Back to Browse

Mailbox MCP Server

by Jgalea
Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Multi-account email MCP server for Gmail, IMAP, and JMAP: search, send, drafts, labels.

About

Multi-account email MCP server for Gmail, IMAP, and JMAP: search, send, drafts, labels.

Security Report

5.2
Moderate5.2Moderate Risk

mailbox-mcp is a multi-provider email server whose stated purpose requires broad mailbox and network access, and the reviewed JMAP provider enforces HTTPS, SSRF validation, no-redirect fetches, and sanitized headers. Its send paths carry explicit confirmations and per-account guards, but the README describes a very large tool surface that can send and delete mail, so users should keep approval or allowlist settings on agent-driven accounts. The truncated source limits full verification of Gmail, IMAP, and the remaining JMAP code. Supply chain analysis found 8 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

Passphrase used to encrypt IMAP/JMAP credentials at rest. Required for IMAP and JMAP accounts.Required

Environment variable: MAILBOX_MCP_PASSPHRASE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-jgalea-mailbox-mcp": {
      "env": {
        "MAILBOX_MCP_PASSPHRASE": "your-mailbox-mcp-passphrase-here"
      },
      "args": [
        "-y",
        "mailbox-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!