{ "data": { "a": { "slug": "email-agent-mcp", "name": "email-agent-mcp", "vendor": "UseJunior", "vendorUrl": "https://github.com/UseJunior/email-agent-mcp", "kind": "mcp", "category": "mailbox-access", "summary": "email-agent-mcp is an open-source local MCP server from UseJunior that lets an agent read, search, draft, send and file mail in a person's own Microsoft 365 or Gmail mailbox, with allowlists and delete disabled by default.", "url": "https://www.anchorterminal.com/tools/email-agent-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/email-agent-mcp.json", "dns": "email-agent-mcp.grade.anchorterminal.com", "repo": "https://github.com/UseJunior/email-agent-mcp", "license": "Apache-2.0", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "email-agent-mcp" } ], "auth": "oauth", "authNotes": "Signs in to the person's own mailbox with OAuth: Microsoft delegated scopes through MSAL, or Gmail `gmail.readonly` and `gmail.compose`. Tokens are kept in the OS keychain and local files under `~/.email-agent-mcp/`. For Gmail, a UseJunior-run broker on Vercel holds the OAuth client secret and relays code exchange and token refresh; mail itself goes straight to Google.", "pricing": "free", "pricingNotes": "Free, Apache-2.0 software run locally with npx. It uses the person's existing Microsoft 365 or Gmail account; there is nothing to buy from UseJunior.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository or README (checked 2026-11-06).", "endpoints": [] }, "toolCount": 27, "popularity": { "githubStars": null, "npmWeekly": 394, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://github.com/UseJunior/email-agent-mcp#readme", "registryName": "io.github.UseJunior/email-agent-mcp", "capabilities": [ "mailbox.read", "mailbox.search", "mailbox.send", "mailbox.drafts" ], "tags": [ "open-source", "local", "mcp", "mcp-registry", "oauth", "microsoft-graph", "gmail", "typescript", "approvals", "pre-1.0" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 65.9, "grade": "B", "agentReady": false, "rank": 397, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 84, "payments": 60, "reliability": 50, "schema": 79, "security": 67, "transparency": 42 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "A local MCP server for a person's own Outlook or Gmail mailbox with careful defaults, a read-only scope profile, send allowlists, gated deletes and annotated tools, released weekly under Apache-2.0. It is pre-1.0 from one maintainer, Gmail lacks label and move support, and Gmail sign-in relies on UseJunior's hosted broker.", "bestFor": "A person who wants an agent working in their own Outlook mailbox, or reading and drafting in Gmail, with guardrails.", "strengths": [ "The `observe` profile requests read-only Microsoft scopes and drops every write tool", "Send allowlists, delete disabled by default and sanitised errors that strip keys and paths", "Tools carry readOnlyHint and destructiveHint annotations and are typed", "Apache-2.0, CI with tests and coverage, semgrep and semver tags with GitHub Releases", "Listed in the official MCP registry as io.github.UseJunior/email-agent-mcp, current at 0.5.0" ], "weaknesses": [ "Pre-1.0, and every commit is by one maintainer", "On Gmail, labelling, flagging, marking read and moving return NOT_SUPPORTED", "Gmail sign-in and token refresh pass through a UseJunior-hosted broker that holds the client secret", "No audit log of what the agent did beyond the mailbox's own history", "Changing from `full` to `observe` on an existing mailbox doesn't shrink the OAuth token's scopes" ], "agentNotes": [ "Start with `get_mailbox_status`, then `list_emails` or `search_emails` before reading whole threads", "Ask the person to set the send allowlist before planning any `send_email` or `reply_to_email`", "Prefer `create_draft` and let the person send, unless they asked for sending", "Expect NOT_SUPPORTED for label, flag, mark-read and move on Gmail, and don't request `gmail.modify` to work around it", "Don't plan deletes; they need an operator environment variable and a caller flag" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.9 } ], "editorialScores": { "ergonomics": 79, "maintenance": 84, "payments": 60, "reliability": 50, "schema": 79, "security": 67, "transparency": 62 }, "provenanceScore": 22, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx -y email-agent-mcp", "claudeCode": "claude mcp add email-agent-mcp -- npx -y email-agent-mcp", "config": { "mcpServers": { "email-agent-mcp": { "args": [ "-y", "email-agent-mcp" ], "command": "npx", "type": "stdio" } } } }, "letme": { "capability": "https://letme.dev/mailbox.read", "tool": "https://letme.dev/email-agent-mcp" }, "area": "communication", "provenance": { "legalEntity": "", "domain": "usejunior.com", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/UseJunior/email-agent-mcp/releases", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Published by UseJunior; the README links usejunior.com, and SECURITY.md asks for reports to the maintainer's usejunior.com address with acknowledgement within 3 business days.", "No terms or privacy policy apply to the local server; the Gmail OAuth broker is a UseJunior-hosted service whose own terms weren't found.", "The repository's CHANGELOG.md points to GitHub Releases as the canonical changelog.", "GitHub's API refused our requests for its rate limit on 6 November 2026, so stars, issues and release pages weren't read; history and tags come from a shallow clone." ], "score": 22 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/email-agent-mcp.json", "live": { "slug": "email-agent-mcp", "versions": [ { "registry": "github", "name": "UseJunior/email-agent-mcp", "version": "v0.5.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:23:57.05382018Z" }, { "registry": "mcp-registry", "name": "io.github.UseJunior/email-agent-mcp", "version": "0.5.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "email-agent-mcp", "version": "0.5.0", "seenAt": "2026-11-06T23:23:56.286985184Z" } ], "githubStars": 7, "npmWeekly": 394, "securityTxt": { "url": "https://usejunior.