Fetching the current Email Alert provider-intelligence feed.
Email services should not fail mysteriously.
Email Alert keeps a safe provider-intelligence feed so the app can explain whether a problem is offline mode, an expired sign-in, an app-password issue, a rejected folder, or a wider provider problem.
Provider status is generated from safe connection diagnostics and the current provider configuration feed.
How each service is tested
The app reports provider, host, folder, status category, app version, and timing. It does not send mailbox passwords, app passwords, OAuth tokens, message bodies, or attachments.
AWS scheduled workflows test provider endpoints and owned test mailboxes. Synthetic account secrets live in AWS Secrets Manager, not in the website or app.
The agent checks official status pages and provider help sources, then summarises only the relevant operational signal.
Low-risk status changes can publish automatically. Config changes that affect auth, hosts, ports, or OAuth settings need deterministic checks and approval.
The app and this page consume the same versioned provider status/config feed, with cached defaults if the network is unavailable.
What Email Alert tests for each provider
Fetching safe provider test workflow metadata.
User mailbox passwords, app passwords, OAuth access tokens, OAuth refresh tokens, and message contents are not part of these workflows. Synthetic test-account credentials are entered only through an operator Secrets Manager workflow.
How canaries use passwords safely
- Ordinary user mailbox passwords and OAuth refresh tokens stay on the iPhone.
- Backend tests use Email Alert-owned synthetic mailbox accounts created only for provider monitoring.
- Synthetic account passwords or refresh tokens are stored in AWS Secrets Manager.
- Each canary Lambda receives least-privilege access to only the secret it needs.
- The public status page never receives or displays any credential material.
- Secrets are rotated, audited, and isolated by provider and environment.
Official sources the agent should watch
Loading source guidance.