Compliant AI Email Automation for Financial Services

const response = await fetch('https://api.multimail.dev/v1/mailboxes', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer mm_live_your_api_key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    address: '[email protected]',
    display_name: 'Client Advisory',
    oversight_mode: 'gated_all',
    forward_to: '[email protected]'
  })
});

const mailbox = await response.json();
console.log(`Compliance-gated mailbox: ${mailbox.id}`);

const response = await fetch('https://api.multimail.dev/v1/emails', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer mm_live_your_api_key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    from: '[email protected]',
    to: '[email protected]',
    subject: 'Q1 2026 Portfolio Review Summary',
    text: 'Dear Mr. Johnson, your portfolio returned 4.2% in Q1 2026, outperforming the benchmark by 0.8%. I recommend we schedule a call to discuss rebalancing opportunities in the fixed income allocation. Please let me know your availability this week.',
    tags: ['portfolio-review', 'client-correspondence', 'q1-2026']
  })
});

const email = await response.json();
"cm">// Enters supervisory review queue
console.log(`Pending review: ${email.status}`);

"cm">// MCP tool calls for BEC detection
const inbox = await mcp.check_inbox({
  mailbox: '[email protected]',
  unread: true
});

const becPatterns = [
  /wire\s*transfer/i,
  /change.*(?:bank|account|routing)/i,
  /urgent.*payment/i,
  /update.*(?:ach|banking|payment).*(?:info|detail)/i
];

for (const message of inbox.messages) {
  const email = await mcp.read_email({ message_id: message.id });
  const flags = [];

  for (const pattern of becPatterns) {
    if (pattern.test(email.body) || pattern.test(email.subject)) {
      flags.push('bec-risk');
      break;
    }
  }

  if (email.from !== email.reply_to) {
    flags.push('reply-to-mismatch');
  }

  if (flags.length > 0) {
    await mcp.tag_email({
      message_id: message.id,
      tags: [...flags, 'requires-verification']
    });
  }
}

interface TradeConfirmation {
  clientEmail: string;
  clientName: string;
  tradeId: string;
  symbol: string;
  action: 'BUY' | 'SELL';
  quantity: number;
  price: number;
  executedAt: string;
}

async function sendTradeConfirmation(trade: TradeConfirmation) {
  const response = await fetch('https://api.multimail.dev/v1/emails', {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer mm_live_your_api_key',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      from: '[email protected]',
      to: trade.clientEmail,
      subject: `Trade Confirmation: ${trade.action} ${trade.quantity} ${trade.symbol} - ${trade.tradeId}`,
      text: `Dear ${trade.clientName},\n\nThis confirms your ${trade.action.toLowerCase()} order has been executed:\n\nTrade ID: ${trade.tradeId}\nSymbol: ${trade.symbol}\nAction: ${trade.action}\nQuantity: ${trade.quantity}\nPrice: $${trade.price.toFixed(2)}\nTotal: $${(trade.quantity * trade.price).toFixed(2)}\nExecuted: ${trade.executedAt}\n\nThis confirmation is for informational purposes. Please review and contact us with any questions.`,
      tags: ['trade-confirmation', trade.tradeId]
    })
  });

  return response.json();
}