Email inbox MCP servers

A server here reads, sorts or replies to email in a person's own mailbox.

Not here: sending automated email from an app.

286servers
117 remote169 localTagged by Odel's AI, which can make mistakes

Best fit

207 made for this, ranked by starsRemoteLocal
  1. Corresync @nkiyohara/corresyncLocal-first mail, calendar, and task MCP with isolated accounts and guarded writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
  2. icloud-mcp @thomascrouzet/icloud-mcpstdio MCP for iCloud Calendar (CalDAV), with optional Contacts and Mail.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  3. MCP fork of Google Workspace CLI @shigechika/gws-mcpMCP fork of Google Workspace CLI (Gmail, Drive, Calendar, and more)7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  4. Outlook Personal MCP @salahawad/outlook-personal-mcpFull-control MCP server for a personal Outlook.com mailbox and calendar (Microsoft Graph).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  5. Mail.app @p-l-ta/mail-mcpSearch, read, send, and manage email via macOS Mail.app across all configured accounts.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  6. iCloud @eodozzy/icloud-mcpRead-only-by-default MCP server for iCloud mail, calendar, and contacts (IMAP/CalDAV/CardDAV).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  7. Gogcli @chrischall/gogcli-mcpGoogle Sheets (and more) for Claude via gogcli — read, write, and manage spreadsheets4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  8. IMAP @aiwerk/mcp-server-imapEmail tools for any IMAP/SMTP provider: list, read, search, send, and manage messages.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. QMailing MCP @qmailing/mcp-serverAI agents read & send email, manage mailboxes, domains and webhooks via the QMailing API.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  10. gmail-agent @dremok/gmail-agentGmail for AI agents: search, read, download attachments, send, reply, drafts, labels.Not assessed yet.Runs on your machine, installed from PyPI.
  11. Mailroom @darrylmosher/mailroomSelf-hosted gateway between your iCloud mailbox and your AI assistant, with safety built in3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  12. Keeploop @keeploop/keeploopMail, Calendar, Messages, Notes, Contacts, Slack on your Mac for AI. Remote needs Pro or free trial.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  13. Google Workspace (gsuite-sdk) @pabloalaniz/gsuite-sdkGmail, Calendar, Drive, Sheets, Tasks and Contacts for agents, with your own Google login5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Yab, Yet Another Browser @yetanotherbrowser/yabYour own signed-in Mac browser for any agent: open, read and act in tabs. Local and free.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  15. Outlook Mail @pepebits/outlook-mcpRead, search, send and clean up Outlook.com / Hotmail mail through Microsoft Graph.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Apple Mail MCP @jakobfigur/apple-mail-mcpPrivacy-first local MCP for Apple Mail on macOS: inbox context, drafts, approvals, and follow-ups.Not assessed yet.Runs on your machine, installed from npm.
  17. npubmail @npubmail/npubmailEmail inbox for AI agents, owned by a Nostr key. No signup or API key. Receive codes, read, send.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  18. Command Mail @commandmail/mailOne inbox for all your addresses: your AI agent reads, sorts, drafts and sends with your permission.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. Stalwart Mail @cybersmurf/stalwart-mail-mcpMail and contacts on a self-hosted Stalwart server via JMAP: search, read, OCR, send, drafts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. mcp4mail @mcp4mail/mcp4mailYour IMAP mailbox as an MCP server: read, search and (if you allow it) organize mail. Open source.Not assessed yet.A remote server; you sign in with your account.
  21. Dialogbrain @dialogbrain/dialogbrainYour customer inbox as tools: read and answer WhatsApp, Telegram, Instagram and e-mail.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. Google Mail @mmedum/google-mail-mcpGmail over MCP from your own account: search, read threads and messages, labels and drafts.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  23. Hub @itsbreeze/hubMultiple Google accounts (Gmail, Calendar, Drive, Contacts, Tasks) in one Claude connector.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. Missive MCP by usefulapi @usefulapi/missiveRead email/chat conversations, messages, contacts and teams; draft, send and update threads.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.