| What it is | Local app, CLI and MCP server that connects an agent to your existing mailbox and calendar. | Hosted platform and SDKs that give agents tools for over a thousand apps, with authentication, triggers and a sandbox. |
|---|
| Mail providers | Microsoft 365 and Outlook.com through Microsoft Graph, any IMAP server (Gmail, Aruba, Libero…). | A Gmail toolkit (61 tools) and a separate Outlook toolkit. No generic IMAP connector found. |
|---|
| Where logins live | On your computer. Accounts are added from the CLI only; the agent never sees a credential. | In Composio’s cloud by default: “Composio has custody of those credentials”. You can pass your own token on each call instead, or on Enterprise encrypt them with keys you hold. |
|---|
| Who calls the mail server | Your computer. | Composio’s servers, with the stored credential. |
|---|
| Mail content | Stays on your computer. What your agent reads goes only to your agent’s provider. | Tool arguments and results are kept in execution logs by default. Zero data retention is an add-on on Pro, included on Enterprise. |
|---|
| Source code | Open source, AGPL-3.0, the whole product. | SDKs and CLI are open source (MIT); the platform they call is not in the repository. |
|---|
| Self-hosting | It runs on your machine by design. | An Enterprise arrangement: self-hosted with Helm, or a private VPC. |
|---|
| Price | Free. | Hobby, free: 100,000 tool calls a month, up to 20,000 of them on Composio-managed apps such as Gmail. Pro $29/month with $29 of credit, then per call. Enterprise on request. |
|---|
| MCP server | Local, over stdio, 31 tools, no network port. | A hosted MCP endpoint for each session; a local CLI for coding agents. |
|---|
| Before a send | Every send, reply, move or delete waits for a person’s approval out of band (Windows Hello / Touch ID). The agent cannot approve. | No built-in approval gate found. The Gmail page advises keeping “an approval step in your prompt”; a tool that needs input stops before it runs; the Firewall add-on checks calls against your policies with decision models. |
|---|
| Deleting | A delete waits for approval like a send. | Gmail’s delete tools are permanent and bypass the Trash; moving to the Trash is a separate tool. |
|---|
| Prompt injection | Mail reaches the agent as visible text only; hidden text is left out and flagged. Logins and setup are CLI only. | Firewall (add-on on Pro, included on Enterprise) is described as blocking hidden instructions in tool results. |
|---|
| Compliance | Nothing to certify on our side: GigaMail runs no servers and receives no data. | SOC 2 Type II and ISO 27001, as stated on its Gmail page. |
|---|
| Built for | People and teams who want an agent to help with their own mail. | Developers building agents and products that act across many apps. |