io.github.nikolausm/imap-mcp-server
NPM · IMAP-MCP-SERVER · SCANNED SEP 20
IMAP/SMTP MCP server to search, read, organize, send, reply & forward email for AI assistants
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 51 of 206 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to nikolausm/imap-mcp-server). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 45 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability67
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 7562 tokens (~189/item across 40 items; 40 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 9 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "imap_remove_account" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 40 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.nikolausm/imap-mcp-server server?
io.github.nikolausm/imap-mcp-server runs locally as an npm package, launched with npx -y imap-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · imap-mcp-server
claude mcp add nikolausm-imap-mcp-server -- npx -y imap-mcp-server
{
"mcpServers": {
"nikolausm-imap-mcp-server": {
"command": "npx",
"args": [
"-y",
"imap-mcp-server"
]
}
}
} {
"servers": {
"nikolausm-imap-mcp-server": {
"command": "npx",
"args": [
"-y",
"imap-mcp-server"
]
}
}
} codex mcp add nikolausm-imap-mcp-server -- npx -y imap-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nikolausm-imap-mcp-server": {
"type": "local",
"command": [
"npx",
"-y",
"imap-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add nikolausm-imap-mcp-server --command npx --arg -y --arg imap-mcp-server
mcp_servers:
nikolausm-imap-mcp-server:
command: "npx"
args: ["-y", "imap-mcp-server"] {
"McpServers": {
"nikolausm-imap-mcp-server": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"imap-mcp-server"
]
}
}
} assistant mcp add nikolausm-imap-mcp-server -t stdio -c npx -a -y imap-mcp-server
{
"mcpServers": {
"nikolausm-imap-mcp-server": {
"command": "npx",
"args": [
"-y",
"imap-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 −3
- Stability: pass → 0.80 functional
- 19 Sept 26 0
- Stability: 0.97 → pass security
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes. Other categories moved too: Supply Chain Security rose 1.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 −3
- Stability: pass → 0.80 functional
- 12 Sept 26 0
- Stability: 0.97 → pass security
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/imap-mcp-server@2.0.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | nikolausm/imap-mcp-server |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/nikolausm/imap-mcp-server/.github/workflows/release.yml@refs/tags/v2.0.0 |
| Rekor log index | 2343513796 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:c5aa77aaeaeb08cb219261a0d056b9540c0a45a2e9efd70a2413c37a69606ffec369e017eae97050a44a319aaca21e0a046147e609bdd3260062c0d3f |
Background: How many MCP packages publish verified provenance →
Dependencies 206 packages
| Packages resolved | 206 |
|---|---|
| Stale | 51 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
imap_add_account ~293
Add a new IMAP account configuration
| Name | Type | Req | Description |
|---|---|---|---|
| defaultBcc | – | – | Optional BCC address(es) applied automatically to every outbound send, reply, forward, and draft for this account. Merged with any per-call bcc |
| string | – | Email address (From: header). Defaults to user if omitted | |
| host | string | yes | IMAP server hostname |
| name | string | yes | Friendly name for the account |
| password | string | yes | Password for authentication |
| port | number | – | IMAP server port (default: 993) |
| sentFolder | string | – | Explicit Sent-folder name for saving sent-mail copies (e.g. "Gesendet"). Only needed when auto-detection fails — the server must lack a \Sent SPECIAL-USE folder. Check names with imap_list_folders |
| smtpHost | string | – | SMTP server hostname. Defaults to IMAP host with imap.→smtp. rewrite |
| smtpPort | number | – | SMTP server port (465 for SMTPS, 587 for STARTTLS). Defaults to 587 |
| smtpSecure | boolean | – | Use implicit TLS (SMTPS). Ignored for port 587/25 which always use STARTTLS, and for port 465 which always uses implicit TLS |
| tls | boolean | – | Use TLS/SSL (default: true) |
| user | string | yes | Username for authentication |
No output schema declared.
