email-mcp-server

The server design emphasizes security: client secrets are expected via environment variables (not hardcoded), and a 'token-only' mode (server_token_only.py) is available that avoids handling client secrets altogether, relying on agents to provide pre-acquired Microsoft Graph access tokens via custom HTTP headers. This 'token-only' mode also explicitly avoids caching client instances by token, preventing long-lived tokens in memory. All network communication to Microsoft Graph uses HTTPS. It listens on '0.0.0.0' for containerized deployments, which is standard but requires network-level security. No 'eval' or other directly dangerous functions were found. Proper Azure AD app registration and permission configuration, along with secure secret management (as advised in documentation), are crucial for its secure operation.