MCP.Market

MsgLens MCP server

by AndyLiu0427·io.github.AndyLiu0427/msglens·v0.2.1

Read Outlook .msg, .eml and winmail.dat files locally: headers, body and attachments.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed MsgLens yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MsgLens tools (3, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • convert_emailwrite action

    Convert a .msg or winmail.dat to .eml (opens in Apple Mail, Thunderbird, Gmail) or to plain .txt, and return the new file's path.

  • read_emailwrite action

    Read an Outlook .msg, .eml or winmail.dat file: subject, sender, recipients, date, the plain-text body and the list of attachments. Also reads Outlook appointments and contacts saved as .msg. Recovers bodies Outlook stored only as compressed RTF. Parsed locally; nothing is uploaded.

  • save_attachmentswrite action

    Write every attachment of a .msg, .eml or winmail.dat file into a folder and return the paths. An attached email (.msg inside .msg) is saved as a .msg file, which read_email can then open.

Public scan report

scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it

no findings
  • Code scan20 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MsgLens compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 916 Email servers
Tools
3
the typical Email server has 7
Tools that change things
100%
typical: 25%. Fewer write tools means less an agent can break

What its tools let an agent do: 1 create · 2 change

Install MsgLens in Claude Code, Cursor or VS Code

Runs npx -y msglens-cli on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add msglens -- npx -y msglens-cli
Add to Cursor

What the publisher says

From the MsgLens repository's README, as published. We do not edit it. Read it on GitHub

MsgLens — a .msg / .eml / winmail.dat viewer that never uploads your files

A browser-based viewer for Outlook .msg, standard .eml and winmail.dat (TNEF) email files. Everything — container parsing, RTF decompression, HTML sanitisation, ZIP creation, PDF export — runs client-side. There is no backend, which is what makes "your file is never uploaded" a structural fact rather than a promise.

Why this exists

Checked against the three tools that rank for this query, 30 September 2026, by reading their pages and upload code (no file was uploaded):

So the "they all upload it" line is not true, and this README used to say it was. One of the three is genuinely local. The same comparison, kept current, is on the site at /msg-viewer-comparison/.

What is left is a real split. Against the two hosted converters, the argument is that business email should not be posted to an unknown server to be read. Against the local one, it is the other formats: .eml and winmail.dat.

The technical claim underneath all of it: Outlook usually stores the body only as compressed RTF with the original HTML encapsulated inside it ([MS-OXRTFEX]). Against a corpus of 20 real business .msg files, 17 were RTF-only — a viewer that reads PidTagHtml and gives up renders nothing for 85% of them. That number is measured. Whether any particular competitor handles that case is not tested here, and saying otherwise would need uploading a message to them to find out.

winmail.dat used to be the one thing encryptomatic did that this did not. It now reads those too — see below.

What it does

than extension, so a renamed file still opens.

  • Reads .msg, .eml and winmail.dat, detected by magic bytes rather

in Rich Text and the receiving server could not unpack it. The formatted body and every real attachment are trapped inside it; this pulls them back out. Note that TNEF carries the sender but not the recipient list — those stayed in the carrying message's own headers, which the file does not contain, so To/Cc show as empty rather than guessed.

  • Unpacks winmail.dat (TNEF) — the file people receive when Outlook sent

PidTagBodyHtml → de-encapsulated PidTagRtfCompressed → PidTagBody.

  • Recovers the body through the full fallback chain — PidTagHtml →

, not inline attributes; a viewer that keeps only the body fragment silently drops table borders, fonts and colours from most real mail.

  • Resolves cid: inline images against the message's own attachments.
  • Keeps the message's own stylesheets. Outlook writes formatting into

tracking pixel, with a per-message opt-in.

  • Blocks remote images by default so opening a message cannot fire a

PidTagInternetCodepage instead of assuming UTF-8.

  • Decodes non-Latin bodies using the code page declared in

attachments in place.

  • Extracts attachments individually or as a ZIP; opens embedded .msg

rather than printing the app, because iframe content cannot paginate across printed pages — printing the page directly clips anything over one sheet.

  • Exports to .eml, .txt and PDF. Printing opens a dedicated print document
  • Shows raw internet headers — for IT, deliverability and discovery work.
  • Multi-file, keyboard-navigable, dark mode, English + Traditional Chinese.

Architecture

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MsgLens: common questions

Is MsgLens MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the MsgLens safety report
How do I install MsgLens?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MsgLens need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MsgLens maintained?
The last commit was 33 days ago (2026-10-02). The latest release is v0.2.1.
What can I use instead of MsgLens?
Servers from other publishers that do the same job: Outlook MCP server, Mailoo - Email MCP Server and Inbox Zero MCP server.
How does MsgLens compare with other Email MCP servers?
safety score 92/100 (higher than 90% of 916 Email servers); tools 3 (the typical Email server has 7); tools that change things 100% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MsgLens

Same job from other publishers: the closest match first, then the best rated.

  • Outlook
    Outlook & OneDrive MCP: personal & enterprise tools for mail, calendar, contacts, tasks, files
    A
  • Mailoo - Email MCP Server
    Email MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.
    A
  • Inbox Zero
    Search Gmail and Outlook, save drafts, manage email rules, and view email stats.
    A
  • LMCP
    Mac & Windows: let ChatGPT, Claude & Cursor use your email, calendar, iMessage, Teams, files.
    B
  • Email Inbox API + Sending by Sendmux
    AI email inbox and sending tools with attachments, search, live events, and webhooks.
    A