This document defines a MIME-based mechanism for policy-controlled handling of URLs in email messages. The mechanism provides an alternative to hyperlink rewriting techniques used for click-time security enforcement. By avoiding modification of original URLs and introducing policy metadata, this approach improves interoperability, preserves message integrity, and enhances privacy.