email-agent-mcp vs EmailEngine

email-agent-mcp 42

Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62.

EmailEngine 75

The editorial half. The source is public and readable under the EmailEngine licence agreement 2.1, a proprietary licence with clear terms on trial, keys, resale and source changes. It is not an OSI licence, and the vendor says so (20 of 30). The security page and the compliance page list what Redis holds, state that message bodies are not stored, and list every outbound connection. Postal Systems says it is neither controller nor processor for mailbox data. The website privacy policy gives no retention periods, and the security page still calls error reporting opt-in while the licensing page says a trial switches it on (20 of 30). No written deprecation policy was found. Since 2.86.0 (22 October 2026) the pre-2.79 token endpoints answer with Deprecation, Sunset and Link headers, and the changelog dates their removal and that of eight leftover request fields to after 1 January 2027, after the Document Store removal of 1 October was announced in July. But 2.84.2 made STARTTLS required in a patch release with no notice, and security fixes go to the latest release only (14 of 20, as hyperbolic's dated Sunset headers without a written policy). The licence check, feature summary, update check and Sentry reporting are all disclosed, with EENGINE_BEACON_DISABLED and EENGINE_UPDATE_CHECK_DISABLED as opt-outs. The licence check can't be turned off on a subscription (16 of 20). The provenance half is computed from the provenance block.

email-agent-mcp 50

Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package email-agent-mcp with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.

EmailEngine 79

Read with the local-software lines, since the owner runs EmailEngine and Postal Systems hosts nothing an agent calls. Graded on the REST API. Official npm package emailengine-app, 2.87.0 in the repository on 29 October 2026, declares Node.js 20.19.0 or later, with a Docker image, an installer script and binaries for macOS, Linux and Windows (20). The test workflow runs lint, a licence check, unit tests, live Dovecot tests and Playwright end-to-end tests, and the release workflow waits for it to pass on the same commit before publishing to npm or Docker. The last eight runs on master to 8 October 2026 passed per the GitHub API; run status wasn't readable on 1 November (25, per the 8 October check). Open crash and regression issues couldn't be counted, because the GitHub API reported issues as disabled on the repository. The changelog shows steady fixes (12 of 25, unchecked). Releases follow conventional commits with a dated changelog, but 2.81.2, a patch release, removed the bounces field, 2.82.0, a minor release, removed the Document Store, 2.83.0 moved global webhook headers off account-level targets and 2.84.2, a patch release, made STARTTLS required by default, none marked as breaking (7 of 15). Version 2.87.0, past 1.0 (15). No status page or SLA applies to software the owner runs.

email-agent-mcp 60

Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.

EmailEngine 40

Read with the self-hosted rule, scoring the paid option, because the software needs a licence after the trial. No x402, MPP or L402 (0 of 40). The price is public without a login, $1,450 or EUR 1,200 a year flat, with no per-call or per-mailbox unit, read as plan pricing (10 of 20). A 14-day trial with full functionality starts from the instance's own dashboard with no sign-up and no card (20). No vendor account is needed for the trial and the CLI can issue tokens, but the trial starts with a button in the admin interface and a licence is bought through a browser sign-up at postalsys.com. The line has no middle step, and 10 is our judgement call for a route that needs one click and no account (10 of 20).

email-agent-mcp 79

Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as list_style (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.

EmailEngine 91

Graded on the REST API. A public OpenAPI 3.0 spec for 2.87.0 at go.emailengine.app/swagger.json with 74 paths and 100 operations, read on 1 November 2026 (25). llms.txt on emailengine.app and learn.emailengine.app, an LLM context page and a capabilities.json manifest (10). All 100 operations carry a description, several with usage guidance such as preferring cursors over page numbers, the note that a 2xx on submit means queued, and a page on when to use MCP or REST. Limits of search by folder are stated in one sentence (16 of 20). Parameters are typed with defaults, minimums, maximums and 121 enum declarations, though account and gateway settings accept wide objects (12 of 15). Every operation documents 401, 403, 429 and 500, an error-codes page lists codes with a retryable flag, and examples come in curl, JavaScript, Python and PHP. Gmail API errors pass through without a code (13 of 15). The API is versioned at /v1 and CHANGELOG.md has 192 dated releases (15).