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:16.157898877Z" }, "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "email-agent-mcp scores 65.9 (B) on agent readiness against Zoho Mail API's 49.6 (D), and leads in 5 of 7 scored categories. Zoho Mail API leads on transparency \u0026 trust.", "b": { "slug": "zoho-mail", "name": "Zoho Mail API", "vendor": "Zoho", "vendorUrl": "https://www.zoho.com/mail/", "kind": "http-api", "category": "mailbox-access", "summary": "Zoho Mail is Zoho's hosted business email service. Its REST API lets an application read, search, send and organise mail in a Zoho Mail account and administer an organisation's users, domains, groups and policies, with OAuth 2.0 access.", "url": "https://www.anchorterminal.com/tools/zoho-mail", "markdownUrl": "https://www.anchorterminal.com/tools/zoho-mail.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zoho-mail.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zoho-mail.json", "dns": "zoho-mail.grade.anchorterminal.com", "license": "Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found", "transports": [ "http" ], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 only. A person registers a client in the Zoho API console (server-based, client-based, mobile, non-browser with device authorisation, or a self client for one's own account) and approves scopes of the form `ZohoMail.\u003cresource\u003e.\u003coperation\u003e`. Registration is self-serve, with no app review or sales approval found. The access token lasts one hour and goes in `Authorization: Zoho-oauthtoken \u003ctoken\u003e`. The refresh token lasts until revoked. Organisation calls need an administrator's account. Each data centre has its own accounts host and API host.", "pricing": "freemium", "pricingNotes": "API access comes with a mailbox plan and has no per-call charge. Mail Free covers up to five users on one domain with no card and is available in some regions only. Paid plans cost $1 to $6 a user a month billed yearly, with a 15-day trial of the highest edition and no card. The API guide says plan and mail policy decide which APIs an account can call (https://www.zoho.com/mail/zohomail-pricing.html, checked 2026-10-09).", "priceSummary": "$1 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API guide, the OAuth guide or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.zoho.com/mail/help/api/", "llmsTxt": "https://www.zoho.com/mail/help/llms.txt", "capabilities": [ "mailbox.read", "mailbox.search", "mailbox.send", "mailbox.drafts", "mailbox.sync" ], "tags": [ "hosted", "closed-source", "oauth", "mcp", "webhooks", "free-tier", "no-card", "llms-txt", "email", "status-page", "bug-bounty", "soc2", "eu-data-residency" ], "graded": true, "anchor": { "graded": true, "score": 49.6, "grade": "D", "agentReady": false, "rank": 1090, "ranked": true, "rankOf": 1510, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 56, "maintenance": 33, "payments": 30, "reliability": 42, "schema": 45, "security": 67, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email.", "bestFor": "An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.", "strengths": [ "OAuth scopes name one resource and one operation, such as `ZohoMail.messages.READ`, so an agent can hold read access without send or delete.", "Every reference page has a Markdown twin, indexed in `https://www.zoho.com/mail/help/llms.txt`, with a curl sample and a sample response.", "Zoho Mail MCP exposes the API methods as tools on a remote server, and the owner picks which tools a server carries.", "The Mail Free plan covers five users on one domain with no card, and the MCP FAQ says free and paid plans both work.", "Delete moves a message to Trash unless `expunge=true` is sent, and audit records, login history and SMTP logs are readable through the Logs API." ], "weaknesses": [ "The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed.", "No OpenAPI file, official REST SDK or dated API changelog was found. The path carries no version.", "The getting started guide says each API has its own rate limit and gives no numbers. The response code list has no 429.", "External sending is capped at 50 to 500 emails an hour by sender reputation, with a block of up to one hour once the cap is reached.", "The OAuth guide's token, refresh and revoke examples carry the client secret and refresh token in the URL query string." ], "agentNotes": [ "Send `Authorization: Zoho-oauthtoken \u003ctoken\u003e`, not `Bearer`. The token response says `Bearer`, but the OAuth guide says the Mail API requires the Zoho prefix.", "Use the host for the account's data centre, such as `mail.zoho.eu` or `mail.zoho.in`. Call `GET /api/accounts` first for the `accountId` every mailbox call needs.", "Reading a message body needs both `folderId` and `messageId`. List and search calls return a summary only, 10 messages by default and 200 at most.", "Request `ZohoMail.messages.READ` alone for a reading agent. Add `CREATE` only when it must send, and leave `DELETE` out unless required.", "Refresh the access token every hour, and post OAuth parameters in the request body where the server accepts it, to keep secrets out of URLs." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 49.6 } ], "editorialScores": { "ergonomics": 56, "maintenance": 33, "payments": 30, "reliability": 42, "schema": 45, "security": 67, "transparency": 51 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://mail.zoho.com/api/accounts\" \\\n -X GET \\\n -H \"Accept: application/json\" \\\n -H \"Authorization: Zoho-oauthtoken $ZOHO_ACCESS_TOKEN\"" }, "letme": { "capability": "https://letme.dev/mailbox.read", "tool": "https://letme.dev/zoho-mail" }, "sameCompany": [ "zoho-books", "zoho-zeptomail", "zoho-crm", "zoho-desk", "zoho-recruit", "zoho-people" ], "area": "communication", "unitPrices": [ { "item": "Mail Lite, 5 GB", "unit": "seat-month", "usd": 1, "note": "billed yearly, no monthly plan. $1.25 for 10 GB" }, { "item": "Workplace Standard", "unit": "seat-month", "usd": 3, "note": "billed yearly. $4 billed monthly. 