"An open-source penetration testing framework" matching MCP servers:

Enables ChatGPT to search, read, send, and organize email in a self-hosted inbox through private MCP tools.

MCP server for Yahoo Mail over IMAP+SMTP that enables AI assistants to manage emails fully—listing, reading, searching, threading, flagging, moving, archiving, handling attachments, and sending/reply/forward/draft—using an app-specific password.

A Model Context Protocol server for Plunk, the open-source self-hosted email platform. Provides 84 tools for transactional email, contacts, campaigns, segments, templates, workflows, events, and analytics through the Plunk API.

An MCP server that enables AI assistants to send emails via SMTP, supporting simple and custom emails with attachments and CC/BCC, plus connection testing.

Outbound sales agent for Claude Code. MCP server handles prospect list building, dedup, quotas, and structured rejection feedback, while the plugin runs per-prospect research, email writing, Gmail sending, and reply tracking. Open source, self-hostable.

An open-source project for a local iCloud Mail MCP integration. Currently provides only contribution and quality foundations, with Apple Mail access and MCP features deferred.

Open-source, self-hosted Inbox-as-a-Service API for AI agents. It enables agents to manage email inboxes, send/receive emails, search messages, and wait for replies via REST or MCP.

An open-source MCP server that provides AI agents with secure access to read, search, and manage emails via Microsoft 365 and Gmail. It features security-first defaults like recipient allowlists and markdown content conversion to facilitate safe agent interaction with mailboxes.

Enables AI assistants to read, search, and manage emails from Mailpit, an email and SMTP testing tool, during development and testing.

A headless, disposable email inbox that an AI agent drives over MCP, enabling temporary email addresses and email receipt for testing signup flows.

MCP server that sends mail over SMTP, gated behind an allowlist and a human confirmation

Enables pushing enriched leads into Instantly or Smartlead campaigns with ICP score gating, deduplication, and dry-run previews via an Apify actor.

An MCP server that checks SPF, DKIM, DMARC, and MX records for a domain, returning a health verdict and specific DNS fixes to improve email deliverability.

An MCP server that exposes a local notmuch email database to an LLM client such as Claude. It is read-first: searching, reading, and understanding mail is always available; writing anything (drafts, tags, exported files) requires an explicit opt-in flag and is confined to clearly bounded locations.

An email MCP server that lets Claude or any MCP client search, read and draft mail via IMAP, treating every message as untrusted input. It prioritizes safety with plain-text-only bodies, disabled sending until an allowlist is set, and no bcc support.

▎ Check an email before an AI agent sends it: send / ask a human / block — with machine reason codes and prompt-injection detection.

Giggal.ai is an email verification tool that runs a deep mailbox existence check on every address and verifies catch-all/accept-all and even SEG protected emails. Your bounce rate stays under 5%, and the 30% of every B2B list that other tools flag as "Risky" becomes deliverable again.

Local-first Microsoft Outlook MCP server: a single Go binary that manages calendar events and mail through the Microsoft Graph API over stdio, with tokens stored in the OS keychain and no Entra ID app registration required. Exposes four aggregate tools (calendar, mail, account, system) dispatched by an operation verb, with multi-account support and read-only and mail-gating modes.

Gives an AI assistant read- and draft-only access to a single personal Microsoft mailbox, letting it search, list and read mail, browse folders, save attachments to a jailed directory, and create new or reply drafts. It requests no send scope, so mail can never be sent, deleted, moved or marked, and calendar, contacts and files are untouched.

An MCP server that exposes a verify_email tool for checking email syntax, disposable domains, and MX records, returning a structured validity result.