An MCP server that wraps email and calendar write access for voice agents behind a real-time confirmation layer
Voice AI agents that manage email and calendar are stalling because giving them write access is too risky: one hallucination sends the wrong email or books the wrong meeting with no undo. The gap is a confirmation layer fast enough for the hands-free in-car use case where speaking back a confirmation is natural. This MCP server sits between any voice agent and Gmail, Outlook, or Google Calendar, intercepts all write calls, reads back the proposed action aloud, executes only after a spoken yes, and keeps a short undo window after execution.
Demand Breakdown
Social Proof 1 sources
Gap Assessment
4 tools exist (April (YC S25), Lindy AI, Fyxer, Runlayer) but gaps remain: No confirm-before-send layer; write access is direct; HN commenters flagged this at launch. No MCP server other agents can plug into.; Confirmation UX is screen-based and asynchronous, not designed for the eyes-free in-car voice context. Not an MCP server agents can slot into as a trust layer..
Features7 agent-ready prompts
Competitive LandscapeFREE
| Product | Does | Missing |
|---|---|---|
| April (YC S25) | Voice AI assistant for email and calendar, hands-free while driving, built on LiveKit, Deepgram, ElevenLabs. | No confirm-before-send layer; write access is direct; HN commenters flagged this at launch. No MCP server other agents can plug into. |
| Lindy AI | General AI agent platform with email and calendar actions and a no-send-without-approval default. | Confirmation UX is screen-based and asynchronous, not designed for the eyes-free in-car voice context. Not an MCP server agents can slot into as a trust layer. |
| Fyxer | AI email assistant on Gmail/Outlook; drafts replies, sorts inbox, takes notes. | Draft-only; no voice interface; no calendar write actions; no confirmation layer for autonomous sending. |
| Runlayer | MCP security layer for AI agents; signs off on MCP tool calls at a security/policy level for enterprises. $11M seed. | Broad enterprise security focus, not optimized for consumer voice UX or the in-car confirmation pattern; no voice readback or spoken-yes flow. |
Leads54BUILDER
Sign in to unlock full access.