// SCAN REPORT

TrekMail MCP Server

216 tools. 135 can modify or destroy data without limits.

40 destructive tools with no built-in limits. Policy required.

Last updated:

135 can modify or destroy data
81 read-only
216 tools total

Community server · catalogue entry verified 30/06/2026

How to control TrekMail MCP Server ↓

TOOL MAP

What TrekMail MCP Server exposes to your agents

Read (81) Write / Execute (95) Destructive / Financial (40)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous TrekMail MCP Server tools

Destructive · High bulk_action While the tool offers multiple actions (read, unread, star, unstar, move, spam, notspam) that would typically be Write or Execute category, the inclusion of 'delete' as a supported action elevates this to Destructive. Destructive · Critical drive_folder_purge This tool permanently and irreversibly deletes a folder and all its contents from storage. Destructive · High drive_folder_trash Although described as 'soft-delete,' the tool removes an entire folder hierarchy and revokes all active share-links on contained files. Destructive · Critical drive_trash_empty This tool irreversibly deletes all trashed files and folders.

135 of TrekMail MCP Server's 216 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control TrekMail MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and TrekMail MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "bulk_action": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_contact_group_members": {
    "limits": [
      {
        "counter": "add_contact_group_members_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "download_all_attachments": {
    "limits": [
      {
        "counter": "download_all_attachments_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register TrekMail MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON TREKMAIL →

Instant setup, no code required.

