@mgcrea/mcp-apple-mail

MCPattesté
v1.9.0io.github.mgcreaMITMis à jour il y a 1 jnpmGitHub

Search, read and act on Apple Mail — threads, attachments, body search, writes off by default

Fonctionne dans
ClaudeCursorCopilotGemini

Déduit des transports déclarés par cette annonce (stdio). Un client absent de cette liste n’est pas écarté pour autant — c’est simplement quelque chose que Forge ne peut pas confirmer.

Build attesté
Une attestation de provenance vérifiée lie cet artefact au dépôt indiqué. Personne n’a encore revendiqué l’annonce — cela prouve où le code a été construit, pas qui le soutient.
366Téléch./sem.
il y a 1 jDernière mise à jour
Paquet
Auteurio.github.mgcrea
LicenceMIT
Version1.9.0
Sourcenpm+mcp-registry
Statut de confiance
A
85/100Fiable
Listé dans l’index Forge+10/10
Identité vérifiée · build attesté+20/20
Signature de publication Ed25519+0/5
Incluse automatiquement quand l’éditeur exécute `forge publish`
Vérification de domaine+0/5
Éditeur : hébergez /.well-known/forge.json sur la page d’accueil du paquet avec { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+5/5
Correspondance de mainteneur npm+0/5
Éditeur : ajoutez le login GitHub vérifié aux mainteneurs du paquet npm (npm owner add <login>)
Analyse CVE · propre+30/30
Analyse statique · propre+20/20
Collez-le dans Claude Code, Cursor ou tout assistant d’IA pour combler toutes les lacunes
StatutIdentité vérifiée
ÉditeurNon vérifié
SignatureNon signé
Domaine
Provenance✓ Vérifié par Sigstore · 938b31f
Dépendances✓ 60 résolues+ · aucune vulnérable
Surface d’outils23 outils · 2 privilégiés
Analyse de sécurité✓ Proprev1.9.0 · aujourd’huiQuelle est l’efficacité de cette analyse ?
ÉvaluationsAucune
Indexé2 sept. 2026

La vérification confirme l’identité de l’éditeur (la propriété du dépôt), pas la sûreté du code. L’analyse de sécurité couvre les CVE connues et les scripts d’installation suspects.

Outils

23 outils · 2 privilégiés
Extrait statiquement du paquet publiév1.9.0 · 23h ago

Lu dans le code que npm livre réellement, au moment de l’analyse. Le paquet n’a jamais été exécuté. Les outils enregistrés dynamiquement à l’exécution, ou cachés dans du code empaqueté ou minifié, peuvent passer inaperçus — c’est donc un plancher de la surface d’outils, pas un recensement complet.

apple_mail_triageWork through what arrived and report what needs a human: who is waiting, what is committed to, what can be ignored. Read-only — it proposes, it does not file or reply.

Work through what arrived and report what needs a human: who is waiting, what is committed to, what can be ignored. Read-only — it proposes, it does not file or reply.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_find_threadTrack down a conversation from a vague description — a project name, a person, something half-remembered — spending the cheap search lanes before the expensive body lane.

Track down a conversation from a vague description — a project name, a person, something half-remembered — spending the cheap search lanes before the expensive body lane.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_draft_replyRead a thread properly, then leave a written draft in Mail for review. Never sends: the draft waits for a human. Requires writes to be enabled.

Read a thread properly, then leave a written draft in Mail for review. Never sends: the draft waits for a human. Requires writes to be enabled.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_diagnosticsReport what this server can currently do and why. Shows whether Mail is running, whether Automation and Full Disk Access are granted, where Mail's data lives, whether the search index is readable and how stale it is, whether the message file lane actually resolves and reads a real message per accou…

Report what this server can currently do and why. Shows whether Mail is running, whether Automation and Full Disk Access are granted, where Mail's data lives, whether the search index is readable and how stale it is, whether the message file lane actually resolves and reads a real message per accou…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_list_accountsList the mail accounts configured in Apple Mail: display name, UUID, type, addresses and mailbox names. Start here — the account name or UUID is what every other tool takes, and the mailbox names come back exactly as Mail spells them.

