Select a message
Contacts
Select a contact
Loading…
Select a message
Select a contact
| Address | Type | Forwards to | May send |
|---|
No aliases yet
Sends mail from one of your addresses through that provider's own submission server, with credentials stored here. cf-mail has to replay the password to the server, so it keeps it — use an app-specific password wherever the provider offers one, and it can be revoked there without touching the rest of the account.
| Address | Server | Username | Status |
|---|
No links yet
Lets another mail server push messages straight into one of your mailboxes over HTTPS. Each channel is a token bound to a single mailbox and can only add mail — never read it, send it, or reach any other address.
| Name | Rank | Status |
|---|
| Domain | Owner | Shared | Ingest | Status |
|---|
dash.cloudflare.com → My Profile → API Tokens → Create Token → Create Custom Token. Five permission rows:
Zone Resources: Include → All zones. Account Resources: your account.
Continue → Create, then paste the value here. It is verified against
Cloudflare and stored encrypted; it is never shown again.
Editing an existing token's permissions in the dashboard keeps its value — the stored token gains the new scopes without re-pasting; use Test above afterwards.
Applies to this browser only, immediately. System follows your device's light/dark setting and keeps following it; the ☀️/🌙 button in the header pins Light or Dark.
The reading pane always shows a contact's photo. These switch them on in the list as well. They are saved to your account, not to this browser, so ticking the phone one here reaches your phone.
Connect Google contacts to get photos.
This browser does not support push notifications.
Notifications are blocked for this site. To enable them, allow notifications for mail.mrl.cx in your browser's site settings, then reload this page.
Mailboxes that notify this browser. Each device chooses its own.
These ticks belong to this browser's own notification subscription, not to your account: a different browser, a new profile, or one whose site data was cleared starts with everything unticked. That is a device that has not subscribed yet, not your settings being reset. Changes save as you tick.
Every browser signed in to this account that has enabled notifications.
Renaming is for your own benefit only. Mute all unticks every mailbox for that device, and Remove forgets the device entirely — either way that browser has to opt back in from its own copy of this page.
Rules that file matching mail to Spam. “Mark as spam” creates one automatically; deleting a rule welcomes the sender back. New and deleted rules can take up to a minute to affect arriving mail.
Links a Google account so mail from people in your Google Contacts can show their name and photo instead of a coloured letter. Read-only. Your browser never talks to Google: the consent screen is the only Google page you ever see, and every later request runs on the server.
Contacts sync on the server, so photos and names appear on every device you read mail on. Disconnecting deletes the synced copy; the photos in the message list are switched on under Appearance.