v0.2.0 — first public release

e2a is an authenticated email gateway for AI agents — SPF/DKIM-verified inbound mail, HMAC-signed delivery, webhook + WebSocket fan-out, with a CLI, TypeScript and Python SDKs, and a Next.js dashboard. v0.2.0 is the first public release.

Try it

docker run -d --name e2a-pg -p 5433:5432 -e POSTGRES_USER=e2a -e POSTGRES_PASSWORD=e2a -e POSTGRES_DB=e2a postgres:16-alpine
docker run -d --name e2a -p 8080:8080 -p 2525:2525 \
  -e E2A_DATABASE_URL=postgres://e2a:e2a@host.docker.internal:5433/e2a?sslmode=disable \
  -e E2A_HMAC_SECRET=$(openssl rand -hex 32) \
  ghcr.io/mnexa-ai/e2a:0.2.0

Or git clone https://github.com/Mnexa-AI/e2a && cp .env.example .env && make docker-up. Full quickstart in the README.

What's in this release

Self-hostable end-to-end. Pick a shared mail domain (or skip it and use per-user custom domains), point DNS, set E2A_SHARED_DOMAIN, and the server seeds the FK-target row at startup — no manual SQL. Operator setup walkthrough is in the README.

Multi-arch signed Docker images. linux/amd64 + linux/arm64, both server and web dashboard, Sigstore keyless-signed via OIDC, SBOM + provenance attestations attached. Available as ghcr.io/mnexa-ai/e2a:0.2.0 / :latest and ghcr.io/mnexa-ai/e2a-web:0.2.0 / :latest.

Dashboard. Sign in with Google, browse messages, manage agents and domains, configure HITL, and now: a Settings page with profile, data export (GDPR Art. 15), and account deletion (Art. 17).

SDKs and CLI.

• TypeScript SDK @e2a/sdk and CLI @e2a/cli on npm, Apache-2.0
• Python SDK e2a on PyPI, Apache-2.0
• All three auto-discover shared_domain from the deployment via GET /api/v1/info, so end-users only need to know the API URL.

Claude Code skill at skills/SKILL.md — drop into ~/.claude/skills/ to give Claude end-to-end agent-creation help against your deployment.

Limitations

• Does not yet support horizontal scaling — single-instance deployment only. See README → Scaling and limitations.
• HITL email notifier and outbound mail need an upstream SMTP relay (SES, Postmark, etc.) — see E2A_OUTBOUND_SMTP_*.

Verify the image

cosign verify ghcr.io/mnexa-ai/e2a:0.2.0 \
  --certificate-identity-regexp="^https://github.com/Mnexa-AI/e2a/" \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

---

License: Apache-2.0. Issues & PRs welcome.