Back to Home
Aputze icon

yahoo-mail-mcp

by Aputze

Overview

Integrates with Yahoo Mail to fetch emails and calendar events via MCP.

Installation

Run Command
npm start

Environment Variables

  • YAHOO_CLIENT_ID
  • YAHOO_CLIENT_SECRET
  • YAHOO_REDIRECT_URI
  • YAHOO_EMAIL

Security Notes

The IMAP client uses `tlsOptions: { rejectUnauthorized: false }` which disables SSL certificate validation, making the connection vulnerable to Man-in-the-Middle (MITM) attacks. Additionally, OAuth tokens are stored in a local JSON file (`tokens.json`) without encryption, posing a risk if the file system is compromised, even with restrictive file permissions (0o600). The code explicitly notes a 'TODO: Store tokens securely (e.g., encrypted database, secure file storage)' for this reason.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassMedium
Avg Tokens1000
Stars0
Forks0
Last Update2025-12-03

Tags

Yahoo MailIMAPCalDAVEmailCalendarMCP