Apple Mail

[Apple Mail MCP icon]

Apple Mail MCP

Let Claude read, search, sort and answer your Apple Mail: fast, local, and with you in control of what gets sent.

[Latest release] [CI] [macOS 14+, Apple silicon and Intel] [Swift 6] [MIT License]

Apple Mail MCP is an MCP server for the Mail app on your Mac, plus a small menu bar app. Claude (Claude Code, the Claude app, or any MCP client) can search years of mail in milliseconds, read threads, find what needs a reply, draft answers in your voice, clean up newsletters and file attachments, and it can only send an email after you click Send.

[Mail tab: three emails waiting for approval, one shown in full, recent activity] [Claude tab: Claude Code and the Claude app connected, the eight skills by slash command] [Settings tab: send policy, changes, remote access for claude.ai, search index and updates]

Any email account, ready for AI

Apple Mail MCP turns any email account you can add to Apple Mail into one that Claude and other MCP clients can work with: iCloud, Gmail and Google Workspace, Microsoft 365, Outlook.com and Exchange, Yahoo, Fastmail, your company's or your hosting provider's IMAP server, even old POP mailboxes.

Your provider needs no API, no developer account and no MCP support of its own. Add the account in Mail › Settings › Accounts as you normally would. As soon as Mail syncs it, the account gets the same tools as every other one: search, threads, needs-a-reply, drafts, sending with your approval, filing, snoozing, unsubscribing, extraction and authenticity checks. Several accounts work side by side, and every tool can be limited to one of them with account.

Your password stays in Mail and in your keychain: this app never sees it and never connects to your provider. It reads what Mail has already downloaded and asks Mail itself to move, draft or send.

Why another Mail server?

Most Mail servers drive Mail with AppleScript for everything, including reading. Mail then walks its mailboxes one message at a time, so a search through a large inbox takes minutes or times out, and Mail freezes meanwhile.

Apple Mail MCP reads Mail's own database and message files directly, the same data Mail shows you, and only talks to Mail to change something (move, flag, draft, send). Searches stay fast on any mailbox size and never disturb Mail. See Benchmarks.

• Fast on big mailboxes: a few milliseconds for searches, threads and statistics over 80,000+ messages, faster than every other Apple Mail MCP server we measured (Benchmarks).
• Full-text search of message bodies through a local index, built in about a minute.
• Safe by default: replies and new mail are saved as drafts; with "Ask me first" nothing is sent without your click; bulk changes have previews and limits; nothing is ever permanently deleted.
• Smart views out of the box: what needs your reply, what you're still waiting on, top senders, weekly stats.
• Eight Claude skills that turn the tools into workflows: triage, inbox zero, follow-ups, a reply writer that matches your voice, newsletter cleanup, research, attachments and a weekly report.
• No passwords, no cloud: it works with every account Mail has (iCloud, Gmail, Exchange, IMAP) and everything stays on your Mac.

Install

Homebrew:

brew install --cask mp-consulting/tap/apple-mail-mcp

Or download the app or the Claude extension from the latest release:

Both are notarized, signed with Developer ID, and run on Apple silicon and Intel Macs (macOS 14+). The server is also listed in the MCP registry as io.github.mp-consulting/apple-mail-mcp.

Then:

1. Open Apple Mail MCP: an envelope appears in the menu bar.
2. Click the envelope, open the Claude tab and click Connect next to Claude Code and/or the Claude app.
   • Claude Code gets the server and all the skills; new sessions see them.
   • The Claude app reads its servers only at launch: click Restart Claude when the tab offers it. For its skills, switch the Skills list to Claude app and click Export, then upload each .zip in Claude › Settings › Capabilities › Skills.
3. Give macOS permissions (one time, see Permissions).

From a terminal, the same setup is:

SERVER="/Applications/Apple Mail MCP.app/Contents/Helpers/Apple Mail MCP Server.app/Contents/MacOS/apple-mail-mcp""$SERVER" install        # Claude Code and the Claude app"$SERVER" skills install # skills for Claude Code

Any other MCP client: run /Applications/Apple Mail MCP.app/Contents/Helpers/Apple Mail MCP Server.app/Contents/MacOS/apple-mail-mcp as a stdio server (Homebrew also links it as apple-mail-mcp). Before 0.6 the server was at Apple Mail MCP.app/Contents/MacOS/apple-mail-mcp; the menu bar app moves Claude Code's and the Claude app's settings to the new path, other clients need it by hand.

