Skip to content

Mailroom

by usemailroom.app · remote · no sign-in to list tools · v0.1.0 · published by app.usemailroom

Your own IMAP mailbox in any MCP client: search, read, flag, move; send and delete need confirm.

Deletes · 2Changes · 2
CompareRegistry entry

7 tools: 2 can delete or cancel things, 2 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mailroom https://usemailroom.app/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Deletes or cancels 2Claude Code: deny
  • empty_trashPermanently delete every message in the Trash folder.No findings

    Why it is in this group

    • The description's first verb is "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete every message in the Trash folder. Returns a preview (folder and message count) unless confirm=true.

    Annotations the server declares

    • title: Empty Trash (preview unless confirm=true)
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • send_emailSend email via SMTP.No findings

    Why it is in this group

    • The name "send_email" says "send": a word for sending, and what is sent cannot be taken back.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Send email via SMTP. Pass confirm=true to actually send. Otherwise returns a preview.

    Annotations the server declares

    • title: Send email (preview unless confirm=true)
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 2Claude Code: ask
  • flag_messageFlag a message.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Flag a message. action: seen, unseen, flagged, unflagged, deleted. deleted moves the message to the mailbox's Trash folder (recoverable). Use empty_trash to delete permanently.

    Annotations the server declares

    • title: Flag message or move it to Trash
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • move_messageMove a message to dest_folder.No findings

    Why it is in this group

    • The name "move_message" says "move": a word for a change.
    Description, as the server wrote it
    Move a message to dest_folder.

    Annotations the server declares

    • title: Move message
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 3Claude Code: allow
  • list_foldersList all folders in the connected mailbox.No findings

    Why it is in this group

    • The name "list_folders" says "list": a word for reading.
    Description, as the server wrote it
    List all folders in the connected mailbox.

    Annotations the server declares

    • title: List folders
    • readOnlyHint: true
    • openWorldHint: false
  • read_messageRead one message by IMAP UID.No findings

    Why it is in this group

    • The name "read_message" says "read": a word for reading.
    Description, as the server wrote it
    Read one message by IMAP UID.

    Annotations the server declares

    • title: Read message
    • readOnlyHint: true
    • openWorldHint: false
  • search_messagesSearch a folder.No findings

    Why it is in this group

    • The name "search_messages" says "search": a word for reading.
    Description, as the server wrote it
    Search a folder. criteria examples: ALL, UNSEEN, FROM alice@example.com.

    Annotations the server declares

    • title: Search messages
    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mailroom https://usemailroom.app/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__mailroom__list_folders",
      "mcp__mailroom__search_messages",
      "mcp__mailroom__read_message"
    ],
    "ask": [
      "mcp__mailroom__flag_message",
      "mcp__mailroom__move_message"
    ],
    "deny": [
      "mcp__mailroom__send_email",
      "mcp__mailroom__empty_trash"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as mailroom. Review it before you use it.