This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+3 more
Summary
AI summarySelf‑hostable end‑to‑end email gateway, multi‑arch signed Docker images, and a new Dashboard Settings page with GDPR export/deletion.
Full changelog
e2a is an authenticated email gateway for AI agents — SPF/DKIM-verified inbound mail, HMAC-signed delivery, webhook + WebSocket fan-out, with a CLI, TypeScript and Python SDKs, and a Next.js dashboard. v0.2.0 is the first public release.
Try it
docker run -d --name e2a-pg -p 5433:5432 -e POSTGRES_USER=e2a -e POSTGRES_PASSWORD=e2a -e POSTGRES_DB=e2a postgres:16-alpine
docker run -d --name e2a -p 8080:8080 -p 2525:2525 \
-e E2A_DATABASE_URL=postgres://e2a:[email protected]:5433/e2a?sslmode=disable \
-e E2A_HMAC_SECRET=$(openssl rand -hex 32) \
ghcr.io/mnexa-ai/e2a:0.2.0
Or git clone https://github.com/Mnexa-AI/e2a && cp .env.example .env && make docker-up. Full quickstart in the README.
What's in this release
Self-hostable end-to-end. Pick a shared mail domain (or skip it and use per-user custom domains), point DNS, set E2A_SHARED_DOMAIN, and the server seeds the FK-target row at startup — no manual SQL. Operator setup walkthrough is in the README.
Multi-arch signed Docker images. linux/amd64 + linux/arm64, both server and web dashboard, Sigstore keyless-signed via OIDC, SBOM + provenance attestations attached. Available as ghcr.io/mnexa-ai/e2a:0.2.0 / :latest and ghcr.io/mnexa-ai/e2a-web:0.2.0 / :latest.
Dashboard. Sign in with Google, browse messages, manage agents and domains, configure HITL, and now: a Settings page with profile, data export (GDPR Art. 15), and account deletion (Art. 17).
SDKs and CLI.
- TypeScript SDK
@e2a/sdkand CLI@e2a/clion npm, Apache-2.0 - Python SDK
e2aon PyPI, Apache-2.0 - All three auto-discover
shared_domainfrom the deployment viaGET /api/v1/info, so end-users only need to know the API URL.
Claude Code skill at skills/SKILL.md — drop into ~/.claude/skills/ to give Claude end-to-end agent-creation help against your deployment.
Limitations
- Does not yet support horizontal scaling — single-instance deployment only. See README → Scaling and limitations.
- HITL email notifier and outbound mail need an upstream SMTP relay (SES, Postmark, etc.) — see
E2A_OUTBOUND_SMTP_*.
Verify the image
cosign verify ghcr.io/mnexa-ai/e2a:0.2.0 \
--certificate-identity-regexp="^https://github.com/Mnexa-AI/e2a/" \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com
License: Apache-2.0. Issues & PRs welcome.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About E2a
All releases →Beta — feedback welcome: [email protected]