Hostinger Agentic Mail vs Mailows

Hostinger Agentic Mail 77

hostinger-mail-api-sdk 1.19.8 was published on 3 November 2026 (30). 13 SDK releases in the 90 days from 8 August by npm's records, and docs pages updated on 27 October (20). 24/7 support, a feedback endpoint the API and MCP server expose for agents, but no changelog (10 of 15). The mail MCP server isn't in the official MCP registry (the Hostinger entry there is the hosting connector). The SDKs are current (10 of 15). MIT SDKs generated from the spec, CI not read (7 of 10). Total 77.

Mailows 28

Read for a closed service. No changelog. The MCP registry date of 19 October counted before came from the registry's JSON API, which this method doesn't read, so it is struck. The Stalwart fork has dated commits from 14 to 31 October 2026 but no tag, version or changelog entry, and the server card's version 0.9.2 is undated, so neither is a release. The last dated API change found is Sent-folder storage. The MCP manual says a copy of every sent message now goes to the Sent folder, which the REST API lists with folder=sent, and that nothing was stored before 6 September 2026, 59 days before the check (20). The start of the service on 30 July 2026, the effective date of the first terms, is a page date that records no API change. Only one dated change falls in the 90 days from 6 August (0). Support by email and a contact form, untested, with no public changelog or issue tracker (5 of 15). No official SDKs, and the registry listing that earned this line before is struck (0). No SDK or package to judge; the public Stalwart fork has Dependabot branches (3 of 10).

Hostinger Agentic Mail 10

No x402, MPP or L402 (0). Prices are public per mailbox per month, with the lowest only on 48-month prepaid terms (10 of 20). No free plan; a 30-day money-back guarantee after paying (0). Mailboxes and tokens are bought and created in hPanel by a person (0). Total 10.

Mailows 35

No x402, MPP or L402 in the docs or the OpenAPI file. The OpenAPI file lists five undocumented /acp/checkout_sessions operations with untyped bodies, which no page describes, so no credit (0 of 40). Plan prices are public with VAT and the unit is defined (2 per external recipient, 1 per internal), plus a $12 yearly agent add-on, with no metered per-unit price (10). Free needs no card and doesn't expire, with 200 units (100 external recipients) a month (20). An agent can start a claim ceremony with no browser, but a person has to have signed up in a browser with a bot check, set up 2FA and confirm it, and a person pays at Stripe checkout (5 of 20).

Hostinger Agentic Mail 84

OpenAPI 3.0 at api.mail.hostinger.com/openapi/openapi.json, version 1.3.0, with 28 operations on 20 paths, none without a description (25). docs.hostinger.com serves llms.txt and a Markdown copy of each page (10). Descriptions say what each call does and side effects, such as text and source reads not changing the seen flag and list pointing to search for filters (16 of 20). Typed parameters and bodies with required fields (12 of 15). Every operation documents 401, 403, 500 and 502, 22 document 422, with a shared error shape and a stable code (14 of 15). Version in the path and the spec, but no changelog was found (7 of 15). Total 84.

Mailows 70

OpenAPI 3.1 at api.mailows.com/openapi.json with 28 operations, typed request bodies and a shared ErrorResponse. Most success responses are untyped objects, and five /acp/checkout_sessions operations have no schemas (20 of 25). llms.txt, an agent-written auth.md and two SKILL.md files listed in a skills index (10). The API and MCP manuals say what each route and tool is for, when to list rather than read, and what not to use on which host. The MCP tool descriptions as served weren't read, because no session was opened (14 of 20). Inputs have required fields and bounded limit, but the file has one enum, folder is a free string and response shapes are open (9 of 15). curl, Python and Rust examples throughout and named error codes (rate_limited, monthly_quota_exceeded, recipient_suppressed, tenant_suspended_abuse, attachment_not_clean), with no full error catalogue (12 of 15). The API is at /v1 and the OpenAPI file is 1.0.0, but there's no changelog; /changelog answers 404 (5 of 15).

Hostinger Agentic Mail 70

Named tokens scoped to one order and to all or selected mailboxes, with separate SMTP/IMAP and webhook-management permissions, shown once and revocable one by one. The MCP server advertises protected-resource metadata on its 401 but documents bearer tokens only (25 of 30). Outgoing allow and block lists, with the block list winning, and mailbox-level scoping. Deletes are permanent and no read-only permission was named (14 of 20). Inbound mail is untrusted content; the docs advise the allow list for autonomous agents but give no prompt-injection guidance for message content (6 of 15). Email Logs record delivery statuses, sign-in attempts per protocol and an audit trail of mailbox setting changes, and webhooks show the last 20 deliveries (10 of 15). A valid security.txt, a HackerOne bug bounty and a responsible disclosure policy; no certification was checked (15 of 20). Total 70.

Mailows 75

REST keys are tenant-wide or bound to one mailbox, with inbox and send scopes, optional Ed25519 device binding and owner-started rotation after 2FA with an atomic cutover. The OpenAPI file says never to put a key in a query string. MCP and A2A use OAuth 2.1 with PKCE S256, three scopes, tokens bound to https://mcp.mailows.com and revocation checked on each request (30). A key can be issued without send, the person can untick reading or sending at consent, sends need a deny-by-default allowlist, and human mailboxes can't be granted to MCP. Sends go out with no server-side approval step; the manual recommends require_approval: always for OpenAI's API (17 of 20). Message text is returned under untrusted_content, lists carry no subject or body, every message carries DKIM, SPF and DMARC results, attachments are scanned, and the manual sets out an injection-safe pattern. Nothing classifies injection itself (14 of 15). Grants show client, scopes, last use and recipient counts; admin actions are audited for 12 months; a mail journal survives the agent deleting a message. No per-call API log was found (12 of 15). No security.txt on www.mailows.com (404 on 4 November), nor on api.mailows.com or id.namailu.cz per the 21 October check, no disclosure policy, no bug bounty and no certification. The privacy policy promises breach notice without undue delay (2 of 20).

Hostinger Agentic Mail 62

Closed service under Hostinger's universal terms, which name Hostinger International Limited in Cyprus. The SDKs are MIT (18 of 30). The privacy policy covers email data and says imported mail isn't used to train non-personalised models and is deleted after termination under the service terms and DPA; retention periods for mailbox content weren't found (20 of 30). No deprecation policy or dated notices for the Mail API (0). Sub-processors and data locations for Hostinger Email weren't checked (0, unchecked). Total 38.

Mailows 57

A closed service under clear, dated terms naming the operator and New Mexico law (version 2026-10-25.1). The terms promise the source of the two AGPL-3.0 parts; the Stalwart fork is public, but the linked webmail repository isn't (16 of 30). The privacy policy (version 2026-10-30.1) is specific about hosting at Contabo in the EU with administration from the USA, a retention table, backups kept up to 12 months and no training on mail. The terms and the policy now agree on 90 days for message records. They disagree on tracking. The terms say there is no analytics or advertising cookie and no third-party tracking script, and the pricing page says no analytics scripts, while the policy describes OpenAI's advertising pixel and its _oaiq cookie on the public pages, and the home page loads it. That contradiction is charged once, in the misleading-claim term, so this line holds at its earlier 22 for the missing DPA (22 of 30). Terms changes get 30 days' email notice and planned outages are announced, but no API deprecation policy was found and free plans may be limited or discontinued (5 of 20). Processors and locations are named, Contabo (EU and USA), Stripe (EU and USA), OpenAI (USA) and Cloudflare (global) (18 of 20).