MailCaduceus for Openclaw

MailCaduceus transforms a single Microsoft 365 mailbox and domain into an enterprise-grade communications control plane.

lmtlssss
v4.2.0
Mar 6, 2026
0
0
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install mailcaduceus

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install mailcaduceus using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is MailCaduceus?

MailCaduceus is a specialized toolset for Openclaw Skills designed to automate the complexities of enterprise-level email infrastructure. By leveraging a single Microsoft 365 mailbox combined with a Cloudflare DNS zone, it allows developers to simulate a massive communication stack. It handles the heavy lifting of Entra/Graph authorization, Exchange transport rules, and identity rotation to ensure high inbox reliability.

This skill is perfect for developers who need to manage multiple outreach or support identities without the cost and management overhead of mailbox sprawl. It focuses on sender trust hardening and identity lifecycle management, ensuring that every automated message adheres to professional standards and security protocols.

MailCaduceus Use Cases

  • Scaling personalized outreach with subdomain-specific identities to protect root domain reputation.
  • Automating the creation and retirement of support aliases with built-in reply fallback logic.
  • Hardening domain security by programmatically managing SPF, MX, and DMARC records via Cloudflare.
  • Setting up temporary no-reply lanes for high-volume transactional notifications.
  • Consolidating multiple departmental communication streams into a single manageable mailbox interface.

How MailCaduceus Works

  1. The user configures strict credential templates for Entra and Cloudflare within the Openclaw Skills environment.
  2. An initial bootstrap command executes to grant Microsoft Graph and Exchange app permissions through a secure sign-in flow.
  3. The system audits the credential posture and optimizes DNS settings to establish a high-trust sender profile.
  4. Specific email lanes (aliases) are provisioned under subdomains, categorized as either reply-capable or no-reply.
  5. Operations are executed following strict rules—such as single-recipient enforcement—to maintain reputation and deliverability.

MailCaduceus Setup

To integrate this into your Openclaw Skills workflow, follow these steps:

# 1) Initialize credential files from templates
cp credentials/entra.txt.template credentials/entra.txt
cp credentials/cloudflare.txt.template credentials/cloudflare.txt

# 2) Populate the .txt files with your Entra and Cloudflare keys

# 3) Run the bootstrap script to initialize the control plane
./scripts/mail-caduceus.sh --organization-domain "yourdomain.com"

# 4) (Optional) Verify a specific lane setup
python3 scripts/email_alias_fabric_ops.py verify-lane \
  --mailbox "[email protected]" \
  --alias-email "[email protected]" \
  --domain "sub.domain.com"

MailCaduceus Data Schema & Taxonomy

MailCaduceus organizes its state and configuration using the following structure:

Data Type Location Description
Credentials credentials/ Strict KEY=VALUE pairs with version headers for secure autoloading.
Operation State intel/ Atomic JSON files tracking alias lifecycle, timestamps, and operator visibility.
Templates *.template Publish-safe configuration skeletons for Entra and Cloudflare.
Environment .env (Optional) Persisted runtime keys and non-secret configuration toggles.

MailCaduceus Advanced Features

  • Headless steady-state operations using Entra client secrets for full automation after initial bootstrap.
  • Intelligent alias retirement that preserves reply continuity by redirecting legacy mail to fallback targets.
  • Granular security posture controls including scope-locked script resolution and restrictive file permissions.
  • Support for custom identity variables including display names and lane-specific DNS profiles.
  • Integrated sandbox smoke tests to validate the communication stack before going live.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Requires
Bins bashpwshpython3jqrg
Github Stars: 0
forks: 0

Featured*