Iris MCP server

Read from the package source without running it. The installed server may list more.

• iris_auth_status

  Report whether iris is signed in, as whom, and with what scopes.

• iris_create_draftwrite action

  Compose a message into a mail folder as an unsent draft. It is NOT sent — a human opens Outlook and presses Send.

• iris_delete_draftwrite action

  Delete a draft. Destructive, so confirm=true is required — set it only after the human has explicitly approved deleting this specific draft.

• iris_list_drafts

  List recent messages sitting in a draft folder. folder selects which one by display name; omit it for the configured default (IRIS_DRAFT_FOLDER), or pass "" / "Drafts" for the normal Outlook Drafts folder.

• iris_list_folders

  List the mailbox's top-level mail folders (name, id, unread/total counts) so you can pick one to pass as the `folder` argument to iris_create_draft or iris_list_drafts.

• iris_login

  Start a device-code sign-in for the mailbox. Returns a URL and a code for the human to enter in a browser; then call iris_login_finish() to complete. Only needed once, or after the refresh token lapses.

• iris_login_finish

  Complete a device-code sign-in started with iris_login(). Call after entering the code in the browser. Waits up to ~60s; if the code has not been entered yet, it says so and can simply be called again.

• iris_send_draftwrite action

  Send an existing draft. This tool exists only because IRIS_ENABLE_SEND=1; a default install cannot send at all. Requires confirm=true, set ONLY after explicit human approval of THIS message. Re-verifies the message is still an unsent draft and re-checks the recipient allowlist before sending.

• iris_update_draftwrite action

  Revise an existing draft in place. Only the fields you pass are changed.

• Code scan4 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 1 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Iris: common questions

Is Iris MCP server safe?

Yes, by our scan: it is graded A (92/100). Read the Iris safety report

How do I install Iris?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Iris need an API key?

No secret keys are declared. It reads 5 settings from the environment.

Is Iris maintained?

The last commit was in the last day (2026-09-19). The latest release is v0.2.1.

What can I use instead of Iris?

Servers from other publishers that do the same job: Fluxmail MCP server, Agent Email MCP server and Outlook MCP server. Compare all Iris alternatives.