mcp-aruba-email

The server runs locally, ensuring credentials do not leave the user's machine. Credentials are retrieved from environment variables or securely stored via `keytar` in the VS Code extension. All email and calendar connections use SSL/TLS encryption. The email verification tool's transient connection to external SMTP servers on port 25 is unencrypted, which is a standard method but noted. A public Imgur client ID is hardcoded for optional photo signature uploads, which isn't a direct user data security risk but means uploads are not anonymous on Imgur's side. No obvious remote code execution vulnerabilities or dangerous `eval`-like patterns were found from user input.