ai.postfleet/postfleet is an MCP server that give an AI agent its own email address: send, reply, read, and wait for mail. Its tool list has not been published yet over http and stdio, requires no API key, and scores 37/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"postfleet": {
"url": "https://api.postfleet.ai/api/mcp",
"headers": {
"Authorization": "Bearer pf_your_key_here"
}
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Give an AI agent its own email address. Postfleet is email infrastructure for agents — inbound is parsed, classified, extracted to your schema, and screened for prompt injection before your agent reads a word.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@postfleet/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @postfleet/mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml / communication
MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
An autonomous agent that conducts deep research on any data using any LLM providers
1000+ scientific tools for AI scientists: life science, reserach, literature, and more.
Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite
MCP Security Weekly
Get CVE alerts and security updates for ai.postfleet/postfleet and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Give an AI agent its own email address. Postfleet is email infrastructure for agents — inbound is parsed, classified, extracted to your schema, and screened for prompt injection before your agent reads a word.
This repo holds the server source and its plugin manifests. It is a mirror — the code is
developed in the Postfleet application repo and published to npm as
@postfleet/mcp; open issues here, send patches
here, and they land upstream. The server ships two ways:
| Hosted (no install) | https://api.postfleet.ai/api/mcp, streamable HTTP, Authorization: Bearer pf_... |
| Local (stdio) | @postfleet/mcp via npx |
Get a pf_ API key at postfleet.ai.
list_mailboxes, create_mailbox, list_domains, create_domain, verify_domain,
send_email, reply_email, list_inbox, read_email, wait_for_email — plus the draft
lifecycle (create_draft, list_drafts, get_draft, update_draft, send_draft,
delete_draft) for flows where a human approves before mail goes out. A send that lands in
that gate returns 202 pending_approval, which is not a failure.
Every tool is thin-over-REST — it calls the same /api/v1/ endpoints your key already reaches
(OpenAPI), so auth, scoping, and quotas are enforced once.
The manifests in this repo (mcp.json, .cursor-plugin/plugin.json) declare
headers.Authorization = Bearer ${POSTFLEET_API_KEY} for the hosted server and the same
variable for local npx @postfleet/mcp. Installing the plugin should prompt for that key and
attach it as a real Bearer header — a raw URL add without the header will 401 on
initialize until a key is supplied or the hosted connect card finishes OAuth.
{
"mcpServers": {
"postfleet": {
"url": "https://api.postfleet.ai/api/mcp",
"headers": { "Authorization": "Bearer pf_your_key_here" }
}
}
}
npx -y @postfleet/mcp)npx -y @postfleet/mcp
Any MCP client that speaks stdio can run that command with POSTFLEET_API_KEY set:
{
"mcpServers": {
"postfleet": {
"command": "npx",
"args": ["-y", "@postfleet/mcp"],
"env": { "POSTFLEET_API_KEY": "pf_your_key_here" }
}
}
}
claude mcp add postfleet --env POSTFLEET_API_KEY=pf_your_key_here -- npx -y @postfleet/mcp
POSTFLEET_API_URL (default https://api.postfleet.ai) overrides the API origin for staging or
self-hosted deployments.
Keys are scoped — bootstrap can only create mailboxes, api covers mail operations, mcp is the
one to hand a client. Use a separate key per workload so you can revoke one without breaking the
rest. Never commit a key; the manifests in this repo deliberately contain none.
ai.postfleet/postfleet on the MCP Registry@postfleet/mcpnpm install && npm run build # tsup → dist/
MIT licensed.