Mailoo MCP server

by Bitfloo·io.github.Bitfloo/mailoo·v0.2.2

5.0(1)

Email, calendar, reminders & ManageSieve MCP server (IMAP/SMTP, AI triage, scheduling, OAuth2).

B73/100grade B

Write a review Install

What users say

5.0

1 review

Safety scan

B73/100

not scanned yet

Adoption

New

0 stars

Reviews (1)

Write one

5.0

1 review

FLO-Live@FLO-Liveverified2026-10-18
Fast, good and really complex for all mail workaround
Fast, good and really complex for all mail workaround
used for: daily mail actionsClaude CodeHelpful

Mailoo tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Mailoo compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 73/100; higher than 45% of 861 Email servers

Release history: 7 versions in the registry since 2026-09-23, latest 2026-10-18, typically one every 5 days.

Install Mailoo in Claude Code, Cursor or VS Code

Runs npx -y @bitfloo/mailoo on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mailoo -- npx -y @bitfloo/mailoo

Add to Cursor

What the publisher says

From the Mailoo repository's README, as published. We do not edit it. Read it on GitHub

Mailoo

Mailoo is Bitfloo's IMAP/SMTP MCP server: multi-mailbox, with profiles per account and per folder.

This is a public LGPL-3.0-or-later fork of email-mcp. It is not an official codefuturist project. See Upstream / Attribution.

Enables AI assistants to read, search, send, manage, schedule, and analyze emails across multiple accounts. Exposes 56 tools, 7 prompts, and 6 resources over the MCP protocol with OAuth2 support (experimental), email scheduling, calendar extraction, analytics, provider-aware label management, real-time IMAP IDLE watcher with AI-powered triage, customizable presets and static rules, ManageSieve filters, and a guided setup wizard.

Behaviour for Sent copies, IMAP4rev2, Sieve, attachment savePath, and read-only side effects is documented in docs/configuration.md and docs/tools.md.

Highlights

Highlights
Security
Docs
Background
Install
Usage
API
Maintainers
Upstream / Attribution
Contributing
License

Security

Policy and how to report a vulnerability: SECURITY.md.

All connections use TLS/STARTTLS encryption (ManageSieve PLAIN also requires TLS — docs)
Passwords are never logged; audit trail records operations without credentials
Token-bucket rate limiter prevents abuse (configurable per account)
OAuth2 XOAUTH2 authentication for Gmail and Microsoft 365 (experimental)
Attachment downloads: 5 MB as base64, or up to 50 MB when writing savePath under the working directory (docs)

Docs

Background

Most MCP email implementations provide only basic read/send. This server aims to be a full-featured email client for AI assistants, covering the entire lifecycle: reading, composing, managing, scheduling, and analyzing email — all from a single MCP server.

Key design decisions:

XDG-compliant config — TOML at ~/.config/mailoo/config.toml
Multi-account — Operate across multiple IMAP/SMTP accounts simultaneously
Layered services — Business logic is decoupled from MCP wiring for testability
Provider auto-detection — Gmail, Outlook, Yahoo, iCloud, Fastmail, ProtonMail, Zoho, GMX

Install

Requires Node.js ≥ 24 and pnpm 9.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Mailoo: common questions

Is Mailoo MCP server safe?: Mostly: it is graded B (73/100). Read the Mailoo safety report
How do I install Mailoo?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mailoo need an API key?: Yes. The registry entry asks for MCP_EMAIL_PASSWORD, MCP_EMAIL_OAUTH2_CLIENT_SECRET, MCP_EMAIL_OAUTH2_REFRESH_TOKEN, MCP_EMAIL_ALERT_WEBHOOK_URL and 1 more.
Is Mailoo maintained?: The last commit was 32 days ago (2026-09-23). The latest release is v0.2.2.
What can I use instead of Mailoo?: Servers from other publishers that do the same job: Email MCP server, Imap MCP server and Fluxmail MCP server. Compare all Mailoo alternatives.

Alternatives to Mailoo

Same job from other publishers: the closest match first, then the best rated.

All Mailoo alternatives →

Email
IMAP/SMTP email MCP server — 52 tools, stdio + HTTP, IMAP IDLE push, multi-account, AI triage.
not reviewed
Established
B
Imap
IMAP/SMTP MCP server to search, read, organize, send, reply & forward email for AI assistants
not reviewed
Established
A
Fluxmail
Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.
not reviewed
Growing
B
MCPEmails
Never-stored live email: read, send and triage Gmail, Outlook / Microsoft 365, or any IMAP mailbox.
not reviewed
Growing
A
Proton Mail (unofficial)
Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP
not reviewed
Growing
B

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: 5.0/5 · 1
Safety grade: B · 73/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: LGPL-3.0
Transport: Local · npm
Version: 0.2.2
Category: Email
Last release: 2026-09-23

