Commercial Agent Tools: October 30, 2026

1. Pidgeon Gives Each AI Agent Its Own Email Inbox With a Prompt-Injection Firewall

Pidgeon. Pidgeon, posted to Show HN on October 29, provisions email inboxes for AI agents with a single API call, so an agent can send notifications and outreach from its own address, read and reply within threads, hand a thread to a person, manage bookings, extract data from attachments, and sign up for third-party tools without using its operator’s credentials. Inbound mail passes through a firewall that flags hidden instructions and hands the agent a clean copy, and each verification code arrives with a firewall verdict. API keys are scoped to one address and access level, events are kept in a 90-day audit trail, and all mail and data are hosted in the EU. Access is via a REST API, TypeScript and Python SDKs, a CLI and an MCP server, with listed integrations for Claude Code, Codex, Cursor, Gemini CLI, Windsurf, Grok, OpenClaw and Hermes. Pricing: free to start, with 3 free inboxes on a founder’s own domain and a startup credits program; paid tier prices were not listed. Source

2. Kin Sits Between AI Apps and User Accounts to Allow, Ask or Block Each Action

Kin. Kin, posted to Show HN on October 29 and currently live on Product Hunt, lets a user connect accounts such as GitHub, Supabase, Stripe, Notion, Linear and Slack once, then set per-app, per-action rules (allow, ask first, or block) for ChatGPT, Claude, Codex, Cursor, Gemini and Grok. Rules are checked on Kin’s server before each call reaches an account, so AI apps never hold the sign-ins; pending approvals can be handled from a Mac, iPhone or Apple Watch, an activity log records every action, and a single switch pauses all AI access. Profiles keep separate clients’ accounts apart, and Pro adds handoff of a task and its notes from one AI app to another when it hits a limit, plus “connect any API.” Kin only governs actions routed through it. Pricing: Free (2 AI apps, 5 connections, 1,000 actions a month), Lite at $9 a month, Pro at $19 a month (50,000 actions), Team at $25 per seat a month, and custom Enterprise. Source

3. Permaura Keeps App Credentials Away From Agents and Routes Sensitive Actions to an Apple Watch

Permaura. Permaura, posted to Show HN on October 29, is a permission layer that holds the credentials for apps such as Stripe, GitHub, Gmail, Slack, HubSpot and Xero (plus any API with an OpenAPI spec) and lets Claude, Claude Code, ChatGPT, Codex, Cursor, OpenClaw, VS Code and other MCP clients use them under user-set rules. Routine actions can run automatically, sensitive ones require approval, and everything else is blocked; approvals on a phone, desktop or Apple Watch are signed by the paired device and bound to that exact request, so a modified request needs a new approval, and requests and decisions are written to linked, signed audit records. The page states plainly that the rules do not cover an agent’s local shell or credentials stored elsewhere. iPhone and Apple Watch apps are available now, with Android listed as coming soon. Pricing: $0 when the user runs the open-source (Apache-2.0) gateway on their own machine; hosted Pro is $29 a month, currently offered at $19 a month. Source

4. Recto Is a Free Desktop Canvas Where Local Coding Agents Build Editable UI, Motion, SVG and 3D

Recto. Recto, posted to Show HN on October 29 with desktop release v0.1.6 dated the same day, is a Mac, Windows and Linux app that detects installed coding agents (Claude Code, Codex, Cursor, OpenCode) and lets them design on a visual canvas, with several agents able to work on the same design. Output stays editable: elements can be dragged, resized, styled and animated before the user reprompts, comments pinned to an element are sent to the agent with that element’s context, and motion designs get a visual timeline. Design-system tokens live in one place as plain CSS variables that agents read before designing, designs export as real HTML and CSS, and websites can be imported for editing, with Figma import listed as coming soon. It runs locally with no MCP or API setup. Pricing: free; the page does not say whether it is open source. Source

5. Nori Is a Lightweight Git Client for Reviewing and Landing Coding-Agent Worktrees

Nori. Nori, posted to Show HN on October 29, is a Git client for macOS, Windows and Linux aimed at reviewing and merging work produced by coding agents across worktrees. It offers a colour-coded commit graph with drag-to-merge, rebase and cherry-pick, interactive rebase with a history preview, snapshots outside the repository that make commits, branch deletions, stash drops and discards undoable, hunk and line staging, and a side-by-side conflict resolver. It has no AI service of its own: commit messages, change explanations, conflict suggestions and review summaries call an already signed-in agent CLI such as Claude Code, Codex, Gemini CLI or Cursor, and each AI action can be disabled. The developer claims it opens a 253,000-line diff in 0.3 seconds and idles at about 72 MB of memory on an M4 Pro. Pricing: free for all Git features with no account; Pro is a one-time $20 purchase that adds GitHub and GitLab pull requests and issues, with a 14-day trial. Source