30 GB mailbox plus the office suite" }, { "item": "Mail Premium", "unit": "seat-month", "usd": 4, "note": "billed yearly, no monthly plan. 50 GB mailbox with retention and eDiscovery" }, { "item": "Workplace Professional", "unit": "seat-month", "usd": 6, "note": "billed yearly. 100 GB mailbox" } ], "provenance": { "legalEntity": "Zoho Corporation Private Limited", "domain": "zoho.com", "domainRegistered": "2004-01-16", "endpointOnVendorDomain": true, "terms": "https://www.zoho.com/terms.html", "privacy": "https://www.zoho.com/privacy.html", "statusPage": "https://status.zoho.com", "changelog": "https://www.zoho.com/mail/whats-new.html", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The Terms of Service (last updated 2 March 2022) are the service agreement for Zoho's online services. The contracting entity depends on the customer's region, Zoho Corporation Private Limited for India and Zoho Corporation for the United States (https://www.zoho.com/legal/zoho-contracting-entities.html).", "The Zoho Mail usage policy at https://www.zoho.com/mail/help/usage-policy.html, last updated 2 September 2026, adds rules for the mail service and bars automated and bulk email.", "The privacy policy was last updated on 22 December 2025. Part II covers data Zoho processes on a customer's behalf.", "security.txt at www.zoho.com gives a bug bounty contact, security@zohocorp.com, a policy link and an expiry of 30 June 2028.", "What's New is a product changelog dated by month, with the latest entries under October 2026 (Last-Modified 2 November 2026). No API changelog was found.", "The US API answers on mail.zoho.com. Other data centres use mail.zoho.eu, mail.zoho.in, mail.zoho.com.au, mail.zoho.jp, mail.zohocloud.ca, mail.zoho.com.cn, mail.zoho.ae and mail.zoho.sa. OAuth runs on accounts.zoho.com.", "RDAP for zoho.com gives a registration date of 2004-01-16 and expiry on 2031-01-16.", "us.zohostatus.com, where status.zoho.com redirects, answers robots.txt with an access-denied page (blocked on 4 November 2026), so its incident history wasn't read." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zoho-mail.json", "live": { "slug": "zoho-mail", "securityTxt": { "url": "https://zoho.com/.well-known/security.txt", "state": "valid", "expires": "2028-06-30T23:59:59.000Z", "checkedAt": "2026-11-07T15:59:50.941776064Z" }, "llmsTxt": { "url": "https://www.zoho.com/mail/help/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:29.179520554Z" }, "domain": { "domain": "zoho.com", "registered": "2004-01-16", "source": "https://rdap.verisign.com/com/v1/domain/zoho.com", "checkedAt": "2026-11-01T14:25:40.832306171Z" }, "pages": [ { "url": "https://www.zoho.com/mail/whats-new.html", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:38:11.299094405Z", "changedAt": "2026-11-03T08:13:49.22513305Z", "fingerprint": "d44bb693b757" }, { "url": "https://www.zoho.com/mail/zohomail-pricing.html", "kind": "pricing", "status": 304, "checkedAt": "2026-11-07T14:38:13.228919418Z", "changedAt": "2026-11-05T13:20:49.107861619Z", "fingerprint": "0e8dfc22e279" } ], "updatedAt": "2026-11-07T15:59:50.941776064Z" } }, "edges": [ { "by": 51, "category": "maintenance", "leads": "email-agent-mcp", "name": "Maintenance \u0026 community", "reasons": { "a": "v0.5.0 was tagged and published on 5 November 2026 (30). Nine npm releases in the 90 days from 8 August, v0.3.0 to v0.5.0 (20). Pull requests up to #234 merged in the history, all by the one maintainer; issue responses couldn't be read through GitHub's API that day (10 of 25). io.github.UseJunior/email-agent-mcp is in the official MCP registry with 0.5.0 marked latest (15). CI, commitlint, semgrep and Codecov workflows (9 of 10). Total 84.", "b": "Zoho keeps no API changelog, so recency rests on What's New entries for functions the REST API serves, dated by month only. What's New (Last-Modified 2 November 2026) lists from August to October 2026 two such entries, subfolders in the Archive folder (August, Folders API) and flagged emails added as tasks (October, Tasks API). The rest are web, mobile or admin-console functions the API doesn't serve (TLS policies, MTA-STS, display and settings screens). October lies 4 to 34 days back, within 90 but not shown within 30 (20). Two entries in the window from 6 August, fewer than three (0). The pricing page states support by email, chat and phone around the clock, and the changelog is public. The community forum wasn't tested for replies (9 of 15 for a closed service). No REST SDK. A Java command line tool and the MCP server are official. The MCP registry was not checked (4 of 15). No public repository, package or CI was found (0 of 10). 20 + 0 + 9 + 4 + 0 = 33." }, "scores": { "a": 84, "b": 33 } }, { "by": 34, "category": "schema", "leads": "email-agent-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as `list_style` (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.", "b": "Graded on the REST API. No OpenAPI or similar file was found in the docs or under the zoho organisation on GitHub. The MCP tool definitions sit in a signed-in console and were not read (0 of 25). `https://www.zoho.com/mail/help/llms.txt` indexes a Markdown twin of every reference page (10). Each page states the purpose and names the call that supplies each ID, with little on when not to use a call (13 of 20). Parameters are listed with a type, a mandatory mark, allowed values and defaults, in prose only. Many PUT calls share one URL and differ by a `mode` field, and sample responses carry numbers and booleans as strings (9 of 15). Every page has a curl sample and a sample response. Errors are one shared list of seven status codes, with nothing per endpoint (9 of 15). The path has no version. What's New is a product changelog dated by month, and no API changelog was found (4 of 15)." }, "scores": { "a": 79, "b": 45 } }, { "by": 31, "category": "transparency", "leads": "zoho-mail", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62.", "b": "The editorial half. A closed service under the Zoho Terms of Service, last updated 2 March 2022, and a Zoho Mail usage policy updated 2 September 2026. No source repository (15 of 30). The privacy policy of 22 December 2025 says Zoho does not sell personal information, and that account data leaves the active database at a clean-up run every six months after termination and backups three months later. It also says anonymised crops of service data are used to improve algorithms and that staff may manually verify emails reported as spam, while the Zoho Mail privacy page says Zoho will never read a customer's emails. The DPA is sent on request by email (21 of 30). No API deprecation policy or dated notices were found (0 of 20). A sub-processor page exists, but its list loads by script and was not read. The data centre page names 20 sites and the certifications of each (15 of 20). The provenance half is computed from the provenance block." }, "scores": { "a": 42, "b": 73 } }, { "by": 30, "category": "payments", "leads": "email-agent-mcp", "name": "Payments \u0026 pricing", "reasons": { "a": "Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.", "b": "No x402, MPP or L402 (0 of 40). Plan prices are rendered on the pricing page without a login, $1 to $6 a user a month billed yearly, with API access included and no per-call price (10 of 20). Mail Free covers five users with no card, in some regions only, and the highest paid edition has a 15-day trial with no card (20). A person signs up in a browser, registers an OAuth client in the API console and approves scopes (0 of 20). 0 + 10 + 20 + 0 = 30." }, "scores": { "a": 60, "b": 30 } }, { "by": 23, "category": "ergonomics", "leads": "email-agent-mcp", "name": "Agent ergonomics", "reasons": { "a": "27 tools in the full profile, the 11 to 30 band, plus the `observe` profile as a read-only subset (20 of 25). List and search tools filter and page; we read the tool table, not every parameter (16 of 20). Errors are sanitised and use stable reasons such as NOT_SUPPORTED, failing closed before a Gmail mutation (15 of 20). readOnlyHint and destructiveHint on the tools in source; sends take no idempotency key (16 of 20). One npx command and a setup wizard for OAuth and mailbox choice; TypeScript only (12 of 15). Total 79.", "b": "Graded on the REST API. List and search return a summary per message and the body is a separate call, with `limit` from 1 to 200 and a default of 10. There is no field selection. In MCP the owner chooses which tools a server carries, and the tool count is not published (17 of 25). `start` and `limit`, filters for folder, read status, flag, label, thread and attachments, three sort keys and a search syntax (18 of 20). Errors carry a status code, a description and a `moreInfo` message. Seven codes are documented, with no list of messages or recovery steps (10 of 20). No idempotency key or conditional write was found, so a retried send can go out twice. Delete moves to Trash unless `expunge=true`. MCP annotations were not read (5 of 20). Send needs only `fromAddress` and `toAddress`, and defaults are stated. No REST SDK in any language, tokens last an hour, hosts differ by data centre, and reading a body needs an account ID, a folder ID and a message ID (6 of 15)." }, "scores": { "a": 79, "b": 56 } }, { "by": 8, "category": "reliability", "leads": "email-agent-mcp", "name": "Reliability", "reasons": { "a": "Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package `email-agent-mcp` with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.", "b": "Graded on the REST API, read with the hosted lines. status.zoho.com redirects to us.zohostatus.com, which listed components for Zoho Mail, mail listing, IMAP, POP, SMTP and the MX host on 9 October. The status-page line keeps its 20, as on the other Zoho listings. us.zohostatus.com now answers robots.txt with an access-denied page, so the 9 October incident readings are struck and no history is readable (5). The getting started guide (Last-Modified 8 January 2026) says each API has its own rate limit and gives no numbers. Sending limits are published, 50 to 500 external emails an hour and 1,000 internal. Kept as a partial (7). The response code list has no 429, and no Retry-After, backoff guidance or idempotency key was found. The guide says only that the response will say when a limit is exceeded, which is no handling guidance (0). The pricing page lists a 99.9% uptime guarantee with no SLA document, measurement or credit terms, and a listed SLA figure with no document gives 0 in this run (0). The API carries no beta or preview label (10). 20 + 5 + 7 + 0 + 0 + 10 = 42." }, "scores": { "a": 50, "b": 42 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "UseJunior", "b": "Zoho", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found", "name": "Licence" }, { "a": "27", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "io.github.UseJunior/email-agent-mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-11-05", "b": "none", "name": "Last release" }, { "a": "no document linked", "b": "2022-03-02", "name": "Terms last updated" }, { "a": "no document linked", "b": "2025-12-22", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "yes", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "394 npm/wk", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "email-agent-mcp scores 65.9 (B) on agent readiness against Zoho Mail API's 49.6 (D), and leads in 5 of 7 scored categories. Zoho Mail API leads on transparency \u0026 trust.", "question": "Which is better for AI agents, email-agent-mcp or Zoho Mail API?" }, { "answer": "Both use an OAuth sign-in.", "question": "Do email-agent-mcp and Zoho Mail API need an API key?" }, { "answer": "email-agent-mcp runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Zoho