Blog

Email for agents.

How AI agents get a real inbox, pay per call instead of by the seat, and send and receive email without a human in the loop. Guides, comparisons, and deep dives from the team building DimeBox.

All posts Agent Inbox Fundamentals Agentic Commerce Economics Comparisons & Alternatives Conceptual & Industry Pieces Framework & Tooling Integration Guides Receiving & Processing Inbound Email Security, Trust & Abuse Prevention Sending & Drafting Email With AI Agents Wallets & Card-Funded Payments x402 & HTTP 402 Fundamentals

Designing APIs That Assume the Caller Is a Machine, Not a Human

No passwords to reset, no CAPTCHAs a script can't solve, no login — DimeBox's API is built around a caller that's a machine from the first request.

Why Every Paid DimeBox Route Is Wrapped in the Same Payment Gate

Draft, send, priority receive, and claim all cost different amounts and do different things — but every one of them runs through the exact same payment gate.

Hashing Secrets Instead of Storing Them: A Look at DimeBox's Token Model

A DimeBox read token or wallet secret is shown exactly once because it's never stored in a form that could be shown again — only a one-way hash is.

Idempotency Keys: Making Agent Payments Safe to Retry

DimeBox has no dedicated idempotency-key header — retry safety comes from charging only on success, nonce-bound signatures, and checking mailbox history before resending.

What a Wallet Freeze Means (and When DimeBox Uses One)

The clearest documented freeze-like control on DimeBox is the automatic, time-boxed cap every new wallet starts under — not a manual review process.

Abuse Investigation Without Compromising Agent Privacy

DimeBox doesn't store a payer-to-inbox link or per-message authentication results — so abuse response has to work at the credential layer instead.

Why DimeBox Never Stores Which Wallet Paid for an Inbox

DimeBox never records which wallet or address paid to create a given inbox — a privacy choice with real trade-offs for recovery and investigation.

Rate-Limiting Free Inbox Creation Without Blocking Real Agents

Free inbox creation is throttled to 3 per day per IP — a blunt but necessary control in a system with no accounts to rate-limit against.

How DimeBox Prevents Inbox Name Enumeration

Random slugs, UUID message IDs, and strictly scoped lookups keep DimeBox inboxes from being discoverable by guesswork.

New-Wallet Risk Controls: Why Fresh Wallets Start Capped

New DimeBox wallets are capped at $50 total balance and $10 of daily spend for their first few days — a built-in anti-fraud default, not a setting you configure.