MCP.Market

BumbleBox MCP server

online · 100% uptime
by bumblebox.ai·ai.bumblebox/mail·v2.1.0

Search and triage all your mailboxes; draft replies and campaigns; send only as you allow.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed BumbleBox yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

BumbleBox tools (17, 7 write)

write = sends, deletes, buys or posts
  • archive_emailwrite actionFree

    Moves one inbox email to its mailbox's archive folder, on the mail server too. Undone by restore_to_inbox. Nothing is deleted.

  • create_campaign_draftwrite actionFree

    Writes one draft inside an existing campaign, to one recipient (added to the campaign list if new), from the campaign's sender. Nothing is sent: the draft waits for the user to validate the campaign send in BumbleBox.

  • draft_replyFree

    Saves the text as the reply draft of a received email, from the mailbox that received it. Nothing is sent: the draft waits in BumbleBox (Pilotage › prepared replies) until the user reviews it and clicks Send. Saving again replaces the previous draft of the same email.

  • get_emailwrite actionFree

    One email in full: sender, recipients, date, subject, plain-text body, attachment names, folder and BumbleBox classification.

  • list_calendar_eventsFree

    Events of the connected Google calendars between two dates (default: the next 7 days, at most 62 days).

  • list_campaign_draftsFree

    The drafts of one campaign that wait for the user to validate them in BumbleBox (recipient, subject, plain-text body, sender), newest first, with the true totals.

  • list_foldersFree

    The folders of each connected mailbox, as last synced. Trash, spam, sent and drafts are left out.

  • list_missionsFree

    The user's prospection campaigns (missions), most recently active first, with the number of drafts waiting, emails sent and prospects who replied.

  • list_replies_to_validateFree

    Replies received on campaigns that still need the user: prepared reply drafts waiting for validation, and replies with no answer yet (with the stored AI triage: kind, summary, whether a human is needed).

  • list_to_answerFree

    Received emails BumbleBox classified as needing a reply and still in the inbox, newest first.

  • move_emailwrite actionFree

    Moves one inbox email to an existing folder of the same mailbox (see list_folders), on the mail server too. No folder is created. Undone by restore_to_inbox.

  • restore_to_inboxFree

    Moves an archived, filed or trashed email back to the inbox, on the mail server too.

  • search_contactsFree

    Contacts BumbleBox knows from the mail history (name, address, organization domain, exchange counts, last exchanges, VIP mark, note), matched on name, address or domain.

  • search_emailsFree

    Searches every connected mailbox (sender, subject, preview), newest first. Operators: from:, subject:, before:YYYY-MM-DD, after:YYYY-MM-DD; the rest is free text. Deleted emails are not returned.

  • send_replywrite actionFree

    Replies to the sender of one received email, and only to them (no Cc, no Bcc, no attachment), from the mailbox that received it. What happens next is the level the user set in BumbleBox for this kind of reply: a draft, a reply waiting for one tap (the default), or a reply that leaves after a delay the user can cancel. Anything that commits the user (amounts, bank details, acceptance, contracts, dates, links) always waits for the user. The result says which one applied.

  • trash_emailwrite actionFree

    Moves one inbox email to its mailbox's trash when BumbleBox certifies it as noise (spam, newsletter, promotion, with a unanimous safety vote and no known contact or action word). Any other email is not moved: it becomes a proposal the user confirms in one tap in BumbleBox. Never a permanent deletion; undone by restore_to_inbox.

  • update_campaign_draftwrite actionFree

    Changes the subject, body or recipient of a draft that is still a draft. Nothing is sent, and a draft the user already validated cannot be changed.

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1711ms20/20
  • Tool poisoning17 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 7 write-action tools with no auth3/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How BumbleBox compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 70% of 3,470 Web search servers
Tools
17
the typical Web search server has 5
Tools that change things
41%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Web search server answers 100%
Response time
532 ms
faster than 27% of 2,238 Web search servers

What its tools let an agent do: 10 read · 1 create · 3 change · 2 delete · 1 send or post

Install BumbleBox in Claude Code, Cursor or VS Code

claude mcp add --transport http mail https://api.bumblebox.ai/api/mcp
Add to Cursor

What the publisher says

From the BumbleBox repository's README, as published. We do not edit it. Read it on GitHub

BumbleBox MCP server

Email intelligence for people running several businesses, inside your AI assistant. BumbleBox triages every connected mailbox (Gmail, Outlook, any IMAP); this remote MCP server lets Claude, ChatGPT, Cursor, VS Code or any MCP client work with it.

bumblebox.ai and see exactly which permissions the assistant gets.

  • Endpoint: https://api.bumblebox.ai/api/mcp (streamable HTTP)
  • Auth: OAuth 2.1 with dynamic client registration and PKCE. You approve once on
  • Plans: Pro or Business (pricing).
  • Setup for every client: https://bumblebox.ai/integrations

Install

Claude Code (plugin, with the /bumblebox:to-answer and /bumblebox:tidy commands):

/plugin marketplace add BumbleBox/bumblebox-mcp
/plugin install bumblebox@bumblebox

Or just the server: claude mcp add --transport http bumblebox https://api.bumblebox.ai/api/mcp

Claude (claude.ai, desktop): Settings → Connectors → Add custom connector → https://api.bumblebox.ai/api/mcp.

ChatGPT: Settings → Apps & Connectors → create a connector (developer mode), paste the server URL, authentication OAuth.

Cursor (~/.cursor/mcp.json):

{ "mcpServers": { "bumblebox": { "url": "https://api.bumblebox.ai/api/mcp" } } }

VS Code (.vscode/mcp.json):

{ "servers": { "bumblebox": { "type": "http", "url": "https://api.bumblebox.ai/api/mcp" } } }

Tools

What it never does

BumbleBox sends nothing without your click — Send, Schedule, or a standing permission you set yourself in BumbleBox for a precise scope (existing participants of a thread you opened, a message with no commitment), capped, logged and cancellable. Anything else waits for your validation, and an assistant can never change that permission.

There is no permanent deletion: trashemail moves only certified noise to the Trash and turns anything else into a one-tap proposal in BumbleBox; everything is undone with restoreto_inbox.

Links

  • Privacy policy: https://bumblebox.ai/privacy
  • Terms: https://bumblebox.ai/terms
  • Support: contact@bumblebox.ai
  • llms.txt: https://bumblebox.ai/llms.txt

This repository holds the public metadata (registry server.json, Claude Code plugin). The server itself is operated by BumbleBox. Licence: MIT.

Nothing above is checked by us. What we check is on the safety report.

BumbleBox: common questions

Is BumbleBox MCP server safe?
Mostly: it is graded B (83/100). Read the BumbleBox safety report
How do I install BumbleBox?
It runs remotely at api.bumblebox.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does BumbleBox need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is BumbleBox maintained?
The last commit was 13 days ago (2026-10-22). The latest release is v2.1.0.
Is BumbleBox up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of BumbleBox?
Servers from other publishers that do the same job: Apple Mail MCP server, Apple Mail MCP server and OfficeIMO Document Tools MCP server.
How does BumbleBox compare with other Web search MCP servers?
safety score 83/100 (higher than 70% of 3,470 Web search servers); tools 17 (the typical Web search server has 5); tools that change things 41% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to BumbleBox

Same job from other publishers: the closest match first, then the best rated.

  • Apple Mail
    Read, search, compose, and send emails via Apple Mail on macOS.
    A
  • Apple Mail MCP
    Apple Mail MCP server with full-coverage FTS5 body search, reliable on large mailboxes.
    A
  • OfficeIMO Document Tools
    Inspect, search, fetch, and convert local documents and mail stores with bounded access.
    A