Gives Claude a real email address with graduated trust controls. You can lock it to read-only, gate every send for approval, allowlist specific recipients, or let it run autonomous once you trust it. Emails arrive as markdown instead of raw MIME, replies thread automatically, and every outbound message gets a cryptographically signed identity header so recipients know a verified operator is behind it. The gated approval flow is formally verified in Lean 4. Supports attachments, scheduled sends, tagging for persistent memory, and content scanning for phishing or prompt injection. Includes 50 tools covering inbox management, thread operations, oversight controls, and account administration. Reach for this when your agent needs to actually participate in email correspondence without handing over the keys to your inbox.
claude mcp add --transport stdio multimail-dev-mcp-server -- npx -y @multimail/mcp-server