Permissions

macOS asks for two permissions, for the app that starts the server (Claude, your terminal, VS Code…):

Give Full Disk Access to Apple Mail MCP too, for the panel's counts and the search index. If something is missing, every tool answers with the exact app to allow, and the panel shows it under Needs attention. Run apple-mail-mcp doctor for a full check.

claude.ai and your phone

The Claude apps on iPhone, Android and the web reach Mail on your Mac as a custom connector. The menu bar app serves MCP over HTTP with OAuth; a tunnel (such as cloudflared) publishes it at an HTTPS address of yours. Turn it on in More settings… › Remote access:

[Remote access settings: the switch with its status, the connection, the connector URL and tunnel path to copy, the passcode, and two connected Claude apps with Disconnect]

1. Enter the public address the tunnel publishes, such as https://mcp.example.com/me/mail. Several servers can share one host name, each on its own path.
2. Route that path to the port (8590 by default) in the tunnel. The route must also carry the discovery documents, which OAuth puts at the root with the path appended; the settings show the exact path pattern, for example ^/(\.well-known/[^/]+/)?me/mail(/.*)?$.
3. Set a passcode to approve connections from anywhere, or approve them in the menu bar app.
4. In claude.ai, Settings › Connectors › Add custom connector with the connector URL (no client ID or secret). Connect opens the sign-in page:

[The sign-in page: Connect Claude to Apple Mail, a choice of full access or read only, the passcode field with Allow, Approve on my Mac, and Don't allow] [The menu bar app asks: Claude wants to connect to Apple Mail, with Deny and Allow]

A connection may do what Claude on the Mac may do, or only read; sending and big changes still wait for your OK in the menu bar app. Connected apps lists each one, and Disconnect ends it at its next request. Tokens last an hour and refresh for 90 days of use; the server keeps only their hashes. Details, the tunnel set-up and the security model: docs/remote.md.

What Claude can do

Message ids are Mail's own; a moved message gets a new id, which move_messages returns.

The skills are also served as MCP prompts (in Claude Code: /mcp__apple-mail__mail-triage and so on), and two resources, mail://inbox/unread and mail://needs-response, notify subscribed clients when mail changes. Snoozes and scheduled sends are carried out by the menu bar app, so it has to be running for them.

Skills

Pick them in the panel's Claude tab: each one shows what it does and whether it's installed.

Claude picks the right skill from your request; in Claude Code you can also start one with its slash command. In the Claude app, skills are used automatically once uploaded.

They follow the same rules as the server: drafts before sending, previews before bulk changes, and quoting as little of your mail as possible. When the app updates, skills you installed update with it.

You stay in control

[The approval window: one email shown in full with a 1 of 3 pager, two more waiting below]

When Claude wants to send, a small window pops up (and the panel's Mail tab shows a count). With several emails waiting you review them one by one; nothing goes out without a click on Send.

• Send policy (Settings): Ask me first (the default) shows each outgoing email (recipients, subject, text, attachments) for Send or Don't Send, and refuses to send while the menu bar app is not running; Send right away; or Never send (drafts only).
• Signed approvals: your answers and scheduled sends are signed with a key in your Keychain, so another program cannot approve a send by writing a file.
• Drafts by default: compose, reply and forward save to Drafts unless Claude is asked to send.
• Batch limits: at most 50 messages per change by default; dry_run previews moves and trash. Optionally, moves and trashes above a size you choose wait for your OK in the menu bar app.
• Undo: every move, trash and flag change can be put back with undo_change (the journal keeps Message-IDs and mailbox names only, owner-only).
• Unsubscribing follows the send policy: with Ask me first you confirm each one. One-click requests go only to senders whose DKIM signature verified for their own domain; for anyone else you get the link.
• No permanent deletion: Trash only, never emptied.
• Files: saved attachments can't go into startup, config or system folders; secrets (~/.ssh, .env, keychains, browser profiles, Mail's own data) can't be attached. Optional allowlists in Settings.
• Read-only mode: apple-mail-mcp --read-only offers only the reading tools.
• Activity: every tool call is listed in the Mail tab (never with message content).
• Search index without text: Mail's data is behind Full Disk Access; the body index in ~/Library/Application Support/apple-mail-mcp is not, so it stores no words, only keyed hashes (no order, no positions). The key ("Apple Mail MCP search index key") is in your Keychain, in an access group only the app and its server can claim (the Claude extension, which runs the server on its own, keeps its key in the login Keychain), so another app cannot use the index, and even with the key it could only test guessed words. The file is owner-only and kept out of Time Machine. If the key is missing or refused, body searches scan messages instead.

