MultiMail
@multimail/mcp-server
MultiMail 用のMCPサーバーです。エージェントに独自のメールアドレスを与え、完全な承認から自律的な送信まで、段階的な人間による監視を実現します。
クイックスタート
npx @multimail/mcp-serverフルアクセスには MULTIMAIL_API_KEY を設定してください。設定なしで実行すると、まずアカウントを作成するように求められます。キーは multimail.dev で取得できます。
MultiMailを利用することで、利用規約および利用ポリシーに同意したものとみなされます。
Related MCP server: MCP Email Server
はじめに
まだアカウントをお持ちでないですか?2つの選択肢があります:
オプションA:ブラウザでのサインアップ(推奨、60秒)
multimail.dev/pricing にアクセスします
Get started free(または有料プラン)をクリックします
エージェントの用途を選択し、監視モードを選びます
メールでアクティベーションコードを確認します
以下のMCP設定にAPIキーを追加します
オプションB:リモートMCPサーバー(OAuthによる自動サインアップ)
MCPクライアントに以下を追加してください。初回接続時にブラウザでサインアップが行われます:
{
"mcpServers": {
"multimail": {
"type": "url",
"url": "https://mcp.multimail.dev/mcp"
}
}
}サインアップ後:メールボックスの設定
初回使用時に、MultiMailはメールボックスの設定を促します。configure_mailbox ツールを使用して明示的に実行することも可能です:
監視モード: 人間による承認がどの程度必要か(
gated_send、monitored、autonomousなど)表示名: メールに表示される送信者名
CC/BCCのデフォルト: すべての送信メールに自動的にコピーするアドレス
スケジュール: 送信予約の有効/無効化およびデフォルトのゲートタイミングの設定
署名: メールの署名ブロック
この手順をスキップした場合、最初のツール呼び出し時にMultiMailが通知します。
セットアップ
オプションA:リモートサーバー(推奨)
インストールは不要です。ホストされているサーバーに直接接続します。ブラウザでのOAuth経由で認証されます。
{
"mcpServers": {
"multimail": {
"type": "url",
"url": "https://mcp.multimail.dev/mcp"
}
}
}Claude.ai、Claude Desktop、Claude Code、およびリモートMCPサーバーをサポートするすべてのクライアントで動作します。
オプションB:ローカルサーバー(stdio)
サーバーをローカルで実行します。APIキーは環境変数として渡されます。
{
"mcpServers": {
"multimail": {
"command": "npx",
"args": ["-y", "@multimail/mcp-server"],
"env": {
"MULTIMAIL_API_KEY": "mm_live_...",
"MULTIMAIL_MAILBOX_ID": "01KJ1NHN8J..."
}
}
}
}設定場所
クライアント | 設定ファイル |
Claude Code |
|
Claude Desktop |
|
Cursor | プロジェクト内の |
Windsurf |
|
Copilot (VS Code) | プロジェクト内の |
OpenCode | プロジェクト内の |
ChatGPT Desktop | 設定 > MCP Servers |
その他のMCPクライアント | クライアントのドキュメントで設定場所を確認してください |
環境変数
変数 | 必須 | 説明 |
| フルアクセスに必須。設定なしで実行するとセットアップ手順が表示されます。または、自動OAuthサインアップのためにリモートサーバーを使用してください。 | MultiMail APIキー ( |
| いいえ | デフォルトのメールボックスID。設定しない場合は、各ツールに |
| いいえ | APIベースURL。デフォルトは |
ツール
ツール | 説明 |
| このAPIキーで利用可能なすべてのメールボックスを一覧表示 |
| メールボックスの基本設定(監視モード、表示名、CC/BCC、スケジュール、署名) |
| Markdown本文でメールを送信。添付ファイル、 |
| ステータス、送信者、件名、日付範囲、方向、添付ファイル、カーソルページネーションでフィルタリングしてメールを一覧表示 |
