Your Agent Doesn't Have an Email Address (Yet)
30+ repos are building identity, credentials, email, and payment infrastructure for agents as first-class entities. Scattered across 25 subcategories with no name. Here's the map.
Your AI agent needs to send an email. It needs to receive one back. It needs API credentials that persist between sessions. It needs a phone number. Maybe it needs to make a payment.
None of this infrastructure exists for agents. Gmail blocks automation. OAuth assumes a human in the loop. Twilio wasn't built for autonomous callers. Every piece of infrastructure your agent touches was designed for humans and grudgingly tolerates machines.
PT-Edge tracks 30+ repos building what we're calling agent-native infrastructure — services designed from the ground up for AI agents as first-class entities. They're scattered across 25 different subcategories because nobody has named this category yet. Here's the map.
Five layers forming
The repos cluster into five emerging layers. Each solves a different piece of the "agents need their own stuff" problem.
Layer 1: Identity
Before an agent can do anything, it needs to be someone. Not a user's API key — its own persistent identity.
| Project | Score | Stars | Approach |
|---|---|---|---|
| agentfield | 86/100 | 881 | Identity-aware agent microservices |
| gitclaw | 57/100 | 126 | Agent identity in git (rules, memory, tools as files) |
| aixyz | 44/100 | 65 | ERC-8004 on-chain identity + x402 payments |
AgentField (881 stars) treats agents like microservices — "scalable, observable, and identity-aware from day one." GitClaw takes a different approach: your agent lives inside a git repo where its identity, rules, memory, and skills are all version-controlled files. AiXYZ goes furthest — on-chain identity via ERC-8004 with native payment wiring.
Layer 2: Communication
Agents need to send and receive messages without borrowing a human's inbox.
| Project | Score | Stars | Approach |
|---|---|---|---|
| agenticmail | 45/100 | 66 | Email + SMS infrastructure for agents |
| mcp_agent_mail | 62/100 | 1,798 | Async coordination: identities, inboxes, searchable threads |
| nexu | 62/100 | 1,370 | Bridge to WeChat, Slack, Discord, Feishu |
AgenticMail gives agents their own email addresses and phone numbers — send and receive real messages programmatically without using a human's Gmail. MCP Agent Mail (1,798 stars) provides an asynchronous coordination layer with persistent inboxes, searchable threads, and file leases. Nexu bridges agents into existing human channels — WeChat, Slack, Discord — so agents can reach people where they already are.
Layer 3: Gateways
Agent-native gateways route agent traffic with agent-specific concerns: governance, payments, model selection.
| Project | Score | Stars | Approach |
|---|---|---|---|
| lunar | 45/100 | 405 | Agent native MCP gateway for governance + security |
| ClawRouter | 65/100 | 5,432 | Agent-native LLM router, 41+ models, USDC payments |
| archestra | 70/100 | 3,548 | Enterprise platform with MCP registry + orchestrator |
ClawRouter (5,432 stars) is explicitly "agent-native" — routing across 41+ models with sub-millisecond latency and USDC payments on Base and Solana. This is what it looks like when infrastructure is designed for agents first: the payment layer is built in, not bolted on.
Layer 4: Runtime
Where agents actually execute — with their own credential stores and sandboxed environments.
| Project | Score | Stars | Approach |
|---|---|---|---|
| agentsystems | 38/100 | 92 | Self-hosted app store with credential injection |
| jentic-mini | 42/100 | 90 | API execution layer with runtime credential brokering |
AgentSystems is a self-hosted app store for agents — install third-party agents, run them on your infrastructure with container isolation and credential injection. Jentic Mini sits between your agent and the outside world: "your agent says what it wants to do, Jentic handles the how — finding the right API, injecting credentials at runtime, brokering the request."
Layer 5: Governance
If agents have their own identities and infrastructure, they need their own governance.
| Project | Score | Stars | Approach |
|---|---|---|---|
| agent-governance-toolkit | 64/100 | 47 | Zero-trust identity + policy enforcement for agents |
| tracecat | 71/100 | 3,519 | AI-native automation for security teams |
25 subcategories and no name
The most telling signal: these 30+ repos are scattered across 25 different subcategories in PT-Edge's taxonomy. Agent payment protocols, MCP gateway infrastructure, multi-agent orchestration, agent security hardening, email MCP servers, personal AI operating systems, agent runtime engines, lightweight agent runtimes — the taxonomy doesn't have a bucket for "infrastructure designed for agents as entities." That's because the category is forming right now.
On Hacker News, the conversation is emerging too. AgentMail launched on HN in January 2026 and got 169 points. "Agent Passport — OAuth-like identity verification for agents" appeared in February. "KeyID — Free email and phone infrastructure for AI agents" in March. The pattern is accelerating: each month brings new infrastructure designed specifically for agents.
Where this is heading
The trajectory is clear. As agents become more autonomous, they need more of their own infrastructure. Today it's email and credentials. Tomorrow it's payment rails, scheduling, persistent storage, social accounts. Every service in the human tech stack will eventually have an agent-native equivalent.
The question for builders: do you retrofit your existing human-first infrastructure to tolerate agents? Or do you build agent-native from day one? The repos in this analysis are betting on the latter.
Go deeper
Every project mentioned here has a quality-scored page in our directory, updated daily:
- Agent categories — including the 25 subcategories where this infrastructure is scattered
- MCP categories — gateway and protocol infrastructure
- Trending agent projects — what's moving this week
Related analysis
Agent Platforms Are Four Problems, Not One
You'll deploy a coding agent and think you're done. You won't be told you also need sandboxing, governance, and...
Your Agent Framework Is a Ball of Mud — Who's Actually Fixing It
You've lost sessions to compaction, watched agents redo work, and restarted after crashes with nothing to resume...
How Agents Acquire Skills: The Emerging Architecture of Composable Capabilities
Skills, registries, marketplaces, and the trust problem — scored on quality daily. A map of the 2,700+ repos...
Agent Governance in 2026: Who's Building the Guardrails?
Sandboxing, policy enforcement, security scanning, and compliance — scored on quality daily. A decision guide for...