Proton Workflow Connector MCP server
io.github.NtrpyDev/proton-workflow-connector·v1.3.0Unofficial self-hosted MCP connector for Proton Mail Bridge and SimpleLogin.
0 stars17 downloads/wk
Reviews
Write oneNobody has reviewed Proton Workflow Connector yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Proton Workflow Connector tools (68, 16 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
apply_labelAdd a Proton label to a message. The message keeps its folder; labels are additive.
archive_messageMove one message to the configured archive folder.
bulk_archiveArchive explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
bulk_copyCopy explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
bulk_mark_readMark explicit message UIDs read, capped by PROTON_MCP_BULK_LIMIT.
bulk_mark_unreadMark explicit message UIDs unread, capped by PROTON_MCP_BULK_LIMIT.
bulk_moveMove explicit message UIDs to another folder, capped by PROTON_MCP_BULK_LIMIT.
bulk_permanently_deletewrite actionMove explicit UIDs through Trash and expunge them after confirmation.
bulk_restoreRestore explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
bulk_starStar explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
bulk_trashTrash explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
bulk_unstarUnstar explicit message UIDs, capped by PROTON_MCP_BULK_LIMIT.
copy_messageCopy one message to another folder.
create_draftwrite actionCreate a draft message in the configured drafts folder.
create_folderwrite actionCreate a folder or label using its full Bridge mailbox name.
delete_draftwrite actionDelete a draft by numeric IMAP UID.
delete_folderwrite actionPermanently delete a folder after explicit confirmation.
download_attachmentReturn one attachment as Base64 with its filename and MIME metadata.
draft_forwardCompose a forward and save it to Drafts for review instead of sending it.
draft_replyCompose a reply and save it to Drafts for review instead of sending it.
empty_spamMove Spam messages through Trash and expunge them after confirmation.
empty_trashPermanently empty the configured Trash folder after confirmation.
folder_statusGet total and unread message counts for one folder.
forward_mailForward one message with optional original and new attachments.
get_headersReturn a message's full headers plus parsed DMARC/DKIM/SPF, Proton encryption/origin/spam markers, and any List-Unsubscribe options. Use it for triage and sender verification.
inspect_attachmentsList attachment metadata for a message without returning attachment bodies.
list_foldersList folders visible through Proton Mail Bridge IMAP.
list_labelsList Proton labels (additive tags under the Labels/ prefix). Starred is managed separately.
mark_not_spamMove one message from Spam to another folder.
mark_readMark one message read.
mark_spamMove one message to the configured Spam folder.
mark_unreadMark one message unread.
move_messageMove one message to another folder.
permanently_delete_messagewrite actionMove one message from a writable folder through Trash, then selectively expunge it.
poll_aliasesReturn SimpleLogin aliases created since the last poll, for building triggers and automations.
poll_mailboxReturn messages that arrived since the last poll for building triggers and automations.
read_mailRead one message by numeric IMAP UID.
read_threadRead messages related to one message by Message-ID references.
remove_labelwrite actionRemove a Proton label from a message without moving or deleting the message.
rename_folderRename one folder or label.
reply_allReply to all original recipients except configured sender addresses.
reply_mailReply to the sender while preserving standard email thread headers.
restore_messageRestore one message from trash or another folder.
search_all_mailSearch all selectable folders and deduplicate results by Message-ID.
search_mailSearch mail by IMAP criteria and return message summaries with numeric UIDs.
send_draftwrite actionSend an existing draft and remove it after SMTP accepts the message.
send_mailwrite actionSend mail through Proton Mail Bridge SMTP.
server_statusCheck configured service availability without returning credentials.
simplelogin_create_alias_contactwrite actionCreate a contact for a SimpleLogin alias.
simplelogin_create_custom_aliaswrite actionCreate a custom SimpleLogin alias.
simplelogin_create_random_aliaswrite actionCreate a random SimpleLogin alias.
simplelogin_delete_aliaswrite actionDelete a SimpleLogin alias.
simplelogin_get_aliasGet one SimpleLogin alias.
simplelogin_get_alias_optionsList available custom-alias suffixes, including the signed_suffix that simplelogin_create_custom_alias requires. Suffix signatures expire after a few minutes, so call this immediately before creating the alias.
simplelogin_list_alias_contactsList contacts for a SimpleLogin alias.
simplelogin_list_aliasesList SimpleLogin aliases.
simplelogin_list_mailboxesList SimpleLogin mailboxes.
simplelogin_statsGet SimpleLogin alias and mail activity stats.
simplelogin_toggle_aliasToggle a SimpleLogin alias enabled or disabled.
simplelogin_update_aliaswrite actionUpdate SimpleLogin alias metadata.
