Mail MCP Server

MCP server for structured, read-only email access. Exposes a minimal, auditable API surface — AI agents can search and read emails, but cannot send

Local serverstdioGo

What is the Mail MCP Server?

MCP server for structured, read-only email access. Exposes a minimal, auditable API surface — AI agents can search and read emails, but cannot send, delete, or

The short version

Imagine having a personal assistant who has read all your emails, knows exactly what's important, and can answer your questions in seconds — without ever risking your actual mailbox through a misbehaving or hallucinating AI.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
list_accounts_and_foldersList all synced accounts and their folders
get_recent_activityN most recent emails with optional filters (is_read, has_attachments, pagination)
get_email_contentFull body text, read/replied status, and attachment list for a single email
search_emailsFTS5 full-text search with subject/sender/date/folder/is_read/sent_by filters
get_threadAll emails in the same thread as a given email, sorted by date ascending
download_attachmentsFetch attachment files from IMAP and save them to disk
get_download_linkGenerate a temporary HTTP download URL for attachments (optional fallback)
delete_mailSoft-delete an email by moving it to a configured trash folder (IMAP MOVE, no permanent deletion)

Example prompts to try

  • “Use Mail to list accounts and folders.”
  • “Use Mail to get recent activity.”
  • “Use Mail to get email content.”

Frequently asked questions

MCP server for structured, read-only email access. Exposes a minimal, auditable API surface — AI agents can search and read emails, but cannot send, delete, or Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.