Back to Home
martinzarfl icon

mail-mcp

by martinzarfl

Overview

Enables AI assistants to securely send, read, manage, and organize emails via SMTP and IMAP.

Installation

Run Command
npx -y martinzarfl/mail-mcp

Environment Variables

  • SMTP_HOST
  • SMTP_PORT
  • SMTP_USER
  • SMTP_PASS
  • SMTP_FROM
  • SMTP_SECURE
  • IMAP_HOST
  • IMAP_PORT
  • IMAP_USER
  • IMAP_PASS
  • IMAP_TLS
  • TRANSPORT
  • PORT
  • SSE_PATH
  • HOST
  • AUTH_HOST
  • AUTH_PORT
  • AUTH_REALM
  • OAUTH_CLIENT_ID
  • OAUTH_CLIENT_SECRET

Security Notes

The server hardcodes `tlsOptions: { rejectUnauthorized: false }` for IMAP connections within `createImapConnection`. This critical vulnerability disables TLS certificate validation, making IMAP connections susceptible to Man-in-the-Middle (MITM) attacks, even if TLS is ostensibly enabled. While credentials are managed via environment variables and the SSE transport supports OAuth 2.0, this IMAP flaw severely compromises the overall security for sensitive email data.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens2500
Stars0
Forks0
Last Update2025-11-19

Tags

EmailSMTPIMAPAI AssistantCommunication