HQBase

Your team’s email workspace. On your infrastructure.

HQBase is an AGPL-licensed shared email workspace that runs in your Cloudflare account. It provides shared mailboxes, team access controls, multi-domain setup, drafts, audit history, operations, and an OAuth-protected remote MCP server while keeping mail and Cloudflare credentials in customer infrastructure.

Local development

pnpm install
pnpm db:migrate:local
pnpm dev

Open http://localhost:8787/setup.

For presentation-only onboarding work:

pnpm dev:setup-ui

Open http://127.0.0.1:5173/__ui/setup.

Quality gate

pnpm check
pnpm deploy:dry-run

Run pnpm cf:typegen after changing wrangler.jsonc.

Operations

• docs/access-control.md: roles, mailbox grants, and enforcement.
• docs/mcp.md: MCP discovery, OAuth, scopes, and mailbox authorization.
• docs/operations.md: doctor, backup, restore, queues, retention, and incident order.
• docs/updates.md: public signed releases, update checks, verification, and recovery.

Pushes to main run the full quality gate and deployment dry-run. Deployed staging is manual and also runs inside the signed release workflow. A release stays draft while the previous stable version is upgraded to the exact signed candidate; only a passing candidate becomes public. Customer installations and updates verify the signed manifest and artifact digest before deployment.

License

HQBase is licensed under AGPL-3.0-or-later. See LICENSE.