# Spacemail by NWD (npm · spacemail-mcp)

Check, search, read and draft replies to Spacemail (Spaceship) emails, across several mailboxes.

- Trust score: 70/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- mcpb · `spacemail.mcpb`: 40/100, [markdown](https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail.md), [page](https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail)
- npm · `spacemail-mcp`: 70/100 (this document), [markdown](https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp.md), [page](https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp)

## Channel facts

- Registry: `npm`
- Package: `spacemail-mcp`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - No production dependencies, so there is no dependency health to assess.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 2 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1489 tokens (~148/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the Spacemail by NWD MCP server?

Spacemail by NWD runs locally as an npm package, launched with npx -y spacemail-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add design-norwichwebsite-spacemail -- npx -y spacemail-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "design-norwichwebsite-spacemail": {
      "command": "npx",
      "args": [
        "-y",
        "spacemail-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "design-norwichwebsite-spacemail": {
      "command": "npx",
      "args": [
        "-y",
        "spacemail-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add design-norwichwebsite-spacemail -- npx -y spacemail-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "design-norwichwebsite-spacemail": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "spacemail-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add design-norwichwebsite-spacemail --command npx --arg -y --arg spacemail-mcp
```

### Hermes

```yaml
mcp_servers:
  design-norwichwebsite-spacemail:
    command: "npx"
    args: ["-y", "spacemail-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "design-norwichwebsite-spacemail": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "spacemail-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add design-norwichwebsite-spacemail -t stdio -c npx -a -y spacemail-mcp
```

### Other

```json
{
  "mcpServers": {
    "design-norwichwebsite-spacemail": {
      "command": "npx",
      "args": [
        "-y",
        "spacemail-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-03 (score 70, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-11-02 (score 55)

First indexed and scored.

## MCP tools (10)

### `list_mailboxes` (~33 tokens)

List Spacemail mailboxes

Shows which Spacemail mailboxes are connected and what this extension is allowed to do. Doesn't contact the mail server.

### `test_connection` (~53 tokens)

Test Spacemail connection

Logs in to each configured mailbox to check the settings work, and reports inbox counts. Use when setting up or when something fails.

Input parameters:

- `account` (string): Mailbox to test. Leave out to test all of them.

### `check_inbox` (~150 tokens)

Check inbox

Quick look at what's arrived: lists recent inbox messages across all mailboxes (or one), newest first, with a short preview. Best tool for "has anything come in today?" or "any new emails in the support inbox?".

Input parameters:

- `account` (string): Mailbox to check. Leave out (or use "all") to check every mailbox.
- `limit` (integer): Maximum messages per mailbox. Defaults to 15.
- `since` (string): Only messages received on or after this date: "today", "yesterday", "7d" or a date like 2026-11-01.
- `unread_only` (boolean): Only show unread messages. Defaults to true.

### `search_emails` (~275 tokens)

Search emails

Searches one mailbox folder by sender, recipient, subject, words in the message, date range or read status. Results are newest first.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `before` (string): Before this date (same formats as since).
- `flagged_only` (boolean): Only flagged/starred messages.
- `folder` (string): Folder to look in. Defaults to the inbox. Accepts "inbox", "sent", "drafts", "trash", "spam", "archive" or an exact folder name from list_folders.
- `from` (string): Sender name or address contains this text.
- `include_previews` (boolean): Include a short preview of each message. Turn off for faster large searches.
- `limit` (integer): Maximum results. Defaults to 20.
- `since` (string): On or after this date: "today", "yesterday", "30d" or 2026-10-01.
- `subject` (string): Subject contains this text.
- `text` (string): Message body contains this text.
- `to` (string): Recipient address contains this text.
- `unread_only` (boolean): Only unread messages.

### `read_email` (~164 tokens)

Read email

Opens one message and returns its full text, sender, recipients, date and attachment names. Doesn't mark it as read unless asked.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `folder` (string): Folder to look in. Defaults to the inbox. Accepts "inbox", "sent", "drafts", "trash", "spam", "archive" or an exact folder name from list_folders.
- `id` (integer, required): The message id shown in search or inbox results (unique within its folder).
- `mark_as_read` (boolean): Also mark the message as read. Defaults to false so the user still sees it as new.

