Skip to content

mail-agent-mcp v0.1.0 — Public Preview

Pre-release
Pre-release

Choose a tag to compare

View all tags
@SinoEdwards SinoEdwards released this 29 Aug 10:21
· 1 commit to main since this release
v0.1.0
c8351df

mail-agent-mcp v0.1.0 is the first public preview of a local-first email MCP server focused on Gmail and QQ Mail.

Highlights

  • Gmail OAuth 2.0 installed-app enrollment with PKCE, state validation, loopback callbacks, token refresh, and sanitized provider errors.
  • QQ Mail enrollment with authorization codes and hidden local terminal input.
  • Windows Credential Manager storage for Gmail refresh tokens, Gmail client secrets, and QQ authorization codes.
  • IMAP folder listing, search, recent-mail queries, metadata reading, message and thread inspection, and attachment workflows.
  • Preview-confirmed send, reply, and forward flows; legacy direct-send tools are not registered.
  • A mailbox-read-only tool mode and explicit tool allowlists.
  • Proxy support for Google OAuth HTTP requests and IMAP/SMTP connections.
  • Gmail and multi-account QQ credential repair with authentication-only verification and rollback.
  • Credential cleanup when credential-backed accounts are removed.

Security model

  • Gmail and QQ secrets are stored in Windows Credential Manager; account JSON stores only non-secret metadata and credential target references.
  • Email content is treated as untrusted input.
  • Safe-send performs at most one SMTP attempt per frozen draft within a process. Ambiguous outcomes are not retried automatically; this is not end-to-end exactly-once delivery.
  • Tests use explicit synthetic credential fixtures, and public CI does not use real provider credentials.

Known limitations

  • This is a Public Preview / Beta, not a production-readiness claim.
  • Hardened Gmail and QQ enrollment currently targets Windows.
  • Generic IMAP/SMTP account support remains a legacy compatibility path with local AES storage and does not use the same Credential Manager model.
  • Safe-send draft state is in memory and does not survive process restarts.
  • The setup UI is loopback-only and must not be exposed through a reverse proxy or port forward.
  • Real Gmail and QQ integration tests are intentionally separate from public CI.
  • Install from source. This version is not published to npm or the MCP Registry.

Install from source

git clone https://github.com/SinoEdwards/mail-agent-mcp.git
Set-Location mail-agent-mcp
npm ci
npm run build
node dist/enroll.js --help

See the README for Gmail and QQ enrollment, proxy configuration, MCP client setup, tool permissions, and troubleshooting.

Assets 2
Loading