mailtag
Blog / MCP
Best email MCP servers in 2026, compared
- The best email MCP server depends on your provider. Google (Gmail, in developer preview), Microsoft (work accounts only) and Fastmail run their own.
- Claude and ChatGPT have built-in Gmail and Outlook connectors that can send email. Since 27 October 2026, ChatGPT also reads iCloud Mail.
- Yahoo and other IMAP mailboxes need a community server and an app password. Almost every option shows the agent the whole mailbox.
An email MCP server lets an AI assistant such as Claude or ChatGPT search, read and sometimes send your email. MCP (Model Context Protocol) is the standard way these assistants connect to other apps. Look for one for your provider and you find a dozen GitHub projects, two official servers in preview and connectors with different rules.
Here they are side by side: who makes each one, how it gets into your account and what the agent can do with your mail.
The options at a glance
Checked on 27 October 2026, from each provider's documentation, Anthropic's and OpenAI's help pages and the GitHub projects linked below.
| Provider | Official server | Built into Claude | Built into ChatGPT | Other options | How it gets into your account |
|---|---|---|---|---|---|
| Gmail | Yes | Yes | Yes | Community servers | Your Google account |
| Outlook / Microsoft 365 | Yes | Yes | Yes | Community servers | Your Microsoft account |
| iCloud Mail | No | No | Yes | IMAP servers, Mac servers | App password |
| Yahoo Mail | No | No | No | IMAP servers, hosted services | App password |
| Fastmail | Yes | No | No | Older community servers | Your Fastmail account |
| Any IMAP mailbox | No | No | No | Generic IMAP servers | Password or app password |
Google's server is a developer preview. Microsoft's server and Claude's Microsoft 365 connector only take work and school accounts. ChatGPT's iCloud Mail plugin arrived on 27 October 2026 and finds and reads email. You can add Fastmail's server to Claude or ChatGPT by hand.
What changes from one option to another
Who holds the keys
With an official server, you sign in on the provider's own page and can revoke access from your account. With a community server, the password sits on your computer. With a hosted service, another company keeps it.
An app password is a separate password for one app. It opens the whole mailbox, deleting included.
What the agent can do
Reading and searching is the baseline. Then the options split:
- Drafts only. Google's Gmail server searches, reads, labels and writes drafts, but can't send (Google).
- Send with approval. Claude's Gmail connector sends, replies and forwards, asking first by default (Anthropic). Since 8 June 2026, ChatGPT writes a draft from Gmail or Outlook and you choose whether to send it, on the web and on paid plans (OpenAI release notes).
- Levels you choose. Fastmail asks you to pick read-only, write (which includes moving and deleting mail) or send (Fastmail).
- Everything. Most IMAP servers can send, move and delete. Some have a read-only switch.
How much of the mailbox it sees
No official server or built-in connector lets you say "only these labels" or "only the last week". Every email is text written by a stranger, and an agent that reads them all can be steered by one of them. We explain how in email prompt injection.
How many servers you need
Official servers cover one provider each. With a personal Gmail, an iCloud account and work email somewhere else, you connect each one separately, and each has its own rules.
Some options bring several mailboxes together. ChatGPT lets you connect more than one account and use them in the same chat. Generic IMAP servers take several accounts from different providers, each with its own app password. Hosted services such as MCPEmails put several mailboxes behind one connection. What they don't do is limit the agent by category, by date or by what it reads in each email. MailTag's server, explained below, does.
Provider by provider
Gmail
Google's Gmail server is aimed at developers: you join a preview program that asks for a Google Workspace account, then set up your own Google Cloud project. For most people the simplest path is the Gmail connector already in Claude or ChatGPT. More in Gmail MCP server.
Outlook and Microsoft 365
Microsoft's Work IQ MCP is for companies, billed by usage. Claude's Microsoft 365 connector doesn't accept @outlook.com, @hotmail.com or @live.com accounts (Anthropic). For a personal account, a community server is the realistic route. More in Outlook MCP server.
iCloud Mail and Yahoo Mail
Neither Apple nor Yahoo has an MCP server. ChatGPT added an iCloud Mail plugin on 27 October 2026 that finds and reads email (OpenAI). Otherwise, community servers connect with an iCloud app-specific password or a Yahoo app password. For iCloud, some drive the Mail app on a Mac; for Yahoo, there are hosted services. More in iCloud Mail MCP server and Yahoo Mail MCP server.
Fastmail
Fastmail launched an official MCP server on 22 April 2026. It is the most complete official option: normal sign-in, three access levels and access you can revoke. It can't open attachments yet. More in Fastmail MCP server.
Any IMAP mailbox
IMAP is the standard way mail apps reach a mailbox. For a custom domain, GMX or a work server, generic IMAP servers cover almost anything. You run them and keep the password safe. More in IMAP MCP server.
For developers
- Gmail:
gmailmcp.googleapis.com, through the Workspace Developer Preview Program, with your own Cloud project and OAuth client. Community: google_workspace_mcp. - Microsoft: Work IQ MCP signs in with Microsoft Entra ID. Personal accounts: ms-365-mcp-server, over Microsoft Graph.
- iCloud: IMAP at
imap.mail.me.com. Fastmail:api.fastmail.com/mcp, with OAuth or an API token; older community servers use JMAP. - IMAP: email-mcp and imap-mcp-server. The latter goes read-only with
IMAP_MCP_READ_ONLY.
A scoped MCP server with MailTag
MailTag sorts each new email from Gmail, iCloud, Yahoo, Fastmail or any IMAP mailbox into your own categories, on its servers in the EU, without storing the content. It has one MCP server for every mailbox you connect, whatever the provider. That server (https://mailtag.app/mcp, signing in with your account or a key) gives an agent that sorted view, and you decide per agent:
- which mailboxes, and which categories or saved views (the others are invisible, names included);
- how far back: 30 days, 7 days, today, or only from when you connect it;
- whether it sees the sender, the subject, the email's text and attachments;
- whether it may relabel email, or create, edit and delete categories and saved views;
- whether it may write drafts (replies, reply-all, forwards or new email), saved in your mailbox's Drafts for you to send;
- whether it may send: replies only or new email too, to anyone or only to people you've replied to, and up to 10, 50 or 200 a day.
It can never delete email or move it out of your mailbox. An agent can't answer or forward an email the safety check marked as dangerous. Every call shows up under Recent activity. One limit to know: it only sees email MailTag labeled in the last 30 days, so it isn't a search over your whole archive. Outlook can't be connected yet. The full list is in the MCP docs, and the setup in connect Claude or ChatGPT to email.
FAQ
Which email MCP server is best?
It depends on your provider: for Gmail, the connector built into Claude or ChatGPT is the easiest; for Fastmail, its official server. To read iCloud Mail, ChatGPT has its own plugin. For a personal Outlook.com account, Yahoo or a custom domain, use a community server in read-only mode.
Which email providers have an official MCP server?
Google (Gmail, in developer preview), Microsoft (Work IQ MCP, for work and school accounts only) and Fastmail. Apple and Yahoo have none.
Can an MCP server send email without asking me?
Many community servers do. Claude's Gmail connector asks before each send by default, and ChatGPT shows you a draft first. Start with read-only or drafts.
Is it safe to give an MCP server my app password?
It opens your whole mailbox, deleting included. Give it only to software you trust and delete it when you stop using the server.
Does the agent's provider see my email?
Yes, whatever the MCP server returns goes into the agent's conversation. Anthropic, for example, keeps data from its Google connectors with the chat and says it doesn't train on it.