Signed-in agents.
OAuth sign-in for every agent, checked against your workspace access and revocable from the Agents page.
An agent with limits you can see.
Sellbird lets an AI agent do outreach work without handing it your inbox or your card. Your agent works through Sellbird's tools; campaign drafts need review by default, reply drafts always need review, and purchases require your approval. Only a workspace owner can turn on campaign autopilot. Workspaces are separated in the database itself, and every recipient can opt out in one click.
Approval in the server. Not in a prompt.
The tools your agent can call simply cannot approve an email, buy a domain, change DNS on your own domain, raise a cap or resume sending. They create a request; the dashboard shows it to you with the button.
Every campaign email waits for your approval by default. A workspace owner can turn on autopilot in settings, and then campaign emails send without one-by-one approval, still inside your sending limits and opt-out rules. Reply drafts always need your approval. Your agent can never turn on autopilot, approve a draft or approve a purchase.
3 selectedof 4 waitingApprove 3Reject
| To | Subject | Type | Sends | |
|---|---|---|---|---|
PN Priya NairHighline Roofing | Inspections booked while you’re on a roof | Intro | Tue 9:10 AM CT | |
EP Elena ParkSouth Congress Dental | New patients who don’t want to call | Intro | Tue 9:24 AM CT | |
GL Grace LinLakeline Physio | Your booking form, with times in it | Intro | Tue 10:02 AM CT | |
MR Marcus ReedReed & Sons HVAC | Re: Booked jobs from your ads | Reply | Held for you |
Checked before anything sendsAll passed
Links only go to your domainsgetbookwell.test, bookwell.test
Opt-out footer and one-click unsubscribeWhat Gmail and Yahoo require
Inside today’s cap and their working hours74 of 120 sent · Mon–Fri, 9 to 5 their time
Workspaces apart.
Row-level security in the database keeps each workspace's data to itself.
Opt-outs win.
One-click unsubscribe on every cold email, and a suppression list that applies at once.
Bounce kill switch.
Sending pauses itself before bounces damage your domains.
Security,
answered.
Is it safe to give an AI agent access to my email?
Your agent never gets your mailbox password. It can read the workspace contacts and conversations you allow through MCP, so your AI provider may process that content. Every campaign email waits for your approval by default. A workspace owner can turn on autopilot in settings, and then campaign emails send without one-by-one approval, still inside your sending limits and opt-out rules. Reply drafts always need your approval. Your agent can never turn on autopilot, approve a draft or approve a purchase.
How are workspaces kept apart?
At the database level. Row-level security means a request for one workspace can’t read another’s data, even if the application asked for it.
What happens if an agent misbehaves?
Revoke its connection on the Agents page and it stops at once, or use the switch that stops every agent in a workspace. Each connection also has its own rate limits.
How do you protect the people who get my emails?
Every cold email has a one-click unsubscribe and an opt-out footer, opt-outs are suppressed across the workspace at once, and sending pauses itself when bounces climb.
Give your agent the work, not the keys.
Request early access and see exactly what your agent can and cannot do.