Is com.considus/proton-bridge-mcp safe to use?

com.considus/proton-bridge-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install com.considus/proton-bridge-mcp?

com.considus/proton-bridge-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with com.considus/proton-bridge-mcp?

com.considus/proton-bridge-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is com.considus/proton-bridge-mcp actively maintained?

com.considus/proton-bridge-mcp is actively maintained — last commit was 12 days ago.

com.considus/proton-bridge-mcp

pypdf

Read, organise and carefully-gated send for Proton Mail, without your mail leaving this machine.

GitHub PyPI

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 12d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 5h ago

Edit this pageView history

com.considus/proton-bridge-mcp is an MCP server that read, organise and carefully-gated send for Proton Mail, without your mail leaving this machine. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 59/100 on MCPpedia's security, maintenance and efficiency rubric.

Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-considus-proton-bridge-mcp": {
      "args": [
        "pypdf"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-considus-proton-bridge-mcp)](https://mcppedia.org/s/com-considus-proton-bridge-mcp)

Read me

What com.considus/proton-bridge-mcp does

Give any AI assistant read, organise and carefully-gated send access to your Proton Mail, without handing your mail to anyone.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'pypdf' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

39 fixed

CVE-2026-71870low · fixed

pypdf: Possible large memory usage for large /ToUnicode streams

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the `/ToUnicode` entry of a font with unusually large values, for example during text extraction. ### Patches This has been fixed in [pypdf==6.15.0](https://github.com/py-pdf/pypdf/releases/tag/6.15.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3944](https://github.com/py-pdf/pypdf/pull/3944).

Affected: >= 0Fixed in 6.15.0source →

CVE-2026-71852low · fixed

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. ### Patches This has been fixed in [pypdf==6.15.0](https://github.com/py-pdf/pypdf/releases/tag/6.15.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3946](https://github.com/py-pdf/pypdf/pull/3946).

Affected: >= 0Fixed in 6.15.0source →

CVE-2026-59935high · fixed

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. ### Patches This has been fixed in [pypdf==6.14.2](https://github.com/py-pdf/pypdf/releases/tag/6.14.2). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3892](https://githu

Affected: >= 0Fixed in 6.14.2source →

CVE-2026-59936high · fixed

pypdf: Possible infinite loop for not terminated inline images

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. ### Patches This has been fixed in [pypdf==6.14.1](https://github.com/py-pdf/pypdf/releases/tag/6.14.1). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3891](https://github.com/py-pdf/pypdf/pull/3891).

Affected: >= 0Fixed in 6.14.1source →

CVE-2026-59937medium · fixed

pypdf: Possible long runtimes for repeated malformed cross-reference entries

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. ### Patches This has been fixed in [pypdf==6.14.0](https://github.com/py-pdf/pypdf/releases/tag/6.14.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3887](https://github.com/py-pdf/pypdf/pull/3887).

Affected: >= 0Fixed in 6.14.0source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.considus/proton-bridge-mcp safe to use?: com.considus/proton-bridge-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install com.considus/proton-bridge-mcp?: com.considus/proton-bridge-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with com.considus/proton-bridge-mcp?: com.considus/proton-bridge-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is com.considus/proton-bridge-mcp actively maintained?: com.considus/proton-bridge-mcp is actively maintained — last commit was 12 days ago.

Similar servers

Others in communication

View all →

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.1k 6

io.github.Atomic-Mail/mcp94

Programmable email inbox for AI agents — JMAP, PoW auth, stdio MCP server.

266 1

Ms 365 Mcp Server91

A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API

926 22

Resend Mcp91

The official MCP server to send emails and interact with Resend

565 29

MCP Security Weekly

Get CVE alerts and security updates for com.considus/proton-bridge-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-considus-proton-bridge-mcp": {
      "args": [
        "pypdf"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-considus-proton-bridge-mcp)](https://mcppedia.org/s/com-considus-proton-bridge-mcp)

Read me

What com.considus/proton-bridge-mcp does

Give any AI assistant read, organise and carefully-gated send access to your Proton Mail, without handing your mail to anyone.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'pypdf' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Proton Bridge MCP

Give any AI assistant read, organise and carefully-gated send access to your Proton Mail, without handing your mail to anyone.

