Mcp Python — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Python (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Free email for AI agents -- MCP server for mailpal.com
uvx mailpal-mcpor
pip install mailpal-mcp@mailpal.com email address at no cost| Tool | Description |
|---|---|
mailpal_activate_account | Create your @mailpal.com email address (two-phase Proof-of-Intelligence challenge) |
mailpal_send_email | Send email with hardware attestation ON by default (mode 2 = SD-JWT, mode 1 = direct TPM CMS, mode 0 = none) |
mailpal_check_inbox | Check inbox for messages -- returns summaries with sender, subject, date, preview |
mailpal_read_message | Read full message content including text body, HTML body, and all metadata |
mailpal_subscribe_to_inbox | Subscribe to real-time "You've Got Mail!" notifications when new email arrives |
mailpal_wait_for_email | Block until new email arrives or timeout (requires subscribe first) |
mailpal_register_email_callback | Register a webhook URL to POST when new email arrives |
mailpal_unregister_email_callback | Remove a previously registered webhook callback |
mailpal_jmap | Raw JMAP passthrough -- delete, move, flag, search, folders, contacts, calendars, sieve filters, blob upload, anything JMAP supports |
oneid_get_or_create_identity | Get or create a hardware-anchored 1id identity for this agent |
oneid_status | Full picture of identity, devices, connected services |
oneid_get_bearer_token | Get an OAuth2 Bearer token for the current identity |
oneid_sign_challenge | Sign a verifier-provided nonce to prove hardware identity |
oneid_verify_peer_identity | Verify another agent's identity proof bundle |
oneid_list_credential_pointers | List credential pointers for an identity |
The mailpal_jmap tool gives your agent access to the full JMAP specification (RFC 8620/8621) and all Stalwart extensions. If a convenience tool doesn't exist for what you need, use this.
pip install oneid
oneid enrollThis creates a hardware-anchored identity and gives you a JWT token.
Cursor (~/.cursor/mcp.json):
{
"mcpServers": {
"mailpal": {
"command": "uvx",
"args": ["mailpal-mcp"],
"env": {
"MAILPAL_TOKEN": "<your-1id-jwt>"
}
}
}
}Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"mailpal": {
"command": "uvx",
"args": ["mailpal-mcp"],
"env": {
"MAILPAL_TOKEN": "<your-1id-jwt>"
}
}
}
}Windsurf (~/.windsurf/mcp.json):
{
"mcpServers": {
"mailpal": {
"command": "uvx",
"args": ["mailpal-mcp"],
"env": {
"MAILPAL_TOKEN": "<your-1id-jwt>"
}
}
}
}{
"mcpServers": {
"mailpal": {
"type": "streamable-http",
"url": "https://mailpal.com/mcp",
"headers": {
"Authorization": "Bearer <your-1id-jwt>"
}
}
}
}The hosted endpoint also supports real-time "You've Got Mail!" notifications via MCP resource subscriptions and SSE.
| Variable | Required | Description |
|---|---|---|
MAILPAL_TOKEN | Yes | 1id.com JWT token for authentication |
MAILPAL_API_URL | No | Override API base URL (default: https://mailpal.com/api/v1) |
mailpal-mcp-server on npm -- npx mailpal-mcp-serverhttps://mailpal.com/mcp (Streamable HTTP, supports real-time notifications)https://mailpal.com/api/v1/ (docs)imap.mailpal.com:993 / smtp.mailpal.com:587 (standard email clients)| Feature | MailPal | AgentMail | Robotomail | Nylas |
|---|---|---|---|---|
| Free tier | Unlimited | 100 msgs | Limited | Paid |
| Real SMTP/IMAP | Yes | API only | API only | Yes |
| Hardware attestation | Yes (ON by default) | No | No | No |
| CalDAV/CardDAV | Yes | No | No | Yes |
| MCP server | Yes | Yes | No | No |
| JMAP passthrough | Yes | No | No | No |
| Real-time inbox push | Yes | No | No | No |
| Self-hostable | Yes (Stalwart) | No | No | No |
git clone https://github.com/mailpal-com/mcp-python.git
cd mcp-python
pip install -e .
mailpal-mcpTest with MCP Inspector:
npx -y @modelcontextprotocol/inspectorApache-2.0 -- see LICENSE.
Built by Crypt Inc. -- the team behind 1id.com and mailpal.com.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.