MCP server for macOS Mail.app — gives Claude native email access via AppleScript
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
list-mailboxesList all mailboxes across all Mail.app accounts with unread countsList all mailboxes across all Mail.app accounts with unread counts
No input schema was published for this tool.
search-messagesSearch messages in a mailbox by subject or senderSearch messages in a mailbox by subject or sender
No input schema was published for this tool.
read-messageRead the full content of a specific email messageRead the full content of a specific email message
No input schema was published for this tool.
compose-messageCreate a new email draft in Mail.app (opens compose window, does NOT send). Pass from to pre-select a specific sender account (must be configured in Mail.app). Pass htmlBody for a rich-text/HTML draft; the recipient will see rendered formatting (headings, bold, links) instead of raw tags. When html…Create a new email draft in Mail.app (opens compose window, does NOT send). Pass from to pre-select a specific sender account (must be configured in Mail.app). Pass htmlBody for a rich-text/HTML draft; the recipient will see rendered formatting (headings, bold, links) instead of raw tags. When html…
No input schema was published for this tool.
send-messageCreate and immediately send an email via Mail.app. Pass htmlBody to send a rich-text/HTML message; the recipient will see rendered formatting (headings, bold, links) instead of raw tags. When htmlBody is supplied, body is still used as a plain-text fallback for clients that read plain content.Create and immediately send an email via Mail.app. Pass htmlBody to send a rich-text/HTML message; the recipient will see rendered formatting (headings, bold, links) instead of raw tags. When htmlBody is supplied, body is still used as a plain-text fallback for clients that read plain content.
No input schema was published for this tool.
reply-to-messageReply to an existing email message. The reply inherits correct threading headers (In-Reply-To / References) from Mail's native reply, so it nests in the thread even in strict clients (Outlook, Gmail web). Pass htmlBody for a branded rich-text/HTML reply; the HTML is rendered above the quoted thread…Reply to an existing email message. The reply inherits correct threading headers (In-Reply-To / References) from Mail's native reply, so it nests in the thread even in strict clients (Outlook, Gmail web). Pass htmlBody for a branded rich-text/HTML reply; the HTML is rendered above the quoted thread…
No input schema was published for this tool.
delete-messagesprivilegedDelete one or more email messages by their RFC Message-IDsDelete one or more email messages by their RFC Message-IDs
No input schema was published for this tool.
mark-as-readMark one or more email messages as readMark one or more email messages as read
No input schema was published for this tool.
move-messagesprivilegedMove one or more email messages to a different mailboxMove one or more email messages to a different mailbox
No input schema was published for this tool.
forward-messageForward an existing email message to one or more recipientsForward an existing email message to one or more recipients
No input schema was published for this tool.
save-attachmentSave email attachments to diskSave email attachments to disk
No input schema was published for this tool.
flag-messageFlag or unflag one or more email messages with a color flagFlag or unflag one or more email messages with a color flag
No input schema was published for this tool.
check-for-new-mailTrigger Mail.app to check for new mail on one or all accountsTrigger Mail.app to check for new mail on one or all accounts
No input schema was published for this tool.
redirect-messageRedirect an email message to new recipients (preserves original sender, unlike forward)Redirect an email message to new recipients (preserves original sender, unlike forward)
No input schema was published for this tool.
list-accountsList all Mail.app accounts with their email addresses, type, and enabled statusList all Mail.app accounts with their email addresses, type, and enabled status
No input schema was published for this tool.
list-signaturesList all email signatures configured in Mail.appList all email signatures configured in Mail.app
No input schema was published for this tool.
mark-as-junkMark or unmark one or more email messages as junk/spamMark or unmark one or more email messages as junk/spam
No input schema was published for this tool.
get-message-sourceGet the raw RFC822 source of an email messageGet the raw RFC822 source of an email message
No input schema was published for this tool.
list-attachmentsList all attachments of an email message with metadataList all attachments of an email message with metadata
No input schema was published for this tool.
set-message-colorSet the background color highlight of one or more email messages in Mail.appSet the background color highlight of one or more email messages in Mail.app
No input schema was published for this tool.
extract-email-addressParse a formatted email string (e.g. 'John Doe <jdoe@example.com>') into name and addressParse a formatted email string (e.g. 'John Doe <jdoe@example.com>') into name and address
No input schema was published for this tool.
21 of 21 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for macOS Mail.app — gives Claude native email access via AppleScript
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+42 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.