{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T11:28:04.166Z","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway","markdownUrl":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway.md","server":{"slug":"dominikamann-agent-mail-gateway","name":"Agent Mail Gateway","registryName":"io.github.dominikamann/agent-mail-gateway","description":"Self-hosted email for AI agents: own IMAP/SMTP mailbox per key, allow lists, calendar invites.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ghcr-io-dominikamann-agent-mail-gateway","type":"oci","identifier":"ghcr.io/dominikamann/agent-mail-gateway","withdrawn":false,"url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway","version":"0.5.0","transport":"streamable-http","scoredAt":"2026-11-06T02:34:17.154Z"},"score":{"total":10,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-06","total":10},{"date":"2026-11-05","total":10},{"date":"2026-11-04","total":10},{"date":"2026-11-03","total":10},{"date":"2026-11-02","total":10},{"date":"2026-11-01","total":10},{"date":"2026-10-31","total":10},{"date":"2026-10-30","total":10},{"date":"2026-10-29","total":10},{"date":"2026-10-28","total":10},{"date":"2026-10-27","total":10},{"date":"2026-10-26","total":10},{"date":"2026-10-25","total":10},{"date":"2026-10-24","total":10},{"date":"2026-10-23","total":10},{"date":"2026-10-22","total":10},{"date":"2026-10-21","total":10},{"date":"2026-10-20","total":10},{"date":"2026-10-19","total":10},{"date":"2026-10-18","total":10},{"date":"2026-10-17","total":10},{"date":"2026-10-16","total":10},{"date":"2026-10-15","total":10},{"date":"2026-10-14","total":10},{"date":"2026-10-13","total":10},{"date":"2026-10-12","total":10},{"date":"2026-10-10","total":10},{"date":"2026-10-09","total":10},{"date":"2026-10-06","total":10},{"date":"2026-10-05","total":10}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_sbom_attached"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_sbom_attached"}}]},{"name":"Provenance & Transparency","score":48,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 17 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"17"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: our sandbox could not run this package, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess.","Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.","Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess.","Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.","Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"ghcr-io-dominikamann-agent-mail-gateway","type":"oci","identifier":"ghcr.io/dominikamann/agent-mail-gateway","withdrawn":false,"score":10,"current":true,"url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway","markdownUrl":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway.md"}],"facts":[{"label":"Registry","value":"oci"},{"label":"Package","value":"ghcr.io/dominikamann/agent-mail-gateway"},{"label":"Version","value":"0.5.0"},{"label":"Transport","value":"streamable-http"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T02:34:17.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-02","recent":[{"id":"chg_01a18fcc-afa0-76e9-b389-bf465cb36f56","kind":"check.reverified","summary":"Provenance (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a18fcc-afa0-76e9-b389-bf465cb36f56"},{"id":"chg_01a18aa7-ca44-7c3b-9431-71db0dabcda1","kind":"check.unverifiable","summary":"Provenance (fail → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a18aa7-ca44-7c3b-9431-71db0dabcda1"},{"id":"chg_01a156f6-9abe-73e6-92de-2ce9c3093c31","kind":"package.version_changed","summary":"Package version (0.4.1 → 0.5.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a156f6-9abe-73e6-92de-2ce9c3093c31"},{"id":"chg_01a1519d-c0f5-7453-aac6-3129916c0e93","kind":"package.version_changed","summary":"Package version (0.3.4 → 0.4.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a1519d-c0f5-7453-aac6-3129916c0e93"},{"id":"chg_01a10855-5802-7a01-a923-163d832cc8e6","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5802-7a01-a923-163d832cc8e6"},{"id":"chg_01a10855-5854-7aca-a33d-6eff9d3a43af","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5854-7aca-a33d-6eff9d3a43af"},{"id":"chg_01a10855-5855-7864-bd2d-69327c959ccf","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5855-7864-bd2d-69327c959ccf"},{"id":"chg_01a10855-5856-724d-a5aa-54ad336d8d72","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5856-724d-a5aa-54ad336d8d72"},{"id":"chg_01a10855-5856-7a32-949f-b23d52554454","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5856-7a32-949f-b23d52554454"},{"id":"chg_01a10855-5857-7081-a5db-ea2a6c377387","kind":"package.version_changed","summary":"Package version (0.3.3 → 0.3.4)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10855-5857-7081-a5db-ea2a6c377387"},{"id":"chg_01a10275-628d-7a9b-8048-d6aff09b66c2","kind":"package.version_changed","summary":"Package version (0.1.4 → 0.3.3)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10275-628d-7a9b-8048-d6aff09b66c2"},{"id":"chg_01a101d1-1b5a-71c5-9d49-0a2b81205071","kind":"package.version_changed","summary":"Package version (0.1.4 → 0.3.2)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a101d1-1b5a-71c5-9d49-0a2b81205071"},{"id":"chg_01a1019a-d2be-764b-aa6b-8f7dcf305e10","kind":"package.version_changed","summary":"Package version (0.1.4 → 0.3.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a1019a-d2be-764b-aa6b-8f7dcf305e10"},{"id":"chg_01a100bc-4bad-78a8-b474-48f14fe086dd","kind":"package.version_changed","summary":"Package version (0.1.4 → 0.2.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a100bc-4bad-78a8-b474-48f14fe086dd"},{"id":"chg_01a10084-31c2-7d41-93e9-e129ac326b55","kind":"package.version_changed","summary":"Package version (0.1.4 → 0.2.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a10084-31c2-7d41-93e9-e129ac326b55"},{"id":"chg_01a0fe5e-7232-7559-bde7-76cf1cee276a","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-02","url":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway#chg-chg_01a0fe5e-7232-7559-bde7-76cf1cee276a"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway/changelog.json"},"links":{"html":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway","markdown":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway.md","changelogJson":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway/changelog.json","changelogRss":"https://verifymcp.io/servers/dominikamann-agent-mail-gateway/ghcr-io-dominikamann-agent-mail-gateway.xml","external":[{"label":"GitHub Container Registry","href":"https://ghcr.io/dominikamann/agent-mail-gateway"},{"label":"Repository","href":"https://github.com/dominikamann/agent-mail-gateway"}]}}