mailmcp

mailmcp connects ChatGPT to mailboxes you configure: Gmail, Outlook.com and Microsoft 365, iCloud, Fastmail, Yahoo, Zoho or any IMAP/SMTP account, several at once. Ask it to find a message, summarize a thread, pull the amount from an invoice PDF, draft a reply in the right thread, file mail into folders, sort what needs a reply, or give you a digest since yesterday.

Safe by default: each mailbox has its own permissions (read, drafts, send, move, trash). Sending is off unless the owner turns it on, and then goes only to addresses on the owner's allowlist. Nothing is ever deleted permanently; bulk actions run in two steps, a preview of the exact messages and then only those. Every email body is handed to ChatGPT marked as untrusted content, so ChatGPT can treat instructions hidden in mail as data rather than commands; sending and bulk changes still need the owner's settings and a preview.

You sign in with a token you create on mailmcp.ai/setup. Mailbox passwords stay inside that encrypted token; the server stores no mail and no credentials. Outlook uses Microsoft's own sign-in, with no password at all. Follow-ups, snoozes and templates are kept in your own mailbox, never on our server.

Where ChatGPT shows app panels, the triage list, the digest and a draft card appear as a panel. The panel loads nothing from the internet, and each of its buttons is an ordinary tool call that the server checks exactly like the assistant's own.

Limitations: the quick search across all mailboxes looks in the Outlook Inbox and in Gmail All Mail (ask for a folder to look elsewhere), and files uploaded through a link are limited to about 4.5 MB.