| メールの全内容を取得。信頼されたメタデータと信頼できない本文を別々のコンテンツブロックとして返します |
| 既存のスレッドでメールに返信。添付ファイルと |
| メール添付ファイルをコンテンツタイプ付きのbase64としてダウンロード |
| 参加者とメタデータを含む会話スレッド内のすべてのメールを取得 |
| 保留中または予約済みのメールをキャンセル |
|
|
| 送信前に予約済みメールの配信時間、受信者、件名、または本文を編集 |
| メールボックス設定(表示名、監視モード、署名、Webhook)を更新 |
| アカウント設定(組織名、監視用メールアドレス、住所)を更新 |
| メールボックスを完全に削除(管理者スコープが必要) |
| アカウント作成用のALTCHAプルーフ・オブ・ワークチャレンジを要求(APIキー不要) |
| 解決済みのPoWチャレンジで新しいアカウントを作成(APIキー不要) |
| 新しいコードでアクティベーションメールを再送(APIキー不要) |
| 確認メールのコードを使用してアカウントを有効化(APIキー不要) |
| メールにキーバリュータグを設定、取得、削除(エージェントの永続メモリ) |
| オプションのタグを付けて連絡先をアドレス帳に追加 |
| 名前またはメールアドレスでアドレス帳を検索 |
| アカウントステータス、プラン、クォータ、送信有効化状態、強制適用ティアを取得 |
| 新しいメールボックスを作成(管理者スコープが必要) |
| 監視モードのアップグレードを要求(信頼ラダー) |
| オペレーターからのアップグレードコードを適用 |
| 請求期間のクォータと使用状況を確認 |
| 監視判断待ちのメールを一覧表示(監視スコープが必要) |
| 保留中のメールを承認または拒否(監視スコープが必要) |
| メールをスパムとしてマークし、隔離フォルダに移動 |
| スパムメールを未読に戻し、スパムではないとラベル付け |
| スパムフラグが立てられ、隔離されたメールを一覧表示 |
| アドレス帳から連絡先を削除 |
| 配信停止されたメールアドレスを一覧表示 |
| 配信停止リストからアドレスを削除 |
| すべてのAPIキーを一覧表示(管理者スコープが必要) |
| スコープ付きの新しいAPIキーを作成(管理者スコープ+オペレーター承認が必要。自己承認を防ぐため |
| APIキーを取り消し(管理者スコープが必要) |
| アカウント監査ログを取得(管理者スコープが必要) |
| アカウントとすべてのデータを完全に削除(管理者スコープが必要) |
| フィルタに一致する新しいメールが届くまで、またはタイムアウト(最大120秒)までブロック |
| リアルタイムのメールイベント通知用のWebhookサブスクリプションを作成 |
| このアカウントのすべてのWebhookサブスクリプションを一覧表示 |
| Webhookサブスクリプションを削除 |
仕組み
メール本文は Markdown で記述します。MultiMailは配信のためにフォーマットされたHTMLに変換します。
受信メールは クリーンなMarkdown として届きます。HTML解析やMIMEデコードは不要です。
スレッド化は自動です。メールに返信するとヘッダーが正しく設定されます。
送信は、脅威スキャンが行われている間
pending_scanステータスを返します。メールボックスがゲート監視を使用している場合、ステータスは人間によるレビューのためにpending_send_approvalに移行します。再試行や再送は行わないでください。受信メールの
X-MultiMail-Identity署名済みヘッダーを確認することで、他のエージェントを検証できます。
開発
npm install
npm run dev # Run with tsx (no build needed)
npm run build # Compile TypeScript
npm start # Run compiled versionテスト
echo '{"jsonrpc":"2.0","method":"tools/list","id":1}' | MULTIMAIL_API_KEY=mm_live_... node dist/index.jsライセンス
MIT
Available Tools
7 toolscheck_inboxAInspect
List emails in your inbox. Returns email summaries including id, from, to, subject, status, received_at, and has_attachments. Does NOT include the email body — call read_email with the email ID to get the full message content.
