← Back to search

@mailagent/mcp

GitHub Actions Scanned 7d ago

MailAgent MCP server (stdio) for Cursor and AI agents — email verification inboxes

npm
C
66.1 / 100

Versions

0.2.16latest
Jun 19, 2026
0.2.15
Jun 19, 2026
0.2.14
Jun 19, 2026
0.2.13
Jun 19, 2026
0.2.12
Jun 18, 2026
+ show 10 moreshow less
0.2.11
Jun 18, 2026
0.2.10
Jun 18, 2026
0.2.9
Jun 18, 2026
0.2.8
Jun 18, 2026
0.2.7
Jun 18, 2026
0.2.6
Jun 18, 2026
0.2.5
Jun 6, 2026
0.2.4
Jun 6, 2026
0.2.3
Jun 6, 2026
0.2.0
Jun 3, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 37

mailagent_list_threads
annotations: none low

List threads or messages in a thread.

inboxId string threadId string
mailagent_issue_access
annotations: none low

Issue a short-lived scoped API key for one autonomous MailAgent run. Requires an unrestricted DB team key.

runId string purpose string service string readOnly boolean ttlMinutes number labelPrefix string allowSimulate boolean
mailagent_plan_next
annotations: none low

Autopilot planner: return the next best MailAgent tool and ready payloads from current signup/login state. Use when unsure what to do next.

runId string
mailagent_start_run
annotations: none low

Start a server-side autonomous agent run session and return the first autopilot plan.

notes string runId string appUrl string
mailagent_next_run
annotations: none low

Resume an agent run and return the next best tool/payload from saved session state.

runId string
mailagent_report_run
annotations: none low

Report run progress/failure, append a timeline step, update saved state, and return the next plan.

step string error string runId string result record
mailagent_workspace_summarize
annotations: none low

Workspace Agent preview: summarize supplied mail/thread messages, action items, decisions, and open questions.

tone enum instruction string
mailagent_workspace_draft_reply
annotations: none low

Workspace Agent preview: draft a reply from supplied messages. Draft-only; never sends.

tone enum instruction string
mailagent_workspace_suggest_reminders
annotations: none low

Workspace Agent preview: suggest reminders/follow-ups from supplied messages. Does not create reminders yet.

now string timezone string
mailagent_send_message
annotations: none low

Send outbound email from inbox (two-way agent mail).

to union html string text string inboxId string subject string inReplyToMessageId string
mailagent_workspace_create_reminder
annotations: none low

Workspace Agent preview: persist a reminder/follow-up. Does not send email or create calendar events.

meta record dueAt string title string source string dueHint string sourceThreadId string sourceMessageId string
mailagent_workspace_list_reminders
annotations: none low

Workspace Agent preview: list saved reminders/follow-ups for the current team or API key.

limit number status enum
mailagent_workspace_complete_reminder
annotations: none low

Workspace Agent preview: mark a saved reminder/follow-up as completed.

id string
mailagent_workspace_log_action
annotations: none low

Workspace Agent preview: log what the agent did for a reminder/thread.

meta record note string title string status enum threadId string messageId string reminderId string
mailagent_workspace_list_actions
annotations: none low

Workspace Agent preview: list logged Workspace actions, optionally scoped by reminderId or threadId.

limit number threadId string reminderId string
mailagent_workspace_get_policy
annotations: none low

Read the Workspace Agent autonomy policy. Default is draft_only.

mailagent_workspace_model_status
annotations: none low

Show DeepSeek/Qwen readiness and fallback order without exposing secrets.

mailagent_workspace_set_policy
annotations: none low

Admin-only: configure policy-gated autonomous replies.

mode enum minConfidence enum maxSendsPerHour number allowedRecipientDomains array
mailagent_workspace_execute_reply
annotations: none low

Policy-gated autonomous reply from a real inbound message. Use dryRun first; idempotencyKey is required to send.

tone enum dryRun boolean inboxId string messageId string reminderId string instruction string idempotencyKey string
mailagent_suggest_preset
annotations: none low

Suggest service preset, expectFrom, subjectContains, flow, and snippets from a sample auth email From/Subject/body. Use before verify when sender or service is unclear.

