Is io.github.p-l-ta/mail-mcp safe to use?

io.github.p-l-ta/mail-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.p-l-ta/mail-mcp?

io.github.p-l-ta/mail-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.p-l-ta/mail-mcp?

io.github.p-l-ta/mail-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.p-l-ta/mail-mcp actively maintained?

io.github.p-l-ta/mail-mcp is actively maintained — last commit was 10 days ago.

io.github.p-l-ta/mail-mcp

Search, read, send, and manage email via macOS Mail.app across all configured accounts.

0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 10d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-p-l-ta-mail-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-p-l-ta-mail-mcp)](https://mcppedia.org/s/io-github-p-l-ta-mail-mcp)

Read me

What io.github.p-l-ta/mail-mcp does

MCP server that gives Claude (and other MCP hosts) full access to Mail.app on macOS — search, read, send, reply, flag, move, and more — across every account configured in Mail.app (iCloud, Exchange, IMAP, etc.).

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

36/100across 5 weighted dimensions

How we score →

0255075100

−64

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.p-l-ta/mail-mcp safe to use?: io.github.p-l-ta/mail-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.p-l-ta/mail-mcp?: io.github.p-l-ta/mail-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.p-l-ta/mail-mcp?: io.github.p-l-ta/mail-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.p-l-ta/mail-mcp actively maintained?: io.github.p-l-ta/mail-mcp is actively maintained — last commit was 10 days ago.

Similar servers

Others in communication

View all →

Mac_messages_mcp95

An MCP server that securely interfaces with your iMessage database via the Model Context Protocol (MCP), allowing LLMs to query and analyze iMessage conversations. It includes robust phone number validation, attachment processing, contact management, group chat handling, and full support for sending and receiving messages.

279 4

Mcp_agent_mail94

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Autotask Mcp93

MCP server for Kaseya Autotask PSA — 39 tools for companies, tickets, projects, time entries, and more

36 7

Agenticmail92

Email & SMS infrastructure for AI agents — send and receive real email and text messages programmatically

126 7

MCP Security Weekly

Get CVE alerts and security updates for io.github.p-l-ta/mail-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-p-l-ta-mail-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-p-l-ta-mail-mcp)](https://mcppedia.org/s/io-github-p-l-ta-mail-mcp)

Read me

What io.github.p-l-ta/mail-mcp does

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

mail-mcp

MCP server that gives Claude (and other MCP hosts) full access to Mail.app on macOS — search, read, send, reply, flag, move, and more — across every account configured in Mail.app (iCloud, Exchange, IMAP, etc.).

Prerequisites

macOS (Mail.app required)
Node.js 20+
An MCP host: Claude Desktop, Amazon Quick, or any stdio MCP client

Installation

Claude Desktop — one-click install (recommended)

Download mail-mcp.mcpb from the latest release
Double-click the .mcpb file — Claude Desktop installs it automatically
Grant the required macOS permissions (see below)

Manual / Amazon Quick / other hosts

npx @p-l-ta/mail-mcp

Or install globally:

npm install -g @p-l-ta/mail-mcp
mail-mcp

Point your MCP host at the mail-mcp binary (stdio transport). Example config:

{
  "mcpServers": {
    "mail-app": {
      "command": "npx",
      "args": ["@p-l-ta/mail-mcp"]
    }
  }
}

Required macOS permissions

Grant these to the application that runs the MCP host (Claude Desktop, Amazon Quick, etc.):

Permission	Where to grant
Full Disk Access	System Settings → Privacy & Security → Full Disk Access
Automation → Mail	System Settings → Privacy & Security → Automation

The MCP server process inherits permissions from the host application that launches it.

Tools

Tool	Description
`search_emails`	Search messages via the Envelope Index database with rich filters
`read_email`	Read the full body of a message by its RFC message-id
`list_accounts_and_mailboxes`	List all configured accounts and mailboxes with unread counts
`list_recent`	List recent messages in a specific mailbox
`list_senders`	Grouped summary of senders with message and unread counts
`send_email`	Send a new email from one of the configured accounts
`reply_to_email`	Reply to an existing message by RFC message-id
`set_message_flags`	Set read and/or flagged status on a message
`move_email`	Move a message to a different mailbox
`trash_email`	Move a message to Deleted Messages
`create_mailbox`	Create a new mailbox/folder in an account
`bulk_mark_read`	Mark all messages in a mailbox and/or from a sender as read
`get_unsubscribe_link`	Extract unsubscribe URLs from a message's headers and body
`empty_mailbox`	Delete every message in a mailbox at once (Junk, Trash, etc.)

How it works

Search & read — queries Mail's own Envelope Index SQLite database directly for fast, structured results across all accounts
Actions (send, reply, flag, move, trash) — driven by AppleScript automation against Mail.app, so they work even for accounts where messages aren't stored as local files

Development

npm install
npm run dev          # tsx watch — live reload
npm test             # vitest unit tests
npm run build        # compile TypeScript → dist/
npm run mcpb         # build Claude Desktop extension → build/mail-mcp.mcpb

Interactive MCP testing:

npm run build
npx @modelcontextprotocol/inspector node dist/server.js

Privacy Policy

mail-mcp is a local MCP server that runs entirely on your Mac. It has no backend, no telemetry, and makes no network requests of its own.

What it accesses:

Mail.app's Envelope Index database (~/Library/Mail/) — read-only, used for search queries
Mail.app via AppleScript — to read message bodies, send mail, flag, move, and trash messages

What it does NOT do:

Collect, store, or transmit any data outside your Mac
Connect to any external server or API
Log message content anywhere

All email data stays on your device and is only passed to the MCP host (Claude Desktop or another client) as part of normal tool responses. You control exactly which tools Claude can invoke.

License

MIT

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

36/100across 5 weighted dimensions

How we score →

0255075100

−64

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.p-l-ta/mail-mcp safe to use?: io.github.p-l-ta/mail-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.p-l-ta/mail-mcp?: io.github.p-l-ta/mail-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.p-l-ta/mail-mcp?: io.github.p-l-ta/mail-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.p-l-ta/mail-mcp actively maintained?: io.github.p-l-ta/mail-mcp is actively maintained — last commit was 10 days ago.