Six ways to give Claude, ChatGPT or Cursor a real mailbox, ranked: two hosted servers, an agent tool platform, two you run yourself, and the built-in connectors.
Third-party figures read on 8 September 2026 Every claim links to its source Each entry lists its weaknesses
The short version
Best overall
mcpemails, several mailboxes behind one MCP URL, scoped OAuth, an approval hold before anything sends.
Best for EU compliance
MailMCP, France-only hosting on an ISO 27001 certified provider, plus calendar and contacts.
Best for multi-tool agents
Composio, email is one of 1,500+ toolkits behind a single gateway.
Best to self-host
Wh1isper/mcp-email-server, local, multi-account, no hosted party involved.
Best if you use one AI app
Built-in connectors, nothing to run, but it only works inside that vendor.
The 6 best email MCP servers, ranked
Every entry lists what it is bad at, including the first one.
How we ranked them
Five criteria, weighted in this order: mailboxes and providers reached, what it does with your credentials and your mail, what it costs as mailboxes are added, whether you can move off it, and setup effort. We build the first entry and the weighting is ours, so disagree with it if you like. Every third-party figure was read at its source on 8 September 2026 and linked at the foot of the page; where a public page did not answer, we say so rather than guess.
1
Number 1: mcpemails
Editor's pick
The only one of these that puts several mailboxes behind a single MCP URL, authorises the connection with scoped OAuth rather than a mailbox credential, and can hold outbound mail for a human before it sends.
Price. Free: 1 inbox, 150 email actions a month with the first 7 days uncounted, no daily cap. Paid from $5 a month for 3 inboxes ($48 a year) with no monthly action cap. Pro is $15 a month for as many inboxes as you own.
Gmail over the Gmail API with Google sign-in; Fastmail, iCloud, Yahoo, Zoho, Yandex and any IMAP mailbox with an app password. Several at once, one URL.
OAuth 2.1 with dynamic client registration, S256 PKCE and 9 scopes: a connection without the send scope cannot be talked into sending, by you or by a hostile email.
An approval hold per inbox, on every plan including free, and no message content stored.
No ISO 27001 certificate of our own. You pick an EU or US region at signup, but if procurement wants a certificate, MailMCP has one and we do not.
No calendar, and no stored address book: contacts are scanned live out of recent mail.
For exactly one mailbox on an annual plan, MailMCP is cheaper.
Best for. Anyone with more than one mailbox, or who wants to bound what an agent may do with it.
A hosted MCP email server run from Paris, with a CalDAV calendar and a CardDAV address book in the same server. The strongest EU compliance story here.
Price. Free: 1 mailbox, 5 MCP calls a day. Then EUR 7.99 per mailbox per month, or EUR 35.88 per mailbox for a year.
France-only hosting on an ISO 27001 certified provider, and a stated position that data never leaves the EU.
Calendar and contacts alongside mail, which nothing else here offers.
Any IMAP and SMTP mailbox, over OAuth2 with PKCE. No email content stored.
Billed per mailbox, so three mailboxes cost three times one.
The free tier is 5 MCP calls a day, which one triage run will exhaust.
Hosted only. No self-host path if you want off.
Best for. Teams where EU-only hosting is non-negotiable, and anyone with one mailbox who wants the smallest annual bill.
Not really an email server: an agent tool platform with 1,500+ toolkits and a managed MCP gateway, of which email is a handful. The right answer to a different question.
Price. Free: 100,000 tool calls and 50,000 trigger events a month, 3 team members. Pro is $29 a month including $29 of usage credit, then $0.0003 a tool call.
One gateway and one auth layer for Gmail, Outlook, Salesforce, Linear, Slack, GitHub and 1,500+ more.
Gmail and Outlook through their own APIs with OAuth, not IMAP.
By far the most generous free tier here, if tool calls are your unit.
We found no generic IMAP toolkit in the catalogue we read, so a mailbox at a small host or a company Exchange server is not obviously covered.
Storage and data residency are not stated on the pages we read.
Best for. Agents where email is one tool among many and you are already building on an SDK.
The largest local feature surface of anything here: 47 tools, 7 prompts and 6 resources, plus scheduling, an IDLE watcher with rule-based triage, and calendar extraction from messages.
Price. Free and LGPL-3.0, on npm as @codefuturist/email-mcp.
Does more out of the box than any other self-hosted option, including rule-based triage on new mail.
