EmailMCP

set_personal_email_credentials

Attach a personal account's own SMTP + IMAP credentials (iCloud, Gmail app password, Fastmail, Office365, etc.) to an existing account. Once set, send_email with from= sends via that SMTP and IMAP-APPENDs a copy to its Sent folder. Passwords are AES-256-GCM encrypted at rest with EMAILMCP_SECRET.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "address": "<address>",
      "smtp_host": "<smtp_host>",
      "smtp_user": "<smtp_user>",
      "smtp_password": "<smtp_password>",
      "imap_host": "<imap_host>",
      "imap_user": "<imap_user>",
      "imap_password": "<imap_password>"
    },
    "name": "set_personal_email_credentials"
  }
}

Input Schema

Name	Required	Description
`address`	Yes	Address of the existing account (must already be created via create_email_account)
`imap_host`	Yes	e.g. imap.mail.me.com, imap.gmail.com, imap.fastmail.com
`imap_port`	No	Default 993
`imap_user`	Yes	IMAP username — usually the full email address
`smtp_host`	Yes	e.g. smtp.mail.me.com (iCloud), smtp.gmail.com, smtp.fastmail.com
`smtp_port`	No	Default 587
`smtp_user`	Yes	SMTP username — usually the full email address
`sent_folder`	No	Override Sent folder name. Auto-discovered via SPECIAL-USE if omitted.
`imap_password`	Yes	IMAP password (often same as SMTP)
`smtp_password`	Yes	SMTP password or app-specific password

Schema Changelog

Changes observed during successful MCP inspections.

AddedJul 9, 2026

TDQS

A4.4/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full responsibility. It goes beyond the schema by explaining the side effect on send_email (SMTP sending and IMAP-APPEND to Sent folder) and discloses AES-256-GCM encryption at rest with EMAILMCP_SECRET. This is detailed behavioral transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action and resource, and every clause adds value (purpose, services, effect, encryption). No redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the core behavior and security, and the schema fully documents all parameters. It lacks explicit mention of prerequisites like account creation (though schema says 'must already exist') and behavior on overwrite, but given no output schema, return values are not needed. Overall adequate for a 10-param tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds context like service examples and the encryption aspect, but individual parameter descriptions in the schema already provide examples and defaults. The description does not add substantial new meaning for specific parameters beyond what the schema includes.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool attaches SMTP + IMAP credentials to an existing account, with a specific verb 'attach' and resource 'credentials to an existing account'. It distinguishes from siblings like create_email_account by emphasizing the existing account and personal services (iCloud, Gmail, Fastmail, Office365).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use it: for personal accounts with existing credentials, and notes the effect on send_email. It does not explicitly exclude alternatives or name sibling tools, but the context 'to an existing account' clarifies that the account must already exist, which is sufficient guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All EmailMCP tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.