Mail runs on your own machine — the client starts it, so there is no endpoint to ping. 40 installs a week from npm. Last commit 16 Sep 2026.
Apple Mail over MCP: fenced reads, draft-only writing, human-gated actions, audited with undo.
What changed 1
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 24 September 2026. No other catalogue keeps this.
What the code does
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
пакет @honeycrisp/mail ссылается на honeycrisp-suite/honeycrisp
const child = spawn(this.argv[0], this.argv.slice(1), {
const pendingFile = path.join(this.dir, name);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mail -- npx -y @honeycrisp/mail{
"mcpServers": {
"mail": {
"command": "npx",
"args": [
"-y",
"@honeycrisp/mail"
]
}
}
}[mcp_servers.mail]
command = "npx"
args = ["-y", "@honeycrisp/mail"]{
"mcpServers": {
"mail": {
"command": "npx",
"args": [
"-y",
"@honeycrisp/mail"
]
}
}
}{
"servers": {
"mail": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@honeycrisp/mail"
]
}
}
}Alternatives to Mail
same job, measured the same wayGoogle Tag Manager + read-only GA4 MCP server. Read-only by default, gated writes, audits.
FHIR chart tools for MCP: read-only by default, with elicitation-gated, human-approved writes.
Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.
Read-only SQL querying + schema introspection over Postgres & SQLite, with a gated write mode.
Governed Symantec ZTNA operations — 40 MCP tools, read-only with audit.
Marrow Health: your Apple Health data over MCP, from the free iOS app. Reads, and writes on demand.
Raily personal-agent MCP with scoped reads and approved actions.
Governed Symantec DCS operations — 35 MCP tools, read-only with audit.
Mail — questions
Answers built from our own checks of this server.