Start here
What an AI can actually do with your email.
Most AI subscriptions live inside a chat box. You paste the thread in, read the answer, then retype it into the mail client that actually sends things. A paid AI starts earning its money on the day that carrying stops.
- Reading a message Does not mark it read
- Attachments SHA-256 identical
- Calls a day 5 free, 1,000 on Pro
The problem
The chat box ceiling
Ask somebody what their AI subscription is good for and you get a warm answer: it writes well, it explains things, it is decent company at eleven at night when a proposal is due. Ask what it does with their email and the answer stops.
That gap is not about the model. It is about reach. A chat box has no hands. Every document has to be uploaded, every thread has to be pasted in, and every answer has to be copied back out and retyped somewhere else before it does anything in the world. You are the integration. The AI does the thinking and you do the carrying, which is why a monthly subscription can quietly settle into being a very clever notepad.
Once you see it you can count it in your own week. Finding the message with the quote in it, and pasting the quote. Writing the reply in the chat box, and then writing it again in Outlook because the formatting came across badly. Attaching the file yourself, because of course you do. None of that is the model failing. All of it is the model being kept at arm's length from the thing you work in.
The question people actually type into a search box is some version of "can my AI read my email". For most subscriptions the honest answer has been no, and not because the model cannot understand a message. Nothing connects it to one.
So the useful test of a paid AI is not how clever it is. It is whether it can reach anything. What an AI can do with your email is the clearest case of that, because email is where the work already is, and because reading a mailbox and being able to send email from it are the two things a chat box cannot do on its own however good the model behind it gets.
The difference
What changes when it can reach your mailbox
On the left, what you would actually type. On the right, what happens, described in the terms it happens in rather than in adjectives. Every line on the right was measured against a live mailbox before it was written down here.
-
Find the invoice from the plumber, some time last spring.
Searches the mailbox itself rather than a summary of it. IMAP search matches substrings, so it finds the word you gave it and not a guess at what you meant.
-
Reply to Dave, say yes to Thursday, keep it short.
Threads properly. In-Reply-To and References are carried, so Dave's mail client shows it as a reply and not a new message. Verified in Outlook.
-
Clear the newsletters out of my inbox, but do not bin anything.
Moves them. Flags, the original date and the read state all survive the move.
-
Send that contract over to the client.
The attachment arrives byte for byte. A real send of a JPEG and a ZIP came out SHA-256 identical at the far end.
-
What came in overnight that I actually need to deal with?
Reads without marking anything read. BODY.PEEK is the IMAP fetch that does not set the Seen flag.
-
Who did I last speak to at the accountants, and when?
Lists sender, subject, date and flags for the messages that match. A message body is opened only when you ask about that message.
-
Catch me up on the thread with the surveyor.
Reads the whole conversation in one call, oldest first, rather than one call for every message in it. Long threads are capped and the result says so instead of quietly returning the newest few.
-
Did that quote ever actually go out, or did I only draft it?
Looks in Sent Items. One copy is filed per send, matched by Message-ID, with no duplicate.
-
Put everything from the school in a folder called School.
Creates the folder if it is not there, applying the mail host's own naming rules, then moves the messages into it.
-
Draft a reply to this one. Do not send it, I want to read it first.
Saves it to Drafts. Sending is a separate tool and needs a separate instruction.
-
Email Dave the new date. I have not got his address to hand.
Resolves it from the mailbox's own history. An address you have sent to outranks one that merely arrived from somebody using that name, because a display name on inbound mail can say anything.
-
Forward Rachel's last message to my colleague, with the spreadsheet.
Forwards it carrying the attachments and inline images the original carried.
-
Send them the whole photo set.
Refuses past 10 MB of attachments on one message. That ceiling is ours rather than the provider's, and it is the total across every file, so three 4 MB files are refused.
-
Send it now, they are on the phone to me.
About five seconds to an external domain through Microsoft Graph, and about ten over SMTP. Both timed.
-
Did the one I sent the new client on Monday actually arrive?
Looks for the bounce, in Inbox and Junk, and says whether the failure is permanent or temporary. A send is reported successful when the sending server accepts it, which is not the same as delivered, and the bounce turns up later as its own message.
