# Loomal

> Loomal gives AI agents a verifiable identity — DKIM-signed email, AES-256-GCM encrypted vault, and TOTP 2FA — all accessible via a single REST API or MCP server.

Loomal is an identity infrastructure platform for AI agents, providing the core primitives that autonomous agents need to operate independently online: a real email inbox, an encrypted credential vault, and TOTP 2FA code generation. Just as humans rely on email, a password manager, and a phone for 2FA, Loomal gives agents the same capabilities — plus delegation chains and audit trails that trace every action back to the authorizing human. It is framework-agnostic, exposing a REST API and a native MCP server that integrates with every major agent framework in under 30 seconds.

- **Agent Inbox**: *Each agent gets a dedicated, DKIM-signed email address with full inbound and outbound support, threading, and sub-200ms delivery — callable via `inbox.send()` or MCP tools.*
- **Encrypted Vault**: *Store API keys, OAuth tokens, and passwords with AES-256-GCM encryption; every read and write is scoped and audit-logged so nothing leaks silently.*
- **TOTP Generation**: *Generate time-based 2FA codes from seed-encrypted secrets with a 30-second rotation window, enabling fully autonomous authentication flows.*
- **Delegation Chains**: *Every agent action is cryptographically linked Human → Org → Agent → Action via DKIM, enabling instant revocation — revoke a human and all downstream agents stop immediately.*
- **Compliance-Ready Audit Trails**: *Every email, credential access, and TOTP call is logged with identity, timestamp, and delegation context to satisfy FINRA, HIPAA, CMMC, and FRCP requirements.*
- **MCP-Native**: *Install via `npx @loomal/mcp` and configure in Claude Desktop, Cursor, or any MCP-compatible client in five lines of JSON — no custom wrappers needed.*
- **Framework Integrations**: *Works out of the box with LangChain, CrewAI, LlamaIndex, LangGraph, OpenAI Agents SDK, Vercel AI SDK, AutoGen, Mastra, Pydantic AI, n8n, and more.*
- **Enterprise Controls**: *BYOK encryption, SSO/SAML, custom domains, data residency, dedicated IPs, and a 99.99% SLA for regulated deployments in finance, healthcare, defense, and legal.*

## Features
- DKIM-signed per-agent email inbox
- AES-256-GCM encrypted credential vault
- TOTP 2FA code generation
- Delegation chains (Human → Org → Agent → Action)
- Compliance-ready audit logs
- MCP-native server
- REST API
- Python and Node.js SDKs
- Custom domains
- Webhook endpoints
- BYOK encryption (Enterprise)
- SSO/SAML (Enterprise)
- Data residency (Enterprise)
- EU AI Act reporting
- Dedicated IPs
- 99.99% SLA (Enterprise)

## Integrations
LangChain, CrewAI, LlamaIndex, Haystack, Vercel AI SDK, Cursor, Goose, Open WebUI, Notion, Lovable, Manus, Make, n8n, Claude, OpenAI, Gemini, DeepSeek, Cohere, Perplexity, ByteDance, vLLM, Ollama, OpenRouter, MCP, AutoGen, LangGraph, Mastra, Pydantic AI, OpenAI Agents SDK

## Platforms
WEB, API, CLI, DEVELOPER_SDK

## Pricing
Freemium — Free tier available with paid upgrades

## Links
- Website: https://loomal.ai
- Documentation: https://docs.loomal.ai/
- Repository: https://github.com/loomal-ai
- EveryDev.ai: https://www.everydev.ai/tools/loomal