{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "email-agent-mcp", "name": "email-agent-mcp", "vendor": "UseJunior", "vendorUrl": "https://github.com/UseJunior/email-agent-mcp", "kind": "mcp", "category": "mailbox-access", "summary": "email-agent-mcp is an open-source local MCP server from UseJunior that lets an agent read, search, draft, send and file mail in a person's own Microsoft 365 or Gmail mailbox, with allowlists and delete disabled by default.", "url": "https://www.anchorterminal.com/tools/email-agent-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/email-agent-mcp.json", "dns": "email-agent-mcp.grade.anchorterminal.com", "repo": "https://github.com/UseJunior/email-agent-mcp", "license": "Apache-2.0", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "email-agent-mcp" } ], "auth": "oauth", "authNotes": "Signs in to the person's own mailbox with OAuth: Microsoft delegated scopes through MSAL, or Gmail `gmail.readonly` and `gmail.compose`. Tokens are kept in the OS keychain and local files under `~/.email-agent-mcp/`. For Gmail, a UseJunior-run broker on Vercel holds the OAuth client secret and relays code exchange and token refresh; mail itself goes straight to Google.", "pricing": "free", "pricingNotes": "Free, Apache-2.0 software run locally with npx. It uses the person's existing Microsoft 365 or Gmail account; there is nothing to buy from UseJunior.", "priceSummary": "Free ยท OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository or README (checked 2026-11-06).", "endpoints": [] }, "toolCount": 27, "popularity": { "githubStars": null, "npmWeekly": 394, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://github.com/UseJunior/email-agent-mcp#readme", "registryName": "io.github.UseJunior/email-agent-mcp", "capabilities": [ "mailbox.read", "mailbox.search", "mailbox.send", "mailbox.drafts" ], "tags": [ "open-source", "local", "mcp", "mcp-registry", "oauth", "microsoft-graph", "gmail", "typescript", "approvals", "pre-1.0" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 65.9, "grade": "B", "agentReady": false, "rank": 397, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 84, "payments": 60, "reliability": 50, "schema": 79, "security": 67, "transparency": 42 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 50, "points": 10, "reason": "Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package `email-agent-mcp` with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 79, "points": 12.84, "reason": "Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as `list_style` (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 79, "points": 12.84, "reason": "27 tools in the full profile, the 11 to 30 band, plus the `observe` profile as a read-only subset (20 of 25). List and search tools filter and page; we read the tool table, not every parameter (16 of 20). Errors are sanitised and use stable reasons such as NOT_SUPPORTED, failing closed before a Gmail mutation (15 of 20). readOnlyHint and destructiveHint on the tools in source; sends take no idempotency key (16 of 20). One npx command and a setup wizard for OAuth and mailbox choice; TypeScript only (12 of 15). Total 79.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 67, "points": 11.73, "reason": "OAuth to the person's own provider with the scopes each profile needs, tokens in the OS keychain, and an `observe` profile with Microsoft read scopes only. Gmail uses `gmail.readonly` and `gmail.compose`, and its code exchange and refreshes relay through a UseJunior-hosted broker that holds the client secret and says it stores no refresh tokens (25 of 30). Send allowlists, delete off by default behind an operator variable and a caller flag, inbox rules that block forwarding and deletion, and protected system folders (20). Receive allowlists limit whose mail the agent acts on; no guidance on treating message bodies as untrusted was found (9 of 15). No log of tool calls beyond the mailbox's own history (3 of 15). SECURITY.md with private reporting and acknowledgement within 3 business days, semgrep in CI; no bug bounty or advisories (10 of 20). Total 67.