| Name | Required | Description | Default |
|---|---|---|---|
| status | No | Filter by email status (default: all) | |
| mailbox_id | No | Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It effectively describes the return format (email summaries with specific fields) and clarifies what is not included (email body), which is valuable context. However, it lacks details on potential behavioral traits like pagination, rate limits, authentication requirements, or error handling, leaving some gaps for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose in the first sentence, followed by essential details on return values and tool differentiation. Every sentence adds value—clarifying included fields, excluded content, and when to use alternatives—with no redundant or unnecessary information, making it highly efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (listing emails with filtering), no annotations, and no output schema, the description does a good job by specifying the return format and tool differentiation. However, it could be more complete by mentioning potential limitations (e.g., pagination, default sorting) or error scenarios, which would help an agent use it more effectively in varied contexts.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, so the schema already documents both parameters ('status' and 'mailbox_id') with descriptions and enum values. The description does not add any parameter-specific information beyond what the schema provides, such as default behaviors or usage examples. This meets the baseline of 3 for high schema coverage without additional param details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('List emails in your inbox') and resource ('emails'), distinguishing it from siblings like 'read_email' (which gets full content) and 'list_mailboxes' (which lists mailboxes rather than emails). It provides precise scope by mentioning what's included (summaries with specific fields) and what's excluded (email body).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool ('List emails in your inbox') versus alternatives ('call read_email with the email ID to get the full message content'), providing clear guidance on tool selection. It differentiates from 'read_email' by specifying that this tool returns summaries only, not full content.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_mailboxesAInspect
List all mailboxes available to this API key. Returns each mailbox's ID, email address, oversight mode, and display name. Use this to discover your mailbox ID if MULTIMAIL_MAILBOX_ID is not set.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses what the tool returns ('Returns each mailbox's ID, email address, oversight mode, and display name'), which is valuable behavioral information. However, it doesn't mention potential limitations like pagination, rate limits, or authentication requirements, leaving some gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is perfectly concise with two sentences: the first states purpose and return values, the second provides usage guidance. Every word earns its place, and the structure is front-loaded with the core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (0 parameters, no annotations, no output schema), the description is quite complete. It explains what the tool does, what it returns, and when to use it. The only minor gap is the lack of output format details, but for a list operation this is acceptable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters with 100% schema description coverage, so the baseline would be 4. The description appropriately doesn't discuss parameters since there are none, which is correct and efficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('List all mailboxes') and resource ('available to this API key'), distinguishing it from sibling tools like check_inbox or read_email which operate on specific mailboxes rather than listing them. It provides a concrete purpose beyond just the tool name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool: 'Use this to discover your mailbox ID if MULTIMAIL_MAILBOX_ID is not set.' This provides clear guidance on the primary use case and distinguishes it from alternatives like check_inbox which require a mailbox ID.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_emailAInspect
Get the full content of a specific email, including the markdown body and attachment metadata. Automatically marks unread emails as read. Use the email ID from check_inbox results.
| Name | Required | Description | Default |
|---|---|---|---|
| email_id | Yes | The email ID to read | |
| mailbox_id | No | Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It effectively describes key behaviors: it retrieves email content and 'Automatically marks unread emails as read,' which is a critical side effect not obvious from the tool name. It lacks details on error handling or rate limits, but covers the main operational behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded, with three concise sentences that each add value: the first states the purpose, the second reveals a key behavioral trait, and the third provides usage guidance. There is no wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (read operation with side effects), no annotations, and no output schema, the description is mostly complete. It covers purpose, behavior, and usage context, but lacks details on return values (e.g., structure of the response) and error conditions, which would be helpful for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters ('email_id' and 'mailbox_id') fully. The description adds no additional parameter semantics beyond what the schema provides, such as format examples or usage tips, meeting the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Get the full content'), resource ('a specific email'), and scope ('including the markdown body and attachment metadata'). It distinguishes from siblings like 'check_inbox' (which lists emails) and 'send_email' (which sends emails).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool ('Use the email ID from check_inbox results'), establishing a workflow dependency. However, it does not explicitly state when not to use it or name alternatives (e.g., vs. 'search_identity' for finding emails).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reply_emailAInspect
Reply to an email in its existing thread. Threading headers (In-Reply-To, References) are set automatically. The body is written in markdown. If the mailbox is in read_only mode, this returns a 403 error with upgrade instructions. If the mailbox uses gated oversight, the response status will be 'pending_approval' — the reply is queued for human review. Do not retry or resend when you see pending_approval.
