Skip to content
ReplyLayer logo

ReplyLayer

Screens email for AI agents, blocking risky messages and requiring human approval before sending sensitive replies.

At a glanceswept 2026-10-12

910 installs/mo

Established

For
Developers and teams giving AI agents a dedicated mailbox with screening and human approval
Trial & discounts
30-day money backpricing page ↗
Activity
Actively maintainedrelease 7 days ago · site updated 3 days ago
Company
ReplyLayer LLC · Domain since 2026privacy policy · domain registered
Runs as
APISDKCLI
What people do with itread off replylayer.ai on 2026-10-12
  • set up a support agent with a dedicated inbox and threaded replies
  • hold risky refund promises for human review before sending
  • inspect invoice attachments before an agent reads them
The companyeach fact with its source · read 2026-10-12
  • Domain since2026domain registered
Your datawhat they publish, each line with its page · read 2026-10-12

“We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”

security page ↗

These are ReplyLayer's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read 2026-10-12
  • MCP serverai.replylayer/replylayerverified in the MCP registry
  • Stateanswers, requires sign-inchecked 2026-10-12
  • Address to connectapi.replylayer.ai/v1/mcp
  • Status pagelinked from the homepagestatus.replylayer.ai ↗

MCP server details →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Alternatives in Securityby use, among tools still maintained

Figure and bar: visits/mo, estimate · year: online since

All Security tools →

Questions this page answers
  • What is ReplyLayer?

    Screens email for AI agents, blocking risky messages and requiring human approval before sending sensitive replies. It is listed in the Atlas under Security and made by ReplyLayer LLC.

  • Who is ReplyLayer for?

    Developers and teams giving AI agents a dedicated mailbox with screening and human approval

  • How much does ReplyLayer cost?

    Paid plans start at $13.30/mo, per ReplyLayer's pricing page on 2026-10-12.

  • Is ReplyLayer free?

    No. Its pricing page showed no free plan on 2026-10-12.

  • Do people use ReplyLayer?

    Established: 910 installs/mo (npm).

  • Is ReplyLayer still maintained?

    Actively maintained: release 7 days ago · site updated 3 days ago.

  • Who owns ReplyLayer?

    ReplyLayer is run by ReplyLayer LLC, per its privacy policy (2026-10-12).

  • Does ReplyLayer train AI on your data?

    No, per its security page (2026-10-12): “We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”

  • Is ReplyLayer safe?

    We do not audit vendors. What ReplyLayer publishes, read 2026-10-12: SOC 2, ISO 27001, HIPAA, GDPR, CCPA stated on its security page; on training with your data, “We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”.

  • Does ReplyLayer give refunds?

    In its own words (terms of service, 2026-10-12): “Fees are non-refundable except where required by law or where we expressly state otherwise.”

  • Is ReplyLayer HIPAA compliant?

    ReplyLayer states HIPAA compliance on its security page (2026-10-12). We have not verified it.

  • What are alternatives to ReplyLayer?

    In Security, by use: PromptGuard, HaltState, Guardian IDE, AIBIM AI, Delphi Security, Lateos.

Not quite it? Describe the job

beta

Five tools from the Atlas that fit it, each judged against what you wrote.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.