Settings and account
Settings is its own screen with its sections down the left, in four groups: You (General, Display, Notifications), Mail (Addresses, Compose & reply, Filters & rules), AI (Agent, Connectors, API & MCP) and Workspace (Team, Usage, Domains, Cloudflare). On a computer it is the gear under the apps in the rail. On a phone it is under More, with your name at the top (it opens General) and Help at the foot; tapping a section pushes into it and ‹ Settings comes back. Someone you added to the team sees Addresses, Display, Notifications, General and Team.
On this page · 15 sections
General
Your name heads the page, with whether you are the workspace's owner or a member, the workspace's name, and Sign out beside it. Three parts follow: Sign-in (your passkeys and your email), Preferences (the workspace's own, below) and About. About shows which build this is and whether it runs as an installed app or in the browser. Check for updates looks for a new version now rather than waiting for the app to notice one; when one is ready it offers Reload to update. User guide opens this guide. A sign-in lasts 30 days on a browser.
Your name
- The name the app calls you starts as one made from your email (or, if you were invited with a work address, the name on it). Press it to change it, as you would a board's title: type, then Enter or click away to keep it, or Esc to put it back. Up to 60 characters.
- Everyone in the workspace sets their own. It is not the name on mail you send, which belongs to each address (Settings → Addresses).
Workspace
- Time zone is the clock your agent counts from. Ask it to follow up “tomorrow at nine” and nine means nine here, not nine UTC. It starts at UTC. The line under it says what time it is there and, when this device is on another zone, offers Use this device's to switch to it. It is the workspace's, not the browser's, so a follow-up lands at the same moment whoever asks for it.
- Undo send is how long Send waits before the message actually goes: off, or 5, 10 or 30 seconds. Five to begin with, because five seconds is how long it takes to remember the attachment. The wait is kept where the sending happens rather than in the browser, so closing the tab does not send it early and does not swallow it either.
- Save people you write to is on by default: every address a message goes to is filed in Contacts, under Autosaved, so the composer can offer it by its first letters later. Off, the book holds only the people you add yourself — nothing already in it is removed.
- Only the owner changes these. Someone you added to the team sees what they are set to, with Set by the workspace's owner.
Passkeys
- A passkey signs you in with your fingerprint, face or device PIN. The private half never leaves the device, so there is nothing to phish, nothing to reuse and nothing to leak in a breach. It is how you sign in here.
- Add a passkey registers the device you are on — Touch ID, Windows Hello, an Android phone, or a security key. Add one on each device you use. Your phone can hold one for a computer too: choose it when the system asks where to save, and scan the QR code the computer shows.
- Each one is listed with when it was last used. Rename names it something you will recognize on the list; Remove stops that device signing in — useful the day one is lost, and it leaves the others untouched.
- Remove them all and you are not locked out: sign-in falls back to a code sent to your address, and the screen after it offers a new passkey.
Recovery email
- The address your six-digit codes go to. It is asked for at sign-up and confirmed with a code, and it is what makes a passkey safe to rely on — the passkey is on a device, and devices get lost, replaced and left at home. Empty, the row says Not set in amber, with Add an address.
- Change sends a code to the new address; the old one stays in force until the new one answers, so a typo costs nothing. Use an address you can read from any device, not one that only lives on the phone holding your passkey.
Display
How the app looks and behaves. Most of it follows you: change it here and every device you are signed in on changes with it a moment later. The reading pane, sounds, haptics, column widths and On this device stay with the device they were set on. The mail list's settings are in the ⋯ menu in the list header too, where they can be changed while you are looking at what they change. Reset display settings, at the foot, puts everything on this page back.
- Theme
- System follows whatever the phone or computer is set to, and turns with it when the evening does. Light and Dark override that and stay put. It is the whole app, the guide and the public pages, and your other devices follow it.
- Text size
- Small, Default, Large or Larger: the size of every piece of text in every app, not only the mail list.
- Accent
- The color of the app's buttons, the chosen tab, today on the calendar, folders in Notes and the rest: Azure, Post orange, Saffron or Forest. The launch screen and the browser tab's icon follow it too.
- Menus
- The order of the apps in the rail, the drawer and the phone's tab bar — see Choosing the order of the apps.
- Reading pane
- Side puts the conversation beside the list, Bottom under it, Off gives the list the whole window and opening a conversation replaces it.
- Message previews
- Off by default, which is what makes a row two lines — who it is from with the date, then the subject. Below puts the first line (or the summary) on its own line, Inline puts it after the subject.
- Density
- Comfortable is the default. Compact tightens each row, and cuts a preview to one line where Comfortable lets it run to two. The type and the avatars stay the size they are either way. A phone ignores it: there every row is the height a thumb needs, whichever is chosen.
- After archiving or deleting, go to
- The list, or the next conversation — the faster habit when you are working through a folder.