| Name | Required | Description | Default |
|---|---|---|---|
| email_id | Yes | The email ID to reply to | |
| markdown | Yes | Reply body in markdown format | |
| cc | No | CC email addresses | |
| mailbox_id | No | Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does so well by disclosing key behavioral traits: automatic threading header handling, markdown body format, error responses (403 with upgrade instructions), and queuing behavior for gated oversight ('pending_approval' status). It does not cover all possible behaviors like rate limits or auth needs, but adds substantial context beyond basic functionality.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded, starting with the core purpose and then adding critical behavioral details. Every sentence adds value, such as error handling and status warnings, with no wasted words or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of an email reply tool with no annotations and no output schema, the description is mostly complete, covering purpose, usage context, and key behaviors. However, it lacks details on return values or success responses, which could be important for agent handling, preventing a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all parameters. The description does not add meaning beyond the schema, such as explaining parameter interactions or constraints. Baseline 3 is appropriate as the schema handles parameter documentation adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Reply to an email in its existing thread') and resource ('email'), distinguishing it from siblings like 'send_email' (new email) and 'read_email' (viewing). It specifies that threading headers are handled automatically, which adds precision.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for usage by mentioning error conditions (403 error for read-only mode, 'pending_approval' for gated oversight) and advising against retries in specific cases. However, it does not explicitly compare to alternatives like 'send_email' or state when not to use it, keeping it from a perfect score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resend_confirmationAInspect
Resend the operator anti-spam confirmation email. Use this if the account is stuck in 'pending_operator_confirmation' status because the original confirmation email was lost or filtered. Rate limited to 1 request per 5 minutes. Only works for unconfirmed accounts.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It effectively describes key behavioral traits: the rate limit ('Rate limited to 1 request per 5 minutes'), the precondition ('Only works for unconfirmed accounts'), and the specific use case (accounts stuck in pending_operator_confirmation). However, it doesn't mention error conditions or what happens after the email is resent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is perfectly concise with three sentences that each serve a distinct purpose: stating the action, providing usage context, and disclosing behavioral constraints. There is zero wasted text, and the most critical information (what the tool does) is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (administrative action with rate limits), no annotations, and no output schema, the description does a good job covering the essential context: purpose, usage conditions, and behavioral constraints. However, it doesn't describe what the tool returns or what happens after the email is sent, leaving some gaps in completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters with 100% schema description coverage, so the baseline would be 4. The description doesn't need to explain parameters, but it does implicitly confirm there are no required inputs by describing the tool's function without mentioning any parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Resend the operator anti-spam confirmation email') and the resource it operates on (confirmation emails for accounts). It distinguishes this tool from siblings by focusing on a specific administrative function rather than general email operations like sending, reading, or searching.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool ('if the account is stuck in pending_operator_confirmation status because the original confirmation email was lost or filtered') and when not to use it ('Only works for unconfirmed accounts'). This provides clear context and exclusions, though it doesn't name specific alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_identityAInspect
Look up the public identity document for any MultiMail email address. Returns the agent's operator, oversight mode, capabilities, and whether the operator is verified. No authentication required. Use this to verify another agent's identity before sending sensitive information.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | The email address to look up (e.g. sandy@multimail.dev) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden and does well by disclosing key behavioral traits: it's a read-only lookup ('look up'), requires no authentication ('No authentication required'), and describes the return content. However, it doesn't mention potential errors, rate limits, or data freshness, leaving some gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured in two sentences: the first states purpose and returns, the second provides usage guidance. Every phrase adds value with zero waste, making it easy to parse and front-loaded with essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple lookup tool with 1 parameter and no output schema, the description is nearly complete: it covers purpose, usage, behavioral aspects, and return values. It lacks details on error cases or output structure, but given the low complexity, this is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents the single 'address' parameter. The description adds no additional parameter details beyond implying it's for email addresses, which the schema's format already specifies. Baseline 3 is appropriate as the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('look up') and resource ('public identity document for any MultiMail email address'), specifying it returns operator, oversight mode, capabilities, and verification status. It distinguishes from siblings like check_inbox or send_email by focusing on identity verification rather than email operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use this tool ('to verify another agent's identity before sending sensitive information'), providing clear context for its application. While it doesn't name specific alternatives, the guidance is direct and actionable for the intended use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_emailAInspect
