Protonlite MCP server
io.github.Maytrella007/protonlite·v0.1.3Python Proton Mail, Calendar, Contacts and Drive client with an MCP server. Free plan, no Bridge.
0 stars382 downloads/wk
Reviews
Write oneNobody has reviewed Protonlite yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Protonlite tools (18, 7 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
calendarShow the Proton Calendar agenda for the next N days.
contactsList Proton contacts (name and email), optionally filtered by a query.
drive_downloadDownload and decrypt a Proton Drive file to a local directory.
drive_listList a Proton Drive folder by path (folders first); empty path is the root.
drive_mkdirwrite actionCreate a new Proton Drive folder (empty parent_folder is the root).
drive_moveMove a Proton Drive file or folder into another folder (empty dest_folder is the root).
drive_renameRename a Proton Drive file or folder in place.
drive_share_linkwrite actionCreate a public share link for a Proton Drive file or folder. The returned URL is the whole secret (its fragment holds the password) and lets anyone open the file, so only share it when the person asked to make this file public.
drive_trashMove a Proton Drive file or folder to the trash (recoverable in Proton Drive).
drive_unshare_linkRevoke a Proton Drive file or folder's public share link.
drive_uploadwrite actionEncrypt and upload a local file into a Proton Drive folder (empty dest_folder is the root).
email_allowwrite actionSet the recipient allowlist for send_message. Pass specific addresses or globs (e.g. *@company.com) to restrict sending to them, ["*"] to allow anyone, or [] to block all sending. A hard ceiling from PROTON_ALLOWED_RECIPIENTS still applies on top and cannot be loosened here.
email_policy_statuswrite actionShow the send policy: which recipients the allowlist permits (or that it is open), any hard ceiling set by the PROTON_ALLOWED_RECIPIENTS env var, and whether a send needs confirmation.
list_messagesList messages in a Proton Mail folder (inbox, sent, archive, spam, trash, starred...).
read_messageRead one Proton Mail message by id, decrypted, with HTML flattened to prose.
search_messagesFind messages whose sender or subject contains the query.
send_messagewrite actionSend an email. Plain text by default; set html=true to send the body as HTML. attachments is a list of local file paths to attach, e.g. a file you just fetched with drive_download. A send is refused if a recipient is not on the allowlist (see email_policy_status / email_allow). When the confirm-before-sending rule is on, the first call sends nothing and returns a confirmation request; call again w
set_send_confirmationwrite actionTurn the 'confirm before sending' rule on or off. When on, send_message sends nothing until it is called again with confirm=true, so a person can approve first. If PROTON_REQUIRE_SEND_CONFIRMATION is set, the rule is forced on and cannot be turned off here.
Public scan report
scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it
- Code scan21 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Protonlite compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 1,299 Productivity servers
- Tools
- 18
- the typical Productivity server has 7
- Tools that change things
- 39%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 382
- more than 80% of 427 Productivity servers with a package
What its tools let an agent do: 11 read · 4 change · 3 send or post
Install Protonlite in Claude Code, Cursor or VS Code
claude mcp add protonlite -- uvx protonlite
What the publisher says
From the Protonlite repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.Maytrella007/protonlite -->
protonlite
A small, dependency-light Python client and API for Proton Mail (ProtonMail) -- Mail, Calendar, Contacts and Drive, with no Proton Mail Bridge and no paid plan. Ships an optional MCP server so an agent (Claude Code, Cursor) can use your mailbox.
Proton has no IMAP or SMTP. The official way in is Proton Mail Bridge, which needs a paid plan. protonlite talks to Proton's web API directly, so it works on a free account, and the end-to-end crypto is ported from Proton's own MIT-licensed Go libraries (go-srp, go-proton-api). It stays MIT-licensed and dependency-light: just OpenPGP (PGPy13, a maintained fork of PGPy), bcrypt and requests. No CAPTCHA solver, no computer-vision stack -- a person completes Proton's verification page the same way Proton's own apps do.
Unofficial. This project is not affiliated with, endorsed by, or supported by Proton AG.
"Proton", "Proton Mail", "Proton Calendar" and "Proton Drive" are trademarks of Proton AG.
It talks to a private, undocumented API that can change at any time, and using it may be
subject to Proton's terms of service. Use it at your own risk, on accounts you own.
What it does
search, send (plain or HTML, attachments, replies in-thread, scheduled), save drafts, mark read/unread, trash/delete, labels and folders, empty trash, storage usage.
- Mail -- read the inbox and any folder, decrypt messages (HTML flattened to text),
share links.
- Calendar -- read the agenda, create / edit / cancel events, send invitations, RSVP.
- Contacts -- read, create, edit and delete contacts (signed/encrypted vCards).
- Drive -- list, download, upload (encrypted), move, rename, trash, and create public
All of it is end-to-end: keys are unlocked locally with the account password and messages, events, contacts and files are decrypted on your machine.
Install
pip install protonliteRequires Python 3.10+.
Quickstart
import os
import datetime as dt
from protonlite import ProtonMail
# --- Signing in -------------------------------------------------------------
# The recommended way is the CLI `protonlite login`, which reads the password
# with getpass so it never lives in a script. For automation, read it from the
# environment rather than hard-coding it. Proton usually asks a human to
# complete a verification page; login raises HumanVerificationRequired with
# that URL -- open it, then call again passing verification_token (see
# "Signing in" below). Sign in each account once; every login saves its own
# session file.
ProtonMail.login(
"you@proton.me",
password=os.environ["PROTON_PASSWORD"].encode(),
session_path="you@proton.me.json",
)
# --- More than one account --------------------------------------------------
# Reopen each saved session independently -- no password needed. The two
# clients are fully independent mailboxes.
client = ProtonMail.from_session(session_path="you@proton.me.json") # personal
client1 = ProtonMail.from_session(session_path="work@proton.me.json") # work
# (after a CLI `protonlite login`, ProtonMail.for_account("work") finds it by name)
print(cliShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Protonlite: common questions
- Is Protonlite MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Protonlite safety report
- How do I install Protonlite?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Protonlite need an API key?
- No secret keys are declared. It reads 1 setting from the environment.
- Is Protonlite maintained?
- The last commit was 12 days ago (2026-10-22). The latest release is v0.1.3.
- What can I use instead of Protonlite?
- Servers from other publishers that do the same job: AIquila — Nextcloud MCP Server, iCloud MCP server and Mu MCP server. Compare all Protonlite alternatives.
- How does Protonlite compare with other Productivity MCP servers?
- safety score 92/100 (higher than 90% of 1,299 Productivity servers); tools 18 (the typical Productivity server has 7); tools that change things 39% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Protonlite
Same job from other publishers: the closest match first, then the best rated.
- AIquila — Nextcloud MCP ServerNextcloud MCP server — 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notesnot reviewedEstablishedC
- iCloud MCPApple Mail, Calendar, Contacts, Reminders, Notes, Messages and Safari via AppleScript or iCloudnot reviewedEstablishedB
MuNews, web search, mail, markets, weather, places, files, calendar, contacts. 67 tools, one endpoint.not reviewedEstablishedB- Apple Tools (Unified)Unified Apple ecosystem MCP server for macOS: Mail, Calendar, Notes, Files, Messages, and more.not reviewedEstablishedA
- Google Drive MCPSecure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.not reviewedGrowingB