# Create an agent password for AI assistants

In XgenPlus webmail, enable **AI Agent (XgenPlus MCP)** for your account and create an agent password. It is separate from your mailbox password and works only for MCP. Turn on only the permissions you need, starting with list, search and read. Changes apply within about 10 seconds. To revoke access, disable or change the agent password.

## How to create an agent password for AI assistants

1. In XgenPlus webmail, enable **AI Agent (XgenPlus MCP)** for your account.
2. Create an agent password and keep it safe.
3. Turn on the permissions the assistant needs. For read-only use, turn on **List folders**, **Search email** and **Read email**.
4. Use the agent password to [make your token](/developers/mcp-make-a-token/).

## When to use it

> Rohit at acme.in wants Cursor to summarise supplier mail. He enables AI Agent (XgenPlus MCP), creates an agent password and turns on only List folders, Search email and Read email. A month later he adds Save drafts so it can prepare replies for him.

## Permissions

Each permission switches on a group of tools.

| Permission | What the assistant can do |
|---|---|
| **List folders** | See folder names and counts |
| **Search email** | List and search messages, see the inbox summary, look up contacts |
| **Read email** | Open messages, threads and attachments; also read calendar, tasks, signature and out-of-office |
| **Mark read/unread** | Mark read or unread, star |
| **Move email** | Move messages between folders, restore from Trash |
| **Delete email** | Move messages to Trash (never permanent) |
| **Reply/forward** | Reply to and forward mail, together with Save drafts or Send email |
| **Save drafts** | Create, edit and delete drafts |
| **Send email** | Send new messages and drafts |

## Good to know

- You have one agent password per mailbox.
- If a permission is off, the assistant gets a `SCOPE_REQUIRED` error and should tell you. Turn the permission on if you want it to do that task.
- **Revoking:** disable or change the agent password in webmail. The assistant is refused on its next call.
- Your organisation's administrators can see which users have enabled AI Agent (XgenPlus MCP).

## Common questions

**Is the agent password the same as my mailbox password?**

No. They are separate, and changing one does not change the other. The assistant never sees your mailbox password.

**Can someone else turn this on for me?**

No. MCP stays off for your account until you enable AI Agent (XgenPlus MCP) yourself.

**Do I need to reconnect after changing permissions?**

No. Permission changes apply within about 10 seconds.


Source: https://docs.xgenplus.com/developers/mcp-agent-password/