Mail API.", "question": "Can an agent call email-agent-mcp and Zoho Mail API without installing anything?" }, { "answer": "email-agent-mcp is open source (Apache-2.0). No open-source release is listed for Zoho Mail API.", "question": "Are email-agent-mcp and Zoho Mail API open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 50 against 42", "Schema \u0026 documentation, 79 against 45", "Agent ergonomics, 79 against 56", "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 84 against 33" ], "also": [ "Runs on your own machine", "Open source" ], "goodFor": "A person who wants an agent working in their own Outlook mailbox, or reading and drafting in Gmail, with guardrails.", "slug": "email-agent-mcp", "watchFor": "Pre-1.0, and every commit is by one maintainer" }, { "aheadOn": [ "Transparency \u0026 trust, 73 against 42" ], "also": [ "Free to start without a card" ], "goodFor": "An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.", "slug": "zoho-mail", "watchFor": "The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed." } ], "history": { "email-agent-mcp": null, "zoho-mail": [ { "causes": [ "evidence" ], "date": "2026-11-04", "delta": -4.2, "from": 53.8, "fromGrade": "D", "to": 49.6, "toGrade": "D" } ] }, "job": { "capability": "mailbox.read", "name": "Mailbox access" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aurinko-email-vs-email-agent-mcp.json", "title": "Aurinko Email API vs email-agent-mcp", "url": "https://www.anchorterminal.com/compare/aurinko-email-vs-email-agent-mcp" }, { "json": "https://www.anchorterminal.com/compare/aurinko-email-vs-zoho-mail.json", "title": "Aurinko Email API vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/aurinko-email-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/cloudpost-vs-email-agent-mcp.json", "title": "CloudPost vs email-agent-mcp", "url": "https://www.anchorterminal.com/compare/cloudpost-vs-email-agent-mcp" }, { "json": "https://www.anchorterminal.com/compare/cloudpost-vs-zoho-mail.json", "title": "CloudPost vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/cloudpost-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-emailengine.json", "title": "email-agent-mcp vs EmailEngine", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-emailengine" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-fastmail.json", "title": "email-agent-mcp vs Fastmail API (JMAP)", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-fastmail" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-gmail-api.json", "title": "email-agent-mcp vs Gmail API", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-gmail-api" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-himalaya.json", "title": "email-agent-mcp vs Himalaya", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-himalaya" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-nylas-email.json", "title": "email-agent-mcp vs Nylas Email API", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-nylas-email" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-outlook-mail-graph.json", "title": "email-agent-mcp vs Outlook Mail (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-outlook-mail-graph" }, { "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-unipile.json", "title": "email-agent-mcp vs Unipile", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-unipile" }, { "json": "https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail.json", "title": "EmailEngine vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail.json", "title": "Fastmail API (JMAP) vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail.json", "title": "Gmail API vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/himalaya-vs-zoho-mail.json", "title": "Himalaya vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/himalaya-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail.json", "title": "Nylas Email API vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.json", "title": "Outlook Mail (Microsoft Graph) vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail" }, { "json": "https://www.anchorterminal.com/compare/unipile-vs-zoho-mail.json", "title": "Unipile vs Zoho Mail API", "url": "https://www.anchorterminal.com/compare/unipile-vs-zoho-mail" } ], "panel": null, "scores": [ { "by": 8, "edge": "email-agent-mcp", "email-agent-mcp": 50, "key": "reliability", "name": "Reliability", "weight": 16, "zoho-mail": 42 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 34, "edge": "email-agent-mcp", "email-agent-mcp": 79, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "zoho-mail": 45 }, { "by": 23, "edge": "email-agent-mcp", "email-agent-mcp": 79, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "zoho-mail": 56 }, { "by": 0, "edge": "", "email-agent-mcp": 67, "key": "security", "name": "Security \u0026 auth", "weight": 14, "zoho-mail": 67 }, { "by": 30, "edge": "email-agent-mcp", "email-agent-mcp": 60, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "zoho-mail": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 51, "edge": "email-agent-mcp", "email-agent-mcp": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "zoho-mail": 33 }, { "by": 31, "edge": "zoho-mail", "email-agent-mcp": 42, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "zoho-mail": 73 } ], "summary": "email-agent-mcp scores 65.9 (B) on agent readiness against Zoho Mail API's 49.6 (D), and leads in 5 of 7 scored categories. Zoho Mail API leads on transparency \u0026 trust. Both do mailbox access.", "tasks": null, "tutorials": [], "verdicts": { "email-agent-mcp": "A local MCP server for a person's own Outlook or Gmail mailbox with careful defaults, a read-only scope profile, send allowlists, gated deletes and annotated tools, released weekly under Apache-2.0. It is pre-1.0 from one maintainer, Gmail lacks label and move support, and Gmail sign-in relies on UseJunior's hosted broker.", "zoho-mail": "A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail", "json": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail.min.md" }, "markdown": "email-agent-mcp scores 65.9 (B) on agent readiness against Zoho Mail API's 49.6 (D), and leads in 5 of 7 scored categories. Zoho Mail API leads on transparency \u0026 trust. Both do mailbox access.