Mcp Server
Gives Claude a real email address with graduated trust controls. You can lock it to read-only, gate every send for approval, allowlist specific recipients, or let it run autonomous once you trust it. Emails arrive as markdown instead of raw MIME, replies thread automatically, and every outbound message gets a cryptographically signed identity header so recipients know a verified operator is behind it. The gated approval flow is formally verified in Lean 4. Supports attachments, scheduled sends, tagging for persistent memory, and content scanning for phishing or prompt injection. Includes 50 tools covering inbox management, thread operations, oversight controls, and account administration. Reach for this when your agent needs to actually participate in email correspondence without handing over the keys to your inbox.
- tools
- 50
- auth
- Secret needed
- transport
- STDIO, HTTP
- env vars
- 2
- last updated
- Jun 12, 2026
Tools
50 toolsPublic tool metadata for what this MCP can expose to an agent.
send_emailSend email as markdown. Supports attachments, `idempotency_key`, scheduled delivery via `send_at`.
Send email as markdown. Supports attachments, `idempotency_key`, scheduled delivery via `send_at`.
No parameter schema in public metadata yet.
check_inboxList emails with filters: status, sender, subject, date range, direction, attachments, pagination.
List emails with filters: status, sender, subject, date range, direction, attachments, pagination.
No parameter schema in public metadata yet.
read_emailFull email content. Trusted metadata and untrusted body returned as separate content blocks.
Full email content. Trusted metadata and untrusted body returned as separate content blocks.
No parameter schema in public metadata yet.
reply_emailReply in-thread. Threading headers set automatically.
Reply in-thread. Threading headers set automatically.
No parameter schema in public metadata yet.
get_threadAll emails in a conversation thread with participants and metadata.
All emails in a conversation thread with participants and metadata.
No parameter schema in public metadata yet.
download_attachmentDownload attachment as base64 with content type.
Download attachment as base64 with content type.
No parameter schema in public metadata yet.
cancel_messageCancel a pending or scheduled email.
Cancel a pending or scheduled email.
No parameter schema in public metadata yet.
edit_scheduled_emailEdit scheduled email before it sends.
Edit scheduled email before it sends.
No parameter schema in public metadata yet.
wait_for_emailBlock until matching email arrives or timeout (max 120s).
Block until matching email arrives or timeout (max 120s).
No parameter schema in public metadata yet.
get_tagsGet all tags on an email. Persistent key-value agent memory across sessions.
Get all tags on an email. Persistent key-value agent memory across sessions.
No parameter schema in public metadata yet.
set_tagsSet tags on an email. Merges with existing tags.
Set tags on an email. Merges with existing tags.
No parameter schema in public metadata yet.
delete_tagDelete a specific tag key from an email.
Delete a specific tag key from an email.
No parameter schema in public metadata yet.
list_pendingEmails awaiting oversight decision (requires oversight scope).
Emails awaiting oversight decision (requires oversight scope).
No parameter schema in public metadata yet.
decide_emailApprove or reject a pending email (requires oversight scope).
Approve or reject a pending email (requires oversight scope).
No parameter schema in public metadata yet.
manage_upgradeRequest or apply oversight mode upgrade (action: request|apply).
Request or apply oversight mode upgrade (action: request|apply).
No parameter schema in public metadata yet.
list_allowlistList sending allowlist entries.
List sending allowlist entries.
No parameter schema in public metadata yet.
add_allowlist_entryAdd a recipient to the sending allowlist. Operator approval required.
Add a recipient to the sending allowlist. Operator approval required.
No parameter schema in public metadata yet.
remove_allowlist_entryRemove an allowlist entry.
Remove an allowlist entry.
No parameter schema in public metadata yet.
list_mailboxesAll mailboxes with ID, address, oversight mode, display name.
All mailboxes with ID, address, oversight mode, display name.
No parameter schema in public metadata yet.
configure_mailboxFirst-run setup: oversight mode, display name, CC/BCC, scheduling, signature.
First-run setup: oversight mode, display name, CC/BCC, scheduling, signature.
No parameter schema in public metadata yet.
update_mailboxUpdate settings (display name, oversight mode, signature, webhooks).
Update settings (display name, oversight mode, signature, webhooks).
No parameter schema in public metadata yet.
create_mailboxCreate mailbox (admin scope + operator approval).
Create mailbox (admin scope + operator approval).
No parameter schema in public metadata yet.
delete_mailboxPermanently delete a mailbox (admin scope).
Permanently delete a mailbox (admin scope).
No parameter schema in public metadata yet.
get_accountAccount status, plan, quota, sending enabled, enforcement tier.
Account status, plan, quota, sending enabled, enforcement tier.
No parameter schema in public metadata yet.
update_accountUpdate org name, oversight email, physical address.
Update org name, oversight email, physical address.
No parameter schema in public metadata yet.
delete_accountPermanently delete account and all data (admin scope).
Permanently delete account and all data (admin scope).
No parameter schema in public metadata yet.
get_usageQuota and usage stats for the billing period.
Quota and usage stats for the billing period.
No parameter schema in public metadata yet.
upgrade_planUpgrade to paid plan (Builder $9/mo, Pro $29/mo, Scale $99/mo).
