MCP servers · by job

Chat & email MCP servers

62 MCP servers that send and read messages in chat apps and mailboxes. 21 are SAFE, 21 CAUTION and 20 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Chat & email MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/messaging/page/2

Verdicts · 62 servers

✓SAFE21!CAUTION21✕BLOCK20

Transports

A server can list more than one transport.

Tool risk

22

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 17 tools.

Servers with no destructive tools →

62 chat & email servers

25–48 of 62 · ranked by trust score, then stars

Atmark

atmark-ai/atmark-mcp

✓SAFE B

Email for AI agents — its own address, not your Gmail. MCP client configs and examples for Atmark (invite-only).

★ 0Not listed in sourcestreamable-http

mbox-mcp

arose26/mbox-mcp

✓SAFE B

Search local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.

★ 03 readstdio

Discord Py Self

microck/discord.py-self-mcp

!CAUTION B

comprehensive Discord selfbot MCP server using discord.py-self

★ 71Not listed in sourcestdio

mailmcp-dist

kojott/mailmcp-dist

!CAUTION B

All your mailboxes in ChatGPT and Claude: self-hosted email MCP server (Gmail, Outlook, iCloud, any IMAP/SMTP). Passwords stay yours.

★ 1Not listed in sourcestdio

Extrovert JavaScript packages

extrovert-dot-dev/extrovert-js

!CAUTION B

TypeScript SDK and MCP server for Extrovert

★ 09 destructivestdio

IMAP

nikolausm/imap-mcp-server

!CAUTION B

A powerful Model Context Protocol (MCP) server for IMAP email integration with Claude

★ 1038 destructivestdio

inboxmcp

zhlei07/inboxmcp

✓SAFE B

Connect mailboxes to your AI with built-in progress and optional owner-confirmed replies — hosted MCP docs

★ 0Not listed in sourcestreamable-http

mailsift

itswl/mailsift

!CAUTION B

Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.

★ 01 readstdio

mailtea-agent-plugin

mailtea-app/mailtea-agent-plugin

!CAUTION B

Portable Agent Plugins 1.0.0 package for Mailtea — skills plus MCP so AI agents can send, schedule, and manage email.

★ 0Not listed in sourcestreamable-http

apple-mail-mcp

sweetrb/apple-mail-mcp

!CAUTION B

MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants

★ 912 readstdio

Microsoft Cloud Platform

aanerud/mcp-microsoft-office

!CAUTION B

an local MCP server you can run on your env, connecting you to Microsoft Graph, and the complete M365 eco system.

★ 555 write

NornWeave

datacovey/nornweave

!CAUTION C

An open-source, self-hosted API that turns standard email providers (Mailgun, SES, SendGrid) into "Inbox-as-a-Service" for AI Agents.

★ 293 writesse

Better Email

n24q02m/better-email-mcp

!CAUTION C

IMAP/SMTP email for AI agents -- read, send, organize folders, and manage attachments across multiple accounts, with auto-discovery.

★ 331 writestdio

artist-mcp

ManudotaORG/artist-mcp

!CAUTION C

Read your OneNote pages in Claude Desktop or Codex. An npm-published MCP server that signs in on your own machine, with Gmail and Calendar as supporting evidence, opt-in writes, and editable workflow playbooks.

★ 11 destructivestdio

mailbox

benethos-hub/mailbox

!CAUTION C

Self-hosted REST API and web UI for all your mailboxes (IMAP, JMAP, POP3, Gmail, Microsoft 365, Outlook.com), with a Python client and an MCP server so AI agents read, sort, draft and send mail, only within the rights, folders and send limits you grant. Change feed, signed webhooks, audit.

★ 2Not listed in sourcestdio

WhatsApp

verygoodplugins/whatsapp-mcp

!CAUTION C

WhatsApp MCP server - Connect Claude to WhatsApp for reading and sending messages

★ 2201 destructivestdio

google_workspace_mcp

taylorwilsdon/google_workspace_mcp

✕BLOCK D

Control Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks, Search & Drive with AI - Comprehensive Google Workspace MCP Server & CLI Tool

★ 3,288Not listed in sourcestdio

Google Workspace

taylorwilsdon/google_workspace_mcp

✕BLOCK D

Control Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks, Search & Drive with AI - Comprehensive Google Workspace MCP Server & CLI Tool

★ 3,205Not listed in sourcestdio

Email

codefuturist/email-mcp

✕BLOCK D

Email MCP server with full IMAP + SMTP support — read, search, send, manage, and organize email from any AI assistant via the Model Context Protocol

★ 1255 destructivestdio

Proton Mail Bridge Client

googlarz/proton-mail-bridge-client

✕BLOCK D

Local-first Proton Mail MCP server and CLI via Proton Bridge. Search, draft, send and organize mail from Claude Desktop, Claude Code or any MCP client. 96 tools, read-only and send-to-self modes.

★ 6914 destructivestdio

Matrix

mjknowles/matrix-mcp-server

✕BLOCK D

MCP Server for a Matrix home server integration; chat, manage rooms, etc.

★ 525 writestreamable-http

Outlook

xenoxilus/outlook-mcp

✕BLOCK D

MCP server for Microsoft Office 365 Outlook – email, calendar & SharePoint integration for Claude, ChatGPT, and AI assistants via Microsoft Graph API

★ 262 destructivestdio

Telegram Notifications

kstonekuan/telegram-notification-mcp

✕BLOCK D

Simple MCP server to send you notifications on telegram

★ 221 write

commune-cookbook

black22345/commune-cookbook

✕BLOCK D

Provide AI agents with real email and phone identities using production-ready tools compatible with LangChain, CrewAI, and other frameworks.

★ 25 writestdio

Other jobs

By risk

Questions

How do you decide which servers are chat & email servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which chat & email MCP servers rank highest on trust?
WhatsApp (lharries/whatsapp-mcp), Agent Kit (keyid-ai/agent-kit) and Apple Mail (patrickfreyer/apple-mail-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many chat & email servers only read?
7 of the 62 declare tools that all only read; 22 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.