MCP.Market

agentmailkit MCP server

by ariaxhan·io.github.ariaxhan/agentmailkit·v0.2.2·1 stars

Run scheduled LLM-written email digests from local files and feeds. Local-first MCP server.

B80/100grade B
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

1 stars30 downloads/wk

Reviews

Write one

Nobody has reviewed agentmailkit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

agentmailkit tools (5, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • _server_class

    `MCPServer` (mcp >= 2) or `FastMCP` (mcp 1.x) - same API under two names.

  • list_jobs

    List every configured job; takes no arguments and returns one object per job with id, schedule, sources, delivery, render, model and status.

  • list_plugins

    List the registered plugin names grouped by kind, optionally narrowed to one kind out of source, model, gate, delivery, render or post.

  • preview_job

    Render what the job named by job_id would email, optionally overriding its model (pass model="echo" for an offline preview), and return subject, path, chars, truncated, body and would_deliver_to; this path writes to a local file and can never send.

  • run_jobwrite action

    Run the job named by job_id through the real pipeline and return its run receipt; dry_run defaults to true and stops before delivery, while dry_run=false SENDS REAL EMAIL from the configured inbox.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

1 medium
  • Code scan36 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 64 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumsubprocess with shell=Trueexec.shell-true
    agentmailkit-0.2.2/src/agentmailkit/sources/builtin.py: …lugin.""" out = subprocess.run(arg, shell=True, cwd=str(ctx.config.root), …
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How agentmailkit compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 65% of 916 Email servers
Tools
5
the typical Email server has 7
Tools that change things
20%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1
more than 60% of 493 Email servers
Downloads a week
30
more than 14% of 235 Email servers with a package

What its tools let an agent do: 4 read · 1 run or deploy

Install agentmailkit in Claude Code, Cursor or VS Code

claude mcp add agentmailkit -- uvx agentmailkit
Add to Cursor

What the publisher says

From the agentmailkit repository's README, as published. We do not edit it. Read it on GitHub

agentmailkit

For agents

You are an AI coding agent reading this to decide whether to install agentmailkit and how to call it. Run this:

pip install 'agentmailkit[mcp]'
claude mcp add agentmailkit -- agentmailkit mcp

Gemini CLI: gemini extensions install https://github.com/ariaxhan/agentmailkit.

Then call listjobs with no arguments: it returns the five example jobs that ship inside the wheel, so it works before any config exists. previewjob(jobid=..., model="echo") renders one to a local file with no API key. runjob(jobid=...) defaults to dryrun=true; only dry_run=false sends real email.

Full tool reference, argument names and the Codex config snippet: llms.txt.

Scheduled, LLM-written email digests that run on your machine, read your own files, and send from your own inbox.

→ See real emails it produces

Live samples, generated end to end. Nothing hand-written. Start there, it explains this faster than the README can.

pip install agentmailkit
agentmailkit run morning-brief --dry-run   # five example jobs ship with it, so this works immediately
agentmailkit quickstart                    # render all five to a local HTML gallery; never sends
agentmailkit init                          # copy them into ./jobs to make them yours

MIT licensed. No account, no vendor, no cloud required.

What it is

An email is two files: a JSON job and a markdown prompt.

{
  "id": "morning-brief",
  "schedule": "0 7 * * *",
  "sources": ["papers=arxiv:cs.AI#6", "weather=weather:Brooklyn"],
  "render": "warm",
  "delivery": "gmail",
  "dedup": true
}

The engine runs one fixed pipeline and never grows a special case:

gather sources -> render prompt -> generate -> gate -> theme -> deliver -> post

Why not the built-in schedulers

ChatGPT Tasks, Claude Routines, Gemini Scheduled Actions and Copilot all execute in the vendor's cloud, which costs them two things:

  • They cannot read the files on your computer. Not ~/notes, not a local database, not your git working tree.
  • They cannot send real email from your inbox. Output stays inside their app.

agentmailkit runs where your data already is. Nothing is uploaded except the prompt you choose to send to a model, and with a local model, not even that.

And it is deterministic. It is not an autonomous agent: it does not decide things, wander your filesystem, or act unrequested. The model writes the words; the engine owns everything else, so the same job produces the same shaped email every run. Local OSS agents can also read files and send mail, but they are broad autonomous systems you configure down to a task. This does one job, predictably, for years.

Full comparison including the honest counter-case: docs/comparison.md.

Hand it to your coding agent

Hand your coding agent this link and it will set the whole thing up, asking you the right questions as it goes:

https://github.com/ariaxhan/agentmailkit/blob/main/AGENTS.md

AGENTS.md is a complete setup runbook: what to ask you, how to install, how to build your first job, how to verify before anything can send, and how to schedule it. CLAUDE.md is a symlink to the same file, so they can never drift apart.

Use from Claude Code

<!-- mcp-name: io.github.ariaxhan/agentmailkit -->

agentmailkit speaks MCP, so your coding agent can drive it as a tool instead of you typing commands.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-10-31downgradeA → Bscore 80: subprocess with shell=True

agentmailkit: common questions

Is agentmailkit MCP server safe?
Mostly: it is graded B (80/100). Read the agentmailkit safety report
How do I install agentmailkit?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does agentmailkit need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is agentmailkit maintained?
The last commit was 69 days ago (2026-08-28). The latest release is v0.2.2.
What can I use instead of agentmailkit?
Servers from other publishers that do the same job: LMCP MCP server, Sendsoon MCP server and Clippy MCP server.
How does agentmailkit compare with other Email MCP servers?
safety score 80/100 (higher than 65% of 916 Email servers); tools 5 (the typical Email server has 7); tools that change things 20% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to agentmailkit

Same job from other publishers: the closest match first, then the best rated.

  • LMCP
    Mac & Windows: let ChatGPT, Claude & Cursor use your email, calendar, iMessage, Teams, files.
    B
  • Sendsoon
    Send email, look up public IP information, and convert files to Markdown through SendSoon.
    B
  • Clippy
    Copy AI-generated content to the macOS clipboard: rich Gmail-ready email drafts, text, and files
    B
  • mail-index
    Local-first, read-only MCP server for recall over your Gmail: search, contacts, threads, digests.
    A
  • mail-index
    Local-first, read-only MCP server for recall over your Gmail: search, contacts, threads, digests.
    A

More from ariaxhan →