Deploy AI agents that handle order confirmations, shipping notifications, returns processing, and customer support — with monitored oversight for speed and full visibility.
E-commerce businesses live and die by email. Order confirmations, shipping notifications, delivery updates, return authorizations, and customer support responses drive customer satisfaction and repeat purchases. A delayed order confirmation creates customer anxiety and support ticket volume. A missed shipping update leads to "where is my order" inquiries that consume support resources.
The scale of e-commerce email creates unique operational challenges. A growing online retailer may send tens of thousands of transactional emails daily across order lifecycle stages, each requiring accurate personalization with order details, tracking numbers, and delivery estimates. Marketing emails add volume with promotional campaigns, abandoned cart sequences, and product recommendations — all subject to CAN-SPAM unsubscribe requirements and increasingly strict GDPR consent rules.
Customer support email introduces the highest complexity. Returns, refunds, product inquiries, and complaint resolution require nuanced responses that balance customer satisfaction with business policies. AI agents can handle routine inquiries efficiently, but the oversight model must ensure agents escalate complex situations — warranty disputes, fraud claims, or safety issues — to human support teams before responding.
Order confirmations, shipping updates, and delivery notifications must be sent reliably at scale. Even brief delays erode customer confidence and generate unnecessary support tickets asking about order status.
Marketing emails require valid unsubscribe mechanisms, accurate sender identification, and proper consent management. GDPR adds requirements for explicit opt-in consent, data portability, and the right to erasure for EU customers.
Return authorization emails must include accurate RMA numbers, return shipping labels, and refund timelines. Errors in returns processing — wrong refund amounts, incorrect return addresses — create costly customer service escalations.
PCI DSS prohibits sending full card numbers via email. Customer support responses about billing issues must reference transactions without exposing sensitive payment data, requiring careful content review.
Customers interact across email, chat, social media, and phone. AI agents responding to email must have context from other channels to avoid contradictory responses or duplicate resolutions.
Order confirmations, shipping updates, and delivery notifications flow automatically through monitored mode. Support teams maintain full visibility into all outbound communications and can intervene on exceptions without bottlenecking the delivery pipeline.
AI agents draft responses to common customer inquiries — order status, return policies, product questions — with monitored oversight for routine issues. Complex cases involving refund disputes, fraud claims, or product safety are automatically escalated to human review.
AI agents process return requests by verifying order details, generating RMA numbers, and composing return authorization emails with shipping labels. Gated send ensures return authorizations are accurate before delivery to the customer.
AI agents manage promotional campaign emails with proper CAN-SPAM compliance — including valid physical addresses, functioning unsubscribe links, and accurate subject lines. Monitored mode provides visibility into campaign performance and compliance.
Incoming emails reporting unauthorized charges, account takeovers, or suspicious transactions are automatically tagged and escalated. Gated oversight ensures no response is sent to potential fraud cases without human review of the situation.
const response = await fetch('https://api.multimail.dev/v1/mailboxes', {
method: 'POST',
headers: {
'Authorization': 'Bearer mm_live_your_api_key',
'Content-Type': 'application/json'
},
body: JSON.stringify({
address: '[email protected]',
display_name: 'Order Notifications',
oversight_mode: 'monitored',
forward_to: '[email protected]'
})
});
const mailbox = await response.json();
console.log(`Orders mailbox: ${mailbox.id}`);Set up a mailbox for order lifecycle emails with monitored oversight for high-throughput delivery with full team visibility.
interface OrderItem {
name: string;
quantity: number;
price: number;
}
async function sendOrderConfirmation(
customerEmail: string,
orderId: string,
items: OrderItem[],
total: number
) {
const itemList = items
.map(i => `${i.name} x${i.quantity} — $${i.price.toFixed(2)}`)
.join('\n');
const response = await fetch('https://api.multimail.dev/v1/emails', {
method: 'POST',
headers: {
'Authorization': 'Bearer mm_live_your_api_key',
'Content-Type': 'application/json'
},
body: JSON.stringify({
from: '[email protected]',
to: customerEmail,
subject: `Order Confirmed: #${orderId}`,
text: `Thank you for your order!\n\nOrder #${orderId}\n\n${itemList}\n\nTotal: $${total.toFixed(2)}\n\nYou will receive a shipping notification with tracking information once your order ships. Estimated delivery: 3-5 business days.\n\nQuestions? Reply to this email or visit yourstore.com/orders/${orderId}`,
tags: ['order-confirmation', `order-${orderId}`]
})
});
return response.json();
}Automatically send order confirmation emails with full order details in monitored mode for rapid delivery.
