Email (IMAP/SMTP) MCP Server

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

          fs.writeFileSync(outFd, pdfBuffer);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add mcp-server-email-imap -- npx -y @mindstone/mcp-server-email-imap

{
  "mcpServers": {
    "mcp-server-email-imap": {
      "args": [
        "-y",
        "@mindstone/mcp-server-email-imap"
      ],
      "command": "npx"
    }
  }
}

[mcp_servers.mcp-server-email-imap]
command = "npx"
args = ["-y", "@mindstone/mcp-server-email-imap"]

{
  "mcpServers": {
    "mcp-server-email-imap": {
      "args": [
        "-y",
        "@mindstone/mcp-server-email-imap"
      ],
      "command": "npx"
    }
  }
}

{
  "mcpServers": {
    "mcp-server-email-imap": {
      "args": [
        "-y",
        "@mindstone/mcp-server-email-imap"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: EMAIL_IMAP_EMAIL (Email address), EMAIL_IMAP_PASSWORD (App-specific password), EMAIL_IMAP_PROVIDER (Provider — icloud, gmail, yahoo, outlook, or custom (auto-detected from email domain if unset)), EMAIL_IMAP_IMAP_HOST (Custom IMAP host (for provider=custom)), EMAIL_IMAP_SMTP_HOST (Custom SMTP host (for provider=custom)), EMAIL_IMAP_IMAP_PORT (Custom IMAP port), EMAIL_IMAP_SMTP_PORT (Custom SMTP port), EMAIL_IMAP_MAX_RECIPIENTS (Safety cap: maximum combined To+CC+BCC recipients per email_send call. Defaults to 25; raising bypasses spam-prevention guardrails against prompt-injection-driven mass sends.), EMAIL_IMAP_RATE_LIMIT_PER_HOUR (Safety cap: maximum email_send calls per rolling window. Defaults to 50; protects against runaway sends when injection content escapes the LLM's intent.), EMAIL_IMAP_RATE_LIMIT_WINDOW_MS (Sliding-window length for the rate limit (ms)), MCP_WORKSPACE_PATH (Workspace directory that email_get_attachment downloads into (fresh email-imap-attachment-* staging directories). Defaults to the system temp directory.). The author declared them in the registry entry; get the values from the project itself.