Credentials it needs

MCP_EMAIL_ADDRESSEmail address. Required for the environment-variable account.
MCP_EMAIL_PASSWORDsecretPassword or app password. Required unless MCP_EMAIL_OAUTH2_PROVIDER is set.
MCP_EMAIL_IMAP_HOSTIMAP server hostname.
MCP_EMAIL_SMTP_HOSTSMTP server hostname.
MCP_EMAIL_ACCOUNT_NAMEAccount name. Defaults to default.
MCP_EMAIL_FULL_NAMEDisplay name on sent mail.
MCP_EMAIL_USERNAMELogin username. Defaults to the email address.
MCP_EMAIL_IMAP_PORTIMAP port. Defaults to 993.
MCP_EMAIL_IMAP_TLSSet to false to turn off implicit IMAP TLS. Defaults to true.
MCP_EMAIL_IMAP_STARTTLSSet to true to upgrade IMAP with STARTTLS. Defaults to false.
MCP_EMAIL_IMAP_VERIFY_SSLSet to false to skip IMAP certificate verification. Defaults to true.
MCP_EMAIL_IMAP_DISABLE_IMAP4REV2Set to true to force IMAP4rev1 SEARCH.
MCP_EMAIL_SIEVE_HOSTManageSieve hostname. Defaults to the IMAP host.
MCP_EMAIL_SIEVE_PORTManageSieve port. Defaults to 4190.
MCP_EMAIL_SMTP_PORTSMTP port. Defaults to 465.
MCP_EMAIL_SMTP_TLSSet to false to turn off implicit SMTP TLS. Defaults to true.
MCP_EMAIL_SMTP_STARTTLSSet to true to upgrade SMTP with STARTTLS. Defaults to false.
MCP_EMAIL_SMTP_VERIFY_SSLSet to false to skip SMTP certificate verification. Defaults to true.
MCP_EMAIL_SMTP_POOL_ENABLEDSet to false to disable SMTP connection pooling. Defaults to true.
MCP_EMAIL_SMTP_POOL_MAX_CONNECTIONSMaximum pooled SMTP connections. Defaults to 1.
MCP_EMAIL_SMTP_POOL_MAX_MESSAGESMaximum messages per pooled SMTP connection. Defaults to 100.
MCP_EMAIL_OAUTH2_PROVIDEROAuth2 provider: google, microsoft, or custom.
MCP_EMAIL_OAUTH2_CLIENT_IDOAuth2 client id.
MCP_EMAIL_OAUTH2_CLIENT_SECRETsecretOAuth2 client secret.
MCP_EMAIL_OAUTH2_REFRESH_TOKENsecretOAuth2 refresh token.
MCP_EMAIL_RATE_LIMITMaximum sends per minute. Defaults to 10.
MCP_EMAIL_READ_ONLYSet to true to omit write tools and mailbox writers.
MCP_EMAIL_SAVE_TO_SENTSet to false to skip the IMAP Sent copy after SMTP. Defaults to true.
MCP_EMAIL_WATCHER_ENABLEDSet to true to start the IMAP IDLE watcher.
MCP_EMAIL_WATCHER_FOLDERSComma-separated folders to watch. Defaults to INBOX.
MCP_EMAIL_WATCHER_IDLE_TIMEOUTIMAP IDLE timeout in seconds. Defaults to 1740.
MCP_EMAIL_HOOK_ON_NEW_EMAILWhat to do on arrival: triage, notify, or none.
MCP_EMAIL_HOOK_PRESETHook preset: inbox-zero, gtd, priority-focus, notification-only, or custom.
MCP_EMAIL_HOOK_AUTO_LABELSet to true to apply labels from hook triage.
MCP_EMAIL_HOOK_AUTO_FLAGSet to true to flag mail from hook triage.
MCP_EMAIL_HOOK_BATCH_DELAYSeconds to batch arrivals before hooks run. Defaults to 5.
MCP_EMAIL_HOOK_CUSTOM_INSTRUCTIONSExtra instructions appended to the hook preset.
MCP_EMAIL_ALERT_DESKTOPSet to true for desktop notifications.
MCP_EMAIL_ALERT_SOUNDSet to true to play a sound with desktop notifications.
MCP_EMAIL_ALERT_URGENCY_THRESHOLDMinimum urgency for an alert: urgent, high, normal, or low.
MCP_EMAIL_ALERT_WEBHOOK_URLsecretHTTP or HTTPS URL that receives alert POSTs.
MCP_EMAIL_ALERT_WEBHOOK_ALLOW_PRIVATESet to true to allow webhook targets on a LAN, VPN, or tailnet.
MCP_EMAIL_HOOK_AUTO_CALENDARSet to true to create calendar events from hook triage.
MCP_EMAIL_HOOK_CALENDAR_NAMECalendar name for automatic events.
MCP_EMAIL_HOOK_CALENDAR_ALARM_MINUTESMinutes before an automatic event to alarm. Defaults to 15.
MCP_EMAIL_HOOK_CALENDAR_CONFIRMSet to false to skip confirming automatic calendar events. Defaults to true.
MCP_EMAIL_SYSTEM_ONE_ENABLEDSet to true to classify residue mail with System One. Off by default.
MCP_EMAIL_HTTP_HOSTHTTP listen address. Defaults to loopback. The host argument wins.
MCP_EMAIL_HTTP_TOKENsecretBearer token. Required when the HTTP listen address is not loopback or MCP_EMAIL_HTTP_ALLOWED_HOSTS lists a non-loopback name.
MCP_EMAIL_HTTP_ALLOWED_HOSTSComma-separated Host names. Required for 0.0.0.0 and ::.
MCP_EMAIL_DEFAULT_ACCOUNTDefault account name or email address when the account parameter is omitted.
MCP_EMAIL_TOOLSETToolset profile to register: full, core, or minimal. Defaults to full.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and rating and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/bitfloo-mailoo.svg)](https://mcp.market/server/bitfloo-mailoo)

How the badge works