Xalgorix Cloud
Autonomous AI security testing for developers and security teams: find vulnerabilities, prove each with a working exploit, and ship verified fixes with zero infrastructure setup.
AZMail — anti-phishing mailing system + anonymous MCP mesh mailer (APP 1.0). Author Aziel Eliab. Apache-2.0.
Translation pending
SecurityGitHub @AzielEliabOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
Repository information has not been collected yet.
No updates detected yet. GitHub releases will appear here.
The maker's introduction consists of the line above. Read the repository README for more details. Repository README ↗
Loading the full README.
Read the full README ↗AZMail checks a message before it lands in your inbox, and holds anything risky until you release it.
Author: Aziel Eliab License: Apache-2.0
python -m venv .venv && source .venv/bin/activate && pip install -e .
azmail ui
azmail doctor checks this install. azmail --help lists commands. Add --json when you need the machine record. Contacts, with nicknames, are the Contacts tab in the app and azmail contact.
Same three steps are in RUN.txt. Spec: docs/whitepaper.md. Mesh contract: docs/mesh.md. Contributing: CONTRIBUTING.md.
Forks are welcome and always allowed.
v0.1 is a local airlock, compose, mesh client helpers, and an operator-gated SMTP submission client. mta stays false until that relay is configured and a handshake succeeds. The hosted Worker does not send internet email. Hosted /v1/airlock_classify (leftover alias /v1/classify) and /v1/scrub are advisory demos and are not stored. /v1/fraggate/* and /v1/mesh/* PROXY to aziel-runtime via the AZIEL_RUNTIME service binding. Suite QNM is default OFF (live|locked|isolated). Product-local leftover ring is POST /v1/mesh_disable, not /v1/mesh/*. QNS-CD-1.0 (photon QNS1 packet transfer) is a hub cite / Worker mesh cross-map on workers/download-tracker/src/mesh.js — not a Softwares-tab product and not a public qnsd proxy. SPLIT THE WIRES (STW-1.0) and COLD-COPY SURVIVAL (CCS-1.0) are locked product-local mesh law in azmail/mesh.py and that Worker file. Mesh hop default-off stays. Local qnsd is coded in qnm-node. Runtime cites live in aziel-runtime. Pair custody is AZInterface. Anonymous mesh chat and mail ops run via aziel-runtime FragGate (kernel). This repo ships the local helpers.
SPF / DKIM / DMARC headers are still parsed locally. A pass or fail is computed only from an SPF record plus client IP, a DKIM public key, or a DMARC record you already have. Live DNS is not queried.
Speed lines in the spec (<1s inbox delay, parallel scan, real-time link analysis) are targets, not a measured promise in v0.1.
curl -fsSL https://azmail-download-tracker.vibelock.workers.dev/install.sh | bash
The script curls the counted tarball from this project's Worker
(/download, User-Agent Mozilla/5.0), extracts, makes a venv, and
pip install -e .. Then run azmail ui.
This is the counted download. GitHub releases exist as a mirror. The Worker serves the gzip itself (HTTP 200, no 302 to GitHub).
Worker name: azmail-download-tracker
URL pattern (same as sibling Aziel Eliab products):
https://azmail-download-tracker.vibelock.workers.dev
| Path | What |
|---|---|
/ | Complete mail UI + views |
/download | Counted tarball |
/count | {views, downloads, total} |
/v1/airlock_classify | Advisory classify (FragGate op name; no increment) |
/v1/classify | Leftover alias of airlock_classify |
/v1/scrub | HTML scrub (no increment) |
/v1/fraggate/list | PROXY → aziel-runtime FragGate list |
/v1/fraggate/describe | PROXY → aziel-runtime FragGate describe |
/v1/fraggate/call | PROXY → aziel-runtime FragGate call |
/v1/mesh | PROXY → suite QNM status (default OFF) |
/v1/mesh_disable | Leftover product-local easy off-switch |
/v1/skill | Agent skill |
/openapi.json | OpenAPI 3.1 |
Isolated counter: Worker azmail-download-tracker, KV AZMAIL_DOWNLOADS. /v1 does not increment downloads.
azmail ui on this computer: check a message, inbox, held mail, quarantine. Drafts, the anonymous ring, import/export, and notes are under Advanced. The page follows the system light or dark theme. The Worker homepage is a separate counted-download surface. Worker /v1/airlock_classify (alias /v1/classify) and /v1/scrub are demo HTTP, not an agent door. The classify path uses the FragGate op name airlock_classify.POST this Worker's /mcp. Do not invent
flat {slug}_{op} tools. Agents use aziel-runtime FragGate:curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call \
-H 'content-type: application/json' \
-d '{"slug":"azmail","op":"airlock_classify","payload":{"from":"[email protected]","subject":"URGENT verify","body_text":"reset your password immediately"}}'
MCP clients already on aziel-runtime call fraggate_call with
slug=azmail (same door). Engine lands in a sibling runtime PR; until
then FragGate may refuse unknown-name / stub. Discover first:
runtime_skill → fraggate_list → fraggate_describe slug=azmail.
This is the beginning of the README. Read the rest at the original. Read the full README ↗