Email and calendar for AI
The most complete hosted email MCP for the inbox you already use. See the comparison
Mailbox MCP is the secure remote MCP server that connects the mailbox you already have, in Gmail, Outlook, Microsoft 365, iCloud or any IMAP host, to the AI you already pay for. Claude, ChatGPT, Cursor or any MCP client can read, search, answer, send and file your email, read inside an attachment and, with a calendar connected, book the meeting. Your mailbox is left exactly as it was. See what it can do for one person, or what a team gets.
Set up in 3 steps
Watch: 2:49
A short film on connecting your mailbox to Claude or ChatGPT, what your AI can do with it, and why your inbox looks untouched afterwards.
Oh! Are we on? Is it recording? Right. Ahem. Hello! I'm Pip. Personal Inbox Pilot. I work at Mailbox MCP, and my job is your email. Best job in the world, honestly.
Here's the thing. Your AI assistant is very clever. Poems. Recipes. Holiday plans. But ask it what's in your inbox and... nothing. It can't see a thing.
That's where I come in. Connect your mailbox once, and Claude, ChatGPT, or whichever AI you like, can actually use it. Gmail? Yes. Hotmail and Outlook.com? Yes. Microsoft 365, at work? Absolutely. And any mailbox that speaks IMAP. iCloud, Yahoo, the one your web host gave you years ago. Yes, yes, and yes. Bless it.
Ask "what came in overnight that actually needs me?" and you get an answer. Not a hundred subject lines. I read the attachments too. PDFs, spreadsheets, even that wonky photo of a receipt. Replies land in the right conversation. Sent mail gets filed in Sent. And drafts wait in your Drafts folder, so you can check them first.
Calendar? Connect it, and I'll check who's free, book the meeting, and answer the invitation. No 14-email ping-pong. Contacts? I'll find Sarah from accounts. Even though you saved her as "Sarah ACCOUNTS do not ignore".
And this is my favourite bit. Open your inbox afterwards, in Outlook or Gmail, and you can't tell I was there. Reading an email doesn't mark it as read. Deleting moves it to the bin, not into the void. I'm basically a very tidy ghost. With a clipboard.
And you're the boss. Set me to Read only, Draft and file, or Send and delete. Try me free, with 5 calls a day for each mailbox. Pro is £34.99 a year per mailbox, plus VAT, for 1,000 calls a day. Same tools. I just get to keep going.
Also, I get a cape. I'm not saying that's a reason to upgrade. But there is a cape.
Come and say hello at mailbox-mcp.com. Go on. Your inbox isn't going to sort itself out. Well... it is now. That's sort of the point.
New: routines
Choose a routine, shape it in plain words, and add it to Claude or ChatGPT in one press. At the time you chose, it reads your mailbox and leaves you a brief, drafted replies or a list, and it never sends a thing. Each routine's card says whether it ran.
Morning brief
What came in since the last brief, who needs you first, and what can wait.
Replies waiting
Drafts a reply to each person still waiting on you, ready for you to check and send.
Waiting on
The emails you sent that nobody has answered, oldest first, with how long each has waited.
Bills and invoices
The bills and invoices that arrived, with the totals and due dates read from the attachments.
Your own routine
Your own job for your AI: the mail it looks at, what it does with it, and anything else in your own words.
If a run does not come
Every routine checks in with us first, so its card on your Routines tab says whether it ran, and when one does not, what to check.
Attachments
Ask ChatGPT to draw something and email it, and it arrives attached, from your own mailbox, with nothing downloaded first. Of every email MCP server and AI mail connector we compared, Mailbox MCP is the only one that handles attachments all the way through: sending them from anywhere, reading what is inside them, and handing them back.
1 You ask ChatGPT
2 It arrives, attached
An image it has generated, a document it made, a file you dropped in. On a send, a reply, a forward or a draft.
A file already in the mailbox, one at a web link, or one off your own computer. The AI never types a file out, up to 20 MB an email.
PDFs page by page, Word, Excel with its formulas worked out, PowerPoint, and scanned letters and photos as pictures.