No examples provided.
imap_add_keyword ~276
Set an arbitrary custom (non-system) IMAP keyword/label on an email — e.g. a provider color label like Open-Xchange's $cl_1..$cl_10, Apple Mail's $MailFlagBit0..$MailFlagBit2, or an app tag such as $promotion. Unlike imap_flag_email (which only ever sets the system \Flagged flag), this passes the keyword through verbatim, but rejects backslash-prefixed system flags (e.g. \Flagged, \Seen, \Deleted) — use the dedicated flag/read tools for those. Not every IMAP server permits custom keywords (see the mailbox's PERMANENTFLAGS) — if the server rejects or silently ignores the change, this call fails rather than reporting success.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| keyword | string | yes | IMAP keyword to set, passed through verbatim (e.g. "$cl_3", "$MailFlagBit0", "$Junk") |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_add_spam_domain ~52
Add a domain to the custom spam list. Emails from this domain will be flagged as spam.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain to add to spam list (e.g., "spammer.com") |
No output schema declared.
No examples provided.
imap_add_whitelist_domain ~48
Add a domain to the whitelist. Emails from whitelisted domains will never be flagged as spam.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain to whitelist (e.g., "trusted.com") |
No output schema declared.
No examples provided.
imap_bulk_delete ~134
Delete multiple emails at once with chunking and auto-reconnection. Processes deletions in batches to prevent connection timeouts.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| chunkSize | number | – | Number of emails to delete per batch (default: 50) |
| folder | string | – | Folder name |
| uids | array | yes | Array of email UIDs to delete |
No output schema declared.
No examples provided.
imap_bulk_delete_by_search ~243
Search for emails matching criteria and delete them all. Useful for cleaning up spam or unwanted emails. At least one concrete criterion (from, to, subject, before, or since) is REQUIRED — a call with no criteria is refused so it can never wipe an entire folder. Supports dryRun to preview matches first.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| before | string | – | Delete emails before this date (YYYY-MM-DD) |
| chunkSize | number | – | Number of emails to delete per batch |
| dryRun | boolean | – | If true, only return what would be deleted without actually deleting |
| folder | string | – | Folder name |
| from | string | – | Delete emails from this sender |
| since | string | – | Delete emails since this date (YYYY-MM-DD) |
| subject | string | – | Delete emails with this subject |
| to | string | – | Delete emails to this recipient |
No output schema declared.
No examples provided.
imap_check_spam ~254
Check emails in a folder for spam. Combines sender-domain checks (known spam/disposable domains, suspicious patterns) with deterministic raw-header analysis: bulk-mailer X-Mailer/User-Agent signatures, Precedence: bulk, DMARC/SPF/DKIM failures in Authentication-Results, and List-Unsubscribe / Reply-To domains that do not match the sender. Header checks catch scam mail from fresh, unlisted domains that pass the domain check. Returns domain-based spam, a separate list of header-flagged mails, and domain statistics.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID |
| folder | string | – | Folder name |
| from | string | – | Filter by sender (optional) |
| includeHeaderChecks | boolean | – | Also run deterministic raw-header checks (X-Mailer bulk tools, Precedence: bulk, DMARC/SPF/DKIM failures, List-Unsubscribe/Reply-To domain mismatches) on top of the sender-domain check. Fetches messa… |
| limit | number | – | Maximum number of emails to check |
| since | string | – | Check emails since date (YYYY-MM-DD) |
No output schema declared.
No examples provided.
imap_connect ~42
Connect to an IMAP account
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID to connect to |
| accountName | string | – | Account name to connect to |
No output schema declared.
No examples provided.
imap_create_folder ~155
Create a new IMAP folder/mailbox. Most servers also create any missing parent folders (e.g. creating "Archives/2026/2026-05" auto-creates "Archives" and "Archives/2026"). Returns success even if the folder already exists.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | yes | Full folder path to create (e.g. "Archives/2026/2026-05" or "INBOX.Archive") |
No output schema declared.
No examples provided.
imap_delete_by_domain ~84
Delete all emails from a specific domain. Useful for cleaning up unwanted newsletters or spam.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID |
| domain | string | yes | Domain to delete emails from (e.g., "spammer.com") |
| dryRun | boolean | – | If true, only report what would be deleted |
| folder | string | – | Folder name |
No output schema declared.