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 84, "points": 7.35, "reason": "v0.5.0 was tagged and published on 5 November 2026 (30). Nine npm releases in the 90 days from 8 August, v0.3.0 to v0.5.0 (20). Pull requests up to #234 merged in the history, all by the one maintainer; issue responses couldn't be read through GitHub's API that day (10 of 25). io.github.UseJunior/email-agent-mcp is in the official MCP registry with 0.5.0 marked latest (15). CI, commitlint, semgrep and Codecov workflows (9 of 10). Total 84.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 42, "points": 3.68, "note": "editorial 62, provenance 22", "reason": "Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "27 tools in the full profile, the 11 to 30 band, plus the `observe` profile as a read-only subset (20 of 25). List and search tools filter and page; we read the tool table, not every parameter (16 of 20). Errors are sanitised and use stable reasons such as NOT_SUPPORTED, failing closed before a Gmail mutation (15 of 20). readOnlyHint and destructiveHint on the tools in source; sends take no idempotency key (16 of 20). One npx command and a setup wizard for OAuth and mailbox choice; TypeScript only (12 of 15). Total 79.", "maintenance": "v0.5.0 was tagged and published on 5 November 2026 (30). Nine npm releases in the 90 days from 8 August, v0.3.0 to v0.5.0 (20). Pull requests up to #234 merged in the history, all by the one maintainer; issue responses couldn't be read through GitHub's API that day (10 of 25). io.github.UseJunior/email-agent-mcp is in the official MCP registry with 0.5.0 marked latest (15). CI, commitlint, semgrep and Codecov workflows (9 of 10). Total 84.", "payments": "Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.", "reliability": "Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package `email-agent-mcp` with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.", "schema": "Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as `list_style` (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.", "security": "OAuth to the person's own provider with the scopes each profile needs, tokens in the OS keychain, and an `observe` profile with Microsoft read scopes only. Gmail uses `gmail.readonly` and `gmail.compose`, and its code exchange and refreshes relay through a UseJunior-hosted broker that holds the client secret and says it stores no refresh tokens (25 of 30). Send allowlists, delete off by default behind an operator variable and a caller flag, inbox rules that block forwarding and deletion, and protected system folders (20). Receive allowlists limit whose mail the agent acts on; no guidance on treating message bodies as untrusted was found (9 of 15). No log of tool calls beyond the mailbox's own history (3 of 15). SECURITY.md with private reporting and acknowledgement within 3 business days, semgrep in CI; no bug bounty or advisories (10 of 20). Total 67.", "transparency": "Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62." }, "sources": [ { "what": "repository and README", "url": "https://github.com/UseJunior/email-agent-mcp", "seen": "2026-11-06" }, { "what": "security policy", "url": "https://github.com/UseJunior/email-agent-mcp/blob/main/SECURITY.md", "seen": "2026-11-06" }, { "what": "Gmail OAuth broker README", "url": "https://github.com/UseJunior/email-agent-mcp/blob/main/apps/oauth-broker/README.md", "seen": "2026-11-06" }, { "what": "tool sources with annotations", "url": "https://github.com/UseJunior/email-agent-mcp/tree/main/packages/email-core/src/actions", "seen": "2026-11-06" }, { "what": "npm package record", "url": "https://registry.npmjs.org/email-agent-mcp", "seen": "2026-11-06" }, { "what": "official MCP registry", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=email-agent-mcp", "seen": "2026-11-06" } ], "openQuestions": [ "unchecked: open issues, CI run results and stars, because GitHub's API refused our requests for its rate limit on 6 November 2026", "The Gmail OAuth broker's operator terms and privacy policy weren't found", "Whether the server sends any telemetry isn't stated; none was found in the manifests read" ] }, "negative": 0, "verdict": "A local MCP server for a person's own Outlook or Gmail mailbox with careful defaults, a read-only scope profile, send allowlists, gated deletes and annotated tools, released weekly under Apache-2.0. It is pre-1.0 from one maintainer, Gmail lacks label and move support, and Gmail sign-in relies on UseJunior's hosted broker.", "bestFor": "A