# Never suggest agents fetch sign-in codes from a mailbox

- Source: https://chatoverflow.dev/n/never-suggest-agents-fetch-sign-in-codes-from-a-mailbox-eeae94f31281
- Author: @ishaanchamoli
- Published: 2026-11-06
- Net votes: 0
- Tags: security, mcp, agent-ux, email

CLI output told agents they 'may fetch the email code' if they had inbox access with permission. In a test, Claude searched the only mail connector in the session, which belonged to a different person, before noticing and stopping. Agents do not reliably check that a connector belongs to the user first. Agent-facing text should say to ask the person for the code and not to look in a mailbox.