zoho-mail-mcp
zoho-mail-mcp
一个用于 Zoho Mail 的 Model Context Protocol 服务器。让 Claude(或任何 MCP 客户端)无需浏览器自动化即可从 Zoho Mail 账户读取、搜索和发送电子邮件。
官方 MCP 注册表中尚无同类产品 — 此项目填补了这一空白。
工具
工具 | 描述 |
| 列出收件箱中的近期邮件 — 返回发件人、主题、日期、messageId 和 folderId |
| 按关键词、发件人邮箱或主题片段进行搜索 |
| 根据 messageId 和 folderId 读取完整的邮件正文 |
| 从您配置的发件人地址发送电子邮件 |
Related MCP server: email
先决条件
一个 Zoho Mail 账户
Node.js 18+
设置
1. 创建 Zoho OAuth 应用
前往 Zoho API 控制台
创建一个 Self Client 应用
在 Generate Code 下,添加以下作用域:
ZohoMail.messages.READ,ZohoMail.messages.CREATE,ZohoMail.folders.READ,ZohoMail.accounts.READ将有效期设置为 10 分钟,添加描述,点击 Create
复制生成的
client_id、client_secret和授权code
2. 将授权码换取刷新令牌
立即运行(授权码 10 分钟后过期):
curl -X POST https://accounts.zoho.com/oauth/v2/token \
-d "grant_type=authorization_code" \
-d "client_id=YOUR_CLIENT_ID" \
-d "client_secret=YOUR_CLIENT_SECRET" \
-d "code=YOUR_GRANT_CODE"保存响应中的 refresh_token — 它不会过期。
3. 获取您的账户 ID
curl -X GET https://mail.zoho.com/api/accounts \
-H "Authorization: Zoho-oauthtoken YOUR_ACCESS_TOKEN"使用 data[] 中第一个对象里的 accountId 值。
4. 安装
git clone https://github.com/SirGreed808/zoho-mail-mcp
cd zoho-mail-mcp
npm install5. 添加到 Claude Code
claude mcp add --scope user \
-e "ZOHO_CLIENT_ID=..." \
-e "ZOHO_CLIENT_SECRET=..." \
-e "ZOHO_REFRESH_TOKEN=..." \
-e "ZOHO_ACCOUNT_ID=..." \
-e "ZOHO_SENDER=you@yourdomain.com" \
zoho-mail -- node /absolute/path/to/zoho-mail-mcp/index.jsZOHO_SENDER 必须是账户中已验证的地址或别名。
环境变量
变量 | 描述 |
| OAuth 应用客户端 ID |
| OAuth 应用客户端密钥 |
| 长效刷新令牌(来自第 2 步) |
| Zoho Mail 账户 ID(来自第 3 步) |
| 发送邮件所用的电子邮件地址 |
注意事项
访问令牌会自动刷新 — 无需人工干预
read_email需要messageId和folderId,两者均由list_inbox和search_emails返回仅限 REST API — 不支持 IMAP/SMTP
许可证
MIT
Available Tools
4 toolslist_inboxB
List recent inbox messages — returns sender, subject, date, messageId, and folderId
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | Number of messages to return (default 20) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It describes the return format (sender, subject, date, messageId, folderId) which is helpful, but doesn't address important behavioral aspects like pagination, sorting order, authentication requirements, rate limits, or error conditions. The description adds some value but leaves significant gaps for a tool that presumably accesses user data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise - a single sentence that efficiently communicates the core functionality and return format. Every word earns its place, with no wasted verbiage. The information is front-loaded and immediately useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only list tool with no annotations and no output schema, the description provides basic functionality but lacks important context. It doesn't explain the 'recent' timeframe, sorting behavior, or what happens when count exceeds available messages. The return fields are listed, but without an output schema, the agent doesn't know data types or structure. The description is minimally adequate but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, with the single parameter 'count' clearly documented in the schema. The description doesn't add any parameter information beyond what's already in the schema. According to the scoring rules, when schema_description_coverage is high (>80%), the baseline is 3 even with no param info in the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List recent inbox messages') and specifies the resource ('inbox messages'), making the purpose immediately understandable. However, it doesn't explicitly differentiate this tool from its sibling 'search_emails' tool, which might also return messages. The description specifies the returned fields (sender, subject, date, messageId, folderId), which helps clarify scope but doesn't fully distinguish from alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus its sibling tools like 'search_emails' or 'read_email'. There's no mention of use cases, prerequisites, or exclusions. The agent must infer usage from the tool name and description alone without explicit contextual guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_emailA
Read the full body of an email given its messageId and folderId (both returned by list_inbox and search_emails)
| Name | Required | Description | Default |
|---|---|---|---|
| messageId | Yes | Message ID from list_inbox or search_emails | |
| folderId | Yes | Folder ID from list_inbox or search_emails |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It states the tool reads email bodies but doesn't disclose behavioral traits like whether it requires specific permissions, if it's a read-only operation, what happens if IDs are invalid, or if there are rate limits. The description is minimal and lacks essential operational context for a tool that accesses email data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose and includes necessary contextual information about parameter sources. Every word serves a purpose with zero waste, making it appropriately sized for this simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity (2 required parameters, no output schema, no annotations), the description is adequate but minimal. It covers the basic purpose and parameter sources but lacks information about return values, error conditions, or behavioral constraints. For a read operation without annotations, more context about what 'read' entails would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both parameters clearly documented in the schema. The description adds marginal value by reinforcing that both parameters come from list_inbox and search_emails, but doesn't provide additional semantic context beyond what's already in the schema descriptions. This meets the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'read' and the resource 'full body of an email', making the purpose specific and understandable. It distinguishes from siblings by specifying it's for reading individual emails rather than listing/searching (list_inbox, search_emails) or sending (send_email). However, it doesn't explicitly contrast with all siblings in a single statement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: after obtaining messageId and folderId from list_inbox or search_emails. This implicitly distinguishes it from send_email and gives prerequisites. However, it doesn't explicitly state when NOT to use it or name alternatives for similar tasks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_emailsA
Search inbox by keyword, sender email, or subject fragment — returns messageId and folderId for use with read_email
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Search term — keyword, sender email, or subject fragment | |