Connect
You connect the mailbox you already have. There is no new address, no forwarding rule and nothing to migrate. A personal Outlook.com or Hotmail account and iCloud Mail connect too.
OAuth, one sign-in
Password access ended for Microsoft 365 mailboxes in 2022 and for personal Outlook.com ones in 2024, so Mailbox MCP goes through Microsoft Graph instead. Sending goes through Graph too, which means no Authenticated SMTP and no ticket to IT.
App password
16 characters from your Google account, and IMAP is already on whether you can find the setting or not. The guide covers the reason the app password screen may refuse to appear for you.
Host, port, password
Fastmail, Zoho, cPanel, a mailbox your host set up years ago. If it speaks IMAP and SMTP over TLS, it connects with the details already in your mail client.
Works with
MCP is an open protocol, not one company's feature, and this is an ordinary remote MCP server. Connect a mailbox once and reach it from whichever assistant, editor or agent you actually work in. No extra licence, and no second price.
What it does
Most email integrations can list messages and send plain text. The difference shows up on the ordinary jobs: attaching the invoice that is already in your inbox, replying so the reply lands in the thread, and forwarding something with everything it arrived with. Connect a calendar as well and the same connector runs your diary: your week, other people's free time, and the meetings themselves.
What came in overnight that actually needs me?
Worked for 184ms
list_emails
Reading the last 12 messages in INBOX
184ms
7 unread. 3 of them want something from you today:
The rest can wait: a Companies House reminder with 14 days on it, an uptime alert that already resolved itself after 4 minutes, a newsletter, and Tom at Northgate holding 4 packs of the discontinued card stock for you.
One call. 10 messages read, 7 unread, sorted by what wants an answer. Read the detail
Reply to Sarah saying Thursday works, and send her signed agreement back to her.
Worked for 121ms
search_emails
Searching INBOX for mail from harbourlane.co.uk
12ms
read_email
Opening "Signed agreement attached"
40ms
draft_reply
Drafting a reply carrying 1 attachment
69ms
Drafted, not sent. It is sitting in your Drafts folder on the same thread as her chase, so it will group properly when it goes.
I have attached Harbour-Lane-Agreement-signed.pdf back to her. That file came straight out of her original message - it never passed through this chat, and I never had to ask you to find it.
Open it in Outlook, change anything you like, and send it yourself.
The attachment moved mailbox to mailbox. It was never uploaded, pasted, or re-typed. Read the detail
Open the printer's invoice and check what it comes to, then get the signed order form off my laptop and back to Tom.
Worked for 3.2s
search_emails
Searching INBOX for mail from "northgate"
124ms
read_email
Opening "Invoice NP-4471 - August print run"
69ms
read_attachment
Reading the text inside NP-4471.pdf
2750ms
create_upload_link
Making a 30 minute upload link for a file on your computer
34ms
check_upload
Checking what arrived at the link
67ms
draft_reply
Drafting a reply to Tom carrying the uploaded file
157ms
The PDF itself says £486 before VAT: £312 for 2,000 A5 leaflets and £174 for the reprint of 250 folded cards. VAT adds £97.20, so £583.20 to pay, 30 days from the invoice date of 29 July. That matches what Tom wrote in the email, which is worth checking because the two do not always agree.
NP-4471.pdf 1 KB Save a copy
That link is signed and it expires. When you click it the file comes straight out of your mailbox; nothing was copied anywhere to make it.
The order form is done too: I made an upload link that lasts 30 minutes, you dropped Northgate-order-form-signed.pdf (1 KB) on it, and it went straight from your computer into a reply to Tom's message about the card stock. It never passed through this chat.
That reply is in your Drafts, not sent: on his thread, with the file attached and a line telling him to go ahead with the 4 packs. Read it and send it from Outlook.
Read from inside the file, not from the email about it. The order form went computer to mailbox without touching the chat. Read the detail
Recorded on 5 and 13 September 2026 against a real mailbox. The tool names, the results and the timings are measured; the correspondents are invented, because real mail from real people does not belong on a public page.
