PROTON-MCP TOOLS

36 tools from the Proton-MCP MCP Server, categorised by risk level.

READ 18 tools
Read calendar__get_event Get a single calendar event by its UID Read calendar__list_events List calendar events in a date range. Can read both Jorgenclaw and Scott calendars. Read drive__download Download a file or folder from Proton Drive to local path Read drive__list List files and folders at a path on Proton Drive Read mail__get_attachments Download attachments from an email. Returns base64-encoded content. Read mail__get_message Get a single email by message ID (sequence number). Includes threading headers. Read mail__get_thread Fetch the full email chain (thread) for a message Read mail__get_unread Get unread emails from Proton Mail inbox Read mail__list_folder_messages List messages in a specific folder (Sent, Drafts, Trash, or any label) Read mail__list_folders List all mail folders and labels Read mail__list_messages List recent emails from Proton Mail inbox Read mail__search_messages Search emails by keyword in subject and body Read pass__get_item Get a credential from Proton Pass by name. Returns username, password, and URLs. Read pass__get_totp Generate the current TOTP authentication code for an item in Proton Pass. Use for autonomous 2FA. Read pass__list_items List credential names in a Proton Pass vault (no passwords returned) Read pass__list_vaults List available Proton Pass vaults Read pass__search_items Search Proton Pass items by keyword (no passwords returned) Read vpn__status Check VPN connection status — shows current IP, location, and whether traffic is routed through ProtonVPN

Route Proton-MCP through PolicyLayer and every one of its 36 tools is checked against your policy before it runs.

CHECK YOUR STACK →

See every tool, the dangerous ones, and the token cost across your stack.

How many tools does the Proton-MCP MCP server have? +

The Proton-MCP MCP server exposes 36 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on Proton-MCP tools? +

Route the Proton-MCP server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Proton-MCP tools fall into? +

Proton-MCP tools are categorised as Read (18), Write (14), Destructive (4). Each category has a recommended default policy.

Enforce policy on every Proton-MCP tool call.

Start from Proton-MCP, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.