MCP server for Proton Mail via Proton Bridge (IMAP/SMTP)
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"protonmail-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# protonmail-mcp [](https://github.com/mhbxyz/protonmail-mcp/actions/workflows/ci.yml) [](https://github.com/mhbxyz/protonmail-mcp/actions/workflows/codeql.yml) [](https://scorecard.dev/viewer/?uri=github.com/mhbxyz/protonmail-mcp) A lightweight [MCP](https://modelcontextprotocol.io) server that gives AI agents read access to a Proton Mail mailbox through a local [Proton Bridge](https://proton.me/mail/bridge) instance. > **Unofficial.** This project is not affiliated with, endorsed by, or supported by > Proton AG. "Proton Mail" and "Proton Bridge" are trademarks of Proton AG. Proton does not provide a public API for reading your mailbox. Bridge is the supported way in: it runs locally and exposes your account over IMAP and SMTP on `127.0.0.1`. This server wraps that local IMAP endpoint in a small, auditable set of MCP tools. ## Scope Capabilities are opt-in through policy (see [Capability policy](#capability-policy)) and enforced server-side: - **read** (default): folders, messages, search, threads, digests, attachments and `.eml` export into a local sandbox. Mailboxes are opened with IMAP `SELECT ... READONLY`; nothing is modified, not even the `\Seen` flag. - **draft**: create, preview, reply/forward, update and delete drafts, all two-phase. - **organize**: seen/flagged state, moves with undo, label add/remove. - **send**: submit an existing draft through Bridge SMTP after allowlist, quota, size and loop-guard checks. - **delete**: permanently erase one message from Trash, with a typed confirmation phrase and no bulk operation. Every mutation is prepare/commit with payload-bound confirmation tokens; see [SECURITY.md](SECURITY.md) for the security model. ## Tools | Tool | Description …
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.