Atlas / MCP servers / itswl / mailsift

mailsiftCAUTION

Name: mailsift
Author: itswl

mcp/itswl/mailsift

MCP server by itswl · email · email triage · feishu · Audited 2026-10-11

Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.

Verdict

CAUTION

Grade

Trust score

85 /100

Exposed tools

1 1r · 0w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Unified IMAP monitoring for important email. mailsift scans every configured mailbox—including spam folders—uses an LLM plus local rules to classify messages, and sends important results to Feishu or a generic webhook.

mailsift is an assistant, not a mail client. It is read-only: it does not send, reply to, organize, or mark messages as read. Classification can be wrong, so keep using your mail client as the source of truth.

中文文档:README.zh-CN.md。

Features

Any IMAP provider, with multiple accounts.
Spam-folder monitoring with provider-specific folder-name detection.
Personal rules plus LLM classification; keyword fallback when the LLM is not configured or fails.
Real-time push notifications and a daily digest.
Crash-safe cursor handling and recovery for interrupted processing.
Optional MCP server for querying local triage results.

Quick start

git clone https://github.com/itswl/mailsift.git
cd mailsift
cp .env.example .env
vim .env
docker compose up -d

At minimum, configure one mailbox, one output (FEISHU_WEBHOOK_URL or WEBHOOK_URL), and optionally an LLM API key. For local development with Node >= 22.5:

npm install
npm run check
npm run dev

Configuration

All settings are environment variables. See .env.example for the complete template.

MAIL_ACCOUNT_1=qq|[email protected]|app-password
MAIL_ACCOUNT_1_NAME=personal-qq
MAIL_ACCOUNT_1_FOLDERS=all

MAIL_ACCOUNT_2=imap|[email protected]|password|imap.example.com

FEISHU_WEBHOOK_URL=
WEBHOOK_URL=
WEBHOOK_TOKEN=

LLM_PROVIDER=deepseek
LLM_MODEL=deepseek-flash
LLM_API_KEY=

PUSH_MIN_IMPORTANCE=warning
SPAM_RANK_BONUS=0
DIGEST_ENABLED=true
DIGEST_HOUR=9

MAIL_ACCOUNT_N_FOLDERS accepts all, INBOX,spam, or explicit folder names. The all token excludes sent, drafts, trash, and provider-wide virtual views. The spam token detects the provider's spam folder.

SUPPRESS_SELF_FORWARDS=true (the default) stops one me

Read from source at commit 1578c80988c6OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add mailsift --env FEISHU_WEBHOOK_SECRET=${FEISHU_WEBHOOK_SECRET} --env GMAIL_CLIENT_SECRET=${GMAIL_CLIENT_SECRET} --env LLM_API_KEY=${LLM_API_KEY} --env MCP_TOKEN=${MCP_TOKEN} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "mailsift": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "FEISHU_WEBHOOK_SECRET": "${FEISHU_WEBHOOK_SECRET}",
        "GMAIL_CLIENT_SECRET": "${GMAIL_CLIENT_SECRET}",
        "LLM_API_KEY": "${LLM_API_KEY}",
        "MCP_TOKEN": "${MCP_TOKEN}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`mailsift`	read	What arrived in your mailboxes, and how it was judged.

Trust audit

CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found