About JMAP Email
JMAP Email is an MCP server for working with JMAP email services. It exposes mailbox, email, sender identity, and Sieve script operations, with sending and script management available as optional features.
Key features
- 01Query, read, and create email drafts
- 02Move, flag, or delete emails
- 03View and manage mailboxes
- 04List sender identities
- 05Validate and manage Sieve scripts
- 06Enable email sending as an option
Use cases
- 01Search for and read emails by criteria
- 02Organize emails and manage flags
- 03Create drafts and optionally submit them
- 04Review or update email filtering scripts
MCP support
The MCP server exposes JMAP email and Sieve script operations as tools to MCP clients; email sending and Sieve tools can be enabled with feature flags.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
docker run -i --rm -e JMAP_SESSION_URL -e JMAP_AUTH_TOKEN ghcr.io/mikluko/jmap-mcp:0.10.0JMAP_SESSION_URLJMAP session endpoint URL (e.g. https://api.fastmail.com/jmap/session)JMAP_AUTH_TOKENSecretJMAP bearer token for authenticationLocal servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.
ghcr.io/mikluko/jmap-mcp:0.10.0stdioTools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEjmap-mcp
MCP server exposing JMAP email and Sieve script operations as tools.
Built with the Go MCP SDK (go-sdk) and go-jmap library.
Tools
Tools map closely to JMAP methods. Email mutation tools provide structured convenience wrappers over Email/set patches.
Mailbox (RFC 8621)
| Tool | JMAP Method | Description |
|---|---|---|
mailbox_get | Mailbox/get | Get mailboxes by ID, or list all |
mailbox_set | Mailbox/set | Create, update, or destroy mailboxes |
Email (RFC 8621)
| Tool | JMAP Method | Description |
|---|---|---|
email_query | Email/query | Search emails with filters, returns IDs and total count |
email_get | Email/get | Get full content of emails by ID |
email_create | Email/set | Create a new email draft in the Drafts mailbox |
email_move | Email/set | Move emails to a different mailbox |
email_flag | Email/set | Set or remove flags (seen, flagged, answered, draft) |
email_delete | Email/set | Delete emails (move to Trash or permanently destroy) |
email_attachment_url | Blob download | Signed URL streaming an attachment, expires in 30 s (HTTP mode only) |
Identity
| Tool | JMAP Method | Description |
|---|---|---|
identity_get | Identity/get | List sender identities (email addresses) |
Submission (feature-gated)
| Tool | JMAP Method | Description |
|---|---|---|
email_submission_set | EmailSubmission/set | Submit a draft for delivery (requires -enable-send) |
Sieve Scripts (RFC 9661, feature-gated)
| Tool | JMAP Method | Description |
|---|---|---|
sieve_get | SieveScript/get | List all scripts, or get one with full content (requires -enable-sieve) |
sieve_set | SieveScript/set | Create, update, or destroy Sieve scripts (requires -enable-sieve) |
sieve_validate | SieveScript/validate | Validate a Sieve script without saving (requires -enable-sieve) |
Configuration
| Env var | Required | Description |
|---|---|---|
JMAP_SESSION_URL | always | JMAP session endpoint (e.g. https://api.fastmail.com/jmap/session) |
JMAP_AUTH_TOKEN | stdio mode | Bearer token for JMAP authentication |
ATTACHMENT_URL_SECRET | no | Secret sealing signed attachment URLs; set for multi-replica deployments (default: random per-process key) |
| Flag | Default | Description |
|---|---|---|
-mode | stdio | Server mode: stdio or http |
-listen | :8080 | HTTP listen address (http mode only) |
-enable-send | false | Enable the email_submission_set tool (off by default) |
-enable-sieve | false | Enable Sieve script tools (off by default, requires JMAP server support) |
-external-url | derived | External base URL for signed attachment links; default derives from the request (X-Forwarded-Proto/X-Forwarded-Host aware) |
In HTTP mode, the token can be passed per-request via Authorization: Bearer <token> header or jmap_token query parameter (query parameter takes precedence).
In HTTP mode, email_attachment_url returns a link served from /attachments/ that expires 30 seconds after issuance. The link is an AES-GCM sealed capability: it embeds the JMAP token, account, and blob IDs, so the endpoint streams the attachment from the JMAP server without any additional authentication and stores nothing on disk.
Installation
Kubernetes (Helm)
helm install jmap-mcp oci://ghcr.io/mikluko/helm-charts/jmap-mcp \
--version 0.1.0 \
--set jmap.sessionURL="https://api.fastmail.com/jmap/session"
In HTTP mode, JMAP auth tokens are passed per-request via Authorization: Bearer header or ?jmap_token= query parameter — no static tokens are stored in the cluster.
Binary
go install github.com/mikluko/jmap-mcp@latest
From source
git clone https://github.com/mikluko/jmap-mcp.git
cd jmap-mcp
make install
Usage
# stdio mode (default)
export JMAP_SESSION_URL=https://api.fastmail.com/jmap/session
export JMAP_AUTH_TOKEN=your-token
./jmap-mcp
# HTTP mode
./jmap-mcp -mode http -listen :8080
Build
make build # Build and push container image + Helm chart
make image # Build and push container image with ko
make package # Package and push Helm chart to OCI registry
make test # Run tests
make install # Install binary locally
References
- RFC 8620 — JMAP Core
- RFC 8621 — JMAP Mail
- RFC 9425 — JMAP Sieve Scripts
- MCP Specification
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.