No examples provided.
imap_delete_email ~163
Delete ONE email by folder + uid (moves to Trash or expunges, server-dependent). Destructive and not easily undone — confirm the user means this specific message. To remove many at once use imap_bulk_delete (known uids) or imap_bulk_delete_by_search (by criteria, supports dryRun). To file an email away instead of deleting, use imap_move_email.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_delete_spam ~88
Find and delete emails from known spam/disposable email domains.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID |
| dryRun | boolean | – | If true, only report what would be deleted without deleting |
| folder | string | – | Folder name |
| limit | number | – | Maximum number of emails to check |
| minConfidence | string | – | Minimum confidence level for spam detection |
No output schema declared.
No examples provided.
imap_disconnect ~29
Disconnect from an IMAP account
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID to disconnect from |
No output schema declared.
No examples provided.
imap_domain_stats ~76
Get statistics about sender domains in a folder. Useful for identifying bulk senders or spam patterns.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID |
| folder | string | – | Folder name |
| limit | number | – | Maximum number of emails to analyze |
| minCount | number | – | Minimum email count per domain to include |
No output schema declared.
No examples provided.
imap_download_attachment ~217
Download a single attachment from an email (folder + uid + attachment filename/contentId, as listed by imap_get_email). Images are returned inline for viewing; PDFs are saved and their text is extracted inline (extractText); other files are saved to the shared downloads directory (or savePath). Use when the user wants the actual file contents, not just the message body.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| extractText | boolean | – | For PDFs, extract and return text content inline |
| filename | string | yes | Attachment filename or contentId |
| folder | string | – | Folder name |
| savePath | string | – | Optional file path to save the attachment to. If not provided, files are saved to the shared downloads directory. |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_find_email_by_message_id ~144
Locate an email by its RFC822 Message-ID across folders and return its current { folder, uid } plus basic envelope. Robust to the message having been moved or archived (IMAP UIDs are folder-relative). Pass the returned folder + uid to imap_reply_to_email or imap_get_email. Without `folders`, searches Gmail \All Mail when present, else INBOX → Archive → Sent → remaining folders.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID |
| folders | array | – | Explicit folders to search, in order (overrides the default order) |
| messageId | string | yes | RFC822 Message-ID, with or without angle brackets |
No output schema declared.
No examples provided.
imap_find_thread_messages ~397
Find messages in `searchFolder` that belong to the same conversation threads as messages already in `sourceFolder`. Useful for catching replies that arrived after a thread was sorted. Works on any IMAP server (uses RFC 3501 HEADER search on In-Reply-To and References). Set `includeBody=true` to also return the parsed body for each found thread message in one round-trip — avoids the N+1 cost of calling imap_get_email per thread member.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| bodyFormat | string | – | How to render the body when `includeBody` is true. Mirrors `imap_get_email` — "markdown" (default) returns clean Markdown; "text" returns plain text; "html" returns raw HTML; "auto" prefers substanti… |
| bodyMaxLength | number | – | Per-message cap (in characters) for each rendered body field when `includeBody` is true. Defaults to 10000 to match `imap_get_email`. |
| includeBody | boolean | – | If true, also fetch the parsed message body for each found thread message in the same round-trip and return it alongside headers (avoids the N+1 cost of calling imap_get_email per thread member). Bod… |
| searchFolder | string | – | Folder to search for related thread messages (default: INBOX) |
| searchReferences | boolean | – | Also search the References header for multi-level threads (default: true) |
| sourceFolder | string | yes | Folder containing the already-sorted thread messages (e.g. "Review.Articles") |
No output schema declared.
No examples provided.
imap_flag_email ~130
Flag an email — sets the IMAP \Flagged system flag (shows as a star in Gmail / a flag in Apple Mail). Use this tool when a user asks to star, flag, or mark a message as important.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_folder_status ~82
Get status information about a folder
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | yes | Folder name |
No output schema declared.
