Shipping your ox.

What’s included today

• Cloudflare-hosted mail client and transactional email API.
• Owner-only administration routes, webhook signing secrets encrypted at rest, and a signing secret separate from the agent credential secret (2.4.6).
• Scoped developer keys, templates, message logs, and signed webhooks.
• OAuth/MCP and grant-limited agent access, with durable change feeds, message claims, and idempotent acknowledgements for agents that resume work (2.4.0).
• Sending and receiving domain setup with DNS previews and explicit MX replacement confirmation.
• Later-domain onboarding without reopening completed setup.
• Mailbox copies of successful API sends, visible in Sent. Received replies appear in Inbox.
• Direct CLI, SDK, and agent-skill downloads.

Verification and limits

The unchanged 2.4.0 source installed in a fresh Workers Free account without domains: deployment, owner sign-in, and empty app pages passed, and the agent removal procedure later removed that installation. Mail delivery, populated-mail recovery, and Free throughput have not been recorded on a fresh account. Each installer must configure Access and mail domains and verify their own mail round trip. One-click installation is not claimed.

The release is unsigned. Same-site SHA-256 checksums check download consistency; they are not an independent maintainer signature. Source ZIPs before 2.4.6 are withdrawn; their manifests remain as historical records.

Versioned release metadata · Versioned checksums · 2.0.0 release notes