How do I give an AI agent access to my mail and calendar?

Grux OS reads the mail and calendar accounts already configured on your Mac, in place, with nothing copied anywhere. That is one of two shapes this can take, and they have very different consequences. The common shape is to grant a hosted assistant OAuth access to your mail provider, or to forward your inbox to it, which means a third party holds a copy of your mail indefinitely and a breach of their systems is a breach of yours. Grux OS does the other one: Mailbox talks to your IMAP server directly, Calendar and Contacts use the macOS system permissions for the accounts already on the Mac, and there is no Grux server for a copy to live on. Your credentials go to the macOS Keychain and are sent only to the provider they belong to.

Grux OS 3.0.0 · last checked 2026-09-30 · generated from the shipping release

What connects to what

SurfaceTalks toNeeds
MailboxYour IMAP server, directlyIMAP details
CalendarThe calendars already on your MacThe macOS Calendar permission
ContactsThe contacts already on your MacThe macOS Contacts permission
Notes and DocumentsFiles on your diskNothing
Compose and sendA sending provider you configureA Resend key, plus IMAP

Why the model does not get a blanket grant

Mail, calendar and contact access reach the model as tools rather than as a dump of your data. A tool call fetches what the turn needs and nothing else, so a question about one meeting does not put a year of your calendar in a prompt.

The honest cost of the local answer

What it is good for on a normal day

The case it was built for is the one where a vendor mail needs a reply, a date and somebody's number. Mailbox, Calendar and Contacts each open as a pane beside the Command Panel, pointed at your real accounts, so that is one turn instead of three applications.

Where to check this

ClaimSource
Mailbox talks to your IMAP server directly, over TLSIMAPClient.swift
Credentials go to the macOS KeychainEmailAccountStore.swift
Compose and send is a separate feature needing its own credentialComposeDoorTests.swift
Calendar reads and writes through Apple's EventKit, on the accounts already on your MacCalendarService.swift
The calendar tool lists events in the date range a request asks forCalendarTool.swift

Questions

Does Grux OS store a copy of my email?
No. There is no Grux server. Mailbox reads your IMAP account directly from your Mac.
Does Grux OS need OAuth access to Gmail or Outlook?
No. It uses IMAP for mail and the macOS system permissions for calendar and contacts, so it uses the accounts already configured on the machine.
Can it send mail on my behalf?
Only through a separate Labs feature that needs its own sending credential. Reading and sending are not the same grant.
Download Grux 3.0.0 Read the source

Free, MIT licensed. macOS 14 or later, Apple silicon. 23.7 MB, signed and notarized by Apple. No account, no server, no subscription.