No examples provided.
imap_forward_email ~251
Forward an existing email (folder + uid) to new recipients, quoting the original message and headers. Optionally include the original attachments. Use when the user wants to pass an existing message on to someone else; use imap_reply_to_email instead to respond to the sender. Account defaultBcc addresses are always BCC'd when configured.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| bcc | – | – | BCC recipients. Either an array of addresses or a single comma-separated string; merged with the account defaultBcc when set. |
| body | string | – | Alias for 'text' (backward-compat) |
| folder | string | – | Folder containing the original email |
| includeAttachments | boolean | – | Include original attachments |
| text | string | – | Additional text to include |
| to | – | yes | Forward to email address(es). Either an array of addresses or a single comma-separated string. |
| uid | number | yes | UID of the email to forward |
No output schema declared.
No examples provided.
imap_get_email ~363
Read the FULL content of a single email by its UID (body, sender/recipients, date, attachment list, optional raw headers and text-attachment previews). By default the body is returned as clean Markdown in markdownContent and raw HTML is omitted so it never crosses the boundary; set bodyFormat to "html" for the legacy raw htmlContent, or "text" for plain text only. Use after imap_search_emails or imap_get_latest_emails gives you a uid. Body text is truncated to maxContentLength to protect the context window — raise it for long messages. To fetch attachment bytes, use imap_download_attachment.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| bodyFormat | string | – | How to return the body. "markdown" (default): clean Markdown via Turndown in markdownContent, raw htmlContent omitted so HTML never crosses the boundary. "text": plain text only in textContent. "html… |
| folder | string | – | Folder name |
| includeAttachmentText | boolean | – | Include text attachment previews when available |
| includeHeaders | boolean | – | Include raw email headers (e.g. List-Unsubscribe, List-Unsubscribe-Post) |
| maxAttachmentTextChars | number | – | Maximum characters to return per text attachment |
| maxContentLength | number | – | Maximum characters to return for each body field (text/markdown/html) |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_get_latest_emails ~361
Get the most recent emails from a folder, newest first. Use this for "what just came in?" / "show my latest inbox messages" when no search filter is needed. By default returns lightweight headers (uid, from, subject, date); set `includeBody=true` to also return the parsed body in one round-trip instead of paying the N+1 cost of calling imap_get_email per message. To filter by sender/subject/date instead, use imap_search_emails.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| bodyFormat | string | – | How to render the body when `includeBody` is true. Mirrors `imap_get_email` — "markdown" (default) returns clean Markdown; "text" returns plain text; "html" returns raw HTML; "auto" prefers substanti… |
| bodyMaxLength | number | – | Per-message cap (in characters) for each rendered body field when `includeBody` is true. Defaults to 10000 to match `imap_get_email`. |
| count | number | – | Number of emails to retrieve |
| folder | string | – | Folder name |
| includeBody | boolean | – | If true, also fetch the parsed message body in the same round-trip and return it alongside headers (avoids the N+1 cost of calling imap_get_email per message). Body is rendered per `bodyFormat` and c… |
No output schema declared.
No examples provided.
imap_get_unread_count ~128
Count unread (unseen) emails per folder, plus a total. Use for "how many unread do I have?" overviews. Defaults to all folders; pass a folders list to limit scope and speed it up.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folders | array | – | List of folders to check (default: all) |
No output schema declared.
No examples provided.
imap_list_accounts ~17
List all configured IMAP accounts
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
imap_list_folders ~188
List all folders/mailboxes for an account (names, hierarchy delimiter, attributes, RFC 6154 special-use role). Use this first to discover exact folder names before searching, moving, or creating subfolders — folder naming varies by provider (e.g. "Archive" vs "[Gmail]/All Mail" vs "INBOX.Archive"). The specialUse field ("\\Sent", "\\Drafts", "\\Trash", "\\Junk", "\\Archive") identifies a folder's role independent of its localized name (e.g. "Gesendet" is the Sent folder when specialUse is "\\Sent").
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
No output schema declared.
No examples provided.
imap_list_spam_domains ~23
List all known spam domains (built-in and custom).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
imap_mark_as_read ~166
Mark one or many emails as read. Accepts a single UID or an array — pass an array to flag N messages in one IMAP STORE round-trip (useful when triaging).
