mailpouch (chandshy/mailpouch) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it: we have no way to read this server ourselves. No publisher has claimed this listing.
An MCP server that gives AI agents permission-gated, audit-logged access to private email providers (Proton Mail via Bridge and plain IMAP), running locally with OAuth-based authentication and human-controlled escalation for destructive operations.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
chandshy
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
CHECK_CHANGELOG_BODYGH_TOKENGITHUB_API_URLGITHUB_REPOSITORYGITHUB_SERVER_URLGITHUB_STEP_SUMMARYGITHUB_TOKENINIT_CWDMAILPOUCH_AUDIT~/.mailpouch.audit.jsonl Override escalation audit log pathMAILPOUCH_CONFIG~/.mailpouch.json Override config file pathMAILPOUCH_E2E_BACKENDMAILPOUCH_E2E_BRIDGE_CONFIGMAILPOUCH_FORCE_STDIOunset Force stdio for this spawn even if the config has remoteMode: true. Set on a stdio MCP-client entry (e.g. Claude Code) so it speaks stdio instead of starting the HTTP server.MAILPOUCH_INSECURE_BRIDGEunset Per-launch opt-in to localhost Bridge without a pinned certMAILPOUCH_LOG_FILE~/.mailpouch.log Override log file pathMAILPOUCH_MACHINE_SECRETderived from host Override the machine-binding secret used to encrypt at-rest credentialsMAILPOUCH_NO_SINGLETONMAILPOUCH_PENDING~/.mailpouch.pending.json Override pending escalations file pathMAILPOUCH_RELEASE_BODYMAILPOUCH_RELEASE_SHAMAILPOUCH_RELEASE_TAGMAILPOUCH_TEST_RUNTIME_PATHMAILPOUCH_TIERProgressive tool tiering — core / extended / complete controls how many tools land in the client's ListTools response, so context isn't burned on tools you don't use. Configurable via toolTier or .MAILPOUCH_TRUST_LOCALMAILPOUCH_WAIVE_BRIDGE_E2EPRESHIP_LICENSE_WRITEPRESHIP_NO_BRIDGEPRESHIP_SKIPPRESHIP_VERBOSEPROGRAMFILESPORTAll four hints declared on every tool
86/86 tools missing one or more hints — mark_email_read (missing: openWorldHint); star_email (missing: openWorldHint); mark_answered (missing: openWorldHint), +83 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
50/86 tools referenced in tests (58%)
Write tests that reference each tool by name so every tool has at least one test.
No eval / new Function
1 eval() or new Function() call — dynamic code execution
Replace eval / Function with explicit parsing or safer alternatives.
Shell command execution
31 child_process calls — runs shell commands
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
No arbitrary install scripts
Has postinstall/preinstall script — runs arbitrary code on npm install
Remove postinstall/preinstall hooks unless they’re essential.
Domain consistency
npm scope @mailpouch doesn't match GitHub owner chandshy
Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/chandshy-mailpouch-1t62ir)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check