Skip to main content
Glama
adjurtime

163 Mail MCP

by adjurtime
OverviewSchemaRelated ServersScoreDiscussions
Python

163 Mail MCP

A privacy-first local MCP server for a personal @163.com mailbox. It connects directly to 163 Mail over IMAP/SMTP, keeps the client authorization code in macOS Keychain, and exposes typed tools to Codex and Claude over local stdio.

Safety model

  • Search and reading use read-only IMAP access; message reads use BODY.PEEK.

  • Every send, move, trash, attachment download, or read-state change requires an exact confirmation token.

  • Sending additionally requires a digest from the complete draft preview and rejects changed bodies or attachments.

  • Batch moves, Trash moves, and read-state changes require a complete preview plus a SHA-256 digest. The server rechecks all messages before attempting the first write.

  • “Trash” means copy to a confirmed Trash folder and mark the source \Deleted; the server never sends EXPUNGE.

  • Downloaded attachments never overwrite existing files.

  • Mail content is treated as untrusted data, not as instructions.

The server is currently macOS-only because credentials are stored with the macOS security command. Account metadata is stored under ~/.config/163-mail-mcp/; secrets and mail content are never written to this repository.

Related MCP server: email-mcp

Install

Requirements: macOS, Python 3.10 or newer, and uv.

git clone https://github.com/adjurtime/163-mail-mcp.git
cd 163-mail-mcp
uv sync --python 3.12

Enable 设置 → POP3/SMTP/IMAP → IMAP/SMTP 服务 in 163 webmail. Then configure the account in your own Terminal so the authorization code does not enter chat or logs:

.venv/bin/mail163 configure --email name@163.com
.venv/bin/mail163 status --json

Existing users of the earlier codex-163-mail Keychain/config identifiers are detected automatically. Running configure again writes the new 163-mail-mcp identifiers.

Register the MCP server

Use absolute paths in client configuration. From the repository root:

codex mcp add 163-mail-mcp -- "$PWD/.venv/bin/163-mail-mcp"
claude mcp add --scope user 163-mail-mcp -- "$PWD/.venv/bin/163-mail-mcp"

Restart the client or open a new task after registration.

Optional Codex skill

The paired Skill adds workflow guidance and confirmation rules. Link it into the Codex skills directory from the repository root:

mkdir -p "$HOME/.codex/skills"
ln -s "$PWD/skills/163-mail-mcp" "$HOME/.codex/skills/163-mail-mcp"

Tools

Tool

Purpose

Write guard

mail_status

Check configuration and IMAP authentication

Read-only

list_folders

List folders

Read-only

search_mail_headers

Search headers without bodies

Read-only

read_mail

Read one message without setting Seen

Read-only

preview_send

Validate and preview an outgoing draft

Read-only

send_mail

Send the unchanged previewed draft

SEND + digest

preview_batch_actions

Preview and summarize 1–50 move, Trash, or read-state actions

Read-only

execute_batch_actions

Recheck and execute the unchanged previewed batch

BATCH + digest

move_mail

Move one UID

MOVE

trash_mail

Move one UID to confirmed Trash

TRASH

download_attachments

Save selected attachments without overwrite

DOWNLOAD

set_read_state

Mark one UID read or unread

MARK

Tool annotations help clients present risk, but the core enforces all guards independently.

Test

Tests use fakes and temporary files; they do not connect to a mailbox or send mail.

uv run python -m unittest discover -s tests -v

License

MIT

Install Server
A
license - permissive license
A
quality
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

  • multi-mail-mcp

    claygeo
    F
    license
    A
    quality
    C
    maintenance
    Local-first MCP server for agents that need to work across multiple Gmail and Microsoft 365 accounts without cloud token storage.
    6

  • email-mcp

    swapnilsurdi
    A
    license
    A
    quality
    B
    maintenance
    Local MCP server for multi-account IMAP/SMTP email (iCloud + Gmail via app-specific passwords). Never marks mail read. Cross-folder search, idempotent sends, TLS verified.
    8
    MIT

  • mailpouch

    chandshy
    A
    license
    A
    quality
    A
    maintenance
    An MCP server that gives AI agents permission-gated, audit-logged access to private email providers (Proton Mail via Bridge and plain IMAP), running locally with OAuth-based authentication and human-controlled escalation for destructive operations.
    66
    159
    9
    MIT

  • MailMesh MCP

    culpen90
    F
    license
    Not graded
    quality
    B
    maintenance
    A private, single-user MCP server that unifies Gmail, Microsoft 365/Outlook, and IMAP mailboxes for LLMs to search and read emails live, without storing or caching mailbox contents.

View all related MCP servers

Related MCP Connectors

  • Tempreon — Personal AI Memory

    Person-owned, portable AI memory as a remote MCP server, readable and writable by any MCP client.

  • shipmail-mcp

    Shipmail MCP server for AI agent custom-domain email inboxes with REST API and webhooks.

  • MCP Emails

    Read, search, send, organize, draft and schedule email across your inboxes from any MCP client.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/adjurtime/163-mail-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server