MCP.Market

Radmail MCP server

online · 100% uptime
by radmail.ai·ai.radmail/radmail-mcp·v0.5.0
No reviews yet

Email OS for agents - real-inbox search, triage, commitments, and a verifiable BEC hard-stop.

A93/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A93/100

full report

Adoption
Growing

0 stars91 downloads/wk

Reviews

Write one

Nobody has reviewed Radmail yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Radmail tools (6)

write = sends, deletes, buys or posts
  • draft_replyFree

    Draft a reply for a thread. It returns text for a human to review — it does not and cannot send it.

  • list_commitmentsFree

    Extract the open commitments in the correspondence, both owed by you and owed to you, with who and by-when.

  • list_right_nowFree

    Return only the 'Right Now' lane — the most recent and most important messages that genuinely can't be missed.

  • searchFree

    Find a specific message by sender, subject, or content. Results come back most-relevant + newest first, and every hit says where it matched (from / subject / body) and why. On this hosted sandbox it searches the built-in demo inbox; run the radmail-mcp package with RADMAIL_API_KEY set and the same tool searches your REAL ingested inbox read-only (with from / after / before filters) via the v1 search API.

  • triage_inboxFree

    Rank a mailbox on two axes (importance x urgency) and return what needs a human now versus what can wait or is already handled — with each thread's open commitment (the promise you owe or are owed, and whether it's overdue) surfaced inline, so the follow-through is visible on the very first call.

  • why_surfacedFree

    Explain in plain English why a given message was surfaced — the signals (sender, urgency, commitment) behind its rank.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan78 source files scanned25/25
  • Live reliabilityremote reachable in 791ms20/20
  • Tool poisoning6 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 93/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Radmail compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
93/100
higher than 90% of 915 Email servers
Tools
6
the typical Email server has 8
Tools that change things
0%
typical: 25%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Email server answers 100%
Response time
263 ms
faster than 49% of 609 Email servers
Downloads a week
91
more than 50% of 270 Email servers with a package

What its tools let an agent do: 6 read

Install Radmail in Claude Code, Cursor or VS Code

claude mcp add --transport http radmail-mcp https://radmail.ai/api/mcp/sandbox
Add to Cursor

What the publisher says

From the Radmail repository's README, as published. We do not edit it. Read it on GitHub

RadMail MCP

An email operating system for agents — with a refusal you can trust.

Every inbox got an AI in 2026. None can be trusted to hit send. RadMail is the one that can — because the consequential actions are refused in code, model-independent: money, changed-banking details, first-contact senders, decisions, and prompt-injection are human-only, forever. No prompt can talk RadMail into auto-sending them.

This is the Model Context Protocol (MCP) server, so any AI agent can use the inbox.

If a fleet of MCP agents runs your execution layer while you sit in the decision seat, the inbox is the seat that needs a hard-stop first. It's where a socially-engineered wire or banking change is irreversible — and where an autonomous process that can hit send can be talked into the loss. RadMail lets agents do the inbox's work (triage, the Right Now lane, commitment tracking, drafting) while money, changed banking, first contact, decisions, and prompt-injection stay human-only by construction, not by a policy an agent could be argued out of. That's what makes the company inbox delegable at all.

Start in one call

Call triageinbox and omit the token — RadMail auto-provisions a free sandbox tenant and returns a working triage in one round-trip. Reuse the returned token. (On the zero-auth hosted sandbox, triageinbox takes no args — it triages a built-in demo inbox so your very first call returns the full wedge.)

This server runs the sandbox engine (heuristic, in-memory, free, no credentials). It is real and runnable — not the production "99%" engine.

Tools

The safety contract (un-bypassable by design)

These are decided by deterministic code, not model judgment — see /.well-known/agent-safety.json:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Radmail: common questions

Is Radmail MCP server safe?
Yes, by our scan: it is graded A (93/100). Read the Radmail safety report
How do I install Radmail?
It runs remotely at radmail.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Radmail need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Radmail maintained?
The last commit was 14 days ago (2026-11-02). The latest release is v0.5.0.
Is Radmail up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Radmail?
Servers from other publishers that do the same job: Mailoo - Email MCP Server, Inbox Zero MCP server and Agent-Native Mail MCP server. Compare all Radmail alternatives.
How does Radmail compare with other Email MCP servers?
safety score 93/100 (higher than 90% of 915 Email servers); tools 6 (the typical Email server has 8); tools that change things 0% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Radmail

Same job from other publishers: the closest match first, then the best rated.

All Radmail alternatives →
  • Mailoo - Email MCP Server
    Email MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.
    A
  • Inbox Zero
    Search Gmail and Outlook, save drafts, manage email rules, and view email stats.
    A
  • Agent-Native Mail
    Agent-Native Superhuman - email client with keyboard shortcuts and AI triage
    A
  • Atomic Mail
    Programmable email inbox for AI agents — JMAP, PoW auth, stdio MCP server.
    A
  • Email
    IMAP/SMTP email MCP server — 52 tools, stdio + HTTP, IMAP IDLE push, multi-account, AI triage.
    B