The nylas agent policy and nylas agent rule commands define guardrails for AI agent email accounts. Set who the agent can email, what triggers are allowed, and what actions to take on inbound messages — all enforced server-side.

What policies and rules do

A policy is a named container for rules. Rules define conditions and actions: "if the sender is external, block" or "if sending to a non-internal domain, require approval." These fire before the agent sees the message, so prompt injection can't bypass them.

Quick Start

nylas agent policy create --name "production-guardrails" --json nylas agent rule create \ --name "internal-only-outbound" \ --condition "recipient_domain != company.com" \ --action block

Enter fullscreen mode

Exit fullscreen mode

Key commands

Command What it does

nylas agent policy list List all policies

nylas agent policy create --name N Create a named policy

nylas agent policy get <id> Show policy details

nylas agent policy delete <id> --yes Delete a policy

nylas agent rule…