Skills tuta-mail

Send, read, and manage emails via Tuta (formerly Tutanota) encrypted email service. Use when user asks to send emails, check inbox, read mail, or do any email operations through their Tuta account. Triggers on phrases like email, send email, check inbox, Tuta, Tutanota, mail, read email, compose email.

install

source · Clone the upstream repo

git clone https://github.com/openclaw/skills

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/openclaw/skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/aididmyhomework/tutacom" ~/.claude/skills/clawdbot-skills-tuta-mail && rm -rf "$T"

manifest: skills/aididmyhomework/tutacom/SKILL.md

source content

Tuta Mail

Interact with Tuta (Tutanota) encrypted email via the undocumented REST API at

https://app.tuta.com/rest/

. All content is E2E encrypted — the client handles crypto locally.

Prerequisites

Python 3 with:

requests

pycryptodome

bcrypt

argon2-cffi

Install if missing:

python3 -m pip install --break-system-packages requests pycryptodome bcrypt argon2-cffi

Credentials

Store in

openclaw.json

under

skills.entries.tuta-mail.env

```
TUTA_EMAIL
```
— Tuta email address
```
TUTA_PASSWORD
```
— account password

Usage

All commands via

scripts/tuta_client.py

(resolve path relative to this skill directory).

Login (always do first)

python3 scripts/tuta_client.py login \
  --email "$TUTA_EMAIL" --password "$TUTA_PASSWORD" \
  --session-file /tmp/tuta_session.json

Saves session (access token + decrypted keys) to the session file. Reuse until it expires.

List Inbox

python3 scripts/tuta_client.py inbox \
  --session-file /tmp/tuta_session.json --count 20

Returns JSON array with

id

subject

sender

date

unread

for each mail.

Read Email

python3 scripts/tuta_client.py read \
  --mail-id "listId/elementId" \
  --session-file /tmp/tuta_session.json

Use the

id

from inbox listing. Returns decrypted

subject

sender

date

body

Send Email (External Recipients)

python3 scripts/tuta_client.py send \
  --to "recipient@example.com" \
  --subject "Subject line" \
  --body "Email body text" \
  --sender-name "Display Name" \
  --session-file /tmp/tuta_session.json

Sends non-confidential email to external (non-Tuta) recipients. Creates draft then sends.

Workflow

Login once per session → cache
```
/tmp/tuta_session.json
```
If any command returns auth error (401/403), re-login
For inbox checks: login → inbox → optionally read specific mails
For sending: login → send

Limitations

Tuta-to-Tuta emails: Sending to other Tuta users requires public key exchange (not yet implemented). Reading Tuta-to-Tuta received mail works.
Attachments: Not yet supported for sending.
API versioning: The
```
v
```
header is set to
```
84
```
; may need updating if Tuta changes their API version.
Newer accounts: Argon2id key derivation is supported but less tested than bcrypt (legacy).