Local-first / Cloudflare-ready

Mailbox
Control Room.

Manage encrypted mailbox credentials, inspect safe account metadata, and pull the latest OTP without exposing secrets in URLs.

SESSION: checking
Enter your API key or login credentials if this request comes from outside the trusted IP list.

Find a code

Search unread mail from the selected sender.

Session

Cloudflare Access OTP can sit in front of this Worker. The app session below is an additional device-bound layer.

Result

Ready.

Safe account data

Passwords and OAuth tokens are never returned.

Gmail: -
Outlook: -
ServiceEmailAuthUpdated
Login to load accounts.

Add mailbox

Credentials are encrypted before D1 storage.

Import list

One account per line: email|secret or email|token|oauth2.