Email Automation MCP Server

This email automation MCP server has critical security vulnerabilities that make it unsuitable for production use. The code contains an undocumented dependency on an external auth_middleware module from a hardcoded path, uses environment variables for sensitive credentials without proper validation, includes an unauthenticated preview endpoint that could leak email content, and has no validation on email addresses or search queries. The rate limiting is in-memory and session-based, providing no real protection. Combined with the ability to send emails, read inboxes, and access mailbox contents, these issues create significant risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.