{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:49:39.072Z","url":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail","markdownUrl":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail.md","server":{"slug":"design-norwichwebsite-spacemail","name":"Spacemail by NWD","registryName":"design.norwichwebsite/spacemail","description":"Check, search, read and draft replies to Spacemail (Spaceship) emails, across several mailboxes.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"spacemail","type":"mcpb","identifier":"https://github.com/evilash182/spacemail-mcp/releases/download/v1.0.1/spacemail.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail","version":"1.0.1","transport":"stdio","scoredAt":"2026-11-05T00:05:05.913Z"},"score":{"total":40,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":40},{"date":"2026-11-04","total":40},{"date":"2026-11-03","total":40},{"date":"2026-11-02","total":40}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none)."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_manifest_bundled"}},{"code":"installscript.inconclusive","args":{"reason":"install_surface_unavailable"}},{"code":"dephealth.inconclusive","args":{"reason":"no_manifest_bundled"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 2 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"2"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":70,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1489 tokens (~148/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"148","items":"10","tools":"10","tokens":"1489","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"10"}},{"code":"toolsafety.manipulation_clean","args":{"units":"11","judged":"11"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"spacemail","type":"mcpb","identifier":"https://github.com/evilash182/spacemail-mcp/releases/download/v1.0.1/spacemail.mcpb","withdrawn":false,"score":40,"current":true,"url":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail","markdownUrl":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail.md"},{"slug":"spacemail-mcp","type":"npm","identifier":"spacemail-mcp","withdrawn":false,"score":70,"current":false,"url":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp","markdownUrl":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail-mcp.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/evilash182/spacemail-mcp/releases/download/v1.0.1/spacemail.mcpb"},{"label":"Version","value":"1.0.1"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"9fddd5945c46550058b5fd81121c3db9773f157fc1664654a97527ad3a1431c7"}],"install":{"available":true,"bundleSha256":"9fddd5945c46550058b5fd81121c3db9773f157fc1664654a97527ad3a1431c7"},"tools":[{"name":"list_mailboxes","title":"List Spacemail mailboxes","description":"Shows which Spacemail mailboxes are connected and what this extension is allowed to do. Doesn't contact the mail server.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":33},{"name":"test_connection","title":"Test Spacemail connection","description":"Logs in to each configured mailbox to check the settings work, and reports inbox counts. Use when setting up or when something fails.","inputs":[{"name":"account","type":"string","required":false,"description":"Mailbox to test. Leave out to test all of them."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":53},{"name":"check_inbox","title":"Check inbox","description":"Quick look at what's arrived: lists recent inbox messages across all mailboxes (or one), newest first, with a short preview. Best tool for \"has anything come in today?\" or \"any new emails in the support inbox?\".","inputs":[{"name":"account","type":"string","required":false,"description":"Mailbox to check. Leave out (or use \"all\") to check every mailbox."},{"name":"limit","type":"integer","required":false,"description":"Maximum messages per mailbox. Defaults to 15."},{"name":"since","type":"string","required":false,"description":"Only messages received on or after this date: \"today\", \"yesterday\", \"7d\" or a date like 2026-11-01."},{"name":"unread_only","type":"boolean","required":false,"description":"Only show unread messages. Defaults to true."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":150},{"name":"search_emails","title":"Search emails","description":"Searches one mailbox folder by sender, recipient, subject, words in the message, date range or read status. Results are newest first.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"before","type":"string","required":false,"description":"Before this date (same formats as since)."},{"name":"flagged_only","type":"boolean","required":false,"description":"Only flagged/starred messages."},{"name":"folder","type":"string","required":false,"description":"Folder to look in. Defaults to the inbox. Accepts \"inbox\", \"sent\", \"drafts\", \"trash\", \"spam\", \"archive\" or an exact folder name from list_folders."},{"name":"from","type":"string","required":false,"description":"Sender name or address contains this text."},{"name":"include_previews","type":"boolean","required":false,"description":"Include a short preview of each message. Turn off for faster large searches."},{"name":"limit","type":"integer","required":false,"description":"Maximum results. Defaults to 20."},{"name":"since","type":"string","required":false,"description":"On or after this date: \"today\", \"yesterday\", \"30d\" or 2026-10-01."},{"name":"subject","type":"string","required":false,"description":"Subject contains this text."