Skip to content

Nova Inbox Agent by Nova (CIVAI)

by nova.civai.co · remote · no sign-in to list tools · v1.1.0 · published by co.civai.nova

Read and send mail from your Nova Inbox (@nova.civai.co) for OTPs, directory signups, and inbound m…

Final · 2
CompareRegistry entry

7 tools: 2 do something that can't be undone and 5 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http nova-inbox-agent https://nova.civai.co/mcp/agents/nova-inbox-agent

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Can't be undone 2Claude Code: ask
  • compose_messageSend outbound email from the user's @nova.civai.co address (deterministic; no LLM draft).No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Send outbound email from the user's @nova.civai.co address (deterministic; no LLM draft).
  • converseReply conversationally when the request is ambiguous or needs clarification.No findings

    Why it is in this group

    • The description's first verb is "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Reply conversationally when the request is ambiguous or needs clarification.
Only reads 5Claude Code: allow
  • get_attachmentDownload one email attachment as base64 (by drive_id or index on the message).No findings

    Why it is in this group

    • The name "get_attachment" says "get": a word for reading.
    Description, as the server wrote it
    Download one email attachment as base64 (by drive_id or index on the message).
  • get_inbox_addressReturn the user's Nova Inbox email address (e.g.No findings

    Why it is in this group

    • The name "get_inbox_address" says "get": a word for reading.
    Description, as the server wrote it
    Return the user's Nova Inbox email address (e.g. user@nova.civai.co).
  • list_messagesList messages in the signed-in user's Nova Inbox (@nova.civai.co).No findings

    Why it is in this group

    • The name "list_messages" says "list": a word for reading.
    Description, as the server wrote it
    List messages in the signed-in user's Nova Inbox (@nova.civai.co).
  • list_threadList all messages in an email thread (inbound + outbound), oldest first.No findings

    Why it is in this group

    • The name "list_thread" says "list": a word for reading.
    Description, as the server wrote it
    List all messages in an email thread (inbound + outbound), oldest first.
  • read_messageRead full body of one Nova Inbox message by id or list index (includes attachment metadata).No findings

    Why it is in this group

    • The name "read_message" says "read": a word for reading.
    Description, as the server wrote it
    Read full body of one Nova Inbox message by id or list index (includes attachment metadata).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http nova-inbox-agent https://nova.civai.co/mcp/agents/nova-inbox-agent

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__nova-inbox-agent__list_messages",
      "mcp__nova-inbox-agent__read_message",
      "mcp__nova-inbox-agent__list_thread",
      "mcp__nova-inbox-agent__get_attachment",
      "mcp__nova-inbox-agent__get_inbox_address"
    ],
    "ask": [
      "mcp__nova-inbox-agent__compose_message",
      "mcp__nova-inbox-agent__converse"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as nova-inbox-agent. Review it before you use it.