Proton is end-to-end encrypted, which is the whole point of it, and it's also why there's no API to plug an assistant into. Your mail is only readable on your own machine. Proton Mail Bridge is the piece that decrypts locally and speaks ordinary IMAP and SMTP to 127.0.0.1, so with Bridge in place this server never has to send your mail anywhere at all.

Unofficial, and not affiliated with or endorsed by Proton AG.

Docs · Install · Security · FAQ

What it can do

Search and read mail, pull attachments out and read them (including the text of PDF invoices), tag and file messages one at a time or in batches, reply in thread, and send or forward behind a confirmation step.

Anything that sends takes draft=true instead, which puts it in your Drafts for you to look at. That path needs no confirmation, because nothing goes anywhere.

Files can be attached to anything you send, though only from directories you've said are allowed. Reading any file on the machine and posting it out is how data walks off a computer, so the default is the attachments folder and widening it is your decision, not something an instruction in an email can talk it into.

Tool	What it does
`list_folders`	Every folder and label, read live each time
`folder_status`	Counts, plus the UIDVALIDITY every uid in that folder depends on
`poll_folder`	What has arrived since you last looked
`ack_folder`	Confirms a batch was handled
`search_mail`	Search by text, sender, subject, date range, unread, starred; optionally report each message's other labels and folders
`search_all_mail`	The same search across every folder and label, duplicates collapsed
`get_headers`	Headers with SPF, DKIM and DMARC verdicts, and Proton metadata
`read_message`	Full headers and body
`list_attachments`	Real documents, kept apart from inline images and PGP keys
`read_attachment`	Pulls the text out, PDFs included
`view_attachment`	Hands back an image attachment so it can actually be looked at
`save_attachment`	Writes a file out, deleted again after 15 minutes unless you say otherwise
`purge_attachments`	Deletes those files now
`find_thread`	The whole conversation, and which messages carry documents
`bulk_mark`	Read, unread, star or unstar many messages in one pass
`bulk_apply_label`	One label onto many messages
`bulk_remove_label`	Takes one label off many messages, gated
`bulk_move`	File or Trash many at once, gated
`reply`	Replies with correct threading, gated
`reply_all`	Same, with your own addresses stripped from Cc, gated
`create_draft`	Writes into Drafts, never sends
`update_draft`	Replaces a draft, keeping its threading
`delete_draft`	Moves a draft to Trash, gated
`send_draft`	Sends a saved draft, gated
`unsubscribe`	Reports how to unsubscribe, and can send the email form
`mark`	Read, unread, star, unstar
`apply_label`	Tags a message, leaves it where it is
`remove_label`	Takes a label off, leaves the message where it is, gated
`move_to_folder`	Files it somewhere else
`create_folder_or_label`	New folder or label, gated
`delete_label`	Deletes a label, messages keep their place and lose the tag, gated
`bulk_delete_labels`	The same for several labels at once, gated
`send`	Gated, and can carry attachments
`forward`	Gated

Three things it can't do, and won't pretend otherwise. Folders can be created but not deleted, because a folder is where a message actually lives and deleting one would have to decide what happens to the mail inside it,

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

39 fixed

CVE-2026-71870low · fixed

pypdf: Possible large memory usage for large /ToUnicode streams

Affected: >= 0Fixed in 6.15.0source →

CVE-2026-71852low · fixed

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Affected: >= 0Fixed in 6.15.0source →

CVE-2026-59935high · fixed

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

Affected: >= 0Fixed in 6.14.2source →

CVE-2026-59936high · fixed

pypdf: Possible infinite loop for not terminated inline images

### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. ### Patches This has been fixed in [pypdf==6.14.1](https://github.com/py-pdf/pypdf/releases/tag/6.14.1). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3891](https://github.com/py-pdf/pypdf/pull/3891).

Affected: >= 0Fixed in 6.14.1source →

CVE-2026-59937medium · fixed

pypdf: Possible long runtimes for repeated malformed cross-reference entries

Affected: >= 0Fixed in 6.14.0source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.considus/proton-bridge-mcp safe to use?: com.considus/proton-bridge-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install com.considus/proton-bridge-mcp?: com.considus/proton-bridge-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with com.considus/proton-bridge-mcp?: com.considus/proton-bridge-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is com.considus/proton-bridge-mcp actively maintained?: com.considus/proton-bridge-mcp is actively maintained — last commit was 12 days ago.