### `list_folders` (~55 tokens)

List folders

Lists the folders in a mailbox with message and unread counts.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.

### `create_draft` (~183 tokens)

Create draft

Writes a new email and saves it to the mailbox's Drafts folder. Nothing is sent: the user reviews and sends it from Spacemail webmail or their mail app.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `bcc` (array): Bcc email addresses, e.g. ["Jane Smith <jane@example.com>"].
- `body` (string, required): The message, as plain text. Include a sign-off if appropriate.
- `cc` (array): Cc email addresses, e.g. ["Jane Smith <jane@example.com>"].
- `subject` (string, required): Subject line.
- `to` (array, required): Recipient email addresses, e.g. ["Jane Smith <jane@example.com>"].

### `draft_reply` (~173 tokens)

Draft a reply

Writes a reply to a message and saves it to Drafts, correctly threaded (Re: subject, quoted original, reply headers). Nothing is sent.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `body` (string, required): Your reply, as plain text. The original message is quoted underneath automatically.
- `folder` (string): Folder to look in. Defaults to the inbox. Accepts "inbox", "sent", "drafts", "trash", "spam", "archive" or an exact folder name from list_folders.
- `id` (integer, required): Id of the message being replied to.
- `reply_all` (boolean): Also include everyone else who was on the original email.

### `update_emails` (~137 tokens)

Mark or flag emails

Marks messages as read or unread, or flags/unflags them.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `action` (string, required): What to do to the messages.
- `folder` (string): Folder to look in. Defaults to the inbox. Accepts "inbox", "sent", "drafts", "trash", "spam", "archive" or an exact folder name from list_folders.
- `ids` (array, required): Message ids from search or inbox results, all from the same folder.

### `move_emails` (~152 tokens)

Move emails

Moves messages to another folder, e.g. "archive", "trash", "spam", "inbox" or a named folder. Deleting means moving to Trash; this extension never permanently deletes anything.

Input parameters:

- `account` (string): Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up.
- `destination` (string, required): Where to move them: "archive", "trash", "spam", "inbox" or an exact folder name.
- `folder` (string): Folder the messages are in now. Defaults to the inbox.
- `ids` (array, required): Message ids from search or inbox results, all from the same folder.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp#diagnostics

## Score history

- 2026-11-05: 70
- 2026-11-04: 70
- 2026-11-03: 70
- 2026-11-02: 55

## Common questions

### What is the Spacemail by NWD MCP server?

Spacemail by NWD is an MCP server listed in the public MCP registry as design.norwichwebsite/spacemail. Check, search, read and draft replies to Spacemail (Spaceship) emails, across several mailboxes. This page covers its npm package (spacemail-mcp).

### Is the Spacemail by NWD MCP server safe to use?

Spacemail by NWD scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Spacemail by NWD MCP server expose?

Spacemail by NWD exposes 10 tools: list_mailboxes, test_connection, check_inbox, search_emails, read_email, and 5 more. Their descriptions and schemas cost roughly 1,375 tokens of context every time the server is loaded.

### Is the Spacemail by NWD MCP server still maintained?

Spacemail by NWD is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Spacemail by NWD MCP server under?

Spacemail by NWD declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the Spacemail by NWD MCP server?

VerifyMCP ran 15 checks on Spacemail by NWD, covering Malware scan, Known CVEs, Install scripts, Dependency health and 11 more. One item could not be completed, a gap on our side rather than a finding about Spacemail by NWD: Stability. One category scores 0 for that reason, because we only credit what we can confirm. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- npm package: https://www.npmjs.com/package/spacemail-mcp
- Socket report: https://socket.dev/npm/package/spacemail-mcp
- Repository: https://github.com/evilash182/spacemail-mcp
- Website: https://norwichwebsite.design/tools/spacemail-for-claude/
- Changelog RSS feed: https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp.json
- HTML version of this page: https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp