Zoho Mail for AI agents
Zoho Mail is business email hosting with calendar and admin controls, used by companies that want an ad-free, managed email service. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.
What agents do in Zoho Mail.
Send an email
Compose and send an email from a connected Zoho Mail account.
List emails in a folder
Pull messages in a folder as a read-only inbox check.
Confirm before deleting an email
Check with the user before deleting an email, since it's removed from the mailbox.
29 Zoho Mail actions, graded by risk.
Every Zoho Mail action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.
read
2Look things up. Allowed by default.
- zoho_mail.search_messagesSearch Messages
- zoho_mail.get_all_bookmarksGet All Bookmarks
write
24Create and change things. Allow, or ask the user first.
- zoho_mail.update_group_settingsUpdate Group Settings
- zoho_mail.domain_operationsDomain Operations
- zoho_mail.messages_send_emailSend Email
- zoho_mail.folders_list_foldersList Folders
- zoho_mail.messages_list_emailsList Emails
- zoho_mail.messages_create_draftCreate Email Draft
- zoho_mail.accounts_list_accountsList Zoho Mail Accounts
- zoho_mail.messages_update_emailsUpdate Emails
- zoho_mail.accounts_get_signaturesGet Signatures
- zoho_mail.messages_reply_to_emailReply to Email
- zoho_mail.tasks_update_group_taskUpdate Group Task
- zoho_mail.groups_moderate_messagesModerate Messages
- zoho_mail.messages_update_messagesUpdate Messages
- zoho_mail.messages_upload_attachmentUpload Message Attachment
- zoho_mail.messages_upload_attachmentsUpload Attachments
- zoho_mail.messages_download_attachmentDownload Attachment
destructive
3Delete, cancel or archive. Ask first, or deny outright.
- zoho_mail.messages_delete_emailDelete Email
- zoho_mail.groups_delete_group_bulkDelete Groups in Bulk
- zoho_mail.groups_delete_group_by_zgidDelete Group
Zoho Mail in three steps.
- 01Your users connect Zoho MailThey sign in to Zoho Mail on Arc0 Connect, under your brand, and approve the access you ask for.
- 02You set the rulesReads run, writes like “update Group Settings” can wait for the user, and “delete Email” can be denied outright.
- 03Any agent can actYour agent calls Zoho Mail through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
await arc0.policies.set('zoho_mail', { read: 'allow', write: 'ask', // update_group_settings destructive: 'deny', // messages_delete_email }) # Claude Code: the same connection, one URL $ claude mcp add --transport http arc0 \ https://mcp.arc0.ai/u/u_8f2
How Zoho Mail connects.
Users sign in to Zoho Mail on Arc0 Connect and approve the scopes you request. Build with Arc0’s Zoho Mail OAuth app, or bring your own so the Zoho Mail consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
The same Zoho Mail connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →
- AUTH
- OAuth 2.0
- CREDENTIALS
- Per-tenant encrypted vault
- MODEL SEES
- Results only, never credentials
- AUDIT LOG
- Every call, on every plan
Use Zoho Mail from any agent.
Zoho Mail and Arc0, answered.
Can I use Zoho Mail with Claude, ChatGPT or Cursor?
Yes. Connect Zoho Mail to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Zoho Mail actions you allow.
How do users connect Zoho Mail?
Users sign in to Zoho Mail on Arc0 Connect and approve the scopes you request. Build with Arc0’s Zoho Mail OAuth app, or bring your own so the Zoho Mail consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
Which Zoho Mail actions can my agent take?
29 in total: 2 read, 24 write and 3 destructive, such as “update Group Settings”. Your policies decide which of them each agent may call.
Can I stop my agent from deleting things in Zoho Mail?
Yes. Actions like “delete Email” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.
Can my own backend call Zoho Mail too?
Yes. The same Zoho Mail connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.
Plug Zoho Mail into your agent.
Your users connect Zoho Mail once, under your brand. Your agent gets 29 actions behind your policies, with every call on the record.
Free to build · MCP + REST · Audit log on every plan