FULL CATALOGUE

All 216 TrekMail MCP Server tools

DESTRUCTIVE 40 tools
Destructive bulk_action Perform an action on up to 50 messages at once. Actions: read, unread, star, unstar, delete, move, spam, notsp Destructive cancel_bulk_migration Cancel an active bulk migration batch. All queued and running jobs will be stopped. Set confirm_cancel=true to Destructive cancel_migration Cancel a running email migration. Set confirm_cancel=true to proceed. Destructive cancel_scheduled Cancel a pending scheduled message. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive change_mailbox_password Change the password of a mailbox. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true because password changes are irreve Destructive confirm_delete_intent Confirm a delete intent to permanently delete a mailbox. This is step 2 of the two-step deletion process. IRRE Destructive create_delete_intent Create a delete intent for a mailbox. This is step 1 of the two-step deletion process. Returns an intent with Destructive delete_alias Permanently remove an email alias from a mailbox. Mail sent to this address will no longer be delivered. This Destructive delete_bulk_migration Delete a completed, failed, or cancelled bulk migration batch record. Cannot delete active batches. Both TREKM Destructive delete_calendar_event Delete a calendar event. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_cloudflare_token Delete a saved Cloudflare token and disconnect all domains using it. Domains remain in TrekMail but lose their Destructive delete_contact Delete a contact. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_contact_group Delete a contact group. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_domain Permanently delete a domain and all its mailboxes. This action is irreversible. Requires TREKMAIL_ALLOW_DESTRU Destructive delete_domain_smtp_profile Delete a saved SMTP profile. Domains using it are reassigned automatically (to managed SMTP on paid plans, oth Destructive delete_folder Delete an IMAP folder and all its contents. Special folders cannot be deleted. Requires TREKMAIL_ALLOW_DESTRUC Destructive delete_identity Delete an identity. Cannot delete the default identity. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_mail_rule Delete a mail filter. This is irreversible. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_message Permanently delete a message by IMAP UID. This marks the message as \\Deleted and expunges it. Requires TREKMA Destructive delete_migration Delete a completed, failed, or cancelled migration record. Cannot delete running migrations. Both TREKMAIL_ALL Destructive delete_smtp_connection Delete a custom SMTP connection. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive delete_template Delete an email template. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive drive_bulk_purge DESTRUCTIVE. Hard-delete N TRASHED items. Items not currently in trash are silently skipped. Requires drive::p Destructive drive_bulk_trash Soft-delete N items in one call. Caps at 5000 items per request. Destructive drive_device_revoke Permanently revoke a Drive sync-device password. The sync client using it will lose access on its next request Destructive drive_file_purge DESTRUCTIVE. Permanently delete a TRASHED file. Bypasses the trash safety net. Requires drive::purge scope AND Destructive drive_file_trash Soft-delete: file moves to trash and active share-links are revoked. Destructive drive_folder_purge DESTRUCTIVE. Hard-delete a TRASHED folder + its entire subtree. B2 cleanup runs async. Requires drive::purge s Destructive drive_folder_trash Soft-delete folder + entire subtree (cascade). Active share-links on contained files are revoked. Destructive drive_share_revoke Revoke a share-link by id. Idempotent — second call no-ops. Destructive drive_trash_empty DESTRUCTIVE. Permanently delete every trashed file + folder in the space. Requires drive::purge scope AND TREK Destructive empty_folder Delete all messages in Trash or Junk folder. Only these two folders can be emptied. Requires TREKMAIL_ALLOW_DE Destructive remove_contact_group_members Remove one or more contacts from a group. Destructive remove_domain_branding Turn off White Label branding. scope=domain (default) turns it off for this domain only; scope=all turns it of Destructive remove_shared_mailbox_member Remove a member from a shared (team) mailbox. Pass the membership row id (the Destructive revoke_message_token Revoke a message API token. The token will no longer be usable for message operations. This action cannot be u Destructive unblock_sender Remove a sender from the blocked list. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true. Destructive verify_cancel_job Cancel a running verification job. Unprocessed credits are automatically refunded. Destructive verify_delete_job Permanently delete a verification job and all its results. Cannot be undone. Job must be completed or cancelle
EXECUTE 14 tools