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| uid | – | yes | Email UID, or array of UIDs to mark as read in one call (avoids N round-trips when triaging). All listed UIDs share the same IMAP STORE command, so the operation is atomic at the server level. |
No output schema declared.
No examples provided.
imap_mark_as_unread ~161
Mark one or many emails as unread. Accepts a single UID or an array — pass an array to flag N messages in one IMAP STORE round-trip.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| uid | – | yes | Email UID, or array of UIDs to mark as unread in one call (avoids N round-trips when triaging). All listed UIDs share the same IMAP STORE command, so the operation is atomic at the server level. |
No output schema declared.
No examples provided.
imap_move_email ~201
Move an email from one folder to another (e.g., INBOX to Taxes, or INBOX to Archive). Optionally creates the destination folder if it does not exist.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| createDestinationIfMissing | boolean | – | If true, create the destination folder before moving when it does not exist (default: false) |
| folder | string | – | Source folder name |
| targetFolder | string | yes | Destination folder name |
| uid | – | yes | Single email UID or array of UIDs to move in one call. Pass an array when triaging many messages at once (e.g. "move the 10 invoices I just classified to Archive") to avoid N round-trips. |
No output schema declared.
No examples provided.
imap_remove_account ~31
Remove an IMAP account configuration
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | ID of the account to remove |
No output schema declared.
No examples provided.
imap_remove_keyword ~277
Remove an arbitrary custom (non-system) IMAP keyword/label from an email — e.g. a provider color label like Open-Xchange's $cl_1..$cl_10, Apple Mail's $MailFlagBit0..$MailFlagBit2, or an app tag such as $promotion. Unlike imap_unflag_email (which only ever clears the system \Flagged flag), this passes the keyword through verbatim, but rejects backslash-prefixed system flags (e.g. \Flagged, \Seen, \Deleted) — use the dedicated flag/read tools for those. Not every IMAP server permits custom keywords (see the mailbox's PERMANENTFLAGS) — if the server rejects or silently ignores the change, this call fails rather than reporting success.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| keyword | string | yes | IMAP keyword to remove, passed through verbatim (e.g. "$cl_3", "$MailFlagBit0", "$Junk") |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_remove_spam_domain ~34
Remove a domain from the custom spam list.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain to remove from spam list |
No output schema declared.
No examples provided.
imap_reply_to_email ~265
Reply to an existing email identified by folder + uid. Automatically sets the recipient to the original sender, prefixes the subject with "Re:", and preserves threading (In-Reply-To/References). Set replyAll to also include the original recipients. Use this instead of imap_send_email whenever the user is responding to a message already in a mailbox. Account defaultBcc addresses are always BCC'd when configured.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| attachments | array | – | Email attachments |
| bcc | – | – | BCC recipients. Either an array of addresses or a single comma-separated string; merged with the account defaultBcc when set. |
| body | string | – | Alias for 'text' (backward-compat) |
| folder | string | – | Folder containing the original email |
| html | string | – | HTML reply content |
| replyAll | boolean | – | Reply to all recipients |
| text | string | – | Plain text reply content |
| uid | number | yes | UID of the email to reply to |
No output schema declared.
No examples provided.
imap_save_draft ~282
Save an email as a draft in the Drafts folder (no send). Takes the same fields as imap_send_email (including account defaultBcc when configured).
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| attachments | array | – | Email attachments |
| bcc | – | – | BCC recipients. Either an array of addresses or a single comma-separated string; merged with the account defaultBcc when set. |
| body | string | – | Alias for 'text' (backward-compat) |
| cc | – | – | CC recipients. Either an array of addresses or a single comma-separated string. |
| folder | string | – | Override the Drafts folder name (defaults to auto-detected Drafts folder) |
| html | string | – | HTML content |
| inReplyTo | string | – | Message-Id being replied to |
| references | – | – | References header value(s) |
| replyTo | string | – | Reply-to address |
| subject | string | – | Email subject |
| text | string | – | Plain text content |
| to | – | – | Recipient email address(es). Either an array of addresses or a single comma-separated string. |
No output schema declared.