\n\n- email-agent-mcp: grade B, 65.9/100, rank #397 of 1510. Markdown https://www.anchorterminal.com/tools/email-agent-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/email-agent-mcp.json\n- Zoho Mail API: grade D, 49.6/100, rank #1090 of 1510. Markdown https://www.anchorterminal.com/tools/zoho-mail.md · JSON https://www.anchorterminal.com/api/v1/tools/zoho-mail.json\n- Best mailbox access APIs for AI agents: https://www.anchorterminal.com/best/mailbox-access/index.md\n- All 55 mailboxes comparisons: https://www.anchorterminal.com/compare/mailbox-access/index.md\n\n## Which one, for what\n\n### email-agent-mcp (B)\n\nGood for: A person who wants an agent working in their own Outlook mailbox, or reading and drafting in Gmail, with guardrails.\n\nAhead on:\n- Reliability, 50 against 42\n- Schema \u0026 documentation, 79 against 45\n- Agent ergonomics, 79 against 56\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 84 against 33\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n\nWatch for: Pre-1.0, and every commit is by one maintainer\n\n### Zoho Mail API (D)\n\nGood for: An agent working inside its owner's Zoho Mail mailbox or administering a Zoho Mail organisation, where narrow scopes and the MCP server keep access small.\n\nAhead on:\n- Transparency \u0026 trust, 73 against 42\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: The Zoho Mail usage policy, updated 2 September 2026, lists automated, bulk and transactional emails among uses that are not allowed.\n\n\n## Why the edge\n\n### Maintenance \u0026 community: email-agent-mcp +51\n\n- email-agent-mcp (84): v0.5.0 was tagged and published on 5 November 2026 (30). Nine npm releases in the 90 days from 8 August, v0.3.0 to v0.5.0 (20). Pull requests up to #234 merged in the history, all by the one maintainer; issue responses couldn't be read through GitHub's API that day (10 of 25). io.github.UseJunior/email-agent-mcp is in the official MCP registry with 0.5.0 marked latest (15). CI, commitlint, semgrep and Codecov workflows (9 of 10). Total 84.\n- Zoho Mail API (33): Zoho keeps no API changelog, so recency rests on What's New entries for functions the REST API serves, dated by month only. What's New (Last-Modified 2 November 2026) lists from August to October 2026 two such entries, subfolders in the Archive folder (August, Folders API) and flagged emails added as tasks (October, Tasks API). The rest are web, mobile or admin-console functions the API doesn't serve (TLS policies, MTA-STS, display and settings screens). October lies 4 to 34 days back, within 90 but not shown within 30 (20). Two entries in the window from 6 August, fewer than three (0). The pricing page states support by email, chat and phone around the clock, and the changelog is public. The community forum wasn't tested for replies (9 of 15 for a closed service). No REST SDK. A Java command line tool and the MCP server are official. The MCP registry was not checked (4 of 15). No public repository, package or CI was found (0 of 10). 20 + 0 + 9 + 4 + 0 = 33.\n\n### Schema \u0026 documentation: email-agent-mcp +34\n\n- email-agent-mcp (79): Tools are defined with typed input schemas that the MCP SDK publishes as JSON Schema (25). README in five languages, AGENTS.md, CLAUDE.md and GEMINI.md; no llms.txt, which a local server doesn't need (5 of 10). The README's tool table marks each tool read, write or destructive and states provider limits, such as Gmail deletes removing drafts only (15 of 20). Typed inputs with options such as `list_style` (12 of 15). Setup examples per client and documented error behaviour, such as NOT_SUPPORTED on Gmail and sanitised errors (10 of 15). Semver tags and GitHub Releases (12 of 15). Total 79.\n- Zoho Mail API (45): Graded on the REST API. No OpenAPI or similar file was found in the docs or under the zoho organisation on GitHub. The MCP tool definitions sit in a signed-in console and were not read (0 of 25). `https://www.zoho.com/mail/help/llms.txt` indexes a Markdown twin of every reference page (10). Each page states the purpose and names the call that supplies each ID, with little on when not to use a call (13 of 20). Parameters are listed with a type, a mandatory mark, allowed values and defaults, in prose only. Many PUT calls share one URL and differ by a `mode` field, and sample responses carry numbers and booleans as strings (9 of 15). Every page has a curl sample and a sample response. Errors are one shared list of seven status codes, with nothing per endpoint (9 of 15). The path has no version. What's New is a product changelog dated by month, and no API changelog was found (4 of 15).\n\n### Transparency \u0026 trust: Zoho Mail API +31\n\n- email-agent-mcp (42): Apache-2.0 with a LICENSE file (30). SECURITY.md says tokens and mail are handled locally over stdio with no network listener, and the broker README says mail never reaches the broker and refresh tokens aren't stored. The broker has no published privacy policy (22 of 30). No deprecation policy (0). No telemetry was found in the README or package manifests, and none is stated either way (10 of 20). Total 62.\n- Zoho Mail API (73): The editorial half. A closed service under the Zoho Terms of Service, last updated 2 March 2022, and a Zoho Mail usage policy updated 2 September 2026. No source repository (15 of 30). The privacy policy of 22 December 2025 says Zoho does not sell personal information, and that account data leaves the active database at a clean-up run every six months after termination and backups three months later. It also says anonymised crops of service data are used to improve algorithms and that staff may manually verify emails reported as spam, while the Zoho Mail privacy page says Zoho will never read a customer's emails. The DPA is sent on request by email (21 of 30). No API deprecation policy or dated notices were found (0 of 20). A sub-processor page exists, but its list loads by script and was not read. The data centre page names 20 sites and the certifications of each (15 of 20). The provenance half is computed from the provenance block.