email-agent-mcp vs Nylas Email API

email-agent-mcp 42

Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62.

Nylas Email API 82

Closed service under terms dated 23 June 2025, Californian law, with MIT SDKs (15). The privacy policy (6 January 2026) keeps customer account data and restricted end-user data for the life of the account plus two months and log files for a year. The docs say Google, Microsoft and EWS requests pass through without message storage and IMAP accounts keep a 90-day cache. The DPA is available on request from sales, not published (24). v2 is marked deprecated and the changelog is dated, but no deprecation policy was found (10). Sub-processor list updated on 28 August 2026 with locations, changes announced on the status page, which shows no further notice up to 1 November, and two isolated regions, US (Iowa) and Europe (London) (18). The terms, privacy policy and sub-processor list (Last Updated 08/28/2026) were re-read on 1 November.

email-agent-mcp 50

Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package email-agent-mcp with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.

Nylas Email API 77

Atlassian Statuspage at status-v3.nylas.com with US and EU components (20). In the 90 days to 1 November 2026 the history feed lists seven incidents on email, each limited to a provider or function. They are 500 errors on IMAP message reads on 6 August (07:37 to 11:30 PDT, about four hours), sync latency on 11 August, EWS attachment errors on 14 August, delayed or missing webhooks on all providers on 19 August (09:11 to 14:34 PDT, about five hours), Microsoft send and read errors from 31 August to 1 September that Nylas attributes to Exchange Online, IMAP retrieval and webhook degradation on 10 September (05:28 to 11:37 PDT, about six hours) and IMAP 404s on 17 September. The EU webhook incident of 24 July has left the window. One more since 17 October, Microsoft 365 authentication failures from 22 October (first posted 03:08 PDT) for Sandbox applications using Nylas's shared credentials, caused by an expired credential, mitigated on 22 October with a manual fix and still open on 23 October pending an automated update. Production applications weren't affected. The 19 August incident, delayed or missing webhooks for every provider in both regions for about five hours, is a wide failure of a core function and reads as one major. The others were limited to one provider or function or, on 22 October, to Sandbox applications, and read as partial (10). 200 requests a second per grant for messages and JSON send, 10 a second for multipart send, 50 a second per application for grants, auth and webhooks, on the rate limits page updated 6 October (15). 429s separate Nylas limits from provider limits by error.type and carry Retry-After when the provider gives one, and send accepts an Idempotency-Key with documented 409 and replay behaviour, both re-read on 1 November (15). The pricing page lists a 99.99 per cent availability SLA for annual Enterprise contracts only, terms in the customer agreement (7). GA (10).

email-agent-mcp 67

OAuth to the person's own provider with the scopes each profile needs, tokens in the OS keychain, and an observe profile with Microsoft read scopes only. Gmail uses gmail.readonly and gmail.compose, and its code exchange and refreshes relay through a UseJunior-hosted broker that holds the client secret and says it stores no refresh tokens (25 of 30). Send allowlists, delete off by default behind an operator variable and a caller flag, inbox rules that block forwarding and deletion, and protected system folders (20). Receive allowlists limit whose mail the agent acts on; no guidance on treating message bodies as untrusted was found (9 of 15). No log of tool calls beyond the mailbox's own history (3 of 15). SECURITY.md with private reporting and acknowledgement within 3 business days, semgrep in CI; no bug bounty or advisories (10 of 20). Total 67.

Nylas Email API 89

IAM API keys inherit one principal's resource binding (a grant, workspace, application or organisation) and permissions, every new key expires, and keys can be disabled or replaced. The IAM page (updated 9 October) links a public API for principals and credentials (/v3/iam/principals and /v3/iam/principals/{id}/credentials, ten operations in the OpenAPI file), with IAM Admin and IAM Auditor roles, so keys can be issued and rotated from code once a first management key is made in the Dashboard. End users connect by OAuth with scopes the application picks, down to gmail.readonly or Mail.Read. The application API key still reaches every grant, so 1 is held back (29). Read-only permissions and provider scopes, 403 on anything outside the binding, and a confirmation call before MCP sends (17). The MCP and agent security pages warn about hidden instructions in mail and list mitigations, which are left to the integrator (13). IAM Access Activity records allowed and denied API, authentication and MCP requests for 400 days and links to request logs, and Dashboard logs are kept 14 days. Requests made with an application key appear only in the logs (13). SOC 2 Type II, ISO 27001 and 27701, CSA STAR, a vulnerability disclosure programme, a private bug bounty and an annual penetration test, and a security.txt on developer.nylas.com valid to 1 August 2027, re-read on 1 November. www.nylas.com returned 404 on 1 November (17).

email-agent-mcp 60

Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.

Nylas Email API 40

No x402, MPP or L402 (0). Per-account prices published without login, $2.25 an extra email and calendar account a month on Essentials and $2.00 on Pro, unchanged on 1 November (20). Free plan with 5 connected accounts, "No credit card required" (20). An account needs a browser sign-in through Google, Microsoft or GitHub, and each mailbox needs its owner to complete OAuth (0).

email-agent-mcp 79

Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as list_style (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.

Nylas Email API 93

Graded on the REST API. OpenAPI 3.1 spec at developer.nylas.com/openapi.json with 140 paths and 244 operations on 1 November, up from 124 and 223 on 17 October, mostly the send events, tracking and alert APIs of 30 October (25). llms.txt with instructions for agents, llms-full.txt and a Markdown copy of every page, per the 8 and 17 October checks (10). Guides and llms.txt say which grant type and endpoint to use and where provider behaviour differs (16). Typed query parameters on message lists, with defaults and limits in the reference (13). Curl and SDK examples on each guide, an error type table and a JSON error shape with type, message, provider_error and request_id, re-read on 1 November (14). v3 in the path and a dated changelog with an RSS feed, read on 1 November (15).