List the mail accounts configured in Apple Mail: display name, UUID, type, addresses and mailbox names. Start here — the account name or UUID is what every other tool takes, and the mailbox names come back exactly as Mail spells them.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_list_mailboxesList mailboxes, optionally with message counts. Counts cost one round-trip per mailbox (~0.3s each), so `withCounts` is off by default — turn it on for one account, not for all of them. Note that `unread` here is Mail's cached badge value and can be wrong; apple_mail_count_messages reports both sou…

List mailboxes, optionally with message counts. Counts cost one round-trip per mailbox (~0.3s each), so `withCounts` is off by default — turn it on for one account, not for all of them. Note that `unread` here is Mail's cached badge value and can be wrong; apple_mail_count_messages reports both sou…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_set_message_flagsSet read / flagged / junk state on one or more messages. Pass only the fields you want to change; the rest are left alone. This is one tool rather than four because the four are one Apple Event when batched, and because refs in the same mailbox are grouped into a single round-trip. The response rep…

Set read / flagged / junk state on one or more messages. Pass only the fields you want to change; the rest are left alone. This is one tool rather than four because the four are one Apple Event when batched, and because refs in the same mailbox are grouped into a single round-trip. The response rep…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_create_mailboxAucune description publiée

Cet outil n’a publié aucune description. Forge n’en invente pas.

apple_mail_move_messagesprivilégiéMove messages to another mailbox, optionally in another account. The refs you passed in are DEAD afterwards: a moved message gets a new row id, so the response returns fresh refs and reports any message it could not re-locate. Requires confirm: true.

Move messages to another mailbox, optionally in another account. The refs you passed in are DEAD afterwards: a moved message gets a new row id, so the response returns fresh refs and reports any message it could not re-locate. Requires confirm: true.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_delete_messagesprivilégiéDelete messages. This follows the account's own 'move deleted messages to Trash' setting, which this server does not control — for an account with that setting off, deletion is immediate and NOT recoverable from here. The response reports which behaviour applied. Requires confirm: true.

Delete messages. This follows the account's own 'move deleted messages to Trash' setting, which this server does not control — for an account with that setting off, deletion is immediate and NOT recoverable from here. The response reports which behaviour applied. Requires confirm: true.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_check_for_new_mailAsk Mail to sync now, for one account or all of them. Unlike the read tools this will launch Mail if it is not running, and it causes real network activity against the mail servers, which is why it is a write-gated tool.

Ask Mail to sync now, for one account or all of them. Unlike the read tools this will launch Mail if it is not running, and it causes real network activity against the mail servers, which is why it is a write-gated tool.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_send_messageCompose a new message. By DEFAULT this does not send: it opens a draft in Mail for the user to review, which is almost always what you want. Only pass sendNow: true (with confirm: true) when the user has explicitly asked for the mail to go out now.

Compose a new message. By DEFAULT this does not send: it opens a draft in Mail for the user to review, which is almost always what you want. Only pass sendNow: true (with confirm: true) when the user has explicitly asked for the mail to go out now.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_reply_to_messageReply to a message. By default it opens a draft in Mail with the original quoted beneath your text, for the user to review. Pass replyToAll to include every original recipient. Only pass sendNow: true (with confirm: true) when explicitly asked to send now. Success means the body was read back out o…

Reply to a message. By default it opens a draft in Mail with the original quoted beneath your text, for the user to review. Pass replyToAll to include every original recipient. Only pass sendNow: true (with confirm: true) when explicitly asked to send now. Success means the body was read back out o…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_forward_messageForward a message to new recipients. By default it opens a draft in Mail for review. Only pass sendNow: true (with confirm: true) when explicitly asked to send now. When a note is given, success means it was read back out of the composer window and matched. Filling the composer brings Mail to the f…

Forward a message to new recipients. By default it opens a draft in Mail for review. Only pass sendNow: true (with confirm: true) when explicitly asked to send now. When a note is given, success means it was read back out of the composer window and matched. Filling the composer brings Mail to the f…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_update_draftAucune description publiée

Cet outil n’a publié aucune description. Forge n’en invente pas.

apple_mail_get_messageRead one message: decoded headers, the plain-text body, and a list of its attachments. HTML-only mail is converted to text. Long bodies are truncated with an explicit marker rather than silently cut. Reads the message file directly when Full Disk Access allows, and otherwise asks Mail, which is slo…

Read one message: decoded headers, the plain-text body, and a list of its attachments. HTML-only mail is converted to text. Long bodies are truncated with an explicit marker rather than silently cut. Reads the message file directly when Full Disk Access allows, and otherwise asks Mail, which is slo…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_get_message_sourceGet the raw RFC 5322 source of a message — every header and the undecoded body. Use this for header forensics (Received chains, SPF/DKIM/DMARC results, List-Unsubscribe), not for reading mail: apple_mail_get_message gives you the readable version without the noise. Capped and pageable via offset.

Get the raw RFC 5322 source of a message — every header and the undecoded body. Use this for header forensics (Received chains, SPF/DKIM/DMARC results, List-Unsubscribe), not for reading mail: apple_mail_get_message gives you the readable version without the noise. Capped and pageable via offset.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_list_attachmentsList a message's attachments: filename, MIME type, size and whether the bytes are present locally. Metadata only — it never returns file contents. A size of 0 with a filename means Mail stored the attachment outside the message file, which is normal.

