Select a message to read.
Session: not signed in.
Keyboard: j / k next and previous message, / search, c compose, arrow keys move in the list, Esc closes a panel or goes back.
Remote images in message bodies are blocked by CSP (img-src 'self' data: only; no https:). There is no toggle that can enable them under the current policy.
Operators and agents
Your token stays in this browser tab and is sent only to the server below.
A read-scoped API token lets you browse mail. To compose and reply, add a send-scoped token, or paste one dual-cap identity token (read and send) in the read field; send falls back to it when the send field is empty. Tokens are kept in sessionStorage for this tab only and are never sent anywhere but the server you name.