No examples provided.
imap_search_emails ~893
Note: on some servers a 'flagged' or starred message carries a custom keyword (e.g. an Open-Xchange color label or Apple's $MailFlagBit*) instead of, or in addition to, the \Flagged system flag. After any flagged search, inspect each result's customKeywords field before concluding a message is or isn't flagged — do not rely on the flagged filter alone. Search for emails matching criteria (sender, recipient, subject, body text, date range, read/flagged status). Use this to FIND messages when you know something about them but not their UID — e.g. "emails from amazon last week", "unread invoices". By default searches a single folder (INBOX). Set searchAllFolders=true to scan every mailbox at once — this catches messages filed away by rules (e.g. a receipt routed to a custom folder); Trash/Spam/Drafts are skipped unless you opt in. By default returns lightweight headers (uid, from, subject, date, and folder when searching across folders); set `includeBody=true` to also return the parsed body in one round-trip instead of paying the N+1 cost of calling imap_get_email per match. For the newest messages without criteria, prefer imap_get_latest_emails.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| before | string | – | Search emails before date (YYYY-MM-DD) |
| body | string | – | Search in body text |
| bodyFormat | string | – | How to render the body when `includeBody` is true. Mirrors `imap_get_email` — "markdown" (default) returns clean Markdown and omits raw HTML so it never crosses the MCP boundary; "text" returns plain… |
| bodyMaxLength | number | – | Per-message cap (in characters) for each rendered body field when `includeBody` is true. Defaults to 10000 to match `imap_get_email`. |
| flagged | boolean | – | Filter by flagged status |
| folder | string | – | Folder name to search (default: INBOX). Ignored when searchAllFolders is true. |
| from | string | – | Search by sender |
| includeBody | boolean | – | If true, also fetch the parsed message body in the same round-trip and return it alongside headers (avoids the N+1 cost of calling imap_get_email per match). Body is rendered per `bodyFormat` and cap… |
| includeDrafts | boolean | – | When searchAllFolders is true, also search the Drafts folder (off by default). |
| includeSpam | boolean | – | When searchAllFolders is true, also search Spam/Junk folders (off by default — noisy). |
| includeTrash | boolean | – | When searchAllFolders is true, also search Trash/Bin/Deleted folders (off by default — noisy). |
| keywords | array | – | Match messages that have ANY of these CUSTOM keywords (server-side OR; not system flags like \Seen/\Flagged). Read a mailbox's available custom keywords from imap_folder_status's customKeywords field… |
| limit | number | – | Maximum number of results |
| messageId | string | – | Search by RFC822 Message-ID header (substring match) |
| searchAllFolders | boolean | – | Search across ALL folders instead of just `folder`. Skips Trash/Spam/Drafts and non-selectable folders by default. Use when a message might have been filed/archived/moved and you do not know which fo… |
| seen | boolean | – | Filter by read/unread status |
| since | string | – | Search emails since date (YYYY-MM-DD) |
| subject | string | – | Search by subject |
| to | string | – | Search by recipient |
| unKeywords | array | – | Exclude messages that have ANY of these CUSTOM keywords (server-side; result has NONE of them). Same keyword source as `keywords` — check imap_folder_status first. |
No output schema declared.
No examples provided.
imap_send_email ~331
Compose and send a NEW email via the account's SMTP server (a copy is saved to Sent unless disabled; account defaultBcc addresses are always BCC'd when configured). Use for fresh outbound messages. To respond to an existing message use imap_reply_to_email (keeps threading); to pass a message on use imap_forward_email; to store without sending use imap_save_draft. Supports to/cc/bcc, text and/or HTML, and attachments by base64 content or by file path (see imap_upload_file for large files).
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| attachments | array | – | Email attachments |
| bcc | – | – | BCC recipients. Either an array of addresses or a single comma-separated string; merged with the account defaultBcc when set. |
| body | string | – | Alias for 'text' (backward-compat with clients that pass 'body') |
| cc | – | – | CC recipients. Either an array of addresses or a single comma-separated string. |
| html | string | – | HTML content |
| replyTo | string | – | Reply-to address |
| subject | string | yes | Email subject |
| text | string | – | Plain text content |
| to | – | yes | Recipient email address(es). Either an array of addresses or a single comma-separated string; both accept "Name <addr@example.com>" form. |
No output schema declared.
