macbird
by richard-hajek
Overview
Provides AI assistants with direct access to Thunderbird email accounts for management and interaction.
Installation
bun run /path/to/server/server.tsSecurity Notes
The server explicitly warns about giving AI direct access to email, which is an inherent risk. A critical vulnerability exists in the `download_attachment` and `read_email_attachments` tools, where the `downloadPath` parameter is directly used to write files to the local filesystem without sufficient sanitization or validation. A malicious AI could instruct the server to write arbitrary files to sensitive system locations or overwrite user files, leading to remote code execution or data corruption. While the WebSocket server is local-only, this arbitrary file write capability makes it unsafe to use with untrusted AI.
Similar Servers
mcp-email-server
Provides IMAP and SMTP functionality as an MCP server, allowing clients to list, retrieve, send, delete, and download attachments from email accounts.
agentic-browser
This server powers a model-agnostic browser extension designed for intelligent, adaptive web automation and interaction through LLM-driven action plans, supporting various external APIs for specialized tasks.
outlook-mcp-server
The Outlook MCP Server provides a Model Context Protocol interface, allowing AI assistants to interact with Microsoft Outlook for email search, retrieval, composition, and sending functions.
mcp_email
Adds email functionality (POP3 and SMTP) to an AI agent for sending and receiving emails.