Back to MCP Trust Indexm8ven
69
/ 100
10 days ago
glama

cpanel-mail-mcp

Manages email accounts via IMAP/SMTP, enabling reading, searching, sending, replying, forwarding, and folder management with multi-user and OAuth support.

→ rosauceda/cpanel-mail-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
22 tools verified — handlers match their declared behaviour
7 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: CPANEL_PASS, MCP_OAUTH_CLIENT_SECRET, MCP_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCPANEL_USER— e =you@example.com \
🔐 secretCPANEL_PASS— e ='your_password' \
configCPANEL_ACCOUNT_NAME
configCPANEL_SMTP_HOST— e =mail.example.com \
configCPANEL_SMTP_PORT
configCPANEL_IMAP_HOST— e =mail.example.com \
configCPANEL_IMAP_PORT
configCPANEL_SENT_FOLDER
configCPANEL_DRAFTS_FOLDER
configCPANEL_SAVE_TO_SENT
configCPANEL_FROM_NAME
configEMAIL_ACCOUNTS_JSON— ## 1. (best for multi-account)
configEMAIL_ACCOUNTS_FILE— export EMAIL_ACCOUNTS_JSON='[{...one account...}]' # or
configCF_ACCESS_AUD— audience tag / SaaS app Client ID
configCF_ACCESS_OIDC_ISSUER— full CF OIDC issuer URL
configCF_ACCESS_JWKS_URL
configCF_ACCESS_TEAM_DOMAIN
configMCP_OAUTH_UPSTREAM_ISSUER— same as above (enables the DCR proxy)
configMCP_OAUTH_CLIENT_ID— SaaS app Client ID
🔐 secretMCP_OAUTH_CLIENT_SECRET— SaaS app Client Secret
configMCP_ALLOWED_HOSTS
configMCP_ALLOWED_ORIGINS
configMCP_DISABLE_DNS_REBINDING_PROTECTION
configEMAIL_ENV_FILE— export =/absolute/path/to/.env
configEMAIL_SEND_CONFIRMATION_CODE— export =please-send
configMCP_LOG_LEVEL
configMCP_TRANSPORT— export =streamable-http
configMCP_HOST— export =127.0.0.1
configMCP_PORT— export =8080
🔐 secretMCP_AUTH_TOKEN— export ="$(python3 -c 'import secrets; print(secrets.token_urlsafe(36))')"
configMCP_RESOURCE_URL— public URL of this server
configMCP_OAUTH_AUTHORIZATION_SERVERS
configMCP_MAX_ATTACHMENT_MB— Total attachment size is capped by (default 25 MB).
configEMAIL_USERS_FILE— after logging out and back in (so $ is exported):
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/rosauceda-cpanel-mail-mcp-kquo16)](https://m8ven.ai/mcp/rosauceda-cpanel-mail-mcp-kquo16)
commit: b9ec03818c0a2b41c149ce4f777c0a79f5920380
code hash: e68443d20d1bc421e55f2535d956365cda2316d56178ba1ba78726c231805c4f
verified: 7/21/2026, 9:36:34 AM
view raw JSON →