An email MCP server for AI agents

AI Mail MCP is a hosted MCP server that gives an AI agent real email: mailboxes on your own domain, one unified inbox, sending and replying in the same thread, and a safety check on every message it reads.

Connect your agent Try the demo

What an agent can do with it

• Read one inbox. list_messages, search_messages, get_thread and triage_inbox read every mailbox the token can see as one inbox, sorted into what needs a reply, bills, newsletters and the rest.
• Wait for a code. wait_for_message holds until a sign-up email arrives, and extract_code pulls out the code or the magic link.
• Send and reply. send_message, reply and forward send from the right address, in the same thread, within a daily send cap.
• Get an address. With a prepaid account, create_mailbox makes an address on AI Mail's shared domain at once, with no DNS. For your own domain, add_domain returns the exact DNS records (MX, SPF, DKIM, DMARC) and verify_domain checks them.
• Sort mail with plain words. define_label describes a label in a sentence. create_rule labels, archives or saves a draft reply, and a rule never sends on its own.

73 tools in all, each with a JSON schema. Read the tool reference or try the interactive demo.

Safe for an agent to read

Email is the easiest place to hide instructions for an AI. Every inbound message is scored for prompt injection. A message flagged as an injection has its body withheld from the agent unless it asks for it explicitly, and check_message_safety explains the score. Everything a tool returns from a message is marked as untrusted data from an outside sender.

Outgoing mail passes a guard that looks for credentials, look-alike domains and misleading links. A credential going to someone the account has never written to is held until an owner approves it in the console. Tokens are scoped and capped, and every change tool accepts dry_run to show the plan first. More on security.

Connect it in a minute

Claude (claude.ai and Claude Desktop): open Settings, then Connectors, then Add custom connector. Paste https://aimailmcp.com/mcp as the server URL and choose Connect.

Claude Code:

claude mcp add --transport http aimail https://aimailmcp.com/mcp

ChatGPT and other MCP clients: any client that supports remote MCP with OAuth 2.1 works with the same URL. A client without a browser can get an API token instead. Step by step.

Try it with a first prompt

After you connect, paste this into your assistant:

Show my AI Mail mailboxes, tell me my sandbox address, and tell me when the trial ends.

The sandbox starts empty, so ask it next to send three short test emails to your own address, then triage the inbox.

What it costs

Start with a free 15-day sandbox: one real mailbox that receives mail from anyone, with no card. It sends only to your own verified email and to other sandbox mailboxes. To send to anyone, or to keep going after the trial, top up from $10: it is prepaid and priced per unit, with no subscription, and it lifts the sandbox limits. See the price list.

Frequently asked questions

What is an email MCP server?

It is a server that lets an AI assistant use email through the Model Context Protocol. The assistant calls tools to read, search, send and organize mail instead of you pasting messages into a chat.

Which AI clients work with AI Mail MCP?

Claude on the web and desktop, Claude Code, ChatGPT and any other client that supports remote MCP servers with OAuth 2.1.

Can the agent send email on its own?

Only if you give its token permission to send. Sending is capped per day and passes an outgoing guard. Rules never send: they label, archive, forward to verified addresses or save a draft.

How does it protect against prompt injection in email?

Every inbound message is scored. A message flagged as a prompt injection has its body withheld from the agent unless the agent explicitly asks for it, and everything returned from a message is marked as untrusted data.

Can I use my own domain?

Partly. A prepaid account can create an address on AI Mail's shared domain with no DNS. add_domain returns the DNS records for your own domain and verify_domain checks them, but sending is available only on domains whose DNS AI Mail manages. A domain with its DNS elsewhere can receive mail, by forwarding addresses to a mailbox, and cannot send. The free sandbox has no custom domains.

Is there a free trial?

Yes: a 15-day sandbox with one mailbox and no card. After it ends, the mailbox stops sending and receiving, and its mail is deleted 7 days later unless you top up.

More guides

• Prompt-injection-safe email for AI agents
• Let an AI agent receive verification codes and magic links
• AI triage for your support, sales, billing and legal inbox
• Give your AI agent its own email address
• An email connector for Claude

Docs · Privacy · Terms · Data deletion · Pricing · Support · Security · Status