// SCAN REPORT

Pyfastmail

48 tools. 27 can modify or destroy data without limits.

5 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

27 can modify or destroy data

21 read-only

48 tools total

Community server · catalogue entry verified 03/07/2026

How to control Pyfastmail ↓

TOOL MAP

What Pyfastmail exposes to your agents

Read (21) Write / Execute (22) Destructive / Financial (5)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Pyfastmail tools

Destructive · High calendar_delete_event This tool permanently removes calendar events without possibility of recovery. Destructive · High contacts_delete_contact This tool permanently removes contact records from the user's account. Destructive · High files_delete Deletion of files or folders is an irreversible operation that cannot be undone by the AI agent. Destructive · Critical mail_delete_email Permanent destruction of emails cannot be undone and represents irreversible data loss.

27 of Pyfastmail's 48 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Pyfastmail

PolicyLayer is an MCP gateway — it sits between your AI agents and Pyfastmail, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "calendar_delete_event": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "calendar_create_event": {
    "limits": [
      {
        "counter": "calendar_create_event_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "calendar_get_event": {
    "limits": [
      {
        "counter": "calendar_get_event_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Pyfastmail — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PYFASTMAIL →

Instant setup, no code required.

FULL CATALOGUE

All 48 Pyfastmail tools

DESTRUCTIVE 5 tools

Destructive calendar_delete_event Delete a CalDAV event by its href. Destructive contacts_delete_contact Delete one or more contacts by ID. Destructive files_delete Delete a file or folder on Fastmail Files (WebDAV). Destructive mail_delete_email Delete one or more emails by moving to Trash, or permanently destroy them. Destructive mail_delete_mailbox mail_delete_mailbox

WRITE 22 tools

Write calendar_create_event calendar_create_event Write calendar_update_event calendar_update_event Write contacts_create_contact contacts_create_contact Write contacts_update_contact contacts_update_contact Write files_create_folder Create a folder on Fastmail Files (WebDAV). Write files_move Move or rename a file or folder on Fastmail Files (WebDAV). Write files_upload Upload a file to Fastmail Files (WebDAV). Write mail_archive_email Move one or more emails to the Archive mailbox. Write mail_create_mailbox mail_create_mailbox Write mail_create_masked_email mail_create_masked_email Write mail_forward_email mail_forward_email Write mail_import_email mail_import_email Write mail_manage_email_labels mail_manage_email_labels Write mail_mark_email_read Set or unset the $seen flag on one or more emails. Write mail_move_email Move one or more emails to a mailbox identified by name. Write mail_pin_email Pin or unpin one or more emails (sets the $flagged keyword). Write mail_rename_mailbox Rename a mailbox (folder or label) by its ID. Write mail_reply_to_email mail_reply_to_email Write mail_send_email mail_send_email Write mail_set_identity mail_set_identity Write mail_update_masked_email mail_update_masked_email Write mail_upload_attachment Upload a blob for use in email composition.

READ 21 tools

Read calendar_get_event Get full details of a single CalDAV event by its href. Read calendar_list_calendars List all CalDAV calendars for the authenticated Fastmail account. Read calendar_list_events calendar_list_events Read contacts_get_contact Fetch full contact card(s) by ID. Read contacts_list contacts_list Read contacts_list_address_books List all address books with id, name, description, sortOrder, isDefault, and isSubscribed. Read contacts_query_contacts contacts_query_contacts Read files_get Download a file from Fastmail Files (WebDAV), returned as base64. Read files_list List files and folders at a WebDAV path on Fastmail Files. Read health_check Verify connectivity to Fastmail and return account info. Read mail_download_attachment Download an attachment blob by blobId. Read mail_export_email mail_export_email Read mail_get_email mail_get_email Read mail_get_email_thread Return all emails in the same thread as the given email, in chronological order. Read mail_get_recent_emails Get emails received in the last N days. Read mail_list_identities List all sender identities available on this Fastmail account. Read mail_list_mailboxes mail_list_mailboxes Read mail_list_masked_emails mail_list_masked_emails Read mail_parse_email mail_parse_email Read mail_search_emails mail_search_emails Read mail_search_snippets mail_search_snippets

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Pyfastmail

Can an AI agent delete data through the Pyfastmail MCP server? +

Yes. The Pyfastmail server exposes 5 destructive tools including calendar_delete_event, contacts_delete_contact, files_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Pyfastmail? +

The Pyfastmail server has 22 write tools including calendar_create_event, calendar_update_event, contacts_create_contact. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Pyfastmail.

How many tools does the Pyfastmail MCP server expose? +

48 tools across 4 categories: Destructive, Execute, Read, Write. 21 are read-only. 27 can modify, create, or delete data.

How do I enforce a policy on Pyfastmail? +

Register the Pyfastmail MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Pyfastmail tool call.

Deterministic rules across all 48 Pyfastmail tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PYFASTMAIL →

Instant setup, no code required.

48 Pyfastmail tools catalogued and risk-classified — across an index of 43,000+ MCP servers.