// MCP TOOL REFERENCE

AGENTMAIL TOOLS

11 tools from the Agentmail MCP Server, categorised by risk level.

READ TOOLS

forward_message Forward message 2/5 get_attachment Get attachment get_inbox Get inbox get_thread Get thread list_inboxes List inboxes list_threads List threads in inbox reply_to_message Reply to message 2/5

WRITE TOOLS

create_inbox Create inbox 2/5 send_message Send message 3/5 update_message Update message 2/5

DESTRUCTIVE TOOLS

delete_inbox Delete inbox 4/5

// FAQ

How many tools does the Agentmail MCP server have? +

The Agentmail MCP server exposes 11 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on Agentmail tools? +

Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Agentmail server.

What risk categories do Agentmail tools fall into? +

Agentmail tools are categorised as Read (7), Write (3), Destructive (1). Each category has a recommended default policy.

Enforce policies on Agentmail

Open source. One binary. Zero dependencies.

npx -y @policylayer/intercept

github.com/policylayer/intercept →