MCP.Market

Imap MCP server

by AIWerk·io.github.AIWerk/mcp-server-imap·v1.2.1·1 stars

Email tools for any IMAP/SMTP provider: list, read, search, send, and manage messages.

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Imap yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Imap tools (10, 10 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • email_attachmentwrite action

    List or fetch a message attachment

  • email_deletewrite action

    Delete emails by moving them to Trash

  • email_flagwrite action

    Set read/star flags on emails

  • email_folderswrite action

    List all folders and status counters

  • email_listwrite action

    List emails from a folder

  • email_movewrite action

    Move email UIDs from one folder to another

  • email_readwrite action

    Read one email including body and attachments metadata

  • email_replywrite action

    Reply to an existing email via SMTP

  • email_searchwrite action

    Search emails by text/header/date criteria

  • email_sendwrite action

    Send an email via SMTP

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 47 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Imap compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 914 Email servers
Tools
10
the typical Email server has 7
Tools that change things
100%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 492 Email servers

What its tools let an agent do: 10 send or post

Install Imap in Claude Code, Cursor or VS Code

Runs npx -y @aiwerk/mcp-server-imap on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server-imap -- npx -y @aiwerk/mcp-server-imap
Add to Cursor

What the publisher says

From the Imap repository's README, as published. We do not edit it. Read it on GitHub

@aiwerk/mcp-server-imap

IMAP/SMTP MCP server that works with any email provider. Set host, user, pass — done.

Unlike Gmail-only or Outlook-only MCP servers, this one speaks standard IMAP/SMTP — so it works with every email provider out of the box.

Why this server?

Most email MCP servers only work with one provider (Gmail, Outlook). This one works with any provider that supports IMAP:

  • Gmail, Outlook, Yahoo — yes
  • Fastmail, ProtonMail Bridge, Zoho — yes
  • Self-hosted (Dovecot, Postfix, hMailServer) — yes
  • Corporate/hosted (Hostpoint, Infomaniak, OVH) — yes

One server, every mailbox.

Highlights

  • Universal — standard IMAP/SMTP, works everywhere
  • Simple setup — just IMAPHOST, IMAPUSER, IMAP_PASS and you're connected
  • Safety first — email sending is disabled by default (SMTPSENDENABLED=false). Your AI agent can read emails but can't send anything until you explicitly opt in
  • Lazy credentials — the server starts and exposes its tool list without requiring credentials. Auth is only needed when a tool is actually called
  • Real MIME parsing — handles multipart, HTML/text, attachments, reply threading

AIWerk hosted service — emailsend and emailreply are local-only

If you use this server through the AIWerk hosted service at aiwerkmcp.com, the two outgoing-mail tools are not exposed:

  • ❌ email_send
  • ❌ email_reply

The other 8 read-side tools (emaillist, emailread, emailsearch, emailfolders, emailflag, emailmove, emaildelete, emailattachment) work normally on the hosted service.

Why? The hosted service shares an IP across all users. If outgoing mail went out from that shared IP, the IP would appear in every recipient's Received: headers — one bad actor could damage deliverability for every user. There is no shared-IP architecture where arbitrary user sends works safely.

How to send mail then? Run the server locally, where outgoing mail goes from your own IP and your own provider reputation. Three paths:

  1. Ad-hoc one-email CLI — see the next section. Zero config, one-shot.
  2. Direct stdio MCP server in your client (Cursor, Claude Desktop, OpenClaw) — point your client config at npx -y @aiwerk/mcp-server-imap with your IMAP and SMTP env vars including SMTPSENDENABLED=true.
  3. Local @aiwerk/mcp-bridge — npx -y @aiwerk/mcp-bridge install imap-email --catalog aiwerkmcp.com, then point your client at the local bridge endpoint.

In all three cases the mail goes from your home / office IP, not from the hosted service.

Ad-hoc one-email CLI

Note: On the AIWerk hosted service, the emailsend and emailreply MCP tools are not exposed (the service shares an IP across all users, so allowing arbitrary sends would risk every user's deliverability). Use any of the three paths below to send email locally.

Need to send a single email from the command line — for example, to deliver a draft your AI agent composed? Use aiwerk-send-email:

SMTP_HOST=smtp.gmail.com \
SMTP_PORT=587 \
SMTP_USER=me@gmail.com \
SMTP_PASS='app-password' \
SMTP_FROM='Me <me@gmail.com>' \
npx -y @aiwerk/mcp-server-imap aiwerk-send-email \
  --to "alice@example.com" \
  --subject "Re: invoice" \
  --body "Got it, will pay Monday."

On success, exits 0 and prints JSON: {"ok":true,"messageId":"...","envelope":{...}}

On failure, exits 1 with the error on stderr. Credentials are never printed.

All CLI arguments

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Imap: common questions

Is Imap MCP server safe?
Mostly: it is graded B (75/100). Read the Imap safety report
How do I install Imap?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Imap need an API key?
Yes. The registry entry asks for IMAP_PASS, SMTP_PASS.
Is Imap maintained?
The last commit was 84 days ago (2026-08-10). The latest release is v1.2.1.
What can I use instead of Imap?
Servers from other publishers that do the same job: Mailoo - Email MCP Server, Email MCP server and Fluxmail MCP server.
How does Imap compare with other Email MCP servers?
safety score 75/100 (higher than 45% of 914 Email servers); tools 10 (the typical Email server has 7); tools that change things 100% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Imap

Same job from other publishers: the closest match first, then the best rated.

  • Mailoo - Email MCP Server
    Email MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.
    B
  • Email
    IMAP/SMTP email MCP server — 52 tools, stdio + HTTP, IMAP IDLE push, multi-account, AI triage.
    B
  • Fluxmail
    Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.
    B
  • MCPEmails
    Never-stored live email: read, send and triage Gmail, Outlook / Microsoft 365, or any IMAP mailbox.
    A
  • Proton Mail (unofficial)
    Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP
    B

More from AIWerk →