Execute dns_recheck Trigger an asynchronous DNS verification check for a domain. Returns a check ID that can be polled with get_dn Execute drive_device_rotate Atomic credential rotation: revoke the old row and mint a new one inheriting label, scopes, and mailbox bindin Execute resume_bulk_migration Resume a paused bulk migration batch (e.g., paused due to storage limits). Set confirm_resume=true to proceed. Execute retry_bulk_migration Retry all failed jobs in a bulk migration batch. Requires TREKMAIL_ALLOW_MIGRATION=true and confirm_retry=true Execute retry_domain_dkim Restart DKIM key provisioning for a domain. Use this if DKIM provisioning failed or needs to be regenerated. Execute retry_migration Retry a failed or cancelled email migration. Set confirm_retry=true to proceed. Execute send_message Send an email from the mailbox. Requires a message token with messages:send scope. Both TREKMAIL_ALLOW_SENDING Execute start_bulk_migration Start a bulk migration batch. IMPORTANT: Run preview_bulk_migration first to validate your data. Creates one m Execute start_migration Start migrating emails from a source IMAP server to a TrekMail mailbox. This is a long-running operation. Both Execute test_domain_smtp Test a domain Execute test_smtp Test an SMTP connection with the provided credentials. Returns a job_id to poll for results. Execute update_smtp_config Update the SMTP configuration. Switch between platform and custom SMTP, or update custom SMTP settings. Requir Execute upload_sieve_script Upload and activate a custom Sieve script for a mailbox. This replaces any visual filters. The server validate Execute verify_domain_branding_dns Queue a DNS check + SSL provisioning for this domain
WRITE 81 tools
Write add_contact_group_members Add one or more contacts to a group. Write add_shared_mailbox_member Add a member to a shared (team) mailbox. All members can read incoming mail. Optionally grant Write apply_cloudflare_dns Apply DNS record changes via Cloudflare API. Creates MX, SPF, DKIM, DMARC records automatically. Use preview f Write block_sender Block an email address (e.g. spammer@evil.com) or entire domain (e.g. @evil.com). Max 50 per mailbox. Write bulk_add_domains Add multiple domains at once (up to 20). Returns per-domain results with success/error status. Write bulk_create_mailboxes Create multiple mailboxes at once (1-100). Each item specifies a domain and local part. password_mode= Write close_ticket Close a support ticket. Cannot close an already-closed ticket. Write connect_cloudflare_domains Connect one or more domains to Cloudflare. Creates new TrekMail domains if they don Write convert_mailbox_to_shared Convert an existing regular mailbox into a shared (team) mailbox. The specified members are added immediately. Write convert_shared_mailbox_to_regular Convert a shared (team) mailbox back to a regular user mailbox. ALL existing members are removed and direct lo Write create_alias Add a new email alias to a mailbox. The alias delivers mail into the same mailbox — no separate login needed. Write create_branding_preview Mint a one-time trial-preview link that shows the account dashboard running under this domain Write create_calendar_event Create a new calendar event. Write create_contact Create a new contact or return existing if email already exists. Write create_contact_group Create a new contact group (distribution list). Write create_domain Add a new domain to the account. The domain will start in pending_dns status. DNS records must be configured b Write create_domain_smtp_profile Create a reusable SMTP profile and apply it to this domain. Requires TREKMAIL_ALLOW_DESTRUCTIVE=true (it store Write create_folder Create a new IMAP folder in the mailbox. Folder names cannot use reserved names (INBOX, Sent, Drafts, Junk, Tr Write create_identity Create a send-from identity. Email must be the mailbox address or one of its aliases. Write create_invite Create a setup invite for a mailbox. Sends an email to the recipient with a link to set their own password and Write create_invites_bulk Create multiple setup invites in a single request. Each item specifies a local_part and recipient_email, and m Write create_mail_rule Create a new mail filter for a mailbox. Filters automatically process incoming email based on conditions (send Write create_mailbox_generated_password Create a new mailbox with an auto-generated one-time password. The password is returned once and must be saved Write create_message_token Create a message API token for a mailbox. The token grants access to read, write, or send messages for that ma Write create_shared_mailbox Create a new shared (team) mailbox. The mailbox is created with type Write create_template Create a new email template. Write create_ticket Create a new support ticket. Requires a subject, category, and initial message. Write drive_bulk_move Re-parent N items to target_folder_id (null = root). Files use a single UPDATE; folders go one-by-one for cycl Write drive_bulk_restore Restore N trashed items in one call. Write drive_device_create Mint a new Drive sync-device password (a Write drive_file_move Move a file to a different folder (folder_id=null moves to root). Write drive_file_rename Rename a file. Validation: name passes the DriveItemName ruleset. Write drive_file_restore Un-trash a soft-deleted file. If parent folder is also trashed, file pops up at root. Write drive_file_upload Upload a local file to Drive in one tool call. Internally chains drive_upload_initiate → direct PUT(s) to B2 → Write drive_folder_create Create a folder inside the space. parent_id=null creates at root. color is HEX (RRGGBB); omitted = default sla