An MCP server that gives AI agents permission-gated, audit-logged access to private email providers (Proton Mail via Bridge and plain IMAP), running locally with OAuth-based authentication and human-controlled escalation for destructive operations.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection
Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception
Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization
process.env. You'll be asked to provide them before it can run.ANSICONCHECK_CHANGELOG_BODYCOLORTERMConEmuANSIDISPLAYFORCE_COLORINIT_CWDMAILPOUCH_AUDIT— ~/.mailpouch.audit.jsonl Override escalation audit log pathMAILPOUCH_CONFIG— ~/.mailpouch.json Override config file pathMAILPOUCH_E2E_BRIDGE_CONFIGMAILPOUCH_FORCE_STDIO— unset Force stdio for this spawn even if the config has remoteMode: true. Set on a stdio MCP-client entry (e.g. Claude Code) so it speaks stdio instead of starting the HTTP server.MAILPOUCH_INSECURE_BRIDGE— unset Per-launch opt-in to localhost Bridge without a pinned certMAILPOUCH_MACHINE_SECRET— derived from host Override the machine-binding secret used to encrypt at-rest credentialsMAILPOUCH_NO_SINGLETONMAILPOUCH_PENDING— ~/.mailpouch.pending.json Override pending escalations file pathMAILPOUCH_SMTP_ALLOW_PLAINTEXTMAILPOUCH_SMTP_FROMMAILPOUCH_TIER— Progressive tool tiering — core / extended / complete controls how many tools land in the client's ListTools response, so context isn't burned on tools you don't use. Configurable via toolTier or .MAILPOUCH_TRUST_LOCALNO_COLORPORT— 8766 Override settings UI HTTP server portPRESHIP_LICENSE_WRITEPRESHIP_NO_BRIDGEPRESHIP_SKIPPRESHIP_VERBOSEPROGRAMFILESProgramFilesProgramFiles(x86)TERMTERM_PROGRAMWAYLAND_DISPLAYWT_SESSION[](https://m8ven.ai/mcp/chandshy-mailpouch-1t62ir)