4 ways to attach a file, and 3 of them never pass through the assistant. A file already in the mailbox, one at a web address, or one off your own computer through a one-off link goes straight onto the message. Only a file the assistant writes itself has to be spelled out.
So a 6 MB PDF costs you a sentence and arrives in seconds. Spelled out, it would crawl into the conversation a character at a time until the assistant ran out of room and sent the message without it. Several files at once, up to 20 MB a message. How AI email attachments work here.
Ask what the attached invoice comes to and it reads the PDF. A scanned letter comes back as pictures of its pages, read the way you would read it. Word, Excel and PowerPoint files come back as text, and a photo as a picture. One call reads every file, nothing is kept, and the message stays unread. A file it can't read, a zip or an old .doc, is named, with a link to open it.
A reply carries the headers a mail client uses to nest it under the original, so it appears in the conversation rather than as a stray new message. It can read the whole thread first, so it answers what was actually said and not just the last message. The original is marked answered, exactly as if you had replied yourself.
Attachments and inline images travel with a forward, under the forwarded-message block a real client produces. Copy other people in, add files of your own alongside the original's, and anything the size ceiling will not take is named rather than dropped quietly. A forward can be saved to Drafts instead of sent, which matters more here than anywhere else, because the part being passed on is somebody else's.
Every alias, each with its own display name and signature, set in your account, not by the AI. A reply-all leaves out every address you own, so you're never copied in on your own thread. Exactly one copy is filed in Sent Items. Or save any message as a real draft, files and all, and press Send yourself in Outlook. Ask for a change and it rewrites that draft, rather than leaving the version you rejected in your bin.
Request a read receipt on the way out, the same tick box Outlook offers, on a send, a reply or a forward. Afterwards it finds what came back: a bounce, a delivery confirmation, or a receipt saying the message was opened. It tells you plainly that a missing receipt proves nothing, because most mail programs never send one.
Move up to 500 messages in one go, archive them where your own Archive button would, report spam so the filter learns, create and rename folders, mark things read or flagged. Reading never marks anything read, and nothing is filed unless you ask, so your unread count still means what it did this morning. A one-off link gets a file off your computer into the mailbox, where it waits in Drafts for you to keep or delete.
It reads your week, finds when a group of people are free, books time, invites and reschedules, and answers invitations. Connecting a mailbox does not connect a calendar, so it is one extra step: Microsoft 365 asks on the same sign-in, and anything else takes a Google sign-in or the address of a CalDAV server. On Microsoft it sets your out-of-office too.
The founding rule
Every tool above was built under one constraint: open your mailbox in Outlook afterwards and it should look exactly as it would if you had done the work yourself. Not similar. The same.
Why it decides everything
This rule decides whether a mail tool survives a real week of email, and a demonstration can't show it. Anything can send a message. The damage from the easy way of building it turns up later, somewhere else: a reply beside the conversation instead of inside it, a draft the AI can see and Outlook can't, a forward that lost the attachment it existed to carry, a delete that took the message away for good rather than to Trash.
Nobody reports any of that as a bug. They just find their mailbox slightly wrong, stop trusting the thing that did it, and go back to doing it by hand. So the convenient way is reliably the wrong one here. The only judge that counts is the mail client: not our API response, not a green test run, but your mailbox opened in another program a week later.
Everything you would do in Outlook yourself, your AI can do through Mailbox MCP, and it leaves behind the mailbox you would have left behind.
Worth calling out
Of the 3 other hosted email MCP servers we compared, 2 publish no threaded replies, no way to edit a draft that is already in your mailbox, and no reading that leaves a message unread. None of them publishes a way to check bounces, delivery and read receipts after a send.
Email MCP servers compared sets the 4 of us side by side. Every competitor cell is taken from that vendor's own pages and dated.
Known traps
Neither of these is a mistake you made. Both are recent changes at the provider, and both are still described incorrectly in most set-up guides you will find.
Microsoft 365
Deprecation of Basic authentication in Exchange Online
Important
Basic authentication is now disabled in all tenants.
Now no one (you or Microsoft support) can re-enable Basic authentication in your tenant.
