mailbox-mcp-server

The server demonstrates strong security practices including comprehensive input validation (using Valibot) and HTML sanitization to prevent XSS. It defaults to TLS encryption for all network connections (IMAP, SMTP, CalDAV, Sieve) and logs warnings if insecure connections are configured. Credentials are managed via environment variables and app-specific passwords are recommended, with no persistent storage of sensitive data. A specific `sanitizeArgs` function is implemented to remove invalid UUID parameters potentially passed by Claude Desktop. Sieve script creation/update includes a validation step prior to deployment. Data processing remains local to the user's machine, minimizing external data exposure. The main dependencies are well-established libraries, and potential vulnerabilities within them would be external risks.