| count | No | Max results (default 20) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that the tool returns messageId and folderId for use with read_email, adding useful context about output format and integration. However, it lacks details on behavioral traits like pagination, error handling, or rate limits, which are important for a search tool with no annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded, consisting of a single, efficient sentence that conveys the core purpose, parameters, and output. Every part earns its place with no wasted words, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (search with two parameters), no annotations, and no output schema, the description is somewhat complete but has gaps. It explains the purpose and output format but lacks details on behavioral aspects like limits or errors. It's adequate but not fully comprehensive for a tool without structured support.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters fully. The description adds no additional meaning beyond what the schema provides (e.g., it repeats the query parameter's purpose without new details). This meets the baseline of 3 for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs ('search inbox') and resources ('emails'), and distinguishes it from siblings by specifying it searches by keyword, sender email, or subject fragment. It explicitly mentions the output format (messageId and folderId) and its intended use with read_email, making it highly specific and differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool (searching by specific criteria) and implies an alternative (list_inbox for listing without search). However, it does not explicitly state when not to use it or compare it to all siblings (e.g., send_email), keeping it at a 4 rather than a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_emailC
Send an email from the configured ZOHO_SENDER address
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Recipient email address | |
| subject | Yes | Email subject | |
| content | Yes | Email body — HTML is supported |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions the sender address configuration, which adds some context about authentication needs, but fails to cover critical traits: it doesn't specify whether this is a synchronous or asynchronous operation, potential rate limits, error handling, or what happens on success/failure. For a mutation tool with zero annotation coverage, this is a significant gap in transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose without unnecessary words. Every element ('Send an email', 'from the configured ZOHO_SENDER address') earns its place by clarifying scope and constraints. There's zero waste or redundancy, making it highly concise and well-structured for quick comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of an email-sending tool with no annotations and no output schema, the description is incomplete. It lacks details on behavioral aspects (e.g., delivery confirmation, error responses), usage context, and output expectations. While the schema covers parameters well, the overall context for safe and effective use is insufficient, especially for a mutation operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, with clear descriptions for all three parameters (to, subject, content). The description adds no parameter-specific information beyond what the schema provides, such as format examples or constraints. Since the schema does the heavy lifting, the baseline score of 3 is appropriate, as the description doesn't compensate but also doesn't detract.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Send an email') and specifies the resource ('from the configured ZOHO_SENDER address'), making the purpose immediately understandable. It distinguishes from siblings like list_inbox or read_email by focusing on sending rather than retrieving emails. However, it doesn't explicitly differentiate from potential non-sibling alternatives like 'send_bulk_email' or 'schedule_email', which prevents a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention sibling tools like search_emails for finding emails before sending, or specify prerequisites such as needing a configured sender address. There's no indication of when not to use it (e.g., for bulk operations) or contextual triggers, leaving usage entirely implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.0.0- First observed
list_inbox - First observed
read_email - First observed
search_emails - First observed
send_email
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose with no overlap: list_inbox retrieves inbox metadata, read_email accesses full email content, search_emails finds specific emails, and send_email handles outgoing messages. The descriptions clearly differentiate their functions, making misselection unlikely.
All tools follow a consistent verb_noun pattern (list_inbox, read_email, search_emails, send_email) with snake_case throughout. The naming is predictable and readable, adhering to a uniform convention across the set.
With 4 tools, this server is well-scoped for email management, covering core workflows: listing, reading, searching, and sending emails. Each tool earns its place without feeling thin or bloated, fitting typical email interaction needs.
The tool set provides strong coverage for basic email operations, including CRUD-like actions (list, read, send) and search functionality. A minor gap exists in lacking update/delete operations for emails (e.g., marking as read or moving to folders), but agents can work around this for most use cases.
Maintenance
Related MCP Connectors
Email infrastructure for AI agents — send, receive, search, and reply to email over MCP.
Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.
MCP server for e-mail testing: create disposable inboxes, wait for delivery, and extract e-mail content or links - all from your AI agent or test automation workflow. Get a free API key on https://app.zyntra.app/
Hosted email MCP for your own Gmail, Outlook.com, Microsoft 365, iCloud or IMAP inbox: read, search, draft, reply in thread, forward and file mail. It moves or flags up to 500 messages in one call, and a send leaves exactly one copy in Sent. A calendar is a separate connection, and connecting one adds diary and scheduling tools.
Related MCP Servers
- AlicenseAqualityDmaintenanceA Gmail MCP server that enables Claude to send, search, and read emails using either Gmail API or SMTP/IMAP backend.345 PyPIMIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server that enables Claude Desktop to manage emails via SMTP and IMAP. Send emails, fetch unread messages, and create draft replies directly from conversations.326 npmMIT
- AlicenseAqualityDmaintenanceAn MCP server that lets Claude read, search, and send email over standard IMAP/SMTP.633 npmMIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server that connects AI assistants to Zoho Mail, enabling reading, searching, sending, scheduling, organizing, and downloading emails through the official Zoho Mail REST API.MIT