MCP.Market

Apple Mail MCP server

by jakobfigur·io.github.jakobfigur/apple-mail-mcp·v0.6.2·1 stars
No reviews yet

Privacy-first local MCP for Apple Mail on macOS: inbox context, drafts, approvals, and follow-ups.

A89/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A89/100

full report

Adoption
Growing

1 stars49 downloads/wk

Reviews

Write one

Nobody has reviewed Apple Mail MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Apple Mail MCP tools (26, 9 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • approve_queued_emailwrite action

    Turn one pending approval-queue item into a visible draft or send it. Only call after the user explicitly approved this exact item and delivery mode.

  • create_draftwrite action

    Create a visible unsent draft in Apple Mail. Use this before sending whenever the user should review the message.

  • create_reply_draftwrite action

    Open a visible reply draft for an existing message. The original message controls the recipient and subject. This does not send anything.

  • discard_queued_emailwrite action

    Discard one pending approval-queue item. It will not affect Apple Mail. Only call after explicit user approval.

  • get_audit_log

    Read recent local audit metadata for write actions. Email bodies are never stored in this log.

  • get_contact_brief

    Build a local contact brief from saved relationship context and recent inbox summaries. Read-only; message bodies are excluded.

  • get_contact_context

    Read the local relationship context for one email address. Read-only.

  • get_daily_briefingwrite action

    Create a read-only daily briefing from one inbox, the local approval queue, and saved follow-up dates. It never drafts, sends, or changes email.

  • get_message

    Read one message body by its id. Use after list_messages or search_messages. Read-only.

  • get_send_policywrite action

    Show the active local sending safeguards without exposing credentials. Read-only.

  • get_work_mode

    Show the active local AI-mail work mode and its allowed MCP actions. Read-only.

  • list_accounts

    List Apple Mail accounts and their configured sender addresses. Read-only.

  • list_approval_queue

    List proposed emails in the local approval inbox. Read-only.

  • list_follow_up_radar

    List local contact records with a follow-up date due now or within a chosen horizon. Read-only; it never sends anything.

  • list_mailboxes

    List the top-level mailboxes in one Apple Mail account. Read-only.

  • list_messages

    List message summaries from an Apple Mail mailbox. Read-only; bodies are not included.

  • move_message

    Move a message to another mailbox in the same account. Only call after the user explicitly approved this exact action.

  • preview_sendwrite action

    Validate a proposed email against the active local send policy without creating or sending anything. Read-only.

  • queue_email_for_approvalwrite action

    Save a proposed email in the local approval inbox. It does not create a Mail draft or send anything.

  • save_contact_context

    Save local relationship context for one contact. This does not modify Apple Mail or contact the person.

  • save_thread_summary

    Save a local, user-approved summary of a selected contact thread, including the exact source message ids used. It does not modify Apple Mail.

  • search_messages

    Search recent messages by subject or sender in one mailbox. Read-only; bodies are not searched.

  • send_emailwrite action

    Send an email using Apple Mail. Only call after the user explicitly approved this exact recipient, subject, and body.

  • set_message_flag_status

    Flag or unflag a message. Only call after the user explicitly approved this exact action.

  • set_message_read_status

    Mark a message read or unread. Only call after the user explicitly approved this exact action.

  • set_work_mode

    Set the local AI-mail work mode. The mode controls whether this MCP may queue, draft, or send. This does not change Apple Mail.

Public scan report

scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Apple Mail MCP compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
89/100
higher than 83% of 916 Email servers
Tools
26
the typical Email server has 7
Tools that change things
35%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 493 Email servers
Downloads a week
49
more than 36% of 235 Email servers with a package

What its tools let an agent do: 11 read · 4 create · 10 change · 1 send or post

Install Apple Mail MCP in Claude Code, Cursor or VS Code

Runs npx -y @jakobf1/apple-mail-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add apple-mail-mcp -- npx -y @jakobf1/apple-mail-mcp
Add to Cursor

What the publisher says

From the Apple Mail MCP repository's README, as published. We do not edit it. Read it on GitHub

Apple Mail MCP

A local, stdio-based Model Context Protocol server for Apple Mail on macOS.

