Your Agent Doesn't Have an Email Address (Yet)

30+ repos are building identity, credentials, email, and payment infrastructure for agents as first-class entities. Scattered across 25 subcategories with no name. Here's the map.

Graham Rowe · April 03, 2026 · Updated daily with live data
agents mcp

Your AI agent needs to send an email. It needs to receive one back. It needs API credentials that persist between sessions. It needs a phone number. Maybe it needs to make a payment.

None of this infrastructure exists for agents. Gmail blocks automation. OAuth assumes a human in the loop. Twilio wasn't built for autonomous callers. Every piece of infrastructure your agent touches was designed for humans and grudgingly tolerates machines.

PT-Edge tracks 30+ repos building what we're calling agent-native infrastructure — services designed from the ground up for AI agents as first-class entities. They're scattered across 25 different subcategories because nobody has named this category yet. Here's the map.

Five layers forming

The repos cluster into five emerging layers. Each solves a different piece of the "agents need their own stuff" problem.

Layer 1: Identity

Before an agent can do anything, it needs to be someone. Not a user's API key — its own persistent identity.

ProjectScoreStarsApproach
agentfield 86/100 881 Identity-aware agent microservices
gitclaw 57/100 126 Agent identity in git (rules, memory, tools as files)
aixyz 44/100 65 ERC-8004 on-chain identity + x402 payments

AgentField (881 stars) treats agents like microservices — "scalable, observable, and identity-aware from day one." GitClaw takes a different approach: your agent lives inside a git repo where its identity, rules, memory, and skills are all version-controlled files. AiXYZ goes furthest — on-chain identity via ERC-8004 with native payment wiring.

Layer 2: Communication

Agents need to send and receive messages without borrowing a human's inbox.

ProjectScoreStarsApproach
agenticmail 45/100 66 Email + SMS infrastructure for agents
mcp_agent_mail 62/100 1,798 Async coordination: identities, inboxes, searchable threads
nexu 62/100 1,370 Bridge to WeChat, Slack, Discord, Feishu

AgenticMail gives agents their own email addresses and phone numbers — send and receive real messages programmatically without using a human's Gmail. MCP Agent Mail (1,798 stars) provides an asynchronous coordination layer with persistent inboxes, searchable threads, and file leases. Nexu bridges agents into existing human channels — WeChat, Slack, Discord — so agents can reach people where they already are.

Layer 3: Gateways

Agent-native gateways route agent traffic with agent-specific concerns: governance, payments, model selection.

ProjectScoreStarsApproach
lunar 45/100 405 Agent native MCP gateway for governance + security
ClawRouter 65/100 5,432 Agent-native LLM router, 41+ models, USDC payments
archestra 70/100 3,548 Enterprise platform with MCP registry + orchestrator

ClawRouter (5,432 stars) is explicitly "agent-native" — routing across 41+ models with sub-millisecond latency and USDC payments on Base and Solana. This is what it looks like when infrastructure is designed for agents first: the payment layer is built in, not bolted on.

Layer 4: Runtime

Where agents actually execute — with their own credential stores and sandboxed environments.

ProjectScoreStarsApproach
agentsystems 38/100 92 Self-hosted app store with credential injection
jentic-mini 42/100 90 API execution layer with runtime credential brokering

AgentSystems is a self-hosted app store for agents — install third-party agents, run them on your infrastructure with container isolation and credential injection. Jentic Mini sits between your agent and the outside world: "your agent says what it wants to do, Jentic handles the how — finding the right API, injecting credentials at runtime, brokering the request."

Layer 5: Governance

If agents have their own identities and infrastructure, they need their own governance.

ProjectScoreStarsApproach
agent-governance-toolkit 64/100 47 Zero-trust identity + policy enforcement for agents
tracecat 71/100 3,519 AI-native automation for security teams

25 subcategories and no name

The most telling signal: these 30+ repos are scattered across 25 different subcategories in PT-Edge's taxonomy. Agent payment protocols, MCP gateway infrastructure, multi-agent orchestration, agent security hardening, email MCP servers, personal AI operating systems, agent runtime engines, lightweight agent runtimes — the taxonomy doesn't have a bucket for "infrastructure designed for agents as entities." That's because the category is forming right now.

On Hacker News, the conversation is emerging too. AgentMail launched on HN in January 2026 and got 169 points. "Agent Passport — OAuth-like identity verification for agents" appeared in February. "KeyID — Free email and phone infrastructure for AI agents" in March. The pattern is accelerating: each month brings new infrastructure designed specifically for agents.

Where this is heading

The trajectory is clear. As agents become more autonomous, they need more of their own infrastructure. Today it's email and credentials. Tomorrow it's payment rails, scheduling, persistent storage, social accounts. Every service in the human tech stack will eventually have an agent-native equivalent.

The question for builders: do you retrofit your existing human-first infrastructure to tolerate agents? Or do you build agent-native from day one? The repos in this analysis are betting on the latter.

Go deeper

Every project mentioned here has a quality-scored page in our directory, updated daily:

Related analysis