subject string
mailagent_create_inbox
annotations: none low

Create a temporary email inbox for agent workflows (signups, OTP, magic links). Returns inbox id and email address to use on external forms.

mailagent_verify_signup
annotations: none low

Preferred agent flow: create inbox (or reuse inboxId), wait for verification email, return agent.primaryAction with OTP or magic link and clear instruction. Use service preset (github, google, dribbble, …).

label string service enum ttlMinutes number callbackUrl string deleteAfter boolean keepOnFailure boolean timeoutSeconds number subjectContains string deleteAfterMinutes number deleteAfterSuccess boolean
mailagent_wait_and_extract
annotations: none low

One-shot agent flow: optionally create inbox, wait via SSE for first allowed email, return OTP + links, delete inbox by default. Use service=dribbble for Dribbble signup.

label string ttlMinutes number callbackUrl string keepOnFailure boolean deleteAfterMinutes number deleteAfterSuccess boolean
mailagent_list_inboxes
annotations: none low

List active inboxes by label (QA: debug failed CI run, find address/ids).

limit number
mailagent_wait_for_message
annotations: none low

Block until the first email arrives (SSE, fallback poll). Use after submitting a form to the inbox address.

inboxId string
mailagent_list_messages
annotations: none low

List all messages received for an inbox (newest first).

inboxId string
mailagent_extract_verification
annotations: none low

Get OTP code and links from the latest email in the inbox (pre-parsed at ingest). Best after a message arrived.

inboxId string
mailagent_simulate_message
annotations: none low

Inject test OTP email without SMTP (QA/dev, sim_* provider).

otp string from string inboxId string subject string inReplyTo string references string fireCallback boolean rfcMessageId string attachmentFilename string inReplyToMessageId string
mailagent_diagnose_inbox
annotations: none low

When wait/verify fails: messages, callbacks, hints, debugUiUrl, troubleshooting.

inboxId string messageIndex number subjectContains string
mailagent_get_inbox
annotations: none low

Get inbox status: address, expiry, message count.

inboxId string
mailagent_delete_inbox
annotations: none low

Delete inbox and all messages early (cleanup after verification).

inboxId string
mailagent_cleanup_inboxes
annotations: none low

Delete all inboxes matching a labelPrefix, or an agent run via runId.

runId string labelPrefix string
mailagent_get_raw_message
annotations: none low

Download archived .eml metadata or body (base64 via API when includeBody). Use when extract finds no OTP.

inboxId string messageId string
mailagent_check_email
annotations: none low

Check email syntax, disposable, role, MX (DNS). ONLY for app validation tests — NOT before verify_signup.

email string
mailagent_get_run_session
annotations: none low

Read multi-step agent run state (JSON + step log) by runId.

runId string
mailagent_get_run_timeline
annotations: none low

Read normalized agent run timeline events by runId.

runId string
mailagent_patch_run_session
annotations: none low

Merge state and/or append a step for multi-step agent flows.