Microsoft disabled Basic Authentication for IMAP in Exchange Online. Username and password access to those mailboxes ended for every client at once, and it is not a setting anyone can turn back on.
So it is not a policy your administrator forgot or a tool that has not caught up. Anything asking for your Microsoft password to read your mail is describing a world that ended on 1 October 2022.
Sign in with Microsoft instead. It takes one screen, and Mailbox MCP never sees a password.
Source: Microsoft Learn, deprecation of Basic authentication in Exchange Online.
Still current
App passwords
The setting that you are looking for is not available for your account.
App passwords need 2-Step Verification backed by a phone or an authenticator app. A passkey on its own does not qualify, even though Google reports 2-Step Verification as on. Google now steers new accounts towards passkeys, so this is the default route into the dead end rather than an unusual one.
While you are there: do not go looking for the IMAP toggle. Google removed it in January 2025 and IMAP is now always on.
Add a phone number or an authenticator app to 2-Step Verification, and the setting appears.
Measured
These are not targets or design intentions. Each was taken while building the product, against a live mailbox of 26,930 messages, and each is checkable against your own mailbox once you connect it.
Worth calling out
Graph is documented with a 4 MB message limit. The largest message it actually accepted from us was 37,314,092 base64 bytes, from a 28 MB message, and every file arrived byte for byte. We cap attachments at 20 MB a message, which is our decision rather than the provider's.
How it works
One server in the middle. Your mailbox on one side, whichever AI client you work in on the other, and a fixed set of things it can do in between.
Sign in to Microsoft, paste a Gmail app password, or enter IMAP details from your existing mail client. One mailbox takes a couple of minutes; the set-up guides cover the awkward parts honestly.
Mailbox MCP is a remote MCP server, so there is nothing to install and nothing running on your machine. You add one URL and the mail tools appear. Connect Claude first if you have it, since it is the obvious place to start, but the same URL works in ChatGPT, Cursor, VS Code, Zed and anything else that speaks MCP.
Find the thread with the supplier, reply to it, attach the revised quote, file the original under Clients. Claude does it in your mailbox, and your unread count, your Sent folder and your conversation threads all still mean what they meant before.
Limits
Worth knowing before you connect anything, rather than after.
Attachments are capped at 20 MB per message in total across every file attached, which is our limit rather than a provider's.
It does not back up, export or migrate a mailbox, and there is no tool that copies your mail anywhere. Archiving a message files it in your own Archive folder, which is filing rather than a backup.
Calendar tools appear once a diary is connected, which is its own step: calendar access approved on a Microsoft 365 sign-in, a Google sign-in for Google Calendar, or the address of a CalDAV calendar server. A mailbox with none of the 3 gets the email tools and no calendar tools at all.
It cannot recover mail that has already been deleted.
A Microsoft 365 shared or delegated mailbox, the kind with no sign-in of its own that Outlook reaches through Full Access or Send As, cannot be connected. A mailbox you own can be shared with named people through Team Access, which is a different thing: each person gets their own connection at a level you set.
A shared CALENDAR is different again and is supported on Microsoft 365: one that has been shared with you can be read, and written to where the person who shared it allowed that.
There is no phone line. Support is by email, deliberately.
Pricing
Every mailbox starts free. Pro is bought per mailbox, so one Pro mailbox beside 5 free ones is a normal way to use it. Giving other people their own connection to your mailboxes is Team Access, bought once for the account, as a tier of 3, 5 or 10 people.
Free
£0 every mailbox, no card required
Pro
£2.92 a month Per mailbox, paid annually at £34.99 + VAT
Team Access
from £10.00 a month Per account, paid annually at £119.99 + VAT for 3 people
Questions
Yes. Mailbox MCP is a remote MCP server that connects a mailbox you already own to the AI you already use. Claude or ChatGPT can then list, search and read messages, draft and send them, reply in thread, move mail between folders, archive it, report spam and flag it. Nothing in the server is specific to one assistant, so Cursor or any other MCP client works too. Your mail stays with your provider: no new address, and nothing to migrate.