simplelogin_user_infoGet SimpleLogin account information.
star_messageStar one message.
subscribe_folderSubscribe to one IMAP folder.
trash_messageMove one message to the configured trash folder.
unstar_messagewrite actionRemove the star from one message.
unsubscribeUnsubscribe from a mailing list via its List-Unsubscribe header (one-click HTTPS or mailto). Makes an outbound request or email to an address the sender controls, so use it deliberately.
unsubscribe_folderUnsubscribe from one IMAP folder.
update_draftwrite actionReplace a draft by creating the new draft before deleting the old UID.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan20 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 74 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
How Proton Workflow Connector compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 48,255 servers
- Tools
- 68
- the typical server has 7
- Tools that change things
- 24%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 17
- more than 5% of 12,191 servers with a package
What its tools let an agent do: 39 read · 2 create · 15 change · 7 delete · 4 send or post · 1 run or deploy
Install Proton Workflow Connector in Claude Code, Cursor or VS Code
claude mcp add proton-workflow-connector -- uvx proton-workflow-connector
What the publisher says
From the Proton Workflow Connector repository's README, as published. We do not edit it. Read it on GitHub
Proton Workflow Connector
Proton Workflow Connector (PWC) is a self-hosted MCP connector for reading, sending, organizing, and automating Proton Mail through Proton Mail Bridge. It works with any MCP client or local agent runtime that can launch a stdio server or call a Streamable HTTP MCP endpoint. SimpleLogin support is optional.
This is an unofficial project. It is not affiliated with, endorsed by, or sponsored by Proton AG. The connector uses Bridge-generated IMAP/SMTP credentials. It does not accept Proton account passwords or store Proton login sessions.
Quick start · Example workflows · Capabilities · Automations · Security · Documentation · Buy Me a Coffee
Why use it?
Use one local server for the mail work agents usually have to piece together:
- Search, read, send, reply, forward, draft, label, archive, and download attachments through 53 Proton Mail tools.
- Require confirmation for destructive tools, preview sends and destructive operations with dry_run, sanitize outbound HTML by default, bound bulk operations, and allow only configured sender addresses.
- React to new mail or SimpleLogin aliases through MCP polling or a background watcher that can call a webhook, append JSONL, or run a command.
- Add 13 SimpleLogin tools when you want alias, contact, and mailbox management.
- Connect over stdio, localhost Streamable HTTP, or OAuth-protected hosted HTTP.
The server exposes 68 tools in total. See the complete tool reference.
How it works
PWC is an MCP server. Your client starts it over stdio or connects to it over Streamable HTTP.
The connector talks to Proton Mail Bridge over local IMAP/SMTP. Bridge must be installed, signed in, and running on the same machine as the connector. One connector process serves one Bridge account.
SimpleLogin is optional. If SIMPLELOGINAPIKEY is set, PWC adds alias, contact, mailbox, and new-alias polling tools. If it is unset, the Proton Mail tools still work.
For automation, run proton-workflow-watch or call the polling tools from your MCP client. Watcher output can go to a webhook, a JSONL file, or a command.
Quick start
Prerequisites
- Python 3.11 or newer
- Proton Mail Bridge, signed in and running
- The IMAP/SMTP host, ports, username, and generated password shown by Bridge
- A SimpleLogin API key only if you want the optional SimpleLogin tools
1. Install
git clone https://github.com/NtrpyDev/proton-workflow-connector.git
cd proton-workflow-connector
python -m venv .venv
source .venv/bin/activate
python -m pip install .On Windows PowerShell, activate the environment with .venv\Scripts\Activate.ps1.
2. Configure Bridge credentials
Keep the environment file outside the repository:
mkdir -p ~/.config/proton-workflow-connector
cp .env.example ~/.config/proton-workflow-connector/env
chmod 600 ~/.config/proton-workflow-connector/envEdit the copied file with the connection details shown in Proton Mail Bridge. Set PROTONBRIDGEEMAIL to the default sender and list every permitted sender address in PROTONBRIDGESENDER_ADDRESSES.
3. Run the connector
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Proton Workflow Connector: common questions
- Is Proton Workflow Connector MCP server safe?
- Mostly: it is graded B (75/100). Read the Proton Workflow Connector safety report
- How do I install Proton Workflow Connector?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Proton Workflow Connector need an API key?
- Yes. The registry entry asks for
PROTON_BRIDGE_PASSWORD,SIMPLELOGIN_API_KEY. - Is Proton Workflow Connector maintained?
- The last commit was 113 days ago (2026-07-14). The latest release is v1.3.0.
- How does Proton Workflow Connector compare with other MCP servers?
- safety score 75/100 (higher than 45% of 48,255 servers); tools 68 (the typical server has 7); tools that change things 24% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.