Releases: SinoEdwards/mail-agent-mcp
Releases · SinoEdwards/mail-agent-mcp
Release list
mail-agent-mcp v0.1.1 — Runtime reliability fixes
Fixed
- Treats successful SMTP delivery as
sentbefore attempting the secondary Sent-folder copy. - Adds a bounded timeout and stable failure categories to Sent-folder appends.
- Reports Sent-copy timeout or failure as a warning without automatically resending the message.
- Adds per-folder and overall deadlines to cross-folder searches.
- Returns partial search results with failed-folder details instead of allowing one folder to stall the entire request.
- Makes direct CLI and MCP launches inherit standard
HTTP_PROXY,HTTPS_PROXY, andNO_PROXYsettings. - Adds safe Gmail token error categories for DNS, TCP, TLS, timeout, HTTP status, and OAuth responses without exposing provider details or credentials.
Known environment issue
- Gmail metadata access may still fail when the existing OAuth authorization or stored credential state is invalid. This was observed independently of the v0.1.1 changes and is not treated as a patch regression.
Public Preview / Beta. This package remains source-install only and is not published to npm or the MCP Registry.
mail-agent-mcp v0.1.0 — Public Preview
mail-agent-mcp v0.1.0 is the first public preview of a local-first email MCP server focused on Gmail and QQ Mail.
Highlights
- Gmail OAuth 2.0 installed-app enrollment with PKCE, state validation, loopback callbacks, token refresh, and sanitized provider errors.
- QQ Mail enrollment with authorization codes and hidden local terminal input.
- Windows Credential Manager storage for Gmail refresh tokens, Gmail client secrets, and QQ authorization codes.
- IMAP folder listing, search, recent-mail queries, metadata reading, message and thread inspection, and attachment workflows.
- Preview-confirmed send, reply, and forward flows; legacy direct-send tools are not registered.
- A mailbox-read-only tool mode and explicit tool allowlists.
- Proxy support for Google OAuth HTTP requests and IMAP/SMTP connections.
- Gmail and multi-account QQ credential repair with authentication-only verification and rollback.
- Credential cleanup when credential-backed accounts are removed.
Security model
- Gmail and QQ secrets are stored in Windows Credential Manager; account JSON stores only non-secret metadata and credential target references.
- Email content is treated as untrusted input.
- Safe-send performs at most one SMTP attempt per frozen draft within a process. Ambiguous outcomes are not retried automatically; this is not end-to-end exactly-once delivery.
- Tests use explicit synthetic credential fixtures, and public CI does not use real provider credentials.
Known limitations
- This is a Public Preview / Beta, not a production-readiness claim.
- Hardened Gmail and QQ enrollment currently targets Windows.
- Generic IMAP/SMTP account support remains a legacy compatibility path with local AES storage and does not use the same Credential Manager model.
- Safe-send draft state is in memory and does not survive process restarts.
- The setup UI is loopback-only and must not be exposed through a reverse proxy or port forward.
- Real Gmail and QQ integration tests are intentionally separate from public CI.
- Install from source. This version is not published to npm or the MCP Registry.
Install from source
git clone https://github.com/SinoEdwards/mail-agent-mcp.git
Set-Location mail-agent-mcp
npm ci
npm run build
node dist/enroll.js --helpSee the README for Gmail and QQ enrollment, proxy configuration, MCP client setup, tool permissions, and troubleshooting.