Write drive_folder_move Re-parent a folder. parent_id=null moves to root. Cycle detection enforced server-side. Write drive_folder_restore Restore a trashed folder + everything that was deleted in the same operation. Write drive_folder_share_with_account Make this folder visible to every mailbox in the account. If the folder lives in a mailbox-personal Drive, the Write drive_folder_stop_sharing Flip is_shared back to false on a shared folder. Folder stays in account-drive (no migration back to a specifi Write drive_folder_update Update name and/or color. At least one must be set; both are optional independently. Write drive_share_create Mint a public share link for the file. Returns a raw token in the Write drive_upload_abort Cancel an in-flight upload, release the reserved quota, and clean up B2 multipart state. Write drive_upload_complete Finalise after the bytes are PUT to B2. Multipart calls must include parts:[{part_number,etag}] from each PUT Write drive_upload_initiate Reserve quota and return presigned B2 PUT URLs. For files <100MB you get one URL; for larger files you get a m Write drive_upload_refresh_parts Re-presign expired part URLs for an in-flight multipart upload. Send the PartNumbers you still need. Write enable_imap Enable IMAP access for a mailbox so message tokens can be created. Requires the current mailbox password. Write import_contacts Import contacts from a base64-encoded CSV or VCF file (max 2 MB). Write move_message Move a message to a different IMAP folder. Copies the message to the destination and deletes it from the sourc Write pause_mailbox Pause (disable) a mailbox. The mailbox will stop receiving and sending email until resumed. Write rename_folder Rename an existing IMAP folder. Special folders (INBOX, Sent, Drafts, Junk, Trash, Archive, Scheduled) cannot Write reorder_mail_rules Change the execution order of mail filters. Filters are checked in order — first match wins. Write reply_to_ticket Reply to an existing support ticket. Cannot reply to closed tickets. Write report_ham Report a message as not spam (ham). Trains the anti-spam filter (Rspamd) and moves the message to INBOX. Retur Write report_spam Report a message as spam. Trains the anti-spam filter (Rspamd) and moves the message to the Junk folder. Retur Write reschedule_message Change the delivery time of a pending scheduled message without re-sending. Use this instead of cancel + sched Write resume_mailbox Resume a paused (disabled) mailbox. The mailbox will start receiving and sending email again. Write save_draft Save a new draft to the IMAP Drafts folder. Accepts structured JSON with to, cc, bcc, subject, body (text/html Write schedule_message Schedule an email to be sent at a future date/time. Requires TREKMAIL_ALLOW_SENDING=true and confirm_send=true Write set_account_smtp_default Set the account-wide default route that new domains start on: Write set_auto_reply Configure the vacation auto-reply for a mailbox. Set a custom subject, message body, optional date range, and Write set_domain_branding Configure White Label branding for a domain. PARTIAL update — only the fields you pass change; omit a field to Write set_domain_smtp Set how a domain sends outbound mail: Write set_forwarding Configure email forwarding for a mailbox. Set targets, enable/disable forwarding, and choose whether to keep a Write update_alias Update an alias — toggle receiving, sending, or active/inactive status. Cannot change the alias address itself Write update_bulk_migration_job_password Update the source IMAP password for a failed job in a bulk migration batch. Only works on jobs with Write update_calendar_event Update an existing calendar event. Write update_contact Update an existing contact Write update_contact_group Rename a contact group. Write update_domain_catch_all Configure catch-all email forwarding for a domain. Unmatched emails will be forwarded to the destination. Inte Write update_domain_note Update the note/description on a domain (max 120 characters). Pass null to clear. Write update_domain_signature Set the per-domain email signature. mode=off disables; mode=default seeds newly-created mailbox identities; mo Write update_domain_smtp_profile Update a saved SMTP profile (affects every domain using it). Omit password to keep the current one. Requires T Write update_draft Update an existing draft by IMAP UID. Deletes the old draft and appends a new one to the Drafts folder. Write update_identity Update an identity Write update_mail_rule Update an existing mail filter. Pro and Agency plans only. Write update_mailbox Update write-safe fields on a mailbox. Currently supports display_name (used in the From header of outbound ma Write update_mailbox_note Update the note/description on a mailbox (max 120 characters). Pass null to clear. Write update_message_flags Update flags (read/unread, starred/unstarred) on a message by IMAP UID. Requires a message token with messages Write update_shared_mailbox_member Update a shared mailbox member Write update_template Update an existing email template.
READ 81 tools
