Version v0.4.0 of the documentation is no longer actively maintained. The site that you are currently viewing is an archived snapshot. For up-to-date documentation, see the latest version.

IMAP connection

IMAP connection

Connect a task to an IMAP mailbox over a managed Leoflow Connection — to poll for incoming files or messages. The host, port, and credentials are encrypted at rest and delivered to the task as AIRFLOW_CONN_<CONN_ID>.

Declare the provider

# leoflow.yaml
dag_id: imap_poll
connectors:
  - imap

URI shape

imap://<login>:<password>@<host>:<port>

The control plane percent-escapes the password; ImapHook (which parses AIRFLOW_CONN_<ID>) un-escapes it back.

Fields the UI asks for

FieldRequiredNotes
Conn Idyese.g. imap_default. Exported as AIRFLOW_CONN_IMAP_DEFAULT.
Conn Typeyesimap.
HostyesThe IMAP host, e.g. imap.example.com.
PortoptionalDefaults to 993 (implicit TLS).
LoginyesThe mailbox username.
PasswordyesStored encrypted at rest (ADR 0019). Percent-escaped in the URI.
ExtraoptionalJSON for hook-specific options.

Example DAG

The hook is imported inside the task body so DAG parsing stays import-light.

# dag.py
from airflow.sdk import DAG, task


@task
def check():
    from airflow.providers.imap.hooks.imap import ImapHook

    with ImapHook(imap_conn_id="imap_default") as hook:
        return hook.has_mail_attachment("report-*.csv")


with DAG("imap_poll", schedule=None, catchup=False, tags=["example"]):
    check()
# leoflow.yaml
schema_version: "1.0"
dag_id: imap_poll
python_version: "3.11"
connectors:
  - imap

Security notes

  • TLS in transit: prefer port 993 (implicit TLS) over plain 143.
  • Secrets in logs: never print() the URI — it carries the password. Log the host + login only.
  • gRPC channel (agent ↔ control plane): secrets are served only over an authenticated channel (ADR 0021); Pro must run with TLS.
  • ADR 0019 — secret encryption at rest.
  • ADR 0021 — agent secret delivery.
  • #67 — connectors umbrella.
  • #138 — the chain-of-custody contract test this page documents.