Upgrade to paid plan (Builder $9/mo, Pro $29/mo, Scale $99/mo).
No parameter schema in public metadata yet.
cancel_subscriptionCancel paid subscription, revert to starter at period end.
Cancel paid subscription, revert to starter at period end.
No parameter schema in public metadata yet.
get_billing_portalStripe portal URL for self-service billing.
Stripe portal URL for self-service billing.
No parameter schema in public metadata yet.
request_challengeALTCHA proof-of-work challenge for account creation.
ALTCHA proof-of-work challenge for account creation.
No parameter schema in public metadata yet.
create_accountCreate account with solved PoW challenge.
Create account with solved PoW challenge.
No parameter schema in public metadata yet.
resend_confirmationResend activation email with new code.
Resend activation email with new code.
No parameter schema in public metadata yet.
activate_accountActivate account using confirmation code.
Activate account using confirmation code.
No parameter schema in public metadata yet.
setup_multimailGuided onboarding on the public /onboard endpoint.
Guided onboarding on the public /onboard endpoint.
No parameter schema in public metadata yet.
list_api_keysList all API keys (admin scope).
List all API keys (admin scope).
No parameter schema in public metadata yet.
create_api_keyCreate API key with scopes (admin + operator approval). send+oversight rejected to prevent self-approval.
Create API key with scopes (admin + operator approval). send+oversight rejected to prevent self-approval.
No parameter schema in public metadata yet.
revoke_api_keyRevoke an API key (admin scope).
Revoke an API key (admin scope).
No parameter schema in public metadata yet.
get_audit_logAccount audit log (admin scope).
Account audit log (admin scope).
No parameter schema in public metadata yet.
search_contactsSearch contacts by name or email.
Search contacts by name or email.
No parameter schema in public metadata yet.
add_contactAdd a contact.
Add a contact.
No parameter schema in public metadata yet.
delete_contactDelete a contact.
Delete a contact.
No parameter schema in public metadata yet.
manage_spam_statusReport spam or clear spam status (action: report|clear).
Report spam or clear spam status (action: report|clear).
No parameter schema in public metadata yet.
list_spamSpam-flagged and quarantined emails.
Spam-flagged and quarantined emails.
No parameter schema in public metadata yet.
list_suppressionList suppressed recipients with pagination.
List suppressed recipients with pagination.
No parameter schema in public metadata yet.
remove_suppressionRemove a recipient from the suppression list.
Remove a recipient from the suppression list.
No parameter schema in public metadata yet.
create_webhookCreate webhook for real-time email event notifications.
Create webhook for real-time email event notifications.
No parameter schema in public metadata yet.
list_webhooksList all webhooks.
List all webhooks.
No parameter schema in public metadata yet.
delete_webhookDelete a webhook.
Delete a webhook.
No parameter schema in public metadata yet.
report_issueReport a bug, site problem, or feature request.
Report a bug, site problem, or feature request.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
MULTIMAIL_API_KEYsecretYour MultiMail API key (starts with mm_live_). Optional — run without it to create an account first.
MULTIMAIL_MAILBOX_IDDefault mailbox ID. If not set, pass mailbox_id to each tool or call list_mailboxes first.
Readme
@multimail/mcp-server
Your agent doesn't have email yet because nobody trusts it with email yet. MultiMail fixes that. A real email address with a trust ladder from read-only to fully autonomous, cryptographic identity on every message, and per-recipient sending controls.
Quick start
{
"mcpServers": {
"multimail": {
"type": "url",
"url": "https://mcp.multimail.dev/mcp"
}
}
}
Remote server. No install. Authenticates via OAuth on first connect.
Works with Claude.ai, Claude Desktop, Claude Code, Cursor, Windsurf, Copilot (VS Code), ChatGPT Desktop, and any MCP client that supports remote servers.
Alternative: local stdio server
{
"mcpServers": {
"multimail": {
"command": "npx",
"args": ["-y", "@multimail/mcp-server"],
"env": {
"MULTIMAIL_API_KEY": "mm_live_...",
"MULTIMAIL_MAILBOX_ID": "01KJ1NHN8J..."
}
}
}
}
Get a key at multimail.dev. Or run without one to create an account interactively.
Config file locations
Details
- Repository
- github.com/multimail-dev/mcp-server
- Categories
- AI & LLM Tools, Communication & Messaging
- Package
@multimail/mcp-server- Transport
- STDIO, HTTP
- Auth
- Required
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
AI Context Flowweb3-plurality/plurality-mcp-serverUniversal memory for AI agents and tools. Save, organize and search context anywhere.2stars
Biolitrachadele/biolitLLM-assisted biomedical literature screening and extraction for PubMed, GEO, and preprints.2stars
Promptrejectormcprevsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.2stars
AgentDriveagentdrive-sh/agentdrive-mcpCapture coding-agent sessions and resume them in any other agent: Claude Code, Codex, Cursor, more.2stars
agentmemthezenmonster/agentmemGoverned memory for coding agents. Trust lifecycle, conflict detection, health scoring.2stars
Mcp Thinkgatetjp2021/mcp-thinkgateAuto-classifies prompt complexity and routes to the right Claude thinking mode. No API key needed.2stars