List a message's attachments: filename, MIME type, size and whether the bytes are present locally. Metadata only — it never returns file contents. A size of 0 with a filename means Mail stored the attachment outside the message file, which is normal.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_save_attachmentSave one attachment to disk. It can only write into APPLE_MAIL_ATTACHMENT_DIR (default ~/Downloads) and will not overwrite an existing file unless you ask it to. Write-gated because it puts a file on the user's disk, even though it changes nothing in Mail.

Save one attachment to disk. It can only write into APPLE_MAIL_ATTACHMENT_DIR (default ~/Downloads) and will not overwrite an existing file unless you ask it to. Write-gated because it puts a file on the user's disk, even though it changes nothing in Mail.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_search_messagesSearch mail by any combination of text, body text, sender, recipient, subject, mailbox, account, read/flagged state, attachments and date range. This is the tool to reach for whenever a filter is involved — it reads Mail's own search index, so it is fast even across a six-figure archive. Returns a…

Search mail by any combination of text, body text, sender, recipient, subject, mailbox, account, read/flagged state, attachments and date range. This is the tool to reach for whenever a filter is involved — it reads Mail's own search index, so it is fast even across a six-figure archive. Returns a…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_get_threadGet every message in the conversation containing a given message, oldest first, across mailboxes and accounts. Metadata only — use apple_mail_get_message for bodies. Requires Full Disk Access.

Get every message in the conversation containing a given message, oldest first, across mailboxes and accounts. Metadata only — use apple_mail_get_message for bodies. Requires Full Disk Access.

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_list_messagesList the newest messages in one mailbox, most recent first. Returns a `ref` per message that the read and action tools take. Without the search index this runs over Apple Events and is capped (default 50) because each additional message costs about 40ms per field — ask for 20 unless you have a reas…

List the newest messages in one mailbox, most recent first. Returns a `ref` per message that the read and action tools take. Without the search index this runs over Apple Events and is capped (default 50) because each additional message costs about 40ms per field — ask for 20 unless you have a reas…

Aucun schéma d’entrée n’a été publié pour cet outil.

apple_mail_count_messagesCount messages in a mailbox. Cheap in both lanes, so this works with no extra permissions. The `unread` figure is reported per source: Mail's own cached count is fast but can be flatly wrong (observed reporting 0 for a mailbox holding 1618 unread messages), so treat the index figure as authoritativ…

Count messages in a mailbox. Cheap in both lanes, so this works with no extra permissions. The `unread` figure is reported per source: Mail's own cached count is fast but can be flatly wrong (observed reporting 0 for a mailbox holding 1618 unread messages), so treat the index figure as authoritativ…

Aucun schéma d’entrée n’a été publié pour cet outil.

21 outils sur 23 ont publié une description.

Les noms et descriptions d’outils sont écrits par l’éditeur et affichés tels quels, comme du texte inerte. Ce sont les chaînes qu’un client MCP transmet à un modèle, alors Forge y recherche des motifs d’injection de prompt — tout constat apparaît avec l’analyse de sécurité ci-dessus. « Privilégié » est une correspondance de mot-clé sur le nom de l’outil, pas un audit de ce qu’il fait : un nom anodin peut tout de même tout faire.

À propos

Search, read and act on Apple Mail — threads, attachments, body search, writes off by default

Mots-clés
mcp
Alternatives
Comparaison des surfaces d’outils…

Arbre de dépendances

Ce qu'une analyse Forge a résolu à partir des métadonnées npm le 2026-09-02 — résolution observée, et non une déclaration de l'éditeur.

60 paquets résolus · 3 directs · aucun porteur d'avis de sécurité La résolution s'arrête à la profondeur 4 et à 60 paquets.

L'exploration s'est arrêtée à la limite de profondeur 4. Tout ce qui se trouve en dessous n'a jamais été résolu.

L'exploration s'est arrêtée à la limite de 60 paquets. Le reste de l'arbre n'a jamais été résolu.

36 autres paquets résolus ne sont pas dessinés ici (limite d'affichage : 24). Toute dépendance porteuse d'un avis de sécurité est dessinée quelle que soit la limite. Inventaire complet (SBOM CycloneDX)

Déclarées mais non résolues

54 dépendances déclarées ne sont jamais arrivées dans l'arbre. Elles manquent à la résolution de Forge, pas au paquet.

+42 de plus non listées. Les comptes par motif ci-dessus les couvrent toutes.

Non suivies : peerDependencies. Cet arbre ne couvre que les dépendances d'exécution ; ce qu'elles entraînent n'a jamais été résolu.