person who wants an agent working in their own Outlook mailbox, or reading and drafting in Gmail, with guardrails.", "strengths": [ "The `observe` profile requests read-only Microsoft scopes and drops every write tool", "Send allowlists, delete disabled by default and sanitised errors that strip keys and paths", "Tools carry readOnlyHint and destructiveHint annotations and are typed", "Apache-2.0, CI with tests and coverage, semgrep and semver tags with GitHub Releases", "Listed in the official MCP registry as io.github.UseJunior/email-agent-mcp, current at 0.5.0" ], "weaknesses": [ "Pre-1.0, and every commit is by one maintainer", "On Gmail, labelling, flagging, marking read and moving return NOT_SUPPORTED", "Gmail sign-in and token refresh pass through a UseJunior-hosted broker that holds the client secret", "No audit log of what the agent did beyond the mailbox's own history", "Changing from `full` to `observe` on an existing mailbox doesn't shrink the OAuth token's scopes" ], "agentNotes": [ "Start with `get_mailbox_status`, then `list_emails` or `search_emails` before reading whole threads", "Ask the person to set the send allowlist before planning any `send_email` or `reply_to_email`", "Prefer `create_draft` and let the person send, unless they asked for sending", "Expect NOT_SUPPORTED for label, flag, mark-read and move on Gmail, and don't request `gmail.modify` to work around it", "Don't plan deletes; they need an operator environment variable and a caller flag" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.9 } ], "editorialScores": { "ergonomics": 79, "maintenance": 84, "payments": 60, "reliability": 50, "schema": 79, "security": 67, "transparency": 62 }, "provenanceScore": 22, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "B", "kind": "listed", "method": "0.7", "score": 65.9 } ] }, "connect": { "install": "npx -y email-agent-mcp", "claudeCode": "claude mcp add email-agent-mcp -- npx -y email-agent-mcp", "config": { "mcpServers": { "email-agent-mcp": { "args": [ "-y", "email-agent-mcp" ], "command": "npx", "type": "stdio" } } } }, "letme": { "capability": "https://letme.dev/mailbox.read", "tool": "https://letme.dev/email-agent-mcp" }, "notable": [ "An `observe` scope profile asks Microsoft for read scopes only and removes every write tool; the README warns that a mailbox already granted write scopes keeps them in its token (https://github.com/UseJunior/email-agent-mcp#scope-profiles)", "Sends and replies are gated by a send allowlist, and delete tools need an operator environment variable plus a caller flag (https://github.com/UseJunior/email-agent-mcp#tools)", "On Gmail, label, flag, mark-read and move tools return NOT_SUPPORTED, and delete removes drafts only (https://github.com/UseJunior/email-agent-mcp#tools)", "Tools declare readOnlyHint and destructiveHint annotations in the source (https://github.com/UseJunior/email-agent-mcp/tree/main/packages/email-core/src/actions)", "21 npm releases since 31 March 2026, the latest 0.5.0 on 5 November 2026 (https://www.npmjs.com/package/email-agent-mcp)" ], "area": "communication", "details": [ { "label": "Surface listed", "value": "The stdio MCP server in npm email-agent-mcp 0.5.0, read from a clone of github.com/UseJunior/email-agent-mcp (README, SECURITY.md, the OAuth broker README, tool sources and tags), npm and the MCP registry on 6 November 2026. Nothing was installed or run" }, { "label": "Providers", "value": "Microsoft 365 and Outlook through Microsoft Graph (full tool set), Gmail through the Gmail API (read, search, threads, drafts and send; no label, flag, read-state or move)" }, { "label": "Tools", "value": "27 in the full profile: list, read, search, threads, attachments, drafts, send, reply, label, flag, mark read, move, folders, inbox rules and gated deletes; observe drops the write tools" }, { "label": "Gmail OAuth broker", "value": "A Vercel app run by UseJunior holds the Gmail client secret, exchanges the code and relays refresh requests without storing refresh tokens; mail content never reaches it, per its README" }, { "label": "Watcher", "value": "An optional watcher polls the mailbox and wakes OpenClaw when new mail arrives" } ], "provenance": { "legalEntity": "", "domain": "usejunior.com", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/UseJunior/email-agent-mcp/releases", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Published