mcp-email-server

The server relies on user-provided IMAP/SMTP credentials. The `download_attachment` tool allows saving attachments to a user-specified path, which could lead to arbitrary file writes if running with elevated privileges and combined with a malicious client providing an unsanitized path. However, this feature is explicitly disabled by default and requires user opt-in. File attachments for outgoing emails are validated to ensure they are actual files and exist. A Codecov token is hardcoded in `codecov.yaml`, which is a minor repository-level information leak but does not directly impact the runtime security of the server itself.