\n\n### Payments \u0026 pricing: email-agent-mcp +30\n\n- email-agent-mcp (60): Free, Apache-2.0 software with nothing to buy, scored 20 + 20 + 20 by the self-hosted rule. No payment protocol (0 of 40). Total 60.\n- Zoho Mail API (30): No x402, MPP or L402 (0 of 40). Plan prices are rendered on the pricing page without a login, $1 to $6 a user a month billed yearly, with API access included and no per-call price (10 of 20). Mail Free covers five users with no card, in some regions only, and the highest paid edition has a 15-day trial with no card (20). A person signs up in a browser, registers an OAuth client in the API console and approves scopes (0 of 20). 0 + 10 + 20 + 0 = 30.\n\n### Agent ergonomics: email-agent-mcp +23\n\n- email-agent-mcp (79): 27 tools in the full profile, the 11 to 30 band, plus the `observe` profile as a read-only subset (20 of 25). List and search tools filter and page; we read the tool table, not every parameter (16 of 20). Errors are sanitised and use stable reasons such as NOT_SUPPORTED, failing closed before a Gmail mutation (15 of 20). readOnlyHint and destructiveHint on the tools in source; sends take no idempotency key (16 of 20). One npx command and a setup wizard for OAuth and mailbox choice; TypeScript only (12 of 15). Total 79.\n- Zoho Mail API (56): Graded on the REST API. List and search return a summary per message and the body is a separate call, with `limit` from 1 to 200 and a default of 10. There is no field selection. In MCP the owner chooses which tools a server carries, and the tool count is not published (17 of 25). `start` and `limit`, filters for folder, read status, flag, label, thread and attachments, three sort keys and a search syntax (18 of 20). Errors carry a status code, a description and a `moreInfo` message. Seven codes are documented, with no list of messages or recovery steps (10 of 20). No idempotency key or conditional write was found, so a retried send can go out twice. Delete moves to Trash unless `expunge=true`. MCP annotations were not read (5 of 20). Send needs only `fromAddress` and `toAddress`, and defaults are stated. No REST SDK in any language, tokens last an hour, hosts differ by data centre, and reading a body needs an account ID, a folder ID and a message ID (6 of 15).\n\n### Reliability: email-agent-mcp +8\n\n- email-agent-mcp (50): Graded with the lines for local packages and stdio MCP servers. Installs from the official npm package `email-agent-mcp` with npx, CI runs on Node 20 (20). A CI workflow with Vitest tests, Codecov and a spec-coverage gate; the run results weren't readable through GitHub's API that day, so partial (20 of 25). Open crash and regression issues couldn't be read because GitHub's API refused our requests for its rate limit (0, unchecked). Semver tags from v0.1.7 to v0.5.0 and auto-categorised GitHub Releases as the changelog, with no breaking changes marked in what we read (10 of 15). Pre-1.0 (0). Total 50.\n- Zoho Mail API (42): Graded on the REST API, read with the hosted lines. status.zoho.com redirects to us.zohostatus.com, which listed components for Zoho Mail, mail listing, IMAP, POP, SMTP and the MX host on 9 October. The status-page line keeps its 20, as on the other Zoho listings. us.zohostatus.com now answers robots.txt with an access-denied page, so the 9 October incident readings are struck and no history is readable (5). The getting started guide (Last-Modified 8 January 2026) says each API has its own rate limit and gives no numbers. Sending limits are published, 50 to 500 external emails an hour and 1,000 internal. Kept as a partial (7). The response code list has no 429, and no Retry-After, backoff guidance or idempotency key was found. The guide says only that the response will say when a limit is exceeded, which is no handling guidance (0). The pricing page lists a 99.9% uptime guarantee with no SLA document, measurement or credit terms, and a listed SLA figure with no document gives 0 in this run (0). The API carries no beta or preview label (10). 20 + 5 + 7 + 0 + 0 + 10 = 42.\n\n## Score by category\n\n| Category | Weight | email-agent-mcp | Zoho Mail API | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 50 | 42 | email-agent-mcp +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 79 | 45 | email-agent-mcp +34 |\n| Agent ergonomics | 13% (16.2 this run) | 79 | 56 | email-agent-mcp +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 67 | 67 | even |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 30 | email-agent-mcp +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 33 | email-agent-mcp +51 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 42 | 73 | Zoho Mail API +31 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **65.9 · B** | **49.6 · D** | |\n\n## Facts side by side\n\n| Fact | email-agent-mcp | Zoho Mail API |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | UseJunior | Zoho |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | HTTP |\n| Auth | OAuth | OAuth |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under the Zoho Terms of Service and the Zoho Mail usage policy. No source repository was found |\n| Tools exposed | 27 | none |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| MCP registry | `io.github.UseJunior/email-agent-mcp` | not listed |\n| Last release | 2026-11-05 | none |\n| Terms last updated | no document linked | 2022-03-02 |\n| Privacy policy last updated | no document linked | 2025-12-22 |\n| Customer content may train models | not read yet | yes |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | yes |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 394 npm/wk | none |\n\n## How the scores have moved\n\n### email-agent-mcp\n\nNo score change since it was listed.