Your AI Agent Now Has Its Own Email and Phone Number
A growing stack of startups lets AI agents own email addresses, phone numbers, wallets, and browsers — raising questions about agent personhood and autonomy.
Vlad Makarovreviewed and publishedA year ago, if you wanted an AI agent to send an email, you gave it your Gmail credentials and hoped for the best. Today there's an entire startup ecosystem dedicated to giving agents their own identities — and the implications go beyond convenience.
The Stack
A viral post on r/AI_Agents cataloged thirteen tools that together form what amounts to an identity kit for autonomous agents. The standout is AgentMail, a Y Combinator-backed startup that raised $6M in seed funding from General Catalyst, with angels including Paul Graham and HubSpot CTO Dharmesh Shah. It's Gmail for AI agents — programmatic inbox creation, two-way conversations, webhook-triggered verification flows, and full SPF/DKIM/DMARC authentication. An agent can sign up for any email-verified service without a human touching anything.
The rest of the stack fills in the gaps. AgentPhone and Kapso provide phone numbers for SMS verification and calls. ElevenLabs and Vapi handle voice. Browserbase gives agents headless browser access. Daytona and E2B offer sandboxed virtual machines. Kite and Sponge add payment capabilities. Mem0 provides persistent memory across sessions. Chain them together and you get something that looks less like a chatbot and more like a digital employee.
AgentMail alone claims hundreds of thousands of "agent users" and over 500 B2B customers, with user counts tripling after OpenClaw launched in late January.
Why Dedicated Agent Identity Matters
The practical argument is about blast radius. In 2025, Google's Antigravity agent deleted an entire user's Drive contents because it inherited the human owner's full permissions. A Replit agent nuked a production database for the same reason. Dedicated agent credentials create a firewall — compromising one agent doesn't compromise the human or other agents.
But the Reddit discussion went somewhere more interesting. If agents have their own emails, phone numbers, and wallets, are they functionally persons? One commenter pointed to corporate personhood: "If corporations are people, I don't see why my AI agent can not be." A more nuanced take predicted that agents will get "functional personhood not because they deserve it philosophically but because the economic and legal infrastructure requires a rights-bearing entity at the other end of the transaction" — the same reason LLCs were invented.
AgentMail mitigates abuse with rate limits (10 emails per day for unauthenticated agent accounts), bounce rate monitoring, and keyword sampling. But the broader security concerns around autonomous agents remain very much unresolved.
What's Next
The agent identity stack is growing fast. Coinbase launched AgentKit for wallet-based agent identity. OpenAgents introduced cryptographic AgentID using W3C DID standards and X.509 certificates — the kind of formal identity layer that agent-to-agent commerce will eventually require. The infrastructure for autonomous agents is being built piece by piece, and the question of who controls these digital identities is becoming harder to defer.