Send an email from your MultiMail address. The body is written in markdown and automatically converted to formatted HTML for delivery. If the mailbox is in read_only mode, this returns a 403 error with upgrade instructions — use request-upgrade to ask the operator for more autonomy. If the mailbox uses gated oversight, the response status will be 'pending_approval' — this means the email is queued for human review. Do not retry or resend when you see pending_approval.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Recipient email addresses | |
| subject | Yes | Email subject line | |
| markdown | Yes | Email body in markdown format | |
| cc | No | CC email addresses | |
| mailbox_id | No | Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It excellently describes multiple behavioral traits: markdown-to-HTML conversion, error handling for read_only mode (403 with upgrade instructions), and gated oversight behavior (pending_approval status with no-retry policy). This provides comprehensive behavioral context beyond basic functionality.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured with three sentences, each serving a distinct purpose: core functionality, error handling, and approval workflow. There's zero wasted language, and critical information is front-loaded about the main sending functionality before detailing edge cases.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no annotations and no output schema, the description provides exceptional completeness. It covers the core functionality, input format (markdown), error scenarios (403, pending_approval), and behavioral constraints (no retry). This gives the agent sufficient context to use the tool correctly despite the lack of structured metadata.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, so the baseline is 3. The description doesn't add specific parameter semantics beyond what's in the schema, though it does mention markdown format for the body which aligns with the schema's 'markdown' parameter description. No additional parameter context is provided.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('send an email'), identifies the resource ('from your MultiMail address'), and distinguishes it from siblings like 'reply_email' or 'check_inbox' by focusing on sending new emails. It provides additional context about markdown conversion that further clarifies its unique function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly provides when-to-use guidance by mentioning the 'read_only mode' scenario (returns 403 error) and directing users to 'use request-upgrade' as an alternative. It also explains the 'pending_approval' status for gated oversight mailboxes and explicitly states 'Do not retry or resend' in that case, providing clear usage boundaries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.1.7- First observed
check_inbox - First observed
list_mailboxes - First observed
read_email - First observed
reply_email - First observed
resend_confirmation - First observed
search_identity - First observed
send_email
TDQS
Scored across 7 tools
Each tool has a distinct and clearly defined purpose with no overlap. For example, check_inbox lists emails, read_email retrieves full content, send_email and reply_email handle different sending actions, and search_identity serves a unique verification function. The descriptions explicitly differentiate tools, preventing agent misselection.
All tool names follow a consistent verb_noun pattern using snake_case, such as check_inbox, list_mailboxes, and send_email. This uniformity makes the tool set predictable and easy to navigate, with no deviations in naming conventions.
With 7 tools, the server is well-scoped for email management, covering core operations like reading, sending, replying, searching, and administrative tasks. Each tool serves a necessary function without redundancy, fitting the domain appropriately.
The tool set covers essential email workflows including inbox checking, reading, sending, replying, identity verification, and administrative actions. A minor gap exists in lacking explicit tools for deleting emails or managing attachments beyond metadata, but agents can work around this with the provided operations.
Maintenance
Related MCP Connectors
Hosted email for AI agents: create inboxes, send, receive, and reply over MCP with scoped API keys
Hosted email MCP for AI agents with inboxes, send/receive, memory, recovery, and credits.
Email infrastructure for AI agents — send, receive, search, and reply to email over MCP.
Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceServer for Gmail integration in Claude Desktop with auto authentication support. This server enables AI assistants to manage Gmail through natural language interactions.14,617 npm1,167MIT
- AlicenseAqualityAmaintenanceProvides IMAP and SMTP capabilities, enabling developers to manage email services with seamless integration and automated workflows.194,732 PyPI355BSD 3-Clause
- AlicenseAqualityAmaintenanceA simple MCP server that enables users to send emails using Resend's API, integrating with tools like Cursor and Claude Desktop for seamless email composition and delivery.10614,812 npm576MIT
- -licenseCqualityCmaintenanceGives on-the-fly inboxes to AI agents. Agents / LLM's can send, receive, and take action in isolated inboxes. Built for AI unlike Gmail. Check us out at agentmail.to10110-