"cm">// MCP tool calls for e-commerce support triage
const inbox = await mcp.check_inbox({
mailbox: '[email protected]',
unread: true
});
for (const message of inbox.messages) {
const email = await mcp.read_email({ message_id: message.id });
const body = email.body.toLowerCase();
"cm">// Classify the inquiry
if (body.match(/where.*order|tracking|shipment|delivery/)) {
await mcp.tag_email({
message_id: message.id,
tags: ['order-status', 'auto-respond']
});
"cm">// Auto-respond with order lookup (monitored mode)
await mcp.reply_email({
message_id: message.id,
text: 'I have looked up your most recent order. Your tracking number and current delivery status are available at yourstore.com/orders. If you need further assistance, a team member will follow up within 24 hours.'
});
} else if (body.match(/refund|unauthorized|fraud|stolen/)) {
"cm">// Escalate — do not auto-respond
await mcp.tag_email({
message_id: message.id,
tags: ['escalation', 'fraud-risk', 'human-required']
});
} else if (body.match(/return|exchange|rma/)) {
await mcp.tag_email({
message_id: message.id,
tags: ['returns', 'auto-respond']
});
}
}Use the MCP server to read incoming support emails, classify them by type, and auto-respond to routine inquiries while escalating complex issues.
async function sendShippingNotification(
customerEmail: string,
orderId: string,
carrier: string,
trackingNumber: string,
estimatedDelivery: string
) {
const trackingUrl = carrier === 'UPS'
? `https:"cm">//www.ups.com/track?tracknum=${trackingNumber}`
: carrier === 'FedEx'
? `https:"cm">//www.fedex.com/fedextrack/?trknbr=${trackingNumber}`
: `https:"cm">//tools.usps.com/go/TrackConfirmAction?tLabels=${trackingNumber}`;
const response = await fetch('https://api.multimail.dev/v1/emails', {
method: 'POST',
headers: {
'Authorization': 'Bearer mm_live_your_api_key',
'Content-Type': 'application/json'
},
body: JSON.stringify({
from: '[email protected]',
to: customerEmail,
subject: `Your Order #${orderId} Has Shipped!`,
text: `Great news — your order is on its way!\n\nOrder: #${orderId}\nCarrier: ${carrier}\nTracking: ${trackingNumber}\nTrack your package: ${trackingUrl}\nEstimated delivery: ${estimatedDelivery}\n\nYou will receive another email when your package is delivered.`,
tags: ['shipping-notification', `order-${orderId}`]
})
});
return response.json();
}Send shipping confirmation emails with carrier tracking information when orders are fulfilled.
| Regulation | Requirement | How MultiMail helps |
|---|---|---|
| CAN-SPAM Act (15 USC 7701) | Commercial emails must include a valid physical postal address, a clear opt-out mechanism that is honored within 10 business days, accurate 'From' and 'Subject' headers, and identification as an advertisement when applicable. Transactional emails are exempt from some requirements but must not contain false header information. | MultiMail enforces unsubscribe link inclusion on marketing emails and tracks opt-out requests across mailboxes. Monitored oversight gives compliance teams visibility into all outbound commercial email to verify CAN-SPAM compliance. Transactional emails are properly categorized and separated from marketing communications. |
| GDPR Articles 6-7 (Lawful Basis and Consent) | Processing personal data of EU residents requires a lawful basis, typically explicit consent for marketing communications. Consent must be freely given, specific, informed, and unambiguous. Organizations must maintain records of consent and honor data subject access and erasure requests. | AI agents can verify consent status before sending marketing emails to EU customers. Email tagging tracks consent basis for each communication. The audit trail provides records of when and how consent was obtained, supporting accountability requirements under GDPR Article 5. |
| CCPA (California Consumer Privacy Act) | California residents have the right to know what personal information is collected, request deletion of their data, and opt out of the sale of personal information. Businesses must provide a 'Do Not Sell My Personal Information' link and respond to consumer requests within 45 days. | MultiMail's email archiving and tagging enable rapid identification of all communications associated with a specific consumer for CCPA access and deletion requests. AI agents can be configured to include required CCPA disclosures in customer communications and route privacy requests to the appropriate team. |
| PCI DSS Requirement 3.4 and 4.2 | Primary account numbers (PANs) must be rendered unreadable anywhere they are stored, and unprotected PANs must never be sent via end-user messaging technologies including email. Organizations must implement policies to prevent transmission of cardholder data in clear text. | AI agents are configured to never include full card numbers in email responses. When customers send payment details via email, the system flags these messages and the agent responds without echoing card data. Monitored oversight allows compliance teams to verify PCI compliance across all customer communications. |
Email infrastructure built for AI agents. Verifiable identity, graduated oversight, and a 38-tool MCP server. Formally verified in Lean 4.