/ 100

20 days ago

glama

Submail

Item: Submail
Rating: 74
Author: M8ven

A self-hosted unified inbox that connects multiple mailboxes and exposes email capabilities (read, send, AI, translation) through MCP and HTTP APIs.

→ guozhijian611/submail · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 5 credentials: SUBMAIL_ADMIN_PASSWORD, SUBMAIL_CURRENT_SECRET, SUBMAIL_MCP_API_KEY, SUBMAIL_MYSQL_PASSWORD, SUBMAIL_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configSUBMAIL_ADMIN_EMAIL

configSUBMAIL_ADMIN_NAME

🔐 secretSUBMAIL_ADMIN_PASSWORD

configSUBMAIL_API_URL

configSUBMAIL_BREAK_STALE_RUNTIME_LOCK

configSUBMAIL_CONFIRM_RESTORE

🔐 secretSUBMAIL_CURRENT_SECRET

configSUBMAIL_DB_DRIVER

configSUBMAIL_DB_PATH

configSUBMAIL_HOST

configSUBMAIL_IGNORE_RUNTIME_LOCK

🔐 secretSUBMAIL_MCP_API_KEY— sk_submail_xxx \

configSUBMAIL_MCP_HOST

configSUBMAIL_MCP_TRANSPORT

configSUBMAIL_MYSQL_DATABASE

configSUBMAIL_MYSQL_HOST

🔐 secretSUBMAIL_MYSQL_PASSWORD

configSUBMAIL_MYSQL_URL

configSUBMAIL_MYSQL_USER

configSUBMAIL_QUEUE_DRIVER— Queue: in-memory by default; set =redis and SUBMAIL_REDIS_URL to test Redis

configSUBMAIL_QUEUE_PREFIX

configSUBMAIL_REDIS_URL— Queue: in-memory by default; set SUBMAIL_QUEUE_DRIVER=redis and to test Redis

🔐 secretSUBMAIL_SECRET— Mailbox credentials and third-party API keys are encrypted at rest with AES-GCM using .

configSUBMAIL_STORAGE_DIR

configVITE_API_BASE_URL

configVITE_DEV_API_TARGET

configVITE_DEV_MCP_TARGET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/guozhijian611-submail-1tno5s)](https://m8ven.ai/mcp/guozhijian611-submail-1tno5s)

commit: 6e4cb4b109cfa31f637806cb97e8c7e9fec48b1e

code hash: cc4570bcead05c3c16c5c1b5892abd91e50b5fd05218fd9eed0941bd23c84ee1

verified: 7/11/2026, 8:17:39 AM

view raw JSON →