Yes. Microsoft switched off password access (Basic Authentication) for IMAP in Microsoft 365 on 1 October 2022, and for personal Outlook.com, Hotmail and Live accounts on 16 September 2024. So Mailbox MCP connects with one Microsoft sign-in, through Microsoft Graph, on a work, school or personal mailbox. Claude, ChatGPT or any MCP client then reads, sends and files that Outlook mail. Sending goes through Graph too, so you need no Authenticated SMTP and no ticket to IT.
Because app passwords need 2-Step Verification backed by a phone or an authenticator app. Google documents the option as unavailable when 2-Step Verification uses only security keys, and a passkey behaves the same way: both replace the sign-in rather than add a second step. Your account still shows 2-Step Verification as on, which is why this is so hard to spot. The fix: add a phone number or an authenticator app to 2-Step Verification, and the setting appears.
No, and you will not find the toggle if you go looking. Google removed it in January 2025 and IMAP is now always on for every Gmail account. Any guide still telling you to turn it on was written before that change and has not been revisited since.
Any client that can connect to a remote MCP server. Mailbox MCP is an ordinary MCP server, reached over HTTPS with a bearer token, and nothing in it is specific to one assistant. That covers Claude and Claude Code, ChatGPT, Cursor, VS Code, Zed, Cline, Goose, LibreChat, Microsoft Copilot Studio and agents you build yourself. A client limited to local servers can reach it through a proxy such as mcp-remote. One with no MCP support cannot connect.
No. Reading a message through Mailbox MCP leaves the unread flag exactly as it was, so your unread count is still yours and still means something. Marking a message read is a separate action that happens only when you ask for it.
They appear in Sent Items once, with the same Message-ID the recipient received, so your sent folder is a true record. Replies carry the In-Reply-To and References headers, which is what makes them land inside the existing conversation in Outlook or Gmail rather than starting a new one alongside it. Both behaviours were checked by comparing the folder before and after each send rather than assumed from the API response.
Yes. A file can come from your mailbox, a web link (SharePoint, Drive or Dropbox), your own computer through a one-off upload link that needs no sign-in, or, in ChatGPT, the chat itself. None of those passes through the assistant: each is streamed into the message as it is built. Several files can go on one message, up to 20 MB in total. Only a file the assistant writes out itself is limited, to a few tens of kilobytes.
Yes. Ask what the attached invoice comes to and the server reads the PDF, page by page. A Word document keeps its tables, a spreadsheet comes back as rows with the formulas worked out, a slide deck slide by slide, and a photo as a picture. A scanned letter, a PDF with no text behind the picture, comes back as pictures of its pages. One call reads every file on a message, and nothing is marked read or kept.
Yes. A send, a reply, a forward or a draft can ask for a read receipt, and a separate tool finds what came back. But a receipt is a request, not a measurement. Consumer Gmail never returns one, Google Workspace only if an administrator allows it, and Apple Mail only behind a setting that ships switched off. So a missing receipt means nothing. A delivery receipt is not offered: the mail providers it connects to don't support one.
Every mailbox starts free: 5 MCP calls a day. Pro is £2.92 a month per mailbox, paid annually at £34.99 + VAT, and raises the ceiling to 1,000 calls a day. Buy it for one mailbox and keep the others free. Stop the renewal any time; Pro runs to the end of what you paid for. Team Access, which gives other people their own connection, is from £119.99 + VAT a year per account, on top of Pro.
Attachments are capped at 20 MB a message in total, not per file, so 3 files of 7 MB each are refused. That ceiling is ours, not your provider's. It does not back up, export or migrate a mailbox: archiving files a message in your own Archive folder, and no copy of your mail or contacts is kept. A calendar works only once you connect one, a step of its own on any mailbox. It cannot recover deleted mail.
No. Mailbox MCP at mailbox-mcp.com is a hosted service run by BSolve IT Limited in the UK. You connect your mailbox here and your AI reaches it over the internet, with nothing to install. The open-source package called mailbox-mcp on npm and GitHub is a separate project with no connection to us, so we can't answer questions about it.
Nothing, is the answer we are claiming. The free tier is 5 calls a day on any mailbox, which is enough to check that for yourself before you pay anything.