data record name string merge record runId string replaceState record

Permissions 4

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 97

low
Tool 'mailagent_issue_access' has no annotations annotation_checker · 100%
low
Tool 'mailagent_plan_next' has no annotations annotation_checker · 100%
low
Tool 'mailagent_start_run' has no annotations annotation_checker · 100%
low
Tool 'mailagent_next_run' has no annotations annotation_checker · 100%
low
Tool 'mailagent_report_run' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_summarize' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_draft_reply' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_suggest_reminders' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_create_reminder' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_list_reminders' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_complete_reminder' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_log_action' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_list_actions' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_get_policy' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_model_status' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_set_policy' has no annotations annotation_checker · 100%
low
Tool 'mailagent_workspace_execute_reply' has no annotations annotation_checker · 100%
low
Tool 'mailagent_suggest_preset' has no annotations annotation_checker · 100%
low
Tool 'mailagent_create_inbox' has no annotations annotation_checker · 100%
low
Tool 'mailagent_verify_signup' has no annotations annotation_checker · 100%
low
Tool 'mailagent_wait_and_extract' has no annotations annotation_checker · 100%
low
Tool 'mailagent_list_inboxes' has no annotations annotation_checker · 100%
low
Tool 'mailagent_wait_for_message' has no annotations annotation_checker · 100%
low
Tool 'mailagent_list_messages' has no annotations annotation_checker · 100%
low
Tool 'mailagent_extract_verification' has no annotations annotation_checker · 100%
low
Tool 'mailagent_simulate_message' has no annotations annotation_checker · 100%
low
Tool 'mailagent_send_message' has no annotations annotation_checker · 100%
low
Tool 'mailagent_list_threads' has no annotations annotation_checker · 100%
low
Tool 'mailagent_diagnose_inbox' has no annotations annotation_checker · 100%
low
Tool 'mailagent_get_inbox' has no annotations annotation_checker · 100%
low
Tool 'mailagent_delete_inbox' has no annotations annotation_checker · 100%
low
Tool 'mailagent_cleanup_inboxes' has no annotations annotation_checker · 100%
low
Tool 'mailagent_get_raw_message' has no annotations annotation_checker · 100%
low
Tool 'mailagent_check_email' has no annotations annotation_checker · 100%
low
Tool 'mailagent_get_run_session' has no annotations annotation_checker · 100%
low
Tool 'mailagent_get_run_timeline' has no annotations annotation_checker · 100%
low
Tool 'mailagent_patch_run_session' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.26 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@5.1.6 (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: mailagent_issue_access manifest_parser · 85%
info
Tool: mailagent_plan_next manifest_parser · 85%
info
Tool: mailagent_start_run manifest_parser · 85%
info
Tool: mailagent_next_run manifest_parser · 85%
info
Tool: mailagent_report_run manifest_parser · 85%
info
Tool: mailagent_workspace_summarize manifest_parser · 85%
info
Tool: mailagent_workspace_draft_reply manifest_parser · 85%
info
Tool: mailagent_workspace_suggest_reminders manifest_parser · 85%
info
Tool: mailagent_workspace_create_reminder manifest_parser · 85%
info
Tool: mailagent_workspace_list_reminders manifest_parser · 85%
info
Tool: mailagent_workspace_complete_reminder manifest_parser · 85%
info
Tool: mailagent_workspace_log_action manifest_parser · 85%
info
Tool: mailagent_workspace_list_actions manifest_parser · 85%
info
Tool: mailagent_workspace_get_policy manifest_parser · 85%
info
Tool: mailagent_workspace_model_status manifest_parser · 85%
info
Tool: mailagent_workspace_set_policy manifest_parser · 85%
info
Tool: mailagent_workspace_execute_reply manifest_parser · 85%
info
Tool: mailagent_delete_inbox manifest_parser · 85%
info
Tool: mailagent_suggest_preset manifest_parser · 85%
info
Tool: mailagent_create_inbox manifest_parser · 85%
info
Tool: mailagent_verify_signup manifest_parser · 85%
info
Tool: mailagent_wait_and_extract manifest_parser · 85%
info
Tool: mailagent_list_inboxes manifest_parser · 85%
info
Tool: mailagent_wait_for_message manifest_parser · 85%
info
Tool: mailagent_list_messages manifest_parser · 85%
info
Tool: mailagent_extract_verification manifest_parser · 85%
info
Tool: mailagent_simulate_message manifest_parser · 85%
info
Tool: mailagent_send_message manifest_parser · 85%
info
Tool: mailagent_list_threads manifest_parser · 85%
info
Tool: mailagent_diagnose_inbox manifest_parser · 85%
info
Tool: mailagent_get_inbox manifest_parser · 85%
info
Tool: mailagent_cleanup_inboxes manifest_parser · 85%
info
Tool: mailagent_get_raw_message manifest_parser · 85%
info
Tool: mailagent_check_email manifest_parser · 85%
info
Tool: mailagent_get_run_session manifest_parser · 85%
info
Tool: mailagent_get_run_timeline manifest_parser · 85%
info
Tool: mailagent_patch_run_session manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (55) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 352 components sbom_generator · 100%
high
Authorization Bearer Token found in navorina-labs-MailAgent-f0b1de0/examples/codex/config.remote-oauth.toml.example secret_scanner · 70%
high
Generic API Key Assignment found in navorina-labs-MailAgent-f0b1de0/examples/codex/config.toml.example secret_scanner · 75%
high
Authorization Bearer Token found in navorina-labs-MailAgent-f0b1de0/examples/codex/config.toml.example secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%