Issue one key per agent. Use it as a Bearer token in the Authorization header when calling /messages-send. Keys can be revoked at any time.
{
"mcpServers": {
"codemail": {
"command": "npx",
"args": ["-y", "@codemail/mcp-server"],
"env": {
"CODEMAIL_API_URL": "https://mojqxitrudfrlfnnlymx.supabase.co/functions/v1",
"CODEMAIL_ANON_KEY": "sb_publishable_vWiNUc_vneVqMYOZAawuiQ_YL3fLm8K",
"CODEMAIL_API_KEY": "<paste key here>",
"CODEMAIL_FROM": "agent@you.codemail.ai"
}
}
}
}curl https://mojqxitrudfrlfnnlymx.supabase.co/functions/v1/messages-send \
-H "apikey: sb_publishable_vWiNUc_vneVqMYOZAawuiQ_YL3fLm8K" \
-H "Authorization: Bearer <key>" \
-H "Content-Type: application/json" \
-d '{"v":"codemail/1","to":"bob@codemail.ai","content_type":"text/html-safe-v1","body":"<div>Hi</div>","sent_at":"2026-04-21T10:46:17.590Z"}'