NecoSift by necolo · Private Gmail gateway
NecoSift by necolo
A private, read-only Gmail gateway for Agents, created and operated by necolo. The mailbox owner decides which labels each Agent can read, with separate permission for attachments.
The console requires owner sign-in. This instance is for private, invited use, not public account registration.
Connect Gmail, then grant access explicitly
Google sign-in identifies the owner. Connecting a mailbox separately requests Gmail read-only access. Google grants the gateway broad mailbox read access; label restrictions are enforced by NecoSift, not by Google OAuth.
Each Agent starts without label grants. The owner selects labels for message metadata and body access, and can separately allow attachments. Matching any granted label can authorize a message, including existing and future messages in that scope.
Independent credentials and access audits
Manage separate Agent clients and credentials, pause or revoke access, and review identifiers and server-side delivery status in the audit log. The console is an access-control workspace, not a webmail reader.
Removing access blocks future authorized requests; it cannot recall content already delivered to an Agent or another recipient.
Optional mail events
When enabled for this deployment and explicitly configured by the owner, events let an Agent claim work or receive a signed webhook wake notification. Subscriptions use existing label grants and add no Gmail write access.
Webhook wake notifications contain no message body. Event delivery is best-effort: a notification or successful HTTP response does not prove that an Agent completed its task.
About this instance
NecoSift by necolo is operated by necolo at sift.necolo.xyz. It is built on the ne-mail-proxy software project and is not a Google product. For access, support, privacy questions, or deletion requests, contact necolo through the channel used to invite you.
Read the Privacy Policy and Terms of Service before connecting Gmail or authorizing an Agent.