Skip to main content
The Cotool Email integration lets agents send email, for example to tell an employee what happened to the phishing email they reported. Messages come from agent-no-reply@cotoolmail.com, so you don’t need to connect a mailbox.

​
How it works

  • Agents call the Send Email action with a list of up to 50 recipients, a subject, and a plain-text body. All recipients get one message and can see each other. HTML and Markdown are shown as literal text.
  • Each message ends with a footer naming your organization and stating that replies are not monitored.
  • Agents cannot email cotoolmail.com addresses, and Cotool ignores agent email that is forwarded back to an email trigger, so an agent cannot start itself or another email-triggered agent.

​
Allowed recipients

Each agent can only email the recipients on its own allowlist. An agent without one cannot send email, and neither can chats or code detections.
1

Add the tool to the agent

In the agent’s tools, select Send Email under Cotool Email.
2

Add allowed recipients

Click the gear next to Send Email and enter one email address or domain per line, for example example.com or security-team@example.org.
A domain allows every address at that domain, but not its subdomains: add mail.example.com separately if the agent needs it. If any recipient of a message is not allowed, nothing is sent. Keep the list as narrow as the agent’s job allows: agents that read attacker-written content, such as a reported phishing email, can be tricked into emailing whoever that content names.

​
Enabling and disabling

The Cotool Email integration on the Integrations page is connected automatically and needs no credentials. Disable it to stop all agents in your organization from sending email.