SMTP MCP server

by ni-c·io.github.ni-c/smtp-mcp·v0.2.0

No reviews yet

MCP server that sends mail over SMTP, gated behind an allowlist and a human confirmation

B83/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B83/100

full report

Adoption

Growing

0 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed SMTP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SMTP tools (7, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

forward_mail
Forwards a message to new recipients. Put the original text in
get_server_info
Reports the SMTP endpoint, the fixed sender address, who this server
preview_mail
Builds exactly the message a send would build and returns its
reply_mailwrite action
Sends a reply that mail clients will thread under the original. Pass
send_mailwrite action
Sends a new message from the configured sender. Asks the user to
test_connection
Opens a connection to the SMTP server, negotiates TLS and
validate_recipients
Says which of the given addresses this server is allowed to write to,

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan45 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 4 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

Runs npx -y @ni-c/smtp-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add smtp-mcp -- npx -y @ni-c/smtp-mcp

Add to Cursor

SMTP: common questions

Is SMTP MCP server safe?: Mostly: it is graded B (83/100). Read the SMTP safety report
How do I install SMTP?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does SMTP need an API key?: Yes. The registry entry asks for SMTP_PASSWORD.
Is SMTP maintained?: The last commit was 4 days ago (2026-09-16). The latest release is v0.2.0.
What can I use instead of SMTP?: Servers from other publishers that do the same job: Shaka MCP server, Fluxmail MCP server and Agent Email MCP server. Compare all SMTP alternatives.

Alternatives to SMTP

Same job from other publishers: the closest match first, then the best rated.

All SMTP alternatives →

Shaka
Company email for Rwanda. Read and send mail from a Shaka mailbox over OAuth or an API key.
not reviewed
New
B
Fluxmail
Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.
not reviewed
Growing
B
Agent Email
Local email connectivity for AI agents — read, draft, send, and organize Outlook mail via MCP
not reviewed
Growing
A
MCP
Unlimited agent mailboxes — create identities, read/wait for mail, extract OTPs, send email.
not reviewed
Growing
B
Lettio MCP
Private, EU-hosted email for AI agents over JMAP: read, search, reply, organize, send.
not reviewed
Growing
A

SMTP vs Shaka SMTP vs Fluxmail SMTP vs Agent Email

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 83/100
Stars: 0
Downloads/wk: 44
Price: Free
Licence: MIT
Transport: Local · mixed
Version: 0.2.0
Category: Email
Last release: 2026-09-16

Credentials it needs

SMTP_HOSTHostname of the SMTP server, e.g. smtp.example.net.
SMTP_PORTPort. Defaults to 587 for starttls, 465 for implicit, 25 for none.
SMTP_TLSstarttls (default), implicit or none. STARTTLS is required, never opportunistic.
SMTP_USERUsername for SMTP authentication.
SMTP_PASSWORDsecretPassword or app-specific password for SMTP authentication.
SMTP_FROMThe only sender this server will use, e.g. "Name <person@example.net>". There is no from parameter.
SMTP_REPLY_TOReply-To header on every message, e.g. "Team <team@example.net>". Unset means no Reply-To header and replies go to SMTP_FROM. There is no reply_to parameter.
SMTP_ALLOW_SENDSet to "true" to register the sending tools. Defaults to false: the server cannot send until it is set.
SMTP_ALLOWED_RECIPIENTSComma-separated addresses and @domains this server may write to. Required with SMTP_ALLOW_SEND=true; "*" allows any.
SMTP_MAX_RECIPIENTSMaximum distinct recipients across To, Cc and Bcc in one message. Default 10.
SMTP_MAX_SENDS_PER_HOURSliding hourly cap on messages sent. Default 20.
SMTP_MAX_MESSAGE_BYTESMaximum size of the composed message. Default 10485760.
SMTP_MAX_ATTACHMENT_BYTESMaximum size of a single attachment. Default 5242880.
SMTP_ATTACHMENT_DIRDirectory attachments are read from. Unset means attachments are unavailable.
SMTP_ATTACHMENT_TYPESComma-separated content types that may be attached. Defaults to a document and image allowlist.
SMTP_SIGNATUREText appended below the standard signature delimiter of every message.
SMTP_AUDIT_LOGFile the audit lines are appended to, in addition to stderr.
SMTP_ALLOW_TOOLSComma-separated tool names, a prefix with one trailing *, or "essential" for the curated preset.
SMTP_DENY_TOOLSComma-separated tool names or prefixes to remove, applied after SMTP_ALLOW_TOOLS.
SMTP_INSECURE_TLSSet to "true" to accept self-signed certificates. Prefer a proper internal CA.
SMTP_HOSTHostname of the SMTP server, e.g. smtp.example.net.
SMTP_PORTPort. Defaults to 587 for starttls, 465 for implicit, 25 for none.
SMTP_TLSstarttls (default), implicit or none. STARTTLS is required, never opportunistic.
SMTP_USERUsername for SMTP authentication.
SMTP_PASSWORDsecretPassword or app-specific password for SMTP authentication.
SMTP_FROMThe only sender this server will use, e.g. "Name <person@example.net>". There is no from parameter.
SMTP_REPLY_TOReply-To header on every message, e.g. "Team <team@example.net>". Unset means no Reply-To header and replies go to SMTP_FROM. There is no reply_to parameter.
SMTP_ALLOW_SENDSet to "true" to register the sending tools. Defaults to false: the server cannot send until it is set.
SMTP_ALLOWED_RECIPIENTSComma-separated addresses and @domains this server may write to. Required with SMTP_ALLOW_SEND=true; "*" allows any.
SMTP_MAX_RECIPIENTSMaximum distinct recipients across To, Cc and Bcc in one message. Default 10.
SMTP_MAX_SENDS_PER_HOURSliding hourly cap on messages sent. Default 20.
SMTP_MAX_MESSAGE_BYTESMaximum size of the composed message. Default 10485760.
SMTP_MAX_ATTACHMENT_BYTESMaximum size of a single attachment. Default 5242880.
SMTP_ATTACHMENT_DIRDirectory attachments are read from. Unset means attachments are unavailable.
SMTP_ATTACHMENT_TYPESComma-separated content types that may be attached. Defaults to a document and image allowlist.
SMTP_SIGNATUREText appended below the standard signature delimiter of every message.
SMTP_AUDIT_LOGFile the audit lines are appended to, in addition to stderr.
SMTP_ALLOW_TOOLSComma-separated tool names, a prefix with one trailing *, or "essential" for the curated preset.
SMTP_DENY_TOOLSComma-separated tool names or prefixes to remove, applied after SMTP_ALLOW_TOOLS.
SMTP_INSECURE_TLSSet to "true" to accept self-signed certificates. Prefer a proper internal CA.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ni-c-smtp-mcp.svg)](https://mcp.market/server/ni-c-smtp-mcp)

How the badge works