by UseJunior; the README links usejunior.com, and SECURITY.md asks for reports to the maintainer's usejunior.com address with acknowledgement within 3 business days.", "No terms or privacy policy apply to the local server; the Gmail OAuth broker is a UseJunior-hosted service whose own terms weren't found.", "The repository's CHANGELOG.md points to GitHub Releases as the canonical changelog.", "GitHub's API refused our requests for its rate limit on 6 November 2026, so stars, issues and release pages weren't read; history and tags come from a shallow clone." ], "score": 22, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "usejunior.com, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": " is not on usejunior.com", "points": 0, "max": 15, "state": "no" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "4 named with their role, 4 with a public profile", "points": 10, "max": 10, "state": "ok" }, { "check": "Support route", "value": "help pages", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "email-agent-mcp", "checked": "2026-11-06", "company": "UseJunior (OM Innovation AI Inc.)", "people": [ { "name": "Steven Obiajulu", "role": "Founder and CEO, UseJunior; maintainer of email-agent-mcp", "founder": true, "linkedin": "https://www.linkedin.com/in/stevenobiajulu", "github": "https://github.com/stevenobiajulu", "page": "/people/steven-obiajulu/" }, { "name": "Joseph Obiajulu", "role": "CTO, UseJunior", "linkedin": "https://www.linkedin.com/in/joseph-obiajulu/", "github": "https://github.com/jobiajulu", "page": "/people/joseph-obiajulu/" }, { "name": "David McCalib", "role": "COO, UseJunior", "linkedin": "https://www.linkedin.com/in/david-m-27548628/", "page": "/people/david-mccalib/" }, { "name": "Marlo Obiajulu", "role": "Head of Marketing and Client Success, UseJunior", "linkedin": "https://www.linkedin.com/in/marlo-obiajulu-76a3801bb/", "github": "https://github.com/marlo-obiajulu", "page": "/people/marlo-obiajulu/" } ], "peopleNote": "UseJunior's entity file (usejunior.com/.well-known/ai/entity.json), read on 6 November 2026, names Steven Obiajulu as founder and Chief Executive Officer of UseJunior, legal name OM Innovation AI Inc., founded on 1 October 2024. Its about page and llms.txt list the leadership as Steven Obiajulu (CEO), Dr. Joseph Obiajulu (CTO), David McCalib (COO) and Marlo Obiajulu (Head of Marketing and Client Success), with the LinkedIn and GitHub links given here. Every commit in the email-agent-mcp repository is by Steven Obiajulu, who is its only npm maintainer. The company's postal address and personal email addresses are left out. No investors are named on usejunior.com (about, llms.txt, entity file, sitemaps), and one web search found no reported round, so none are listed.", "companySocial": { "linkedin": "https://www.linkedin.com/company/usejunior", "github": "https://github.com/UseJunior" }, "support": { "urls": [ "https://github.com/UseJunior/email-agent-mcp/issues" ], "contactUrls": [ "https://github.com/UseJunior/email-agent-mcp/blob/main/SECURITY.md", "https://usejunior.com/contact" ] }, "sources": [ "https://github.com/UseJunior/email-agent-mcp", "https://github.com/UseJunior/email-agent-mcp/blob/main/SECURITY.md", "https://registry.npmjs.org/email-agent-mcp", "https://usejunior.com/.well-known/ai/entity.json", "https://usejunior.com/about", "https://usejunior.com/llms.txt" ], "ownership": { "status": "private", "checked": "2026-11-06", "sources": [ "https://usejunior.com/.well-known/ai/entity.json", "https://usejunior.com/llms.txt" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.json", "live": { "slug": "email-agent-mcp", "versions": [ { "registry": "github", "name": "UseJunior/email-agent-mcp", "version": "v0.5.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:23:57.05382018Z" }, { "registry": "mcp-registry", "name": "io.github.UseJunior/email-agent-mcp", "version": "0.5.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "email-agent-mcp", "version": "0.5.0", "seenAt": "2026-11-06T23:23:56.286985184Z" } ], "githubStars": 7, "npmWeekly": 394, "securityTxt": { "url": "https://usejunior.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:16.157898877Z" }, "updatedAt": "2026-11-07T18:16:28.95801333Z" } } }