MCP servers · by job

Chat & email MCP servers

62 MCP servers that send and read messages in chat apps and mailboxes. 21 are SAFE, 21 CAUTION and 20 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Chat & email MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/messaging/page/3

Verdicts · 62 servers

✓SAFE21!CAUTION21✕BLOCK20

Transports

A server can list more than one transport.

Tool risk

22

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 17 tools.

Servers with no destructive tools →

62 chat & email servers

49–62 of 62 · ranked by trust score, then stars

AI-Agent-Email-List

lbesecker195/AI-Agent-Email-List

✕BLOCK D

Free SMTP relay and email API with an MCP server that AI agents can sign up for themselves. Mailgun-compatible, DKIM signing, automatic warmup, inbound mail.

★ 1Not listed in sourcestreamable-http

tossinbox

mohamed-khairy-5i/tossinbox

✕BLOCK D

Disposable email (temp mail) CLI + MCP server for AI agents. Spawn a throwaway inbox, wait for the OTP verification code, toss it. --json on every command, exit codes 0-4, no sign-up, no API keys. Node 18+, Homebrew, npm, npx, GitHub Action.

★ 11 writestdio

radmail-mcp

radmail-ai/radmail-mcp

✕BLOCK D

Email MCP server / email operating system for AI agents: two-axis triage (importance x urgency), a Right Now lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money/banking-change/first-contact = human-only). Zero-auth sandbox; the hosted tier never sends ma

★ 03 writestdio

mcp-google-multi

bakissation/mcp-google-multi

!CAUTION D

Multi-account Google MCP server for Claude Code: Gmail, Drive, Calendar, Sheets, Docs, Contacts, Search Console, and more. ~871 tools with OAuth2 multi-account switching.

★ 1527 destructivestdio

eule-mcp

metaneutrons/eule-mcp

✕BLOCK D

MCP server for office work with mail & calendar (MS365, iCloud, Gmail, IMAP)

★ 07 destructivestdio

Changesets

maildev/maildev

✕BLOCK D

:mailbox: SMTP Server + Web Interface for viewing and testing emails during development.

★ 6,1352 destructivestdio

dead-letter

BigCactusLabs/dead-letter

✕BLOCK F

Convert .eml email exports to Markdown with YAML front matter

★ 85 readstdio

answerLoops

answerLoops/answerLoops

✕BLOCK F

🚀 Agent-native AI support that turns your docs into answers for your community. Built for your agents with skills and MCP.

★ 191 write

openagentemail

openagentemail/openagentemail

!CAUTION F

Open communication and task handoffs for AI agents — self-hosted email, task threads, approvals, and webhooks over MCP and REST. Apache-2.0.

★ 491 destructivestdio

Sendmux

sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

fluxmail

churichard/fluxmail

✕BLOCK F

Self-hosted email CLI / API / MCP server for AI agents and apps

★ 71 readstdio

sendmux-sdk

Sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

Beever Atlas

beever-ai/beever-atlas

✕BLOCK F

Your First LLM-Wiki Conversation Knowledge Base

★ 4482 writestdio

talon-agent

thefalconry/talon

✕BLOCK F

🦅 Multi-platform agentic AI harness — runs on Telegram, Discord, Teams & Terminal with a pluggable backend (Claude, Kilo, OpenCode, Codex, OpenAI Agents), full MCP tool access, and persistent background agents (Goals, Heartbeat, Dream).

★ 7813 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are chat & email servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which chat & email MCP servers rank highest on trust?
WhatsApp (lharries/whatsapp-mcp), Agent Kit (keyid-ai/agent-kit) and Apple Mail (patrickfreyer/apple-mail-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many chat & email servers only read?
7 of the 62 declare tools that all only read; 22 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.