Skip to main content
Glama
116,305 servers. Updated
20 Best Email MCP Servers: compared and ranked, November 2026Ranked from 3,360 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Tips for Organizing and Cleaning Up Gmail Emails" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    A
    maintenance
    A personal work twin for any AI agent. It briefs agents on the guidance you have confirmed, checks consequential actions against explicit, expiring grants and asks otherwise, and turns your corrections into lessons only you can confirm.
    12
    28 PyPI
    1
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Self-hosted, multi-account Gmail MCP server for Claude and Codex over Streamable HTTP, with explicit account aliases, owner-only OAuth, and encrypted credential storage. Supports searching and reading email, creating drafts, and optional sending and label changes.
    2
    9
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.
    20
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A privacy-focused MCP server that grants Claude read-only access to Gmail using strict, user-defined filters to control which emails are exposed. It enables searching and fetching email metadata while ensuring data security through OAuth and localized filter enforcement.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server that gives an AI assistant simultaneous access to multiple Gmail accounts with per-account read-only, draft, or send tiers, two-phase write confirmation, and safeguards for handling untrusted email content.
    10
    8 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.
    12
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables account-isolated, read-only access to a chosen Gmail account for searching mail, retrieving message and thread content, downloading attachments, and listing labels. It verifies the actual Google OAuth grant and account before starting and emits ready-to-use Codex or JSON MCP client configuration.
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    40
    52
    Apache 2.0
  • F
    license
    A
    quality
    A
    maintenance
    An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.
    2
    1
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
    58 npm
    35
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables sending emails via Gmail using SMTP and app passwords without OAuth. It provides a custom authorization flow and encrypted credential storage for multi-user access.
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.
    1
    MIT No Attribution
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables secure one-time encrypted file and note sharing by encrypting data locally before upload and providing tools for sending, listing, checking, and revoking links.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A safety layer and monitoring copilot for AI agents using Splunk MCP, recording tool calls, enforcing policies, and blocking risky actions.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    A remote MCP server that links World ID 4.0 sessions to AI assistants, enabling verified human authentication and tools for claiming Founding Human places, accessing human grants, and interacting with a verified human wall.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.
    4
    1
    BSD 3-Clause
  • A
    license
    A
    quality
    A
    maintenance
    Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.
    12
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.
    7
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.
    31
    1
    Apache 2.0
  • F
    license
    B
    quality
    C
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12
    1
    -
  • A
    license
    C
    quality
    D
    maintenance
    Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.
    1
    3
    MIT