Every line in that right-hand column was measured against a live mailbox before it was written here. The free tier is 5 MCP calls a day on any mailbox, with no card, which is enough to check them on your own mail.
The mechanism
So what is an MCP server?
Now that the outcome is on the table, the mechanism is a short read.
An AI client can be handed a list of tools. Each tool has a name, a description of what it does, and a set of arguments, and the assistant can call one and be told what happened. The Model Context Protocol is the agreement that lets those tools live somewhere other than inside the AI company's own product. A server publishes tools. A client that speaks the protocol can use them.
Mailbox MCP is one of those servers and the tools it publishes are mail tools: list a folder, search, open one message, send, reply, forward, move, create a folder, mark read, flag. Your assistant never receives a copy of your mailbox. It gets the ability to ask for particular things and to be told the result, which is a much smaller thing to hand over and a much more useful one.
That distinction is not ours alone. Anthropic's own Applied AI team put it more precisely than we would, writing in September 2025:
We're already seeing that smarter models require less prescriptive engineering, allowing agents to operate with more autonomy. But even as capabilities scale, treating context as a precious, finite resource will remain central to building reliable, effective agents.
Anthropic, Effective context engineering for AI agents
Which is exactly why listing a folder returns summaries and a body is fetched one message at a time. Pushing an entire mailbox at a model is not generosity. It is noise, and it costs the model the attention it needed for your actual question.
There is nothing to install. The server is a web address your client calls over HTTPS, added once in that client's connector settings. Your mail application never learns about it, your mail provider sees ordinary IMAP or Microsoft Graph traffic, and none of it is specific to one assistant: see which AI clients can talk to a remote MCP server, or the longer guide to what an email MCP server is if you want the tool list and the protocol detail. The how it works page follows one request from your sentence to your mailbox and back.
Connecting a mailbox is a URL and a sign-in. Nothing is installed, nothing about your mail moves anywhere, and you can disconnect it in the same place you added it.
Limits
What an AI still cannot do with your email
Everything above is true and none of it is the whole picture. These are the things people are disappointed by, listed before you pay rather than after.
-
Search is literal
Search is substring matching. There is no stemming and no ranking, so a search for invoices does not find a message that only ever says invoice.
-
A calendar has to be connected
Connecting a mailbox does not connect a diary. Approve calendar access on Microsoft 365, or on any other mailbox sign in to Google or give the address of your calendar server, and the calendar tools appear. Until then the mailbox gets the email tools and no calendar tools at all. No contacts, no files, on any mailbox.
-
10 MB a message
Attachments are capped at 10 MB per message in total across every file attached, which is our ceiling rather than a provider's.
-
No recovery, no archive
It cannot recover mail that has already been deleted, and it does not archive, back up or export a mailbox.
-
No shared mailboxes
Shared and delegated mailboxes are not supported.
-
Nothing runs on its own
It does not watch your inbox or run to a schedule. It acts inside a conversation, when you ask it to.
-
Accepted, not delivered
A send is reported successful when the sending server accepts the message. Delivery happens afterwards on somebody else's machine, and no mail system can promise that part.
-
Both plans have a ceiling
Both plans have a daily ceiling on MCP calls: 5 a day on Free and 1,000 a day on Pro, per mailbox. Pro is a published limit, not an unlimited plan.
What happens to your messages
Nothing is copied into a database of ours, because the server has no database, no cache and no message store at all. Stored credentials are encrypted at rest with AES-256. The security page sets out what is held and what is not, and the questions worth asking any tool that wants your mailbox are written so they work on a competitor as well as on us.
Who should not buy
When this is not worth it
There are people for whom none of the above is worth paying for, and it is cheaper for everybody if they work that out here rather than three months in.
- You get a dozen emails a day and you have read them all by nine in the morning. Filing twelve things is not a job. Automating it is a hobby, and an expensive one once you have spent an evening on the set-up.
- Your inbox is already exactly the way you want it. A filing system somebody else designed is a downgrade however good it is, and an assistant that moves your mail into folders you did not choose will annoy you every day.
- You do not reach for an AI often enough to remember it is there. That is the honest test and it is the one most people skip. If your assistant is a thing you tried twice in July, connecting your mail to it changes nothing.
