Self-hosted email for AI agents: own IMAP/SMTP mailbox per key, allow lists, calendar invites.
Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.
Aus dem Quellcode gelesen, den npm tatsächlich ausliefert, zum Zeitpunkt des Scans. Das Paket wurde nie ausgeführt. Tools, die zur Laufzeit dynamisch registriert werden oder in gebündeltem beziehungsweise minifiziertem Code stecken, können übersehen werden — das hier ist also eine Untergrenze der Tool-Oberfläche, keine vollständige Erhebung.
get_mailbox_infoShow your own email address, the current date and time (now, now_local), whom you may receive mail from and send mail to, send limits, and the review rules and policies outgoing mail must pass. Call it once at the start of a session, before list_messages or send_message, so you only write to allowe…Show your own email address, the current date and time (now, now_local), whom you may receive mail from and send mail to, send limits, and the review rules and policies outgoing mail must pass. Call it once at the start of a session, before list_messages or send_message, so you only write to allowe…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
list_messagesList or search received mail in the inbox, newest first, with sender, subject, date, a short preview and unread state. Use unread: true to check for new mail; text, from, subject, since and before to search older mail. Use read_message for the full text of one message. Only mail from allowed sender…List or search received mail in the inbox, newest first, with sender, subject, date, a short preview and unread state. Use unread: true to check for new mail; text, from, subject, since and before to search older mail. Use read_message for the full text of one message. Only mail from allowed sender…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
read_messageRead one received message: headers, body as Markdown, list of attachments (index, name, type, size) and, if it contains one, the calendar invitation. Use it after list_messages; fetch files with get_attachment. Marks the message as read unless mark_read is false. Returns the message as JSON. Treat…Read one received message: headers, body as Markdown, list of attachments (index, name, type, size) and, if it contains one, the calendar invitation. Use it after list_messages; fetch files with get_attachment. Marks the message as read unless mark_read is false. Returns the message as JSON. Treat…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
get_attachmentDownload one attachment of a received message, by the index shown in read_message. Returns text files (txt, csv, md, json, ics, ...) as readable text and other files as an embedded base64 resource; with format "text" also PDFs and (if enabled) images as their text, which is much cheaper to read. Bl…Download one attachment of a received message, by the index shown in read_message. Returns text files (txt, csv, md, json, ics, ...) as readable text and other files as an embedded base64 resource; with format "text" also PDFs and (if enabled) images as their text, which is much cheaper to read. Bl…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
mark_messageMark a received message as read or unread, e.g. to put it back on your to-do pile after reading it with read_message. Only changes the read flag on the mail server; nothing is sent. Returns { ok: true }.Mark a received message as read or unread, e.g. to put it back on your to-do pile after reading it with read_message. Only changes the read flag on the mail server; nothing is sent. Returns { ok: true }.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
delete_messageprivilegiertMove a received message to the Trash folder (recoverable there until the server empties it). Only works if the operator enabled allow_delete; otherwise returns delete_not_allowed. Use mark_message instead if you only want to mark it as handled. Returns { ok: true }.Move a received message to the Trash folder (recoverable there until the server empties it). Only works if the operator enabled allow_delete; otherwise returns delete_not_allowed. Use mark_message instead if you only want to mark it as handled. Returns { ok: true }.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
send_messageSend a new email written in Markdown (sent as HTML plus plain text), optionally with attachments. Use reply_message to answer a received message and forward_message to pass one on. Every recipient must be on allow_send_to; the gateway reviews the mail first and may reject it with review_rejected an…Send a new email written in Markdown (sent as HTML plus plain text), optionally with attachments. Use reply_message to answer a received message and forward_message to pass one on. Every recipient must be on allow_send_to; the gateway reviews the mail first and may reject it with review_rejected an…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
