# io.github.dominikamann/agent-mail-gateway Self-hosted email for AI agents: own IMAP/SMTP mailbox per key, allow lists, calendar invites. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.5.0 - **Author:** io.github.dominikamann - **License:** Unknown - **Source:** https://github.com/dominikamann/agent-mail-gateway ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 8 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-23T01:27:03.261Z - **Version scanned:** HEAD - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 15 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `get_mailbox_info` — Show your own email address, the current date and time (now, now_local), whom you may receive mail from and send mail to, send limits, and the review rules and - `list_messages` — List or search received mail in the inbox, newest first, with sender, subject, date, a short preview and unread state. Use unread: true to check for new mail; t - `read_message` — Read one received message: headers, body as Markdown, list of attachments (index, name, type, size) and, if it contains one, the calendar invitation. Use it aft - `get_attachment` — Download one attachment of a received message, by the index shown in read_message. Returns text files (txt, csv, md, json, ics, ...) as readable text and other - `mark_message` — Mark a received message as read or unread, e.g. to put it back on your to-do pile after reading it with read_message. Only changes the read flag on the mail ser - `delete_message` — Move a received message to the Trash folder (recoverable there until the server empties it). Only works if the operator enabled allow_delete; otherwise returns - `send_message` — Send a new email written in Markdown (sent as HTML plus plain text), optionally with attachments. Use reply_message to answer a received message and forward_mes - `reply_message` — Reply to a received message in the same thread: recipients (the sender or Reply-To; with reply_all also To and Cc, except you) and the Re: subject are filled in - `forward_message` — Forward a received message to other allowed recipients, with your optional note on top, the original header and text, and (unless include_attachments is false) - `respond_to_invitation` — Accept, decline or tentatively accept a calendar invitation you received (read_message shows it under invitation). Sends a standard calendar reply to the organi - `create_event` - `update_event` — Change a meeting created with create_event: give only the fields that change (null removes location or description_markdown). Attendees get an updated invitatio - `cancel_event` — Cancel a meeting created with create_event: every attendee gets a cancellation that removes it from their calendar. This cannot be undone; to move a meeting use - `get_event` — Get one meeting created with create_event: title, UTC and local times, place, attendees and their answers (accepted, declined, tentative), which arrive automati - `list_events` — List all meetings this mailbox created with create_event, newest first, including cancelled ones (status) and attendee answers. Use it to find an event id you l ## Install This entry has no npm package and no hosted endpoint, so there is nothing for an MCP client to launch or connect to. It is indexed as source only. ## Blast radius Moderate to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: deletes data. - Floor 26, ceiling 62 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/io.github.dominikamann%2Fagent-mail-gateway - Install plan: https://forgeregistry.com/api/v1/packages/io.github.dominikamann%2Fagent-mail-gateway/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/io.github.dominikamann%2Fagent-mail-gateway - HTML page: https://forgeregistry.com/registry/io.github.dominikamann%2Fagent-mail-gateway - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.