Is io.github.tarunlnmiit/inbox-to-action safe to use?

io.github.tarunlnmiit/inbox-to-action has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.tarunlnmiit/inbox-to-action?

io.github.tarunlnmiit/inbox-to-action can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.tarunlnmiit/inbox-to-action?

io.github.tarunlnmiit/inbox-to-action is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

io.github.tarunlnmiit/inbox-to-action

Agentic Gmail triage: classify, summarize, extract tasks, draft replies. Never sends.

GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Communication Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-tarunlnmiit-inbox-to-action": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tarunlnmiit-inbox-to-action)](https://mcppedia.org/s/io-github-tarunlnmiit-inbox-to-action)

Read me

What io.github.tarunlnmiit/inbox-to-action does

Agentic Gmail triage: classify, summarize, extract tasks, draft replies. Never sends.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

14/100across 5 weighted dimensions

How we score →

0255075100

−86

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tarunlnmiit/inbox-to-action safe to use?: io.github.tarunlnmiit/inbox-to-action has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tarunlnmiit/inbox-to-action?: io.github.tarunlnmiit/inbox-to-action can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.tarunlnmiit/inbox-to-action?: io.github.tarunlnmiit/inbox-to-action is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Similar servers

Others in communication / writing

View all →

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Sub Agents Mcp91

Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.

92 1

io.github.Octen-Team/octen-mcp90

URL to LLM-ready markdown — plus per-page category, page_structure, and query-driven highlights.

11 1

io.github.VibeCodingInc/vibe-mcp89

Social layer for Claude Code - DMs, presence, discovery, and games between AI-assisted developers

MCP Security Weekly

Get CVE alerts and security updates for io.github.tarunlnmiit/inbox-to-action and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Communication Writing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-tarunlnmiit-inbox-to-action": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tarunlnmiit-inbox-to-action)](https://mcppedia.org/s/io-github-tarunlnmiit-inbox-to-action)

Read me

What io.github.tarunlnmiit/inbox-to-action does

Agentic Gmail triage: classify, summarize, extract tasks, draft replies. Never sends.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

inbox-to-action

Published on PyPI. MCP-registry manifests (server.json for the Official MCP Registry, smithery.yaml for Smithery, glama.json for Glama) ship in the repo — registry listings are pending submission.

One command. Your inbox triaged, summarized, drafted, and turned into tasks — in a single agentic pass.

Install

pip install inbox-to-action          # or: pipx install inbox-to-action
uvx inbox-to-action run --mock       # zero-install trial (uv)
pip install 'inbox-to-action[mcp]'   # + MCP server for Claude Code
docker run --rm ghcr.io/tarunlnmiit/inbox-to-action   # MCP server (stdio)

Try it with zero setup: inbox-to-action run --mock (bundled sample inbox).

📖 Full documentation → docs/ — install · providers · Gmail OAuth · multi-account · integrations · MCP & Skill · config · troubleshooting · testing checklist. Quick version: SETUP.md.

Why this exists

Most people process their inbox with four separate tools: an email client to read, a task manager to capture to-dos, a calendar to block time, and (increasingly) an AI summarizer to make sense of long threads. Every message gets handled four times.

inbox-to-action collapses all four into one agentic pass. Run one command and get a unified triage report, drafted replies saved to Gmail, and extracted tasks — without ever leaving the terminal, and without ever sending an email automatically.

🔒 Drafts only — never sends

This tool cannot send email. It requests only the Gmail readonly + compose scopes; there is no send scope and no send API call anywhere in the codebase (enforced by a test). Replies are saved as Gmail drafts for you to review and send.

Email bodies flow into the LLM prompt, so a hostile email could try to steer its own classification or a drafted reply (prompt injection). Because every draft is saved for human review and nothing is ever sent automatically, the worst case is a draft you choose not to send. See SECURITY.md.

🌐 What leaves your machine

inbox-to-action reads your email. Where your email content goes for classification depends on the LLM provider you pick — and the default (openrouter) is a cloud provider, so an out-of-the-box run sends your subjects + bodies to a third party.

`PROVIDER=`	Email content goes to	Key
`ollama`	Nowhere — fully local 🔒	none
`claude` / `host`	Your existing Claude Code / Anthropic session (keyless)	none
`openrouter` (default) · `openai` · `nim` · `anthropic`	Third-party cloud ☁️	API key

Want privacy? Use ollama (local) or claude (keyless) so nothing is transmitted to a third party. --telegram / --todoist also push subjects/tasks off-box (opt-in). Full breakdown → PRIVACY.md.

Note: triage-report.md and tasks.md are written to your working directory and contain private email conte

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

14/100across 5 weighted dimensions

How we score →

0255075100

−86

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tarunlnmiit/inbox-to-action safe to use?: io.github.tarunlnmiit/inbox-to-action has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tarunlnmiit/inbox-to-action?: io.github.tarunlnmiit/inbox-to-action can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.tarunlnmiit/inbox-to-action?: io.github.tarunlnmiit/inbox-to-action is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.