- Hover actions
- The archive / delete / pin cluster that appears on a row under the pointer.
- Show avatars
- Colored initials beside each conversation. They double as the select control either way.
- Company logos for senders and contacts
- Off by default. On, someone at a company address shows that company's logo instead of initials, in the conversation list and in Contacts. The logo is the company site's own icon, fetched by domain from Google's favicon service, so Google learns which domains you correspond with — not who you are, and never the mail itself. Personal addresses at Gmail, Outlook and the like keep their initials, and a domain with no logo keeps them too.
- Dividing lines between rows
- On by default: a hairline starting where the text does. Off separates rows by whitespace instead.
- Keep your work on this device for instant opening
- Under On this device: off until you turn it on, and set per device, because whoever can open this browser can read what it keeps. On, this browser keeps Mail's folders and the first page of each folder's list, Chat's list, your boards and each board as you last opened it, and Notes' list and folders. Each app then opens on them at once while it asks for what is new. Searches, conversations and a note's text are never kept. Turning it off, Reset, or signing out removes everything kept. See What works without a connection.
- Swipes
- Four slots, for a phone: a short and a long swipe to the right, and the same to the left — Archive, Delete, Mark read / unread, Pin / unpin, Report spam, or Not set. Archive to the right and Delete to the left until you change them; a long slot left unset means the short action goes on applying however far the row is pulled.
- Sounds
- Off, Essential or All. Essential, the default, is the few moments worth hearing — sent, an error, an undo, inbox zero; All adds archive, delete, toggles and new mail while the window is in front.
- Haptics
- The phone's buzz under a long-press, a drop or a swipe past its threshold. On by default; iPhone (iOS 18 and later) and Android.
- Add Ayoh to this device
- Puts Ayoh on this device: an icon of its own and a window without the browser around it. Chrome and Edge offer a button here; every other browser does it from its own menu, and the sentence says where. Explained under Ayoh on your devices.
- Default mail app
- Offers Ayoh to the browser as the handler for mailto: links on other sites. The browser asks before it takes effect; from then on such a link opens a new message with the address, subject and text it carried already filled in.
Notifications
Being told when mail arrives, set per device. Tell me when mail arrives asks this phone or computer for permission — once, which is why it is a switch here and never a prompt that appears by itself — and from then on the device is told about mail from a person that lands in the inbox, and when the agent finishes a follow-up. Spam, automated mail (receipts, newsletters, bounces) and anything a filter files elsewhere stay quiet.
- The notification
- Who wrote, the subject and how the message starts, with the time it arrived. Where the device draws buttons on a notification — Android, and Chrome or Edge on a computer — it has Archive and Mark as read, which do just that without opening the app. Tapping the notification opens the conversation; if Ayoh is already open it goes there in the same window, without reloading, so a reply you were writing is still there.
- Inside the app
- A banner at the top of the window — who, what about, the first line — for mail that arrives while you are in Ayoh but not looking at the inbox. Tap it to open the conversation; it goes away by itself. On a phone or a computer the system's own notification is left out then, since it would say the same thing twice (on iPhone and iPad it still appears, silently). New mail in the inbox also plays its sound, replies included.
- The app's icon
- The number of unread conversations in the inbox: on the Home Screen icon of an iPhone or iPad (iOS draws it only for an app allowed to send notifications), and on the dock or taskbar icon of Ayoh added from Chrome or Edge. Android marks the icon with a dot while a notification from Ayoh is waiting. The count follows the inbox while the app is open, and every notification keeps it right while it is shut.
- A browser tab
- The count in the tab's title — (3) Ayoh! — and a dot on the tab's icon, so it reads from across a row of tabs.
- Send a test notification sends one to the device you are holding, the whole way new mail would come. If it does not appear, notifications for Ayoh are turned off in the device's own settings.
- Opening the inbox takes Ayoh's notifications out of the notification shade, and opening a conversation takes out its own. What is unread stays unread, and the count on the icon stays with it.
- On an iPhone or iPad, notifications and the count need Ayoh added to the Home Screen first (Ayoh on your devices); Safari offers neither to a tab.
- Devices lists everywhere this workspace can reach you. Turning the switch off removes the device you are holding, and so does signing out on it: a device that has been signed out of is not told about anybody's mail.
- Notifications need a signing key that whoever runs Ayoh sets once. Without it, this section says so rather than offering a switch.
Addresses
Every address you receive mail at, grouped under the domain it is on — the half of an address that repeats, read once as a heading rather than on every row. Each row carries its display name and, where they apply, a catch-all, AI agent or alias chip. New address creates another, and is unavailable until a domain is connected. Choose an address to open everything about it on one page:
- Display name
- The name people see on mail you send from this address, up to 80 characters. Save appears once you change it.
