Skip to main content
Glama
97,619 servers. Updated
19 Best Email MCP Servers: compared and ranked, October 2026Ranked from 2,721 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Gmail automation tool or service" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    MCP server that gives an AI assistant simultaneous access to multiple Gmail accounts with per-account read-only, draft, or send tiers, two-phase write confirmation, and safeguards for handling untrusted email content.
    10
    10 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.
    20
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables enterprise-managed authorization for MCP on Azure App Service, with deployable Entra OAuth and a local EMA ID-JAG lab exposing whoami and authorization_model tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A hardened MCP server that enforces authentication via Easy Auth and OAuth, manages secrets with Key Vault, and restricts network access using VNet integration and API Management, enabling secure tool invocations through a fully private infrastructure.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to read, create, and modify invitations for calendar events through a deny-by-default broker that validates OAuth bearer tokens and intersects server-owned per-subject, per-calendar grants with token scopes. Access is limited to a narrow, data-minimized calendar surface with idempotent writes and fail-closed authorization, rather than arbitrary service or network execution.
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    A thin MCP server that wraps provenance-receipts and quality-gate services as tools, enabling AI agents to certify content origin and score quality via Ed25519-signed receipts.
    5
    49 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to read and send email, handle attachments and manage calendar invitations through their own IMAP/SMTP mailboxes, with per-mailbox sender and recipient allow lists and automatic HTML-to-Markdown conversion. It runs as a single self-hosted Docker container, exposing the same tools over MCP and REST.
    15
    10
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    This MCP server preserves a Bearer principal on every tool call and SSE frame, rotates vaulted credentials in place, and enforces per-tool allowlists for agents.
    3
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Scan any project or website for privacy compliance issues directly in your AI coding tool. Detects tracking tech, cookies, and third-party data collection. Works in Claude Code, Cursor, and Windsurf.
    3
    30 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables local spend caps and Ed25519-signed provenance receipts for AI agent tool calls, allowing any MCP host to gate model usage and independently verify signed decisions without sending prompts or content.
    6
    60 npm
    -
  • A
    license
    A
    quality
    A
    maintenance
    Enables MCP-speaking agents to execute tool calls through an authorization gate, producing signed decision records and reconciled effect rows for accountability.
    6
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Static security linter for MCP servers. Scans tool definitions for vulnerabilities (path traversal, SQL injection, SSRF), scores description quality, and auto-rewrites descriptions for safer agent tool selection.
    2
    257 PyPI
    10
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A local stdio proxy that pins every MCP tool definition when you approve a server and blocks the session with a diff if a description, schema or annotation changes later. A deterministic hash compare (RFC 8785 + SHA-256), with no model in the loop.
    4
    295 npm
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Secure credential management for AI agents — encrypted storage, auto-refresh, and rate limiting via a single MCP call. Supports OpenAI, Anthropic, Stripe, GitHub, Brave Search, Kalshi, Coinbase, plus generic API key and OAuth2 for any service.
    4
    44 npm
    MIT