Read download_all_attachments Download all attachments from a message as a base64-encoded ZIP file. Warning: may produce very long responses Read download_attachment Download a single attachment from a message by its index. Returns base64-encoded content. Warning: large attac Read drive_addon_cancellation_preview What happens if the user cancels the add-on now: addon size vs plan quota, over-quota delta, sample of largest Read drive_addon_get Current Drive Storage Add-on state: active flag, in_grace, size_gb, period end, hard-delete date if cancelled. Read drive_addon_pricing Pricing snap-points (250GB → 100TB) with monthly + yearly amounts in the requested currency. Default currency Read drive_browse_folder List folders + files in one Drive folder (or root when folder_id is omitted). Cursor-paginated with an opaque Read drive_device_list List active and revoked Drive sync-device passwords for the account. Returns id, label, scopes, mailbox bindin Read drive_file_download_url Returns a short-lived presigned URL (default ~5min) you can fetch directly to download the file bytes. URL for Read drive_file_get File metadata: name, size, mime, status, scan status, has_active_share_link. Read drive_folder_tree Flat list of every folder in the space (id + name + parent_id + color). Useful for building a Read drive_select_all_ids Returns every file_id and folder_id directly inside the named folder (root when folder_id omitted). Capped at Read drive_share_list All share-links for a file (active + revoked). Raw tokens are NEVER included — use create Read drive_space_usage Per-space quota snapshot. Same numbers as storage_summary but tagged to the resolved space. Read drive_spaces_list List Drive spaces this token can enumerate. Returns up to two kinds: Read drive_storage_summary Account-wide pool snapshot: used_bytes, limit_bytes, addon size, addon active/grace flags. Useful before initi Read drive_trash_list Soft-deleted files + folders in the space, newest-first. Cursor-paginated by deleted_at; default per_page=50. Read export_contacts Export all contacts as base64-encoded CSV or VCF. Read get_account Get account information including current plan, resource limits, feature flags, and usage counts. Read get_account_smtp_default Get the account-wide default outbound route that new domains start on (and that Read get_auto_reply Get the vacation auto-reply settings for a mailbox. Shows whether auto-reply is enabled, the subject, message Read get_billing_status Get the current billing status including plan, subscription state, renewal/trial/cancellation dates, and provi Read get_bulk_migration Get details of a bulk migration batch including per-job status breakdown. Read get_dns_check Get the status and results of a DNS verification check. Poll this after triggering dns_recheck. Read get_dns_requirements Get the DNS records that need to be configured for a domain. Returns MX, SPF, DKIM, and DMARC requirements. Read get_domain Get detailed information about a specific domain, including its verification status and configuration. Read get_domain_branding Read the per-domain White Label branding state: mode (off/inherit/custom), brand identity (name, colors, logo/ Read get_domain_deliverability Get the outbound deliverability rollup for a domain — sent, delivered, soft/hard bounce counts, delivery rate, Read get_domain_signature Get the per-domain email signature settings (mode, position, html). Returns mode= Read get_domain_smtp Get the outbound SMTP route for a domain: mode (platform/profile/not_configured/inherit) and the selected prof Read get_domain_smtp_test_status Poll the result of a domain SMTP test by job_id. Read get_forwarding Get the current forwarding configuration for a mailbox. Shows whether forwarding is enabled, the target addres Read get_mail_rule Get a single mail filter by ID. Read get_mailbox Get detailed information about a specific mailbox including its status, forwarding config, and domain. Read get_migration Get detailed status of a specific email migration, including per-folder progress breakdown and polling hint. Read get_raw_message Get the full RFC822 raw source of a message, including all headers. Useful for debugging delivery issues, anal Read get_sieve_script Get the current Sieve script for a mailbox. Returns the auto-generated script built from visual filters and au Read get_smtp_config Get the current SMTP configuration for the account, including mode (platform/custom) and connection details. Read get_smtp_test_status Poll the result of an SMTP connection test by job_id. Read get_spam_metrics Get daily spam protection metrics for a domain. Shows inbound emails, spam caught, spam rejected, and clean em Read get_spam_summary Get a summary of spam protection for a domain. Includes total inbound, spam rate, protection status, and top t Read get_ticket Get detailed information about a specific support ticket, including its status and metadata. Read get_ticket_messages Get all messages in a support ticket conversation, ordered chronologically. Read list_aliases List all email aliases for a mailbox. Shows each alias address, receiving/sending status, and whether it Read list_blocked_senders List all blocked email addresses and domains for the mailbox. Read list_bulk_migrations List bulk migration batches for your account. Supports filtering by status. Read list_calendar_events List calendar events within a date range (max 200 events). Read list_cloudflare_tokens List all saved Cloudflare API tokens for this account, with the number of connected domains for