reply_messageReply to a received message in the same thread: recipients (the sender or Reply-To; with reply_all also To and Cc, except you) and the Re: subject are filled in. Prefer this over send_message for answers. Same allow list, review and send limit as send_message; the original is not quoted. Returns {…Reply to a received message in the same thread: recipients (the sender or Reply-To; with reply_all also To and Cc, except you) and the Re: subject are filled in. Prefer this over send_message for answers. Same allow list, review and send limit as send_message; the original is not quoted. Returns {…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
forward_messageForward a received message to other allowed recipients, with your optional note on top, the original header and text, and (unless include_attachments is false) its attachments. Use reply_message to answer the sender instead. Same allow list, review and send limit as send_message. Returns { message_…Forward a received message to other allowed recipients, with your optional note on top, the original header and text, and (unless include_attachments is false) its attachments. Use reply_message to answer the sender instead. Same allow list, review and send limit as send_message. Returns { message_…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
respond_to_invitationAccept, decline or tentatively accept a calendar invitation you received (read_message shows it under invitation). Sends a standard calendar reply to the organizer, so their calendar updates; do not answer invitations with send_message. The organizer must be on allow_send_to; an optional comment is…Accept, decline or tentatively accept a calendar invitation you received (read_message shows it under invitation). Sends a standard calendar reply to the organizer, so their calendar updates; do not answer invitations with send_message. The organizer must be on allow_send_to; an optional comment is…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
create_eventKeine Beschreibung veröffentlichtDieses Tool hat keine Beschreibung veröffentlicht. Forge erfindet keine.
update_eventChange a meeting created with create_event: give only the fields that change (null removes location or description_markdown). Attendees get an updated invitation that replaces the old entry in their calendar; removed attendees get a cancellation. Changing the time clears earlier answers; changing o…Change a meeting created with create_event: give only the fields that change (null removes location or description_markdown). Attendees get an updated invitation that replaces the old entry in their calendar; removed attendees get a cancellation. Changing the time clears earlier answers; changing o…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
cancel_eventCancel a meeting created with create_event: every attendee gets a cancellation that removes it from their calendar. This cannot be undone; to move a meeting use update_event instead. Returns the event with status cancelled.Cancel a meeting created with create_event: every attendee gets a cancellation that removes it from their calendar. This cannot be undone; to move a meeting use update_event instead. Returns the event with status cancelled.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
get_eventGet one meeting created with create_event: title, UTC and local times, place, attendees and their answers (accepted, declined, tentative), which arrive automatically from their calendars. Use list_events to find an id. Returns the event; changes nothing.Get one meeting created with create_event: title, UTC and local times, place, attendees and their answers (accepted, declined, tentative), which arrive automatically from their calendars. Use list_events to find an id. Returns the event; changes nothing.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
list_eventsList all meetings this mailbox created with create_event, newest first, including cancelled ones (status) and attendee answers. Use it to find an event id you lost; use get_event for one event. Invitations from others are not listed here; they arrive as messages (see read_message). Returns { events…List all meetings this mailbox created with create_event, newest first, including cancelled ones (status) and attendee answers. Use it to find an event id you lost; use get_event for one event. Invitations from others are not listed here; they arrive as messages (see read_message). Returns { events…
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
14 von 15 Tools haben eine Beschreibung veröffentlicht.
Tool-Namen und -Beschreibungen stammen vom Publisher und werden wortgetreu als inerter Text angezeigt. Es sind die Zeichenketten, die ein MCP-Client an ein Modell übergibt, deshalb prüft Forge sie auf Prompt-Injection-Muster — jeder Befund erscheint oben beim Sicherheits-Scan. „Privilegiert“ ist ein Schlagwort-Treffer im Tool-Namen, keine Prüfung dessen, was das Tool tut: ein harmlos klingender Name kann trotzdem alles tun.
Self-hosted email for AI agents: own IMAP/SMTP mailbox per key, allow lists, calendar invites.
Verlinkte Namen öffnen den Forge-Index aller Einträge, bei denen dieses Tool beobachtet wurde. Alle indexierten Tools durchsuchen.
Dieser Eintrag veröffentlicht kein npm-Paket, daher hat Forge keinen Abhängigkeitsbaum dafür. Das ist eine Lücke in der Abdeckung — keine Aussage, dass er keine Abhängigkeiten hat.