Only approved Tokkah accounts can open the shared inboxes. Each session is confirmed directly with your device passkey.
Give an agent its own key to use your mail, instead of sharing your passkey. You can revoke it at any time, and it expires on its own.