll reach out when there's room, and again when the encrypted inbox opens. We use the address for that and nothing else.