- Catch-all for this domain
- Also receive mail sent to any address on the domain that has no mailbox of its own. Keep it to one address per domain.
- Signature, replies and AI drafts
- The same for every address, so they live on a page of their own: Compose & reply. Only the owner sees the button.
- Remove
- Deletes the address after a confirmation you press and hold. Mail to it bounces from then on; mail already stored stays stored but becomes unreachable, so download anything you need first.
Creating an address
New address opens one form that makes either of two things, and the list of addresses steps aside while it is open. Save creates it; Cancel leaves without.
- What to create: An address of its own, or an alias of one that exists.
- Domain: one of your connected domains. A domain still marked needs attention can be chosen; mail flows once its setup steps are green.
- Address: the part before the @, in lowercase: letters, digits, dots, dashes and underscores, 1 to 64 characters, starting and ending with a letter or digit.
- Display name: shown as the sender name on outgoing mail. Optional.
- Catch-all: tick Also receive mail sent to any other address on this domain to make this the domain's catch-all.
Aliases
An alias is another address to be reached at, with no inbox of its own: mail to it is filed in the address it delivers to, alongside that address's own. One per shop you sign up to costs nothing, and deleting one stops the mail without touching what has already arrived.
- Delivers to: which of your addresses the mail is filed in. Everything about how that mail is read — the conversations, the drafts, the AI settings — belongs to that address, because the alias has none.
- What it is for: optional, and the only thing that will tell two aliases apart a year later. It is what the row shows under the address.
- An alias can be on any connected domain, whichever domain the address it delivers to is on.
- The same address cannot be both: an address of its own always wins, and creating either one over an address that exists is refused rather than silently taking the mail.
- Plus-addressing works on an alias too: mail to
shop+socks@example.comreaches whatevershop@example.comdelivers to. - Deleting an address deletes its aliases with it — an alias pointing at nothing would accept mail it has nowhere to file. Mail that already arrived through one stays where it is.
- An alias is for receiving. Sending still goes out as one of your own addresses, chosen in the composer's From row.
Compose & reply
How mail is read and answered, for every address in the workspace, in four parts: Reading, Replying, AI and Signature. These follow the workspace rather than the browser: set them once and every device behaves the same. Only the owner sees this page. A switch takes effect as you flip it; the drafting instructions and the signature wait for Save, with Discard changes beside it. The AI and Signature parts are explained on the AI page.
- Mark a conversation read when you open it
- On by default. Off leaves it unread until you say so, which is how some people work a folder.
- Always show remote images
- Off by default, because loading one tells the sender you opened the message. On skips the ask on every message.
- Reply to everyone by default
- Starts the Reply all box at the foot of a conversation ticked. Reply and Reply all in the toolbar are explicit and unaffected.
- Quote the message you are answering
- On by default. The original is added under your reply when it is sent, so the other side has the context; the reply box itself stays clean.
Filters & rules
Rules about your own mail, applied the moment a message arrives. Each reads as a sentence: When this is true of a message, Then do this to it.
- Press New rule and give it a name.
- Under When, add conditions: From, To/Cc, Subject, Body or Any part of the message contains, is or is at domain what you type; Has attachment; or Ask the AI… a question about the message, such as “Is this a receipt?”. Choose whether all of these are true or any of these is true.
- Under Then, add actions: File it in a folder (one of the fixed ones or your own), Pin it, Mark it read, and Stop here to keep the rules after it from touching the message. Press Save rule.
- Rules run top to bottom; Earlier and Later move one up or down the list. The switch on a rule turns it off without deleting it, and All rules on switches the whole list.
- A rule acts on mail that arrives after it is saved. Deleting a rule leaves the mail it already filed where it is.
- Ask the AI… puts every rule's questions to the AI together, once per message however many rules ask something, and counts a yes only when the AI is fairly sure.
Domains
Every domain in the workspace is managed here, whether you connected it during onboarding or afterwards. When one needs attention, an amber dot marks Domains in the list of sections.
- Domains are listed under three headings in this order: Needs attention, Setup in progress and Active, so what needs doing is at the top. Each row shows the address domain (for example mail.example.com) and how many addresses are on it. Subdomain goes before the count when it is one, and a Taking over chip shows while a take-over is still being set up.
- Add a domain (it reads Connect Cloudflare first while there is no token) lists the zones on your Cloudflare account right here, so a domain can be connected without going back to the setup wizard. It is the same picker, including Connect all and the take-over choice.
- Both lists — your domains, and the zones the token can see — get a search field once there are eight of them, and show twenty at a time with Load more below. Searching starts the list again from the top, and Connect all takes on what the search is showing rather than every zone on the account.
- Choose a domain to see its six setup steps and what each one did. A green check is done; a red mark is an error; an amber mark means the token lacked a permission and names it, with a Fix the token button that jumps to the Cloudflare section.