- You would rather have a finished product than a connection. One app, one interface, somebody else's model, and no decisions to make. That is a real preference and it is well served: the two approaches to putting AI on your email are set out side by side, without a feature grid, because a feature grid would be wrong within weeks.
- Your administrator has blocked third-party connectors. Then this is a conversation with them rather than with us, and no amount of enthusiasm on our part changes it.
The person who writes this site also writes about AI subscriptions elsewhere, so what follows is our own opinion quoted back at us rather than an outside verdict. It is here because it argues against spending money, which is the only kind of self-citation worth printing.
If you only dip in occasionally, the free tier of most of these tools will cover you.
Mark McNeece, Best AI Subscription 2026, AI Visibility
And on picking a tier rather than picking a product, from the same article and the same author:
If the answer is 'almost never', buy the budget tier. If the answer is 'constantly, and specifically for the harder questions', buy the full tier.
Mark McNeece, Best AI Subscription 2026, AI Visibility
Both of those are arguments for spending less, and they apply here too. Every mailbox on this service starts free and stays free until you decide otherwise, and the point of the free tier is that you can find out which of the sentences above describes you before any money changes hands.
The set-up
What you need to connect a mailbox
Three things, and there is a fair chance you already have two of them.
- An AI client you can add a connector to. The requirement is that it supports remote MCP connectors, which means it can talk to a server it did not start itself. Most now can.
- A mailbox you already own. Gmail, Microsoft 365, or any IMAP host. Nothing moves and no mail is migrated: it stays exactly where it is, with the provider you already pay or do not pay.
- This, in the middle. A URL and a sign-in, added once.
Support moves quickly, so look for connectors, MCP servers, tools or extensions in your own client's settings and trust that over any table on a supplier's website, this one included. The compatibility requirement, and the bridge for clients that only run local servers, is the page that covers it properly.
Setting a connector up may want a desktop or a web session, and that is the step people trip over. Using it afterwards is not restricted the same way, because a remote connector runs from the vendor's cloud and the connection belongs to your account rather than to a device. Add it on a laptop, use it from your phone.
Free tiers vary, and at least one of them is enough. Anthropic's help centre, read on 27 August 2026, says this:
Custom connectors using remote MCP are available on Claude, Cowork, and Claude Desktop for users on Free, Pro, Max, Team, and Enterprise plans. Free users are limited to one custom connector.
Anthropic help centre, custom connectors using remote MCP
One custom connector is one mailbox. Paired with our own free tier of 5 MCP calls a day per mailbox, with no card, that is a working set-up that costs nothing at all. Other clients set their own rules and change them, so check your plan rather than that sentence.
When you outgrow it, Pro is £2.92 a month, paid annually at £34.99 + VAT, per mailbox, and it lifts the ceiling to 1,000 MCP calls a day per mailbox. Both figures are on the pricing page, stated the same way there as here, which is the entire trick and is more than the nearest competitor manages.
Which assistant to put at the front of it is a separate question, and the answer is not a benchmark table. Ethan Mollick, Associate Professor at the Wharton School, wrote in November 2025:
You need to know specifically what YOUR AI is good at, not what AIs are good at on average.
Ethan Mollick, Giving your AI a Job Interview
Which is an argument for connecting a free mailbox to whatever you already have and giving it a week of your own real email, rather than reading a fifth comparison. If you have not settled on an assistant at all yet, there is a comparison of Claude, ChatGPT, Gemini and Copilot for everyday use on AI Visibility, written by this site's author rather than by an independent reviewer.
Ready to connect one? The set-up guides are per provider: Gmail, Microsoft 365, and any IMAP host.
Questions
Questions people ask
Do I need to pay for an AI to use this?
Not necessarily. Anthropic's help centre states that custom connectors using remote MCP are available on Claude, Cowork and Claude Desktop for users on Free, Pro, Max, Team and Enterprise plans, and that free users are limited to one custom connector. Checked 27 August 2026. One custom connector is one mailbox, and every mailbox here starts free at 5 MCP calls a day with no card, so a free AI plan and a free mailbox is a real set-up rather than a demo. Other clients set their own rules and change them, so check your own plan. Pro here lifts the ceiling to 1,000 calls a day per mailbox; the pricing page states both figures.