Experimental OAuth2 for Gmail and Microsoft 365, not just app passwords.
Extracts calendar invitations out of messages.
Attachment downloads capped at 5 MB, the tightest limit here.
The feature surface is the configuration burden. Expect to spend time on it.
Best for. Self-hosters who want everything and will read the README to get it.
Worth being accurate about, because other comparison pages are not: since 18 August 2026 Claude's Gmail connector sends, replies and forwards on paid plans, with an approval prompt by default. It is no longer draft-only.
Price. Included with a paid plan from that vendor.
Nothing to install, configure or pay for separately.
Sends, replies and forwards, with an approval prompt in front of it.
It only works inside that one vendor's app. Your setup does not move to Cursor, to an SDK agent, or to the next model you try.
Coverage is the provider list that vendor chose, not every mailbox you own.
Best for. People with one AI app and one mainstream mailbox, who expect that to stay true.
Two hosted services, an agent tool platform, and running it yourself.
Capability
mcpemails
MailMCP
Composio
Self-hosted
Billed per
Workspace. Inboxes included in the tier.
Mailbox.
Tool call and trigger event.
Nothing. Your own machine.
Free tier
1 inbox, 150 email actions a month, first 7 days uncounted, no daily cap.
1 mailbox, 5 MCP calls a day.
100,000 tool calls a month.
Unlimited.
Cheapest paid
$5/mo for 3 inboxes, or $48/yr.
EUR 7.99/mailbox/mo, EUR 35.88/yr.
$29/mo, includes $29 of credit.
No licence fee.
Any IMAP or SMTP mailbox
Gmail and Outlook via their APIs. No generic IMAP toolkit found.
Several mailboxes, one MCP URL
Per-mailbox billing.
Local config, one machine.
MCP connection authorised by
OAuth 2.1, DCR, S256 PKCE, 9 scopes.
OAuth2 with PKCE.
Platform-managed OAuth gateway.
Nothing. Runs as your user.
Approval hold before sending
Per inbox, on every plan.
Not stated
Not stated
No.
Message content stored
No. Scheduled sends only, encrypted.
No, per their privacy policy.
Not stated
On your own disk.
Residency and certification
EU or US, picked at signup. No ISO 27001.
France only, ISO 27001 certified host.
Not stated
Wherever you put it.
Calendar and contacts
Live contact lookup. No calendar.
CalDAV and CardDAV.
Google Calendar, and 1,500+ tools.
Varies by project.
Run the same code yourself
Yes. AGPL-3.0, Docker Compose.
Hosted only.
Hosted only.
That is the whole proposition.
"Not stated" means the pages we read on 8 September 2026 did not answer that question, not that the capability is missing. Tool counts are absent on purpose: every server groups its tools differently, so a bigger number is not a better server.
Before you pick one
Including the answers that do not flatter us.
Which email MCP server is best?
mcpemails, for most people: several mailboxes behind one MCP URL, a scoped OAuth connection instead of a shared mailbox credential, an approval hold before an agent can send, and an AGPL-3.0 self-host path if you want off. Pick MailMCP if EU-only hosting under an ISO 27001 certified provider is a hard requirement, Composio if email is one of many tools your agent needs, and Wh1isper/mcp-email-server if you want no hosted party at all.
MailMCP is cheaper. Why would I pay more?
For one mailbox on an annual plan they are, and we say so above rather than hiding it. They bill per mailbox, we bill per workspace: three mailboxes there is three times EUR 35.88, ours is $48 a year for three or $144 for as many as you own. If you will only ever want one mailbox, buy theirs.
Do I hand over my email password?
For Gmail, no: you sign in with Google and we hold a revocable OAuth token. Everywhere else you create a provider-issued app password, revocable at your provider without involving us. Either credential is encrypted at rest with AES-256-GCM, and your AI client never sees it: the MCP connection is its own OAuth 2.1 authorisation with its own scopes.
Can an agent send email without me seeing it first?
Only if you let it. Any inbox can require human approval before outbound mail is dispatched, so an agent prompt-injected by a hostile message still cannot get mail out of your account. Scopes are the second layer: a connection without the send scope cannot send, whatever a message tells the model.
Is my mail stored anywhere?
No. Messages are fetched live on each call and dropped once the response is sent, with no copy of any body, subject, attachment or contact. The exception is a message you schedule, which has to be held until its send time and is encrypted while it waits. MailMCP states the same no-storage position, so this is not a point of difference between us.
