- Fluxmail @fluxmailai/fluxmailRead, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.Not assessed yet.Runs on your machine, installed from npm.7 GitHub stars.
- Revenueos @unempyd/revenueosSelf-hosted revenue department: find opportunities, execute approved work, measure results.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- KIAgent @localkiagent/kiagentYour mail, chats and documents indexed into a local SQLite corpus, served to AI clients over MCP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.7 GitHub stars.
- Proton Mail (unofficial) @sethbang/proton-mail-mcpUnofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Agent Email @usejunior/email-agent-mcpLocal email connectivity for AI agents — read, draft, send, and organize Outlook mail via MCP4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Mailappmcp @aernouddekker/mailappmcpMCP server for macOS Mail.app — gives Claude native email access via AppleScript3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Oncofiles @peter-fusek/oncofilesAI-powered medical document management for cancer patients. Google Drive, Gmail, Calendar via MCP.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.5 GitHub stars.
- Apple Mail @mgcrea/mcp-apple-mailSearch, read and act on Apple Mail — threads, attachments, body search, writes off by default6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- iCloud @epinethrone/icloud-mcpiCloud Mail, Calendar, Contacts, Reminders, Notes and Drive. Approval-first, self-hosted or local.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Proton Safe MCP @fbossiere/proton-safe-mcpRead Proton Mail, extract bounded attachment text, and create explicitly confirmed drafts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- mail-index @unsoldgroup/mail-indexLocal-first, read-only MCP server for recall over your Gmail: search, contacts, threads, digests.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Mailbox @psyb0t/mailboxSelf-hosted MCP server for unified IMAP/SMTP mailbox access: read, list, and send email.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
- grad-agent @i-ninte/grad-agentAutonomous MCP agent for grad school applications: prof discovery, cold emails, SOP, tracking.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Ecc @karljsamuel/mcp-eccUnified MCP server for Email, Calendar & Contacts (Google, M365, Zoho, IMAP/SMTP, DAV).5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- IMAP mailbox @ni-c/imap-mcpRead, search and organise any IMAP mailbox, with writes off by default3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Ms Graph @nitin27may/ms-graph-mcpMicrosoft Graph MCP server — 85 tools for mail, calendar, Teams, files, SharePoint, and Entra ID7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- pylos-mcp @adamvass/pylos-mcpEmail MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- mail-muncher @craigjmidwinter/mail-muncherFiltered, read-only IMAP and Gmail archived to disk as .eml + markdown, served over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
- Gmail attachments @zayansalman/gmail-attachments-mcpMinimal MCP server for downloading Gmail attachments to disk. Read-only OAuth by default.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Aruba Email & Calendar @jackfioru92/aruba-emailMCP server for Aruba email and calendar via IMAP/SMTP/CalDAV5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Office Addin @dsbissett/office-addin-mcpMCP server for Office add-ins via WebView2/CDP. Provides excel.*, page.*, and addin.* tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Multi-Account Gmail @cunicopia-dev/multi-account-gmail-mcpMulti-account Gmail MCP server — read, search, draft, and label across every inbox.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- EWS Meeting MCP @ap311036/ews-meeting-mcpSafely schedule Outlook meetings on on-prem Exchange EWS with preview-confirmed writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Multi-account MCP for Gmail, Calendar, Drive, Docs, and Sheets — 61 tools, token @adelaidasofia/google-workspace-mcpMulti-account MCP for Gmail, Calendar, Drive, Docs, and Sheets — 61 tools, token-efficient, macOS…8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.3 GitHub stars.