each. Read list_cloudflare_zones List all DNS zones accessible to a Cloudflare token, matched against your TrekMail domains. Shows which domain Read list_contact_groups List all contact groups for the mailbox. Read list_contacts List contacts for the mailbox with optional search and pagination. Read list_domain_bounces List recent per-recipient hard/soft bounces for outbound mail sent from a domain. Each result includes the SMT Read list_domain_smtp_profiles List the account Read list_domains List domains on the TrekMail account. Supports filtering by status and searching by name. Returns paginated re Read list_folders List all IMAP folders for the mailbox. Returns each folder Read list_identities List send-from identities (addresses with signatures). Auto-creates default if none exists. Read list_invoices List billing invoices for the account. Returns invoice details including amounts, status, and download URLs. Read list_mail_rules List all mail filters for a mailbox. Filters automatically process incoming email — forward by sender/subject/ Read list_mailbox_bounces Same as list_domain_bounces but scoped to a single mailbox — useful for per-sender reputation triage. Returns Read list_mailboxes List mailboxes on the TrekMail account. Supports filtering by domain and searching by address. Returns paginat Read list_message_tokens List all message API tokens for a mailbox. Shows token prefix, name, scopes, and status. Does not reveal the f Read list_messages List messages in a mailbox IMAP folder, sorted newest-first with cursor-based pagination. Requires a message t Read list_migrations List email migration jobs for your account. Supports filtering by status and mailbox. Read list_scheduled List pending scheduled messages for the mailbox. Read list_shared_mailbox_members List all members of a shared (team) mailbox. Shows each member Read list_templates List email templates for the mailbox. Read list_tickets List support tickets on the TrekMail account. Supports filtering by status and category. Returns paginated res Read prepare_forward Get pre-populated forward data: subject (Fwd:), forwarded body, original attachment metadata. Read prepare_reply Get pre-populated reply data for a message: to, subject (Re:), quoted body, in_reply_to. Ready to pass to send Read prepare_reply_all Get pre-populated reply-all data: to + cc (all original recipients except self), subject (Re:), quoted body. Read preview_bulk_migration Validate and preview a bulk migration batch. Returns categorized results showing which rows are valid, invalid Read preview_cloudflare_dns Preview what DNS records will be created, merged, or replaced for connected Cloudflare domains. Run this befor Read read_message Get a single message by IMAP UID, including full body and attachment metadata. Requires a message token with m Read test_migration_connection Test IMAP connection credentials for email migration. Returns folder list with message counts if successful. R Read validate_cloudflare_token Check if a Cloudflare API token is valid and active. Does not verify DNS permissions — use connect to test wri Read verify_credits Check the current email verification credit balance — monthly remaining, purchased, and total available. Read verify_email Verify a single email address against up to 25 checks (syntax, MX, disposable, blocklist, SPF, DMARC, gibberis Read verify_email_bulk Submit a list of email addresses for bulk verification. Returns a job ID to track progress. Quick mode: 1 cred Read verify_job_download Returns the verification results as raw CSV body in the response (NOT a URL). Filters: all, safe, safe_risky. Read verify_job_status Check the progress and results of a bulk email verification job. Returns status, progress percentage, summary Read verify_list_jobs List all email verification jobs for this account with pagination. Optionally filter by status. Read whoami Verify the current API token and return token details (name, scopes, expiry) and account info.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Yaver 775 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about TrekMail MCP Server

Can an AI agent delete data through the TrekMail MCP Server MCP server? +

Yes. The TrekMail MCP Server server exposes 40 destructive tools including bulk_action, cancel_bulk_migration, cancel_migration. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through TrekMail MCP Server? +

The TrekMail MCP Server server has 81 write tools including add_contact_group_members, add_shared_mailbox_member, apply_cloudflare_dns. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach TrekMail MCP Server.

How many tools does the TrekMail MCP Server MCP server expose? +

216 tools across 4 categories: Destructive, Execute, Read, Write. 81 are read-only. 135 can modify, create, or delete data.

How do I enforce a policy on TrekMail MCP Server? +

Register the TrekMail MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every TrekMail MCP Server tool call.

Deterministic rules across all 216 TrekMail MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TREKMAIL →

Instant setup, no code required.

216 TrekMail MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// WHERE THIS COMES FROM

These policies come from TrekMail MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.