Benchmarks

The same questions to every Apple Mail MCP server in the MCP registry, over MCP stdio like a client sees it, on an Apple M1 (16 GB) with a real mailbox (account of 80,551 messages, 1,336 in its inbox), version 0.6.0. Median of 25 warm runs each. The servers that read Mail's files are called in turns, one call each per round, so a change in the machine's load hits them all alike. Full tables, with response sizes: Benchmarks/compare-mcp-servers.md.

– : the server has no tool for that question.

The servers that drive Mail with AppleScript, measured the same way (0.6.0, one call per question for every server, Benchmarks/compare-servers.md), take seconds where Apple Mail MCP takes milliseconds, and keep Mail busy while they do: ipsupport-llc 1.6.1 answered in 0.17–11 s, the Python mcp-apple-mail in 8–84 s; on this mailbox jakobfigur 0.6.2 and jayvee6 0.1.0 failed, kiki830621 2.0.1 timed out after 3 minutes, and the questions the others could not answer timed out or errored inside Mail. Apple Mail MCP answered all 13 in 0.8–17 ms.

Without the body index, a body search scans recent messages in parallel instead (27 ms here). Building the index for the whole mailbox takes about a minute.

Reproduce: Scripts/bench-servers.sh fetches and prepares the other servers (pinned versions, release files checked against the registry's SHA-256), then runs mail-bench compare; --fresh-index gives our server a throwaway index so no Keychain prompt can hold up the run. mail-bench store gives in-process timings on your mail, and mail-bench synthetic --messages 100000 a generated mailbox that involves no personal data. CI runs the synthetic benchmark on every push.

Command line

apple-mail-mcp [--read-only] [--write-dir DIR] [--attach-dir DIR]   serve MCP over stdioapple-mail-mcp remote [--port N] [--listen ADDR] [--address URL]    serve MCP over HTTP with OAuth (claude.ai)apple-mail-mcp doctor                                               check permissions, data, indexapple-mail-mcp index [--rebuild] [--prune]                          build or update the body indexapple-mail-mcp install | uninstall [claude-code | claude-desktop]   register with Claudeapple-mail-mcp skills [list | install | uninstall | export DIR]     manage the Claude skillsapple-mail-mcp call <tool> '{"json": "arguments"}'                  run one tool

Settings live in ~/Library/Application Support/apple-mail-mcp/settings.json and are shared by the app and every server (changes apply immediately).

How it works

claude.ai ──HTTPS──▶ tunnel ──HTTP──▶ apple-mail-mcp remote (OAuth, one session per connection) ─┐Claude ──MCP (stdio)──▶ apple-mail-mcp ─┬─ reads ──▶ ~/Library/Mail/V10/MailData/Envelope Index (SQLite, read-only)                                        │            .emlx files · local hashed full-text index (FTS5)                                        └─ writes ─▶ Apple Events ─▶ Mail.app ─▶ your accountsApple Mail MCP.app (menu bar) ── settings · approvals · activity · index updates · Claude setup · updates

• MailStore reads Mail's index (accounts, mailboxes, Gmail labels, flags, categories, threads) and parses messages (MIME, charsets, HTML to text) without Mail running.
• MailAutomation sends Apple Events built from Mail's scripting dictionary (no AppleScript), addressing messages by id, serialized across processes.
• MailMCPKit defines the tools, policies, approvals and skills; MailMCPBar is the SwiftUI menu bar app (Liquid Glass on macOS 26).

Development

git clone https://github.com/mp-consulting/apple-mail-mcp && cd apple-mail-mcpswift test --scratch-path ~/Library/Caches/apple-mail-mcp-build   # 120+ tests on synthetic mailboxesScripts/build-app.sh --install                                     # build, sign, install, launch the app

Requires Xcode 26 (Swift 6.2) for the app; the server builds with Swift 6.1. See CLAUDE.md for the architecture and the Mail quirks the code relies on, and CHANGELOG.md for releases.

Credits

Inspired by patrickfreyer/apple-mail-mcp, whose tool set and path-guard rules shaped this one.

License

MIT © 2026 Mickael Palma. Not affiliated with Apple. Apple Mail is a trademark of Apple Inc.