},{"name":"text","type":"string","required":false,"description":"Message body contains this text."},{"name":"to","type":"string","required":false,"description":"Recipient address contains this text."},{"name":"unread_only","type":"boolean","required":false,"description":"Only unread messages."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":275},{"name":"read_email","title":"Read email","description":"Opens one message and returns its full text, sender, recipients, date and attachment names. Doesn't mark it as read unless asked.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"folder","type":"string","required":false,"description":"Folder to look in. Defaults to the inbox. Accepts \"inbox\", \"sent\", \"drafts\", \"trash\", \"spam\", \"archive\" or an exact folder name from list_folders."},{"name":"id","type":"integer","required":true,"description":"The message id shown in search or inbox results (unique within its folder)."},{"name":"mark_as_read","type":"boolean","required":false,"description":"Also mark the message as read. Defaults to false so the user still sees it as new."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":164},{"name":"list_folders","title":"List folders","description":"Lists the folders in a mailbox with message and unread counts.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"create_draft","title":"Create draft","description":"Writes a new email and saves it to the mailbox's Drafts folder. Nothing is sent: the user reviews and sends it from Spacemail webmail or their mail app.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"bcc","type":"array","required":false,"description":"Bcc email addresses, e.g. [\"Jane Smith <jane@example.com>\"]."},{"name":"body","type":"string","required":true,"description":"The message, as plain text. Include a sign-off if appropriate."},{"name":"cc","type":"array","required":false,"description":"Cc email addresses, e.g. [\"Jane Smith <jane@example.com>\"]."},{"name":"subject","type":"string","required":true,"description":"Subject line."},{"name":"to","type":"array","required":true,"description":"Recipient email addresses, e.g. [\"Jane Smith <jane@example.com>\"]."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":183},{"name":"draft_reply","title":"Draft a reply","description":"Writes a reply to a message and saves it to Drafts, correctly threaded (Re: subject, quoted original, reply headers). Nothing is sent.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"body","type":"string","required":true,"description":"Your reply, as plain text. The original message is quoted underneath automatically."},{"name":"folder","type":"string","required":false,"description":"Folder to look in. Defaults to the inbox. Accepts \"inbox\", \"sent\", \"drafts\", \"trash\", \"spam\", \"archive\" or an exact folder name from list_folders."},{"name":"id","type":"integer","required":true,"description":"Id of the message being replied to."},{"name":"reply_all","type":"boolean","required":false,"description":"Also include everyone else who was on the original email."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":173},{"name":"update_emails","title":"Mark or flag emails","description":"Marks messages as read or unread, or flags/unflags them.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"action","type":"string","required":true,"description":"What to do to the messages."},{"name":"folder","type":"string","required":false,"description":"Folder to look in. Defaults to the inbox. Accepts \"inbox\", \"sent\", \"drafts\", \"trash\", \"spam\", \"archive\" or an exact folder name from list_folders."},{"name":"ids","type":"array","required":true,"description":"Message ids from search or inbox results, all from the same folder."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":137},{"name":"move_emails","title":"Move emails","description":"Moves messages to another folder, e.g. \"archive\", \"trash\", \"spam\", \"inbox\" or a named folder. Deleting means moving to Trash; this extension never permanently deletes anything.","inputs":[{"name":"account","type":"string","required":false,"description":"Which mailbox to use, by its name or email address. Configured: none configured yet. Required when more than one is set up."},{"name":"destination","type":"string","required":true,"description":"Where to move them: \"archive\", \"trash\", \"spam\", \"inbox\" or an exact folder name."},{"name":"folder","type":"string","required":false,"description":"Folder the messages are in now. Defaults to the inbox."},{"name":"ids","type":"array","required":true,"description":"Message ids from search or inbox results, all from the same folder."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":152}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T00:05:05.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-02","recent":[{"id":"chg_01a19d1f-c4f9-7bd9-97b6-830274f2f74e","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail#chg-chg_01a19d1f-c4f9-7bd9-97b6-830274f2f74e"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail/changelog.json"},"links":{"html":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail","markdown":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail.md","changelogJson":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail/changelog.json","changelogRss":"https://verifymcp.io/servers/design-norwichwebsite-spacemail/spacemail.xml","external":[{"label":"Repository","href":"https://github.com/evilash182/spacemail-mcp"},{"label":"Website","href":"https://norwichwebsite.design/tools/spacemail-for-claude/"}]}}