Agent Mail Gateway MCP server

Agent Mail Gateway

Give every AI agent its own email mailbox — without giving it the keys to that mailbox.

Agent Mail Gateway is a small self-hosted Docker service that sits between your agents and ordinary IMAP/SMTP mailboxes (Plesk, IONOS, Outlook, your own server — any provider). Each agent gets one API key bound to exactly one mailbox. Through the gateway it can read mail, send mail with attachments, and send, update or cancel calendar invitations. You decide who each agent may receive mail from and who it may write to; everything else is filtered out.

Mail bodies are delivered to the agent as Markdown (converted from HTML) and the agent writes Markdown that is sent as HTML — far fewer tokens than raw HTML email.

In short: a self-hosted email MCP server and REST API for AI agents — IMAP/SMTP mailbox access with sender/recipient allow lists, HTML-to-Markdown, attachments and calendar invites, packaged as one Docker container.

Typical use cases

Outlook, Postfix/Dovecot, …) without exposing the mailbox passwords to them.

• An assistant agent that sends you daily reports, summaries or alerts by email.
• Agents that receive tasks or documents by email and answer them in the same thread.
• Agents that schedule, move and cancel meetings with you via calendar invitations.
• Giving several agents separate mailboxes on your existing mail server (Plesk, IONOS,

injection by email and against agents mailing the wrong people.

• Locking an agent down so it can only talk to approved people — useful against prompt

Works with any MCP client (for example Hermes Agent, Cursor, VS Code, n8n, LangChain/LangGraph MCP adapters) and with anything that can make HTTP requests.

Features

Non-allowed mail is moved to Trash (default) or left untouched.

• N mailboxes, one key each — a key can never reach another mailbox.
• Allow lists per mailbox for receiving and sending (name@domain or *@domain).
• Filtered mail is invisible — not listed, not readable, not even by guessing an id.

• Spoofing protection — senders must pass SPF/DKIM/DMARC as reported by your mail server.
• HTML ⇄ Markdown conversion in both directions.
• Attachments in and out.
• Calendar invites (iCalendar) that update or cancel cleanly in Outlook, Gmail and Apple Calendar.
• REST API with OpenAPI docs at /docs, and an MCP server at /mcp with the same tools.
• Webhooks (HMAC-signed) when an allowed message arrives; new mail is detected instantly via IMAP IDLE.
• Send rate limit per mailbox and an audit log of every send, rejection and deletion.
• Works with any IMAP/SMTP server: TLS on 993/465 or STARTTLS on 143/587.

How it works

Agent ──REST/MCP + API key──▶ ┌──────────────────────────────────────┐
                               │ Auth      key → exactly one mailbox  │
 Agent ◀──signed webhook────── │ Policy    sender/recipient checks    │
                               │ Converter HTML ⇄ Markdown            │
                               │ Calendar  build/update/cancel .ics   │
                               │ Mailbox   IMAP read + IDLE watcher   │──IMAP──▶ mail server
                               │ Sender    SMTP + copy to Sent        │──SMTP──▶
                               │ Store     SQLite (small state)       │
                               └──────────────────────────────────────┘
                                 config.yaml + .env (read-only)

The gateway stores no mail content; mail stays on your mail server.

Quick start

Shortened. The full README is on GitHub.