Which AI should I get?
That is a different question from this one, and it is answered properly elsewhere. Mailbox MCP's author also writes on AI Visibility, where there is a comparison of the main AI subscriptions for everyday use with UK prices. It is linked in the sources at the foot of this page, and it is his own writing rather than an independent review. The short version is to work out what you actually use an AI for before paying for a tier that assumes you use it more.
Does the AI read all my email?
No. Listing a folder returns summaries only: sender, subject, date and flags, never message bodies. A body is fetched one message at a time, and only for the messages you asked about. Nothing is copied into a database on our side, because the server has no database, no cache and no message store at all.
Does looking through my inbox mark everything as read?
No. Reading a message through the server does not mark it read. The IMAP fetch it uses is BODY.PEEK, which is the one that deliberately does not set the Seen flag. Marking a message read is a separate tool and needs a separate instruction, so a survey of your inbox leaves the unread count where it was.
Can it manage my calendar as well as my email?
Yes, once a calendar is connected, which is a separate step from connecting the mailbox. On a Microsoft 365 mailbox that means approving calendar access, and you get the lot: reading the diary, checking when several people are free, booking your own time, inviting people to a meeting, answering an invitation, and setting your out-of-office reply. Every other mailbox has two routes. Google Calendar takes a Google sign-in of its own, which covers the diary and never the mail, and gets everything above except the out-of-office and the counter-proposal, because Google has no equivalent of either. Or give the address of a CalDAV calendar server, which Fastmail, iCloud, Nextcloud and most mail hosts run, and what that gets you depends on the server, so it is asked when the calendar connects and only the tools it supports are offered. Until a calendar is connected the mailbox is handed no calendar tools at all rather than tools that would refuse.
Is this a plugin or an app I have to install?
Neither. There is nothing to install in your mail client and nothing to install on your machine. It is a server your AI client calls over HTTPS, added once in that client's connector settings. The guide on what an email MCP server is covers the mechanism in full if you want it.
What if I already pay for an AI email tool?
Then you may not need this. A dedicated AI email product gives you a finished interface and its own model, and that genuinely suits somebody who wants one place to work and does not already pay for an AI. The two approaches are set out side by side on the AI email assistants page on this site, without a feature grid, because a feature grid would be wrong within weeks.
Does it work on my phone?
Yes, once it is set up. Adding a connector may want a desktop or a web session depending on the client, which is the step that catches people out. Using it afterwards is not restricted the same way: the connection belongs to your account rather than to a device or an application, so the same mailbox answers from whichever place that client runs.
What happens when I hit the daily limit?
Calls stop for that mailbox until the rolling 24-hour window moves on, and nothing is deleted or changed. The limit is per mailbox rather than per account, so a busy mailbox running out does not stop the others. Free is 5 MCP calls a day and Pro is 1,000 a day, both per mailbox. Pro is a published ceiling, not an unlimited plan.
Attribution
Sources
- Anthropic help centre: get started with custom connectors using remote MCP The plans that can add a custom connector, and the one-connector limit on the free plan. Quoted above. Read 27 August 2026.
- Anthropic: effective context engineering for AI agents The quotation on treating context as a finite resource. Written by Anthropic's Applied AI team, published 29 September 2025, read 27 August 2026.
- Ethan Mollick: giving your AI a job interview The quotation on judging your own AI rather than an average. One Useful Thing, 12 November 2025, read 27 August 2026. Mollick is Associate Professor at the Wharton School and the author of Co-Intelligence.
- Best AI Subscription 2026, on AI Visibility Both quotations in "When this is not worth it". Written by Mark McNeece, who also writes this site, so it is a self-citation and not independent corroboration. Read 27 August 2026.
- Which AI tool should I use, on AI Visibility The comparison of assistants linked above. Same author as this page. Read 27 August 2026.
The measured claims in the examples are ours: the attachment hashes, the threading headers, the sent-copy count and the delivery times were all taken while the engine was being built, against a live mailbox of 26,930 messages, and how it works gives each figure with the method beside it.
Keep going
Read next
Stop pasting your email into a chat box.
Connect the mailbox you already own and let the assistant you already pay for reach it. 5 calls a day free, on any mailbox, with no card.