- Nylas MCP by usefulapi @usefulapi/nylasMCP server for Nylas — read email, calendars, events and contacts, and send email or create events.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Mac Mail MCP @wagamama/mac-mail-mcpMac Mail MCP server with full-coverage FTS5 body search for local Apple Mail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Mail @honeycrisp-suite/mailApple Mail over MCP: fenced reads, draft-only writing, human-gated actions, audited with undo.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Proton Mail @alexendros/proton-mail-mcpProton Mail MCP via Bridge (IMAP/SMTP) · 13 tools · dual transport stdio + HTTP.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Faivelo Email @faivelo/mailBusiness email on your own domain: mailboxes, send and read mail, aliases, DNS setup, and campaigns.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Mailoo @bitfloo/mailooMailoo — email MCP server for IMAP, SMTP, and ManageSieve. Multi-account, per-folder profiles.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- iCloud Mail @julienrabault/icloud-mcpRead, search, draft, send and file iCloud Mail over IMAP and SMTP. No tool destroys mail.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Nilyo @nilyo/nilyoYour own LinkedIn, WhatsApp, Instagram, Telegram, Email and Calendar accounts, usable from any agent15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Outlook Mac @valter-araujo/outlook-mac-mcpMCP server for Outlook personal accounts (Hotmail/Outlook.com) via Microsoft Graph API7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- rubit-mcp-mail @bgalmes/rubit-mcp-mailRead-only MCP server for your mail — provider-agnostic IMAP that never marks a message as read.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs @fgac/fgacMultiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Outlook @dockndevai/mcp-outlookOutlook mail and OneDrive files via Microsoft Graph — read, search, send and organize.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Lettio MCP @lettio/mcpPrivate, EU-hosted email for AI agents over JMAP: read, search, reply, organize, send.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Grounders MCP @itsbreeze/grounders-mcpMultiple Google accounts (Gmail, Calendar, Drive, Contacts, Tasks) in one Claude connector.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- inboxy @inboxy/inboxyRead and manage your @inboxy.net aliases, mail and RSS feeds; compose mail on paid plans.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Gmail MCP @a1-x-tech/mcp-google-gmailMCP server for the Gmail API: search, read and send email, manage drafts, labels and the trash.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Aura @rohnelt/auraEmail address, webhook, durable memory and zero-token waiting for agents. Paid in USDC via x402.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- IRIS @superangrymonkey/irisMicrosoft 365 mail MCP: reads mail, drafts into Outlook; sending is opt-in (IRIS_ENABLE_SEND).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Outlook Mailbox Tidier @ma2no4413/outlook-mcpTidy a large Outlook / Hotmail mailbox. Folder subtree moves, bulk ops with dry run, never sends.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Radmail @radmail/radmail-mcpEmail OS for agents - real-inbox search, triage, commitments, and a verifiable BEC hard-stop.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Mektup @weeci/mektup-mcpFully-managed email as MCP tools - register domains, real mailboxes, send and receive mail.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Mbox @arose26/mbox-mcpSearch local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Baryon — Proton Mail via Bridge @combor/baryon-mcpRead Proton Mail and save drafts through your local Proton Mail Bridge.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Apple Productivity @gambadio/apple-productivity-mcpOn-demand local Apple Mail, Calendar, and Reminders MCP server for macOS.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
