Email inbox MCP servers

A server here reads, sorts or replies to email in a person's own mailbox.

Not here: sending automated email from an app.

286servers
117 remote169 localTagged by Odel's AI, which can make mistakes

Best fit

207 made for this, ranked by starsRemoteLocal
  1. Proton Safe MCP @fbossiere/proton-safe-mcpRead Proton Mail, extract bounded attachment text, and create explicitly confirmed drafts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  2. mail-index @unsoldgroup/mail-indexLocal-first, read-only MCP server for recall over your Gmail: search, contacts, threads, digests.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
  3. Mailbox @psyb0t/mailboxSelf-hosted MCP server for unified IMAP/SMTP mailbox access: read, list, and send email.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
  4. grad-agent @i-ninte/grad-agentAutonomous MCP agent for grad school applications: prof discovery, cold emails, SOP, tracking.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  5. Ecc @karljsamuel/mcp-eccUnified MCP server for Email, Calendar & Contacts (Google, M365, Zoho, IMAP/SMTP, DAV).5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  6. IMAP mailbox @ni-c/imap-mcpRead, search and organise any IMAP mailbox, with writes off by default3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  7. Ms Graph @nitin27may/ms-graph-mcpMicrosoft Graph MCP server — 85 tools for mail, calendar, Teams, files, SharePoint, and Entra ID7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  8. pylos-mcp @adamvass/pylos-mcpEmail MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  9. mail-muncher @craigjmidwinter/mail-muncherFiltered, read-only IMAP and Gmail archived to disk as .eml + markdown, served over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  10. Gmail attachments @zayansalman/gmail-attachments-mcpMinimal MCP server for downloading Gmail attachments to disk. Read-only OAuth by default.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  11. Aruba Email & Calendar @jackfioru92/aruba-emailMCP server for Aruba email and calendar via IMAP/SMTP/CalDAV5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  12. Office Addin @dsbissett/office-addin-mcpMCP server for Office add-ins via WebView2/CDP. Provides excel.*, page.*, and addin.* tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  13. Multi-Account Gmail @cunicopia-dev/multi-account-gmail-mcpMulti-account Gmail MCP server — read, search, draft, and label across every inbox.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  14. EWS Meeting MCP @ap311036/ews-meeting-mcpSafely schedule Outlook meetings on on-prem Exchange EWS with preview-confirmed writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  15. Multi-account MCP for Gmail, Calendar, Drive, Docs, and Sheets — 61 tools, token @adelaidasofia/google-workspace-mcpMulti-account MCP for Gmail, Calendar, Drive, Docs, and Sheets — 61 tools, token-efficient, macOS…8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.3 GitHub stars.
  16. Benethos Mailbox @benethos-hub/benethos-mailbox-mcpMCP server that gives AI agents your mailboxes through mailbox-service, within its token's rights.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  17. Forward Email @forwardemail/mcp-serverPrivacy-focused email: domains, DNS verification, aliases, SMTP sending, mailboxes and calendars.Not assessed yet.Runs on your machine, installed from npm.2 GitHub stars.
  18. Yahoo Mail @andesstriker/yahoo-mail-mcpRead, search, move, and delete Yahoo Mail over IMAP — MCP server for Claude6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.2 GitHub stars.
  19. Inbox To Action @tarunlnmiit/inbox-to-actionAgentic Gmail triage: classify, summarize, extract tasks, draft replies. Never sends.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  20. JMAP Email @mikluko/jmap-mcpEmail management via JMAP — mailboxes, messages, identities, and Sieve scripts4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
  21. Apple Mail MCP @jayvee6/apple-mail-mcpLLM access to Apple Mail and iCloud via AppleScript. Read, search, compose, reply, flag and delete.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  22. Email (IMAP/SMTP) @boutquin/emailMulti-account IMAP/SMTP email server with 22 tools for reading, sending, searching, and organizing.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
  23. Mailbridge @creativestefan/mailbridgeConnect your AI assistant to email — read, search, send, and organise via IMAP/SMTP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  24. Mail-MCP @rixtayz/mail-mcpPersonal Outlook.com / Hotmail inbox: read, search, file, delete, unsubscribe via Microsoft Graph.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.