GoldcoteGOLDCOTE
Invest
Playbook · Email

AI email triage without send access

Email is where an assistant saves the most time and where a mistake travels furthest. Keep the speed, drop the risk: let AI read and draft, and keep the send button.

Updated October 2026

In short

Safe AI email triage means the assistant reads, sorts, summarises and drafts, and a person sends. Use a connection that can read and save drafts but can’t send, delete or move mail; keep attachments away from the model unless needed; review drafts in your own mail app; and for confidential mail, use a model that runs on your own machine.

A daily triage routine

  • Morning summary: what needs a reply today, what can wait, what is noise.
  • Routine replies: the assistant drafts them into your Drafts folder.
  • Flags for you: anything about money, contracts, complaints or legal matters.
  • Ten minutes of review: read, edit, send.

Why draft-only is the right default

Every incoming message is untrusted input. An email can contain instructions aimed at your assistant, and an assistant that can send can be talked into forwarding an invoice or a password reset. A draft-only connection takes that whole class of mistakes off the table; the worst case is a bad draft you don’t send.

Cloud model or local model

A cloud model gives the best drafts, and the provider processes the messages it reads. A local model, for example in LM Studio on a Mac, keeps messages on your machine at the cost of simpler drafts. Many teams use both: local for confidential mailboxes, cloud for the rest.

Reviewing drafts quickly

Ask for short drafts in your own tone, with a one-line note on what the assistant wasn’t sure about. Drafts saved to your mail server’s Drafts folder appear in any mail app connected to that account, so you can review on your phone too.

Checklist

AI email checklist

  • The assistant can’t send, delete or move mail.
  • Your mailbox password isn’t in the assistant’s config.
  • Attachments aren’t passed to the model unless you choose to.
  • Confidential mailboxes use a local model, or stay out of AI.
  • A person reviews every draft before it’s sent.

How MoltenMail does it

MoltenMail connects an assistant to your mailbox on a Mac: it can list folders, read and save drafts, and can’t send, delete, move or mark mail. Your password stays in the macOS Keychain, attachments and remote images are held back by default, and it works with Claude, OpenClaw, Hermes, Cursor, Codex and LM Studio.

Questions

Can AI auto-send simple replies?

We advise against it. The time saved is small and the risk is not; a quick review catches the mistakes that matter.

Will drafts show up on my phone?

Yes, if they’re saved to your mail server’s Drafts folder, as MoltenMail does: any mail app on that account sees them.

What about attachments?

Keep them away from the model unless a task needs them. MoltenMail holds them back by default.

Is this suitable for client email?

With a local model and draft-only access it can be. Check your profession’s rules on confidentiality first.

More guides