Imap MCP server
Email tools for any IMAP/SMTP provider: list, read, search, send, and manage messages.
1 stars
Reviews
Write oneNobody has reviewed Imap yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Imap tools (10, 10 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
email_attachmentwrite actionList or fetch a message attachment
email_deletewrite actionDelete emails by moving them to Trash
email_flagwrite actionSet read/star flags on emails
email_folderswrite actionList all folders and status counters
email_listwrite actionList emails from a folder
email_movewrite actionMove email UIDs from one folder to another
email_readwrite actionRead one email including body and attachments metadata
email_replywrite actionReply to an existing email via SMTP
email_searchwrite actionSearch emails by text/header/date criteria
email_sendwrite actionSend an email via SMTP
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 47 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
How Imap compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 914 Email servers
- Tools
- 10
- the typical Email server has 7
- Tools that change things
- 100%
- typical: 25%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 492 Email servers
What its tools let an agent do: 10 send or post
Install Imap in Claude Code, Cursor or VS Code
Runs npx -y @aiwerk/mcp-server-imap on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server-imap -- npx -y @aiwerk/mcp-server-imap
What the publisher says
From the Imap repository's README, as published. We do not edit it. Read it on GitHub
@aiwerk/mcp-server-imap
IMAP/SMTP MCP server that works with any email provider. Set host, user, pass — done.
Unlike Gmail-only or Outlook-only MCP servers, this one speaks standard IMAP/SMTP — so it works with every email provider out of the box.
Why this server?
Most email MCP servers only work with one provider (Gmail, Outlook). This one works with any provider that supports IMAP:
- Gmail, Outlook, Yahoo — yes
- Fastmail, ProtonMail Bridge, Zoho — yes
- Self-hosted (Dovecot, Postfix, hMailServer) — yes
- Corporate/hosted (Hostpoint, Infomaniak, OVH) — yes
One server, every mailbox.
Highlights
- Universal — standard IMAP/SMTP, works everywhere
- Simple setup — just IMAPHOST, IMAPUSER, IMAP_PASS and you're connected
- Safety first — email sending is disabled by default (SMTPSENDENABLED=false). Your AI agent can read emails but can't send anything until you explicitly opt in
- Lazy credentials — the server starts and exposes its tool list without requiring credentials. Auth is only needed when a tool is actually called
- Real MIME parsing — handles multipart, HTML/text, attachments, reply threading
AIWerk hosted service — emailsend and emailreply are local-only
If you use this server through the AIWerk hosted service at aiwerkmcp.com, the two outgoing-mail tools are not exposed:
- ❌ email_send
- ❌ email_reply
The other 8 read-side tools (emaillist, emailread, emailsearch, emailfolders, emailflag, emailmove, emaildelete, emailattachment) work normally on the hosted service.
Why? The hosted service shares an IP across all users. If outgoing mail went out from that shared IP, the IP would appear in every recipient's Received: headers — one bad actor could damage deliverability for every user. There is no shared-IP architecture where arbitrary user sends works safely.
How to send mail then? Run the server locally, where outgoing mail goes from your own IP and your own provider reputation. Three paths:
- Ad-hoc one-email CLI — see the next section. Zero config, one-shot.
- Direct stdio MCP server in your client (Cursor, Claude Desktop, OpenClaw) — point your client config at npx -y @aiwerk/mcp-server-imap with your IMAP and SMTP env vars including SMTPSENDENABLED=true.
- Local @aiwerk/mcp-bridge — npx -y @aiwerk/mcp-bridge install imap-email --catalog aiwerkmcp.com, then point your client at the local bridge endpoint.
In all three cases the mail goes from your home / office IP, not from the hosted service.
Ad-hoc one-email CLI
Note: On the AIWerk hosted service, the emailsend and emailreply MCP tools are not exposed (the service shares an IP across all users, so allowing arbitrary sends would risk every user's deliverability). Use any of the three paths below to send email locally.
Need to send a single email from the command line — for example, to deliver a draft your AI agent composed? Use aiwerk-send-email:
SMTP_HOST=smtp.gmail.com \
SMTP_PORT=587 \
SMTP_USER=me@gmail.com \
SMTP_PASS='app-password' \
SMTP_FROM='Me <me@gmail.com>' \
npx -y @aiwerk/mcp-server-imap aiwerk-send-email \
--to "alice@example.com" \
--subject "Re: invoice" \
--body "Got it, will pay Monday."On success, exits 0 and prints JSON: {"ok":true,"messageId":"...","envelope":{...}}
On failure, exits 1 with the error on stderr. Credentials are never printed.
All CLI arguments
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Imap: common questions
- Is Imap MCP server safe?
- Mostly: it is graded B (75/100). Read the Imap safety report
- How do I install Imap?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Imap need an API key?
- Yes. The registry entry asks for
IMAP_PASS,SMTP_PASS. - Is Imap maintained?
- The last commit was 84 days ago (2026-08-10). The latest release is v1.2.1.
- What can I use instead of Imap?
- Servers from other publishers that do the same job: Mailoo - Email MCP Server, Email MCP server and Fluxmail MCP server.
- How does Imap compare with other Email MCP servers?
- safety score 75/100 (higher than 45% of 914 Email servers); tools 10 (the typical Email server has 7); tools that change things 100% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Imap
Same job from other publishers: the closest match first, then the best rated.
- Mailoo - Email MCP ServerEmail MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.5.0(1)NewB
- EmailIMAP/SMTP email MCP server — 52 tools, stdio + HTTP, IMAP IDLE push, multi-account, AI triage.not reviewedEstablishedB
- FluxmailRead, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.not reviewedGrowingB
- MCPEmailsNever-stored live email: read, send and triage Gmail, Outlook / Microsoft 365, or any IMAP mailbox.not reviewedGrowingA
- Proton Mail (unofficial)Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAPnot reviewedGrowingB