Cherami vs Hostinger Agentic Mail

Cherami 35

No x402, MPP or L402 (0). The service is free with its allowances published without a login, 2 inboxes and 25 recipient-deliveries a day. Anything beyond that is by request with no published price (15 of 20). No card and no paid tier (20). An agent can't get access alone. A person signs in and approves at cherami.to/claim in a browser, then gives the agent a one-use phrase, or approves an OAuth connection (0).

Hostinger Agentic Mail 10

No x402, MPP or L402 (0). Prices are public per mailbox per month, with the lowest only on 48-month prepaid terms (10 of 20). No free plan; a 30-day money-back guarantee after paying (0). Mailboxes and tokens are bought and created in hPanel by a person (0). Total 10.

Cherami 46

OAuth through Clerk with protected-resource metadata, but one scope, cherami_mail:full. API keys are revocable in Account, API keys, never expire, travel only in the Authorization header, and every key and grant reaches every inbox on the account. We read this as plain revocable keys (20 of 30). No read-only mode or inbox-limited credential. Per-inbox recipient allowlists and sender blocklists can be changed only by the account's human, drafts allow review before sending, and the delete tools' descriptions tell the agent to confirm with the human, with no server-side confirmation (10 of 20). Every tool that returns mail says to treat it as untrusted data, and a safety guide covers handling, but the docs state Cherami doesn't screen content for manipulation, spam or phishing (10 of 15). Sent messages keep their submission outcomes and responses carry X-Request-ID, but we found no audit log of API or MCP calls (4 of 15). No security.txt, disclosure policy, bug bounty or certification found. The privacy policy says credentials are stored as hashes and incidents are notified as the law requires (2 of 20).

Hostinger Agentic Mail 70

Named tokens scoped to one order and to all or selected mailboxes, with separate SMTP/IMAP and webhook-management permissions, shown once and revocable one by one. The MCP server advertises protected-resource metadata on its 401 but documents bearer tokens only (25 of 30). Outgoing allow and block lists, with the block list winning, and mailbox-level scoping. Deletes are permanent and no read-only permission was named (14 of 20). Inbound mail is untrusted content; the docs advise the allow list for autonomous agents but give no prompt-injection guidance for message content (6 of 15). Email Logs record delivery statuses, sign-in attempts per protocol and an audit trail of mailbox setting changes, and webhooks show the last 20 deliveries (10 of 15). A valid security.txt, a HackerOne bug bounty and a responsible disclosure policy; no certification was checked (15 of 20). Total 70.

Cherami 56

The service is closed under published terms (effective 9 October 2026). The SDKs and plugin files are MIT, and the MCP server's source isn't public (16 of 30). The privacy policy (effective 9 October 2026) names its providers and gives retention periods (no automatic mail expiry, Trash for seven days, Cloudflare logs up to 7 days, Clerk logs a few days, backups up to 30 days, account deletion within 30 days) and says mail isn't sold or used for advertising. It doesn't address model training, and a DPA is by request (24 of 30). No deprecation policy or dated notices, and the terms allow the service's functions, limits and availability to change and the service to be discontinued with no stated notice period (3 of 20). Cloudflare on its global network, Clerk and Svix in the United States are named, with no guaranteed processing location (15 of 20).

Hostinger Agentic Mail 62

Closed service under Hostinger's universal terms, which name Hostinger International Limited in Cyprus. The SDKs are MIT (18 of 30). The privacy policy covers email data and says imported mail isn't used to train non-personalised models and is deleted after termination under the service terms and DPA; retention periods for mailbox content weren't found (20 of 30). No deprecation policy or dated notices for the Mail API (0). Sub-processors and data locations for Hostinger Email weren't checked (0, unchecked). Total 38.