No examples provided.
imap_test_account ~46
Test an existing account connection without re-entering credentials. Validates IMAP connectivity and returns folder count and message count.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account ID to test |
No output schema declared.
No examples provided.
imap_unflag_email ~201
Unflag an email — removes the IMAP \Flagged system flag (the star in Gmail, the flag in Apple Mail). Note: some servers (e.g. Open-Xchange / Network Solutions) and Apple Mail also write a separate custom keyword such as $cl_N or $MailFlagBit* when a message is flagged in their client. Removing \Flagged alone does not clear that keyword, so the message may still display as flagged. If it does, check the message's customKeywords via imap_get_email and remove the lingering label with imap_remove_keyword.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | Account ID (from imap_list_accounts). Optional if accountName is given or only one account is configured. |
| accountName | string | – | Account name instead of accountId. Optional if accountId is given or only one account is configured. |
| folder | string | – | Folder name |
| uid | number | yes | Email UID |
No output schema declared.
No examples provided.
imap_update_account ~307
Update an existing IMAP account. Useful for fixing SMTP settings without removing and re-adding the account.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | ID of the account to update |
| defaultBcc | – | – | Optional BCC address(es) applied automatically to every outbound message for this account. Pass an empty string to clear |
| string | – | Email address (From: header) | |
| host | string | – | IMAP host |
| name | string | – | New friendly name |
| password | string | – | New password |
| port | number | – | IMAP port |
| saveToSent | boolean | – | Save sent emails to the Sent folder |
| sentFolder | string | – | Explicit Sent-folder name for saving sent-mail copies (e.g. "Gesendet"). Overrides auto-detection; pass an empty string to clear the override and re-enable auto-detection. Check names with imap_list_… |
| smtpHost | string | – | SMTP hostname |
| smtpPassword | string | – | SMTP password (if different from IMAP password) |
| smtpPort | number | – | SMTP port (465 for SMTPS, 587 for STARTTLS) |
| smtpSecure | boolean | – | Use implicit TLS (SMTPS). Port 587/25 always use STARTTLS regardless |
| smtpUser | string | – | SMTP username (if different from IMAP user) |
| tls | boolean | – | Use TLS for IMAP |
| user | string | – | IMAP username |
No output schema declared.
No examples provided.
imap_upload_file ~129
Upload a file to the server for use as an email attachment. Returns a path that can be used with imap_send_email attachments. This allows sending large attachments without hitting context window limits. Max size: 26214400 bytes (configurable via IMAP_MAX_UPLOAD_SIZE). Uploads are auto-deleted after 86400000 ms (configurable via IMAP_UPLOAD_TTL_MS).
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Base64 encoded file content |
| contentType | string | – | MIME type (optional, used for metadata only) |
| filename | string | yes | Filename to save as |
No output schema declared.
No examples provided.
What is the io.github.nikolausm/imap-mcp-server server?
io.github.nikolausm/imap-mcp-server is listed in the public MCP registry as io.github.nikolausm/imap-mcp-server. IMAP/SMTP MCP server to search, read, organize, send, reply & forward email for AI assistants. This page covers its npm package (imap-mcp-server).
Is the io.github.nikolausm/imap-mcp-server server safe to use?
io.github.nikolausm/imap-mcp-server scores 89 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.nikolausm/imap-mcp-server server expose?
io.github.nikolausm/imap-mcp-server exposes 40 tools: imap_add_account, imap_update_account, imap_list_accounts, imap_remove_account, imap_connect, and 35 more. Their descriptions and schemas cost roughly 7,562 tokens of context every time the server is loaded.
Is the io.github.nikolausm/imap-mcp-server server still maintained?
io.github.nikolausm/imap-mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.nikolausm/imap-mcp-server server under?
io.github.nikolausm/imap-mcp-server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.