- Re-run setup repeats every step. It is safe to run again; steps that are already done stay done.
- Addresses on this domain lists them, and each one links through to its own page.
- Disconnect removes the domain from Ayoh after a confirmation, and is unavailable until every address on it — aliases included — is removed. Nothing is changed in Cloudflare: Email Routing, the catch-all rule and the DNS records stay exactly as they are.
Cloudflare
- Shows the token's label and a status, and what Cloudflare last said the token can do, grouped into Account and Zone permissions: each gets a green check, or a red mark saying what is missing. The answer is kept and shown with when it was checked; Ayoh asks Cloudflare again on its own only once it is a day old.
- Check permissions asks again, for example after you edited the token in Cloudflare. When everything passes and a domain still needs attention, Ayoh re-runs that domain's setup for you and reports the outcome.
- Create a new token opens Cloudflare's token form pre-filled, exactly as during onboarding. Paste the new token and it replaces the old one at once; domains and addresses are untouched, and any domain that was waiting on a permission is re-run automatically.
- Remove, under Danger zone, deletes the stored token after a confirmation you press and hold. Existing mail keeps flowing, but connecting domains, updating Ayoh and re-running setup need a token again. The token itself stays in Cloudflare until you delete it there.
Agent
Ayoh Agent: the Workers AI model it runs on, its instructions, whether it may send email for you, and what it may do to your mail. Switches and the model save as you set them; About you and Home city wait for Save. Every setting is explained on the agent page.
Connectors
The apps the agent can reach through Composio (one sign-in per app), the session that activates them at Composio (and serves them over MCP for other clients), and any other MCP server connected by URL. Explained under Connectors. The credit balance is shown here too, because this is the screen where it is about to be spent.
API & MCP
Keys for agents outside Ayoh — Claude, ChatGPT, Cursor, your own — each with the scopes you tick, shown once, with its activity and a Revoke; the apps that connected by signing in are listed beside them. The address of your MCP server and the line to paste into each client are at the top. Only the owner sees this section. See API and MCP server.
Team
The people in the workspace and the addresses they read. You, the owner, hold the Cloudflare account; the people you add need none.
- Under Add a person, type their Name and Their email, where the invitation goes. Work address suggests an address from the name, such as
bob@your domain — made there and then, and theirs alone to read. Leave it empty to give them only team inboxes. - Tick the Team inboxes they share: any address that is not somebody's own, such as sales@ or support@.
- Press Add and invite. They sign in as that email, with a passkey, from the invitation. If Ayoh cannot send mail here, you get the link to pass on instead; either way it works once, and expires.
- People lists everyone, with the addresses they share. Team inboxes and Add address change what someone reads; Remove signs them out everywhere, passes their own addresses to you with all their mail, and keeps the notes they wrote, under your name.
- Invited lists invitations not yet taken up; Withdraw stops the link. Inviting the same email again replaces the waiting invitation — the earlier link stops working — and the form says so as you type the address.
- Addresses says who each address Belongs to: a person, or Team inbox. Giving an address to someone hands them all of it, past and future — that is how you take over a leaver's mail. You never see anyone's personal mail.
- Someone you added sees who else is here and nothing more of this section, and the sections about the account, filters, the agent and usage are left out of their Settings.
Usage
The credit balance, what it went on this month and the statement behind every movement. Email, storage, summaries, drafted replies and the agent itself are free and unmetered, so nothing about them appears here as a charge. Explained on Credits and usage.
Signing out and the guide
On a computer, Log out is the last mark at the foot of the rail, and asks before it signs you out. On a phone, the app's name at the top of the ☰ drawer opens the apps, with User guide and Sign out under them. Settings → General has both too.
Workspaces and sign-up
- A workspace is created by the sign-up form — a Cloudflare API token, then a name, your email and a passkey — and whoever creates it is its owner. Other people join by invitation, from Settings → Team.
- The token comes first on purpose. Your data lives in your own Cloudflare account, so it is needed either way, and Cloudflare confirming it is active is how Ayoh, with sign-up open, tells a real account from anybody who can load the page.
- Signing in is a passkey. Sign in with a passkey asks for nothing at all — the passkey names its own account — and browsers that support it offer saved passkeys from the field below without your touching the button.
- No passkey on the device you are at? Email me a code sends six digits to the address on the account. Enter them and you are in, and the next screen offers to put a passkey on that device so the next time is a tap. This needs an address on the account: without one there is nowhere to send a code, and a sign-in request is answered the same way an unknown address is.
- You stay signed in for 30 days on a browser; Sign out ends it at once.
- Whoever runs Ayoh decides whether sign-up is open (the
ALLOW_SIGNUPsetting). The very first workspace can always be created, so a brand-new Ayoh never needs it switched on.