49 tools from the Mailbox MCP Server, categorised by risk level.
View the Mailbox policy →bulk_trash Trash all messages matching a query. Paginates the search and batch-trashes the IDs in one call. Use dry_run to see the count before committing. Us... bulk_unsubscribe Find unsubscribe links for multiple mailing list messages count_unread_by_label Count unread messages per label/folder. Useful for deciding where to look first. download_attachment Download an email attachment to a safe directory emails_since List messages received after a given timestamp. Use for polling new mail since a last-check marker. forward_email Forward an email message to new recipients get_signature Get the email signature for a Gmail account get_vacation Get vacation auto-reply settings inbox_summary Get a summary of recent inbox activity including total and unread counts list_accounts List all configured email accounts with their provider type and email address list_drafts List drafts for an account list_filters List Gmail filters list_labels List all labels (Gmail) or folders (IMAP) for an account list_recent_bulk_ops List recent bulk_modify and bulk_trash operations recorded in the transaction log. Use to find an op id for undo_bulk_op. list_send_as List send-as aliases configured on a Gmail account list_templates List saved email templates multi_account_search Run the same search across all configured accounts in parallel. Returns results grouped by account alias. read_email Read a single email message with full content read_thread Read an entire email conversation thread (Gmail and JMAP only) reply_email Reply to an email message search_emails Search emails in an account. Gmail supports full Gmail search syntax. IMAP searches subject and body. Optional folder parameter scopes the search t... star_email Star or unstar an email trash_emails Move messages to trash undo_bulk_op Reverse a previously recorded bulk_modify or bulk_trash by replaying the inverse label change against the exact ids that were touched. Find the op ... unsubscribe Unsubscribe from a mailing list by finding the List-Unsubscribe header archive_email Archive an email (remove from inbox). Gmail removes the INBOX label; IMAP moves to the Archive folder; JMAP moves out of the inbox mailbox. authenticate Add a new email account. For Gmail: opens a browser for OAuth. For IMAP/JMAP: stores encrypted credentials. Sensitive fields (username, password) c... batch_modify_emails Add or remove labels/flags on multiple messages bulk_modify Add or remove labels on all messages matching a query. Same fast search-then-batch pattern as bulk_trash, but for arbitrary label ops. Use this for... create_draft Create a draft email create_filter Create a Gmail filter create_label Create a new label (Gmail) or folder (IMAP) export_email Export an email as a raw RFC 822 .eml file to a safe directory. Useful for archival, legal discovery, or migration. export_thread Export all messages in a thread as individual .eml files to a safe directory. Gmail/JMAP only. mark_read Mark an email as read or unread modify_email Add or remove labels/flags on a message save_template Save an email template (stored as a Gmail draft with TEMPLATE label) send_draft Send an existing draft as-is. For Gmail/JMAP the draft is finalised and submitted; for IMAP the message is sent via SMTP and removed from the Draft... send_email Send a new email send_template Send an email using a saved template set_signature Update the email signature for a Gmail account set_vacation Configure vacation auto-reply update_draft Replace the contents of an existing Gmail draft. The draft's thread association is preserved automatically. The Mailbox MCP server exposes 49 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Mailbox server.
Mailbox tools are categorised as Read (25), Write (18), Destructive (5), Execute (1). Each category has a recommended default policy.
Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.