\n\n### Zoho Mail API\n\n- -4.2 on 4 November 2026: new evidence\n\n## Verdicts\n\n**email-agent-mcp.** A local MCP server for a person's own Outlook or Gmail mailbox with careful defaults, a read-only scope profile, send allowlists, gated deletes and annotated tools, released weekly under Apache-2.0. It is pre-1.0 from one maintainer, Gmail lacks label and move support, and Gmail sign-in relies on UseJunior's hosted broker.\n\n**Zoho Mail API.** A REST API over a Zoho Mail mailbox with OAuth scopes that narrow to one resource and one operation, plus an MCP server launched in 2026. Zoho publishes no OpenAPI file, SDK, request rate limit or API changelog, and its usage policy bars automated email.\n\n## Before you call either\n\n### email-agent-mcp\n\n1. Start with `get_mailbox_status`, then `list_emails` or `search_emails` before reading whole threads\n2. Ask the person to set the send allowlist before planning any `send_email` or `reply_to_email`\n3. Prefer `create_draft` and let the person send, unless they asked for sending\n4. Expect NOT_SUPPORTED for label, flag, mark-read and move on Gmail, and don't request `gmail.modify` to work around it\n5. Don't plan deletes; they need an operator environment variable and a caller flag\n\n### Zoho Mail API\n\n1. Send `Authorization: Zoho-oauthtoken \u003ctoken\u003e`, not `Bearer`. The token response says `Bearer`, but the OAuth guide says the Mail API requires the Zoho prefix.\n2. Use the host for the account's data centre, such as `mail.zoho.eu` or `mail.zoho.in`. Call `GET /api/accounts` first for the `accountId` every mailbox call needs.\n3. Reading a message body needs both `folderId` and `messageId`. List and search calls return a summary only, 10 messages by default and 200 at most.\n4. Request `ZohoMail.messages.READ` alone for a reading agent. Add `CREATE` only when it must send, and leave `DELETE` out unless required.\n5. Refresh the access token every hour, and post OAuth parameters in the request body where the server accepts it, to keep secrets out of URLs.\n\n## Questions\n\n### Which is better for AI agents, email-agent-mcp or Zoho Mail API?\n\nemail-agent-mcp scores 65.9 (B) on agent readiness against Zoho Mail API's 49.6 (D), and leads in 5 of 7 scored categories. Zoho Mail API leads on transparency \u0026 trust.\n\n### Do email-agent-mcp and Zoho Mail API need an API key?\n\nBoth use an OAuth sign-in.\n\n### Can an agent call email-agent-mcp and Zoho Mail API without installing anything?\n\nemail-agent-mcp runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Zoho Mail API.\n\n### Are email-agent-mcp and Zoho Mail API open source?\n\nemail-agent-mcp is open source (Apache-2.0). No open-source release is listed for Zoho Mail API.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail.json, and with the fewest tokens: https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"email-agent-mcp\", \"b\": \"zoho-mail\"}`. From a terminal: `anchor compare email-agent-mcp zoho-mail`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/email-agent-mcp.json and https://www.anchorterminal.com/api/v1/tools/zoho-mail.json\n\n## Other comparisons with email-agent-mcp or Zoho Mail API\n\n- [Aurinko Email API vs email-agent-mcp](https://www.anchorterminal.com/compare/aurinko-email-vs-email-agent-mcp.md)\n- [Aurinko Email API vs Zoho Mail API](https://www.anchorterminal.com/compare/aurinko-email-vs-zoho-mail.md)\n- [CloudPost vs email-agent-mcp](https://www.anchorterminal.com/compare/cloudpost-vs-email-agent-mcp.md)\n- [CloudPost vs Zoho Mail API](https://www.anchorterminal.com/compare/cloudpost-vs-zoho-mail.md)\n- [email-agent-mcp vs EmailEngine](https://www.anchorterminal.com/compare/email-agent-mcp-vs-emailengine.md)\n- [email-agent-mcp vs Fastmail API (JMAP)](https://www.anchorterminal.com/compare/email-agent-mcp-vs-fastmail.md)\n- [email-agent-mcp vs Gmail API](https://www.anchorterminal.com/compare/email-agent-mcp-vs-gmail-api.md)\n- [email-agent-mcp vs Himalaya](https://www.anchorterminal.com/compare/email-agent-mcp-vs-himalaya.md)\n- [email-agent-mcp vs Nylas Email API](https://www.anchorterminal.com/compare/email-agent-mcp-vs-nylas-email.md)\n- [email-agent-mcp vs Outlook Mail (Microsoft Graph)](https://www.anchorterminal.com/compare/email-agent-mcp-vs-outlook-mail-graph.md)\n- [email-agent-mcp vs Unipile](https://www.anchorterminal.com/compare/email-agent-mcp-vs-unipile.md)\n- [EmailEngine vs Zoho Mail API](https://www.anchorterminal.com/compare/emailengine-vs-zoho-mail.md)\n- [Fastmail API (JMAP) vs Zoho Mail API](https://www.anchorterminal.com/compare/fastmail-vs-zoho-mail.md)\n- [Gmail API vs Zoho Mail API](https://www.anchorterminal.com/compare/gmail-api-vs-zoho-mail.md)\n- [Himalaya vs Zoho Mail API](https://www.anchorterminal.com/compare/himalaya-vs-zoho-mail.md)\n- [Nylas Email API vs Zoho Mail API](https://www.anchorterminal.com/compare/nylas-email-vs-zoho-mail.md)\n- [Outlook Mail (Microsoft Graph) vs Zoho Mail API](https://www.anchorterminal.com/compare/outlook-mail-graph-vs-zoho-mail.md)\n- [Unipile vs Zoho Mail API](https://www.anchorterminal.com/compare/unipile-vs-zoho-mail.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "email-agent-mcp vs Zoho Mail API", "url": "" } ], "description": "email-agent-mcp scores 65.9 (B) to Zoho Mail's 49.6 (D) for mailbox access. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "email-agent-mcp B 65.9", "Zoho Mail API D 49.6", "scores" ], "h1": "email-agent-mcp vs Zoho Mail API", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/email-agent-mcp-vs-zoho-mail", "published": "2026-10-01", "section": "tools", "title": "email-agent-mcp vs Zoho Mail for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/email-agent-mcp-vs-zoho-mail" }, "tokens": { "markdown": 4600, "slim": 2880 }, "version": 1 }