io.github.voidly-ai/mcp-email

What it mainly works on, as our AI model read its tool descriptions: email, chat or social accounts.

11 of 21 tools are described as changing something (creating, editing, deleting, sending or running).

• voidmail_create_accountcreates or changes datadescribed as changing data

  “Create a new @voidmail.ai inbox.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  2 inputs

  • namestring“Agent name (optional)”
  • addressstring“Preferred local part, for example myagent; the exact myagent@voidmail.ai address is also accepted.”
• voidmail_account_inforeads or searches

  “Get information about the current agent email account, including whether a mail encryption key for it is on this machine.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

• voidmail_list_inboxon 2 other serversreads or searches

  “List emails in the agent inbox.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • limitinteger“Max emails to return (default 50, max 100)”
  • offsetinteger“Pagination offset”
  • unreadboolean“Only return unread emails”
  • categorystring“Filter by category”
• voidmail_read_emailon 2 other serversreads or searchesdescribed as changing data

  “Read a specific email by ID and mark it as read.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  1 input, 1 required

  • email_idstringrequired“Email ID to read”
• voidmail_search_inboxreads or searches

  “Search emails by keyword on this machine.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs, 1 required

  • querystringrequired“Nonempty search query (case-insensitive substring; surrounding spaces are ignored)”
  • limitinteger“Max results (default 20, max 100)”
  • scaninteger“How many of the newest messages to search (default 200, max 1000)”
  • full_textboolean“Also download and search whole encrypted bodies (slower; downloads stop after about 64 MiB per search)”
• voidmail_wait_for_emailreads or searches

  “Wait up to 25 seconds for a new email, such as a sign-up verification message.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • fromstring“Exact sender address (case-insensitive)”
  • subjectstring“Text the subject must contain (case-insensitive)”
  • sincestring“Only messages received at or after this ISO UTC time, for example 2026-10-16T12:00:00Z”
  • timeout_secondsinteger“Maximum wait, 1-25 seconds (default 25)”
• voidmail_extract_codereads or searches

  “Find a likely one-time code and HTTPS verification link in one email: the message with email_id, or else the newest message matching the optional filters (exact sender, subject contains, received sin…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • email_idstring“Message id from voidmail_wait_for_email or voidmail_list_inbox”
  • fromstring“Exact sender address (case-insensitive)”
  • subjectstring“Text the subject must contain (case-insensitive)”
  • sincestring“Only messages received at or after this ISO UTC time, for example 2026-10-16T12:00:00Z”
• voidmail_sending_limitson 2 other serversreads or searches

  “Read sending limits before planning email work.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

• voidmail_send_emailsends messagesdescribed as changing data

  “Legacy send without durable status.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  4 inputs, 2 required

  • tostringrequired“Recipient email address”
  • subjectstringrequired“Email subject”
  • textstring“Plain text body”
  • htmlstring“HTML body (optional)”
• voidmail_send_onceon 2 other serverssends messagesdescribed as changing data

  “Preferred send: one message bound to a stable operation ID saved by the host before this call.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  6 inputs, 3 required

  • operationIdstringrequired“Stable ID generated and saved by the host before dispatch.”
  • tostringrequired
  • subjectstringrequired
  • textstring
  • htmlstring
  • replyTostring
• voidmail_send_statuson 2 other serversreads or searches

  “Read a retained send operation owned by this mailbox.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input, 1 required

  • operationIdstringrequired“Stable ID generated and saved by the host before dispatch.”
• voidmail_policyreads or searches

  “Read this mailbox's sending policy: recipient policy (open or allowlist), content policy, approved recipients and pending approval requests.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.