Email MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection
Connect Runs on your machine
claude mcp add pylos-mcp -e EMAIL_USER=<EMAIL_USER> -e EMAIL_PASSWORD=<EMAIL_PASSWORD> -e PROVIDER=<PROVIDER> -e IMAP_HOST=<IMAP_HOST> -e CAPABILITIES=<CAPABILITIES> -e MS_CLIENT_ID=<MS_CLIENT_ID> -e MS_TENANT=<MS_TENANT> -e ACCOUNTS=<ACCOUNTS> -- npx -y [email protected]{
"mcpServers": {
"pylos-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"EMAIL_USER": "<EMAIL_USER>",
"EMAIL_PASSWORD": "<EMAIL_PASSWORD>",
"PROVIDER": "<PROVIDER>",
"IMAP_HOST": "<IMAP_HOST>",
"CAPABILITIES": "<CAPABILITIES>",
"MS_CLIENT_ID": "<MS_CLIENT_ID>",
"MS_TENANT": "<MS_TENANT>",
"ACCOUNTS": "<ACCOUNTS>"
}
}
}
}{
"mcpServers": {
"pylos-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"EMAIL_USER": "<EMAIL_USER>",
"EMAIL_PASSWORD": "<EMAIL_PASSWORD>",
"PROVIDER": "<PROVIDER>",
"IMAP_HOST": "<IMAP_HOST>",
"CAPABILITIES": "<CAPABILITIES>",
"MS_CLIENT_ID": "<MS_CLIENT_ID>",
"MS_TENANT": "<MS_TENANT>",
"ACCOUNTS": "<ACCOUNTS>"
}
}
}
}{
"servers": {
"pylos-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"EMAIL_USER": "<EMAIL_USER>",
"EMAIL_PASSWORD": "<EMAIL_PASSWORD>",
"PROVIDER": "<PROVIDER>",
"IMAP_HOST": "<IMAP_HOST>",
"CAPABILITIES": "<CAPABILITIES>",
"MS_CLIENT_ID": "<MS_CLIENT_ID>",
"MS_TENANT": "<MS_TENANT>",
"ACCOUNTS": "<ACCOUNTS>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
EMAIL_USERRequired | Account login. |
EMAIL_PASSWORDOptional, secret | App password. Either this or EMAIL_PASSWORD_CMD is required, except with PROVIDER=outlook, which signs in through the browser. |
PROVIDEROptional | One of gmail, outlook, icloud, yahoo, gmx, fastmail, mailbox.org, posteo. Fills in IMAP, SMTP and Sieve hosts and ports. |
IMAP_HOSTOptional | IMAP hostname for self-hosted or unlisted providers. Overrides the preset. |
CAPABILITIESOptional | Comma-separated list of tiers beyond read, which is always included. Defaults to drafts. |
MS_CLIENT_IDOptional | With PROVIDER=outlook only. Application ID of an app registered in your organization's tenant. |
MS_TENANTOptional | With PROVIDER=outlook only. Tenant ID or domain, for a single-tenant MS_CLIENT_ID. |
ACCOUNTSOptional | Names of several accounts, separated by commas, each 1 to 16 lowercase letters or digits. Each account's settings then end in __ and its name in capitals, such as EMAIL_USER__WORK. Leave the unsuffixed account settings out. |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 3 Nov 2026 |
| Last updated | 3 Nov 2026 |
| Registry name | io.github.adamVass/pylos-mcp |
More communication servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.