It talks only to the Apple Mail app already configured on the user's Mac. It does not need IMAP/SMTP passwords or open a network port.

Safety model

  • Mailbox and message tools are read-only by default.
  • create_draft opens an unsent, visible draft in Apple Mail.
  • sendemail requires userapproved: true. MCP clients should call it only after the user has approved the exact message.
  • Message changes such as marking, flagging, and moving also require user_approved: true.
  • Dynamic content is passed to osascript as arguments, not interpolated into AppleScript source.
  • Every write action has a local, metadata-only JSONL audit entry. Bodies and credentials are never written to that log.
  • The approval inbox and relationship context are stored only in the local JSON data store described below.

The MCP server itself is local. However, an MCP client may send tool results to an AI model or another service. Only connect clients and models you trust with mail content.

Requirements

  • macOS with Apple Mail configured
  • Node.js 20+
  • Permission for the host application (for example Codex or Terminal) to control Mail under System Settings → Privacy & Security → Automation

Install

npm (recommended)

npm install -g @jakobf1/apple-mail-mcp

Then configure your MCP client with the installed command:

{
  "mcpServers": {
    "apple-mail": {
      "command": "apple-mail-mcp"
    }
  }
}

From source

git clone https://github.com/YOUR_ACCOUNT/apple-mail-mcp.git
cd apple-mail-mcp
npm install
npm run build

Add to an MCP client

If you installed from source rather than npm, use the compiled server over stdio:

{
  "mcpServers": {
    "apple-mail": {
      "command": "node",
      "args": ["/absolute/path/to/apple-mail-mcp/dist/index.js"]
    }
  }
}

Restart the MCP client after saving its configuration. The first call will trigger the normal macOS automation permission prompt.

Optional sender policy

To allow sending only from specific configured Apple Mail addresses, configure a comma-separated allowlist when launching the server:

{
  "env": {
    "APPLE_MAIL_MCP_ALLOWED_SENDERS": "hello@example.com"
  }
}

Write-action audit metadata is stored locally at ~/.apple-mail-mcp/audit.jsonl by default. Set APPLEMAILMCPAUDITLOG to use another local path.

AI-first local workspace

The approval inbox and relationship context share a local JSON store at ~/.apple-mail-mcp/data.json by default. It contains queued draft bodies and the contact notes you intentionally save, so treat it as private mail data. Set APPLEMAILMCPDATASTORE to use another local path.

APPLEMAILMCPDRYRUN=true validates sends but prevents delivery. You can also enforce recipient restrictions with APPLEMAILMCPALLOWEDRECIPIENTS, APPLEMAILMCPALLOWEDRECIPIENTDOMAINS, and a local time window such as APPLEMAILMCPSENDING_WINDOW=09:00-18:00.

Tools

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Apple Mail MCP: common questions

Is Apple Mail MCP server safe?
Yes, by our scan: it is graded A (89/100). Read the Apple Mail MCP safety report
How do I install Apple Mail MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Apple Mail MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Apple Mail MCP maintained?
The last commit was 29 days ago (2026-10-06). The latest release is v0.6.2.
What can I use instead of Apple Mail MCP?
Servers from other publishers that do the same job: Inbox Zero MCP server, Atomic Mail MCP server and Outlook MCP server. Compare all Apple Mail MCP alternatives.
How does Apple Mail MCP compare with other Email MCP servers?
safety score 89/100 (higher than 83% of 916 Email servers); tools 26 (the typical Email server has 7); tools that change things 35% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Apple Mail MCP

Same job from other publishers: the closest match first, then the best rated.

All Apple Mail MCP alternatives →
  • Inbox Zero
    Search Gmail and Outlook, save drafts, manage email rules, and view email stats.
    A
  • Atomic Mail
    Programmable email inbox for AI agents — JMAP, PoW auth, stdio MCP server.
    A
  • Outlook MCP
    Microsoft Outlook personal accounts: mail, rules, calendar, contacts, to-do, drafts (77 tools).
    A
  • Agenticmail
    Real email and SMS for AI agents — send mail, receive verification codes, drive a real inbox.
    B
  • smbCloud Mail & Auth
    Email infrastructure and authentication for developers: domains, inbox routes, auth apps, deploys.
    A