hamnen arbetar när du sover

hafnfornnordiska: hamn

Mail och kalender för ditt företag. Byggda för att skötas av din agent.

Det mesta på den här sidan är skrivet för maskiner. Du får gärna läsa med.

Din agent läser specen, kopplar upp sig, flyttar domänen, skapar kontona och håller ordning i posten — dygnet runt, på ditt uppdrag. Du godkänner det som inte går att ångra. Allt den gör är loggat, märkt och ditt.

Datan ligger i EU, under europeisk rätt, och flyttar ut samma dag du ber om det.

→Peka din agent på hafn.eu/llms.txt →Ingen agent? Läs som människa: /agents →Inbjudan: hello@hafn.eu

Det här ser din agent — de femton verktygen

hafn_brevladorlista brevlådor

hafn_kal_serierserier som mästare

hafn_post_soksök, aldrig brödtext

hafn_kal_agendaförekomster, expanderat

hafn_post_lasläs ett brev

hafn_kal_lasläs en händelse

hafn_post_markeraflagga, arkivera

hafn_kal_bokaboka, preliminärt som förval

hafn_kal_avsluta_serieavsluta serie, sätter until

hafn_kal_andraändra, optimistisk låsning

hafn_delad_tilldelatilldela brev till person

hafn_delad_markeraläst per person, delad inkorg

hafn_delad_oversiktvem gör vad i delad inkorg

hafn_kal_avbokaavboka — oåterkalleligt

hafn_post_skickaskicka utkast — oåterkalleligt

GET hafn.eu/llms.txt · text/plain · 200 · det här är exakt vad din agent hämtar

# hafn

> Mail and calendar for European companies, built to be operated by your AI agent.
> Old Norse for "harbour". Data in the EU, under European law, portable on request.
> Status: invitation-only pilot. spec v0.3 · 2026-08-30

hafn is a mail + calendar + tasks + files server (JMAP-native, built on Stalwart).
An external agent operates a customer account through a scoped, revocable key —
permissions per JMAP method, no domain-wide delegation. The agent proposes; the
human approves anything irreversible. Everything the agent does is logged and yours.

## Access
- Endpoint (JMAP):  https://mail.hafn.eu/jmap/
- MCP shell:        streamable HTTP, one POST endpoint; tools filtered by the
                    caller's granted scopes. Not yet publicly exposed — the
                    address is handed out at onboarding. Details: /agents.md
- Auth:             Bearer <api-key>   format API_...   (HTTP Basic is rejected)
- Keys:             x:ApiKey — per-method permissions, expiresAt, allowedIps.
                    Replace = exactly the listed methods, nothing else.
                    Rotation is overlapping: new key issued before old revoked.

## Provisioning (invitation-only)
- POST https://hafn.eu/v1/konto
  body: {"inbjudningskod": "hafn-xxxx-xxxx-xxxx", "kontonamn": "...", "adminkontakt": "..."}
  ->   {konto, adress, engangslosenord, apinyckel, apinyckelns_scope, jmap, imap, smtp}
- The apinyckel (Bearer, API_...) is shown once. Field names are Swedish; the
  authoritative schema is https://hafn.eu/openapi.json (OpenAPI 3.1).
- Full integration doc: /docs.md
- No invite?  email hello@hafn.eu — machine-readable application format: /invite.md

## Tools (MCP — reads consolidated, writes reversible, irreversible named)
  hafn_brevlador           list mailboxes
  hafn_post_sok            search mail (never returns bodies)
  hafn_post_las            read one message
  hafn_post_markera        flag / file a message
  hafn_kal_serier          recurring series as masters (not occurrences)
  hafn_kal_agenda          occurrences, expanded (all-day flag corrected)
  hafn_kal_las             read one event
  hafn_kal_boka            book event (tentative by default)
  hafn_kal_andra           change event (optimistic concurrency via state)
  hafn_kal_avsluta_serie   end a series (sets `until`)
  hafn_delad_tilldela      assign a message to a person (shared inbox)
  hafn_delad_markera       per-person read marker (shared inbox)
  hafn_delad_oversikt      who is handling what (shared inbox)
  hafn_kal_avboka          cancel event        (irreversible · own scope)
  hafn_post_skicka         send a draft        (irreversible · own scope)
tools/list is filtered per token: a tool outside your scope does not exist.
Full tool surface with budgets and error style: /agents.md

## Calendar semantics (measured against the live server)
- recurrenceRule is singular and an object. RFC 8984's plural array is rejected.
- Exceptions: recurrenceOverrides, keyed on the occurrence's original start.
- Ask for masters; expand only when needed (expansion drops the all-day flag).
- status: tentative | confirmed | cancelled  is a first-class field.
- Tasks: no Task/get — CalendarEvent methods carry "@type": "Task" + progress.

## Limits
- Outbound: 100 messages/day, counted per sender address. Message 101 is
  deferred to the next UTC day, not bounced. Request more: POST /v1/begar-mer
  or hello@hafn.eu
- The agent's key carries no send permission by default.

## Boundaries (what we do not promise)
- No autonomous irreversible sends. A human approves those.
- Provenance is best-effort today; the tamper-evident write-log is the record.
- Streams do not yet obey scope — treated as a known gap, mitigated in the shell.
- Full statement of what we do and do not promise: /principer.md

## Human view
This document is the site. Humans read the same thing, typeset: https://hafn.eu/
/llms-full.txt · /docs.md · /agents.md · /invite.md · /principer.md
/.well-known/security.txt · /humans.txt