email-tool-mcp 5.4.2__tar.gz

email_tool_mcp-5.4.2/.claude-plugin/marketplace.json

@@ -0,0 +1,19 @@
+{
+  "name": "email-tool",
+  "owner": {
+    "name": "Sayem Khan",
+    "email": "s.khan@alchlight.com"
+  },
+  "metadata": {
+    "description": "Email for any MCP client: IMAP/SMTP mailbox access.",
+    "version": "5.4.2"
+  },
+  "plugins": [
+    {
+      "name": "email-tool",
+      "source": "./",
+      "description": "IMAP/SMTP email: read, search, draft and send mail.",
+      "license": "MIT"
+    }
+  ]
+}

email_tool_mcp-5.4.2/.claude-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "email-tool",
+  "version": "5.4.2",
+  "description": "IMAP/SMTP email: read, search, draft and send mail. One MCP server for all your mailboxes; passwords in the OS keyring.",
+  "author": {
+    "name": "Sayem Khan",
+    "email": "s.khan@alchlight.com",
+    "url": "https://github.com/skhan61"
+  },
+  "keywords": [
+    "email",
+    "imap",
+    "smtp",
+    "mcp",
+    "mail"
+  ],
+  "mcpServers": "./.mcp.json",
+  "commands": "./commands",
+  "skills": "./skills",
+  "license": "MIT",
+  "icon": "assets/icon.png"
+}

email_tool_mcp-5.4.2/.codex-mcp.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "email": {
+      "command": "uvx",
+      "args": [
+        "--from",
+        "git+https://github.com/skhan61/email-tool@v5.4.2",
+        "email-tool-mcp",
+        "serve"
+      ]
+    }
+  }
+}

email_tool_mcp-5.4.2/.codex-plugin/plugin.json

@@ -0,0 +1,19 @@
+{
+  "name": "email-tool",
+  "version": "5.4.2",
+  "description": "IMAP/SMTP email: read, search, draft and send mail. One MCP server for all your mailboxes; passwords in the OS keyring.",
+  "keywords": ["email", "imap", "smtp", "gmail", "mcp"],
+  "skills": "./skills/",
+  "mcpServers": "./.codex-mcp.json",
+  "interface": {
+    "displayName": "Email (IMAP/SMTP)",
+    "shortDescription": "Read, search, draft and send email from your own mailboxes",
+    "longDescription": "Runs on your machine. Add each mailbox once in a terminal with `email-tool-mcp add <name>`; passwords stay in the OS keyring and never leave your computer except to your mail server.",
+    "developerName": "Sayem Khan",
+    "category": "Productivity",
+    "websiteUrl": "https://github.com/skhan61/email-tool",
+    "logo": "./assets/icon.png",
+    "composerIcon": "./assets/icon.png"
+  },
+  "license": "MIT"
+}

email_tool_mcp-5.4.2/.gitattributes

@@ -0,0 +1 @@
+install/*.cmd text eol=crlf

email_tool_mcp-5.4.2/.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,52 @@
+name: Bug report
+description: Something does not work as documented
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: Never paste a password, app password or full mail log here. Replace your address with `you@example.com`.
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened
+      description: One line.
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. Ask the agent "list my inbox"
+        2. ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected
+      description: One line.
+    validations:
+      required: true
+  - type: dropdown
+    id: agent
+    attributes:
+      label: AI agent
+      options: [Claude Code, Claude Desktop, Claude Cowork, ChatGPT desktop, Codex CLI, Other]
+    validations:
+      required: true
+  - type: input
+    id: environment
+    attributes:
+      label: OS, Python and email-tool version
+      placeholder: macOS 15.6, Python 3.13.2, email-tool 5.2.0 (version from `claude plugin list` or the release page)
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Server log
+      description: The stderr lines from the MCP server, secrets removed.
+      render: text
+    validations:
+      required: false

email_tool_mcp-5.4.2/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability
+    url: https://github.com/skhan61/email-tool/security/advisories/new
+    about: Report privately. Never post passwords, addresses or logs with secrets in a public issue.

email_tool_mcp-5.4.2/.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,28 @@
+name: Feature request
+description: A new tool, agent setup or behaviour
+labels: [enhancement]
+body:
+  - type: textarea
+    id: what
+    attributes:
+      label: What
+      description: One line.
+    validations:
+      required: true
+  - type: textarea
+    id: why
+    attributes:
+      label: Why
+      description: The task you cannot do today.
+    validations:
+      required: true
+  - type: textarea
+    id: done-when
+    attributes:
+      label: Done when
+      description: Testable conditions, one per line.
+      placeholder: |
+        - [ ] `move_email` moves a message between folders
+        - [ ] an offline test covers it
+    validations:
+      required: true

email_tool_mcp-5.4.2/.github/actions/agent-cli/action.yml

@@ -0,0 +1,26 @@
+---
+# One agent CLI from its hash-locked package-lock (.github/tools/<tool>), on PATH.
+# Install scripts run only where the CLI needs them (its native binary); the release
+# build passes scripts: "false", so nothing but the locked files runs there.
+name: agent-cli
+description: Install one agent CLI with npm ci from its locked folder
+inputs:
+  tool:
+    description: Folder under .github/tools (mcpb, codex, claude-code)
+    required: true
+  scripts:
+    description: Run the package's install scripts
+    default: "true"
+runs:
+  using: composite
+  steps:
+    - shell: bash
+      env:
+        TOOL: ${{ inputs.tool }}
+        SCRIPTS: ${{ inputs.scripts }}
+      run: |
+        set -euo pipefail
+        flags=(--no-audit --no-fund)
+        if [ "$SCRIPTS" != "true" ]; then flags+=(--ignore-scripts); fi
+        npm ci --prefix "$GITHUB_WORKSPACE/.github/tools/$TOOL" "${flags[@]}"
+        echo "$GITHUB_WORKSPACE/.github/tools/$TOOL/node_modules/.bin" >> "$GITHUB_PATH"

email_tool_mcp-5.4.2/.github/dependabot.yml

@@ -0,0 +1,35 @@
+version: 2
+# Grouped weekly PRs, and nothing younger than 14 days: a fresh release gets two
+# weeks for regressions and yanks to surface first. Runtime and dev bumps stay in
+# separate PRs so a breaking runtime release cannot block tooling updates.
+# The pre-commit-hooks rev is not covered; bump it with `pre-commit autoupdate`.
+updates:
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 14
+    groups:
+      runtime:
+        dependency-type: production
+      dev:
+        dependency-type: development
+  - package-ecosystem: npm
+    directories: [/.github/tools/mcpb, /.github/tools/codex, /.github/tools/claude-code]
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 14
+    groups:
+      agent-clis:
+        patterns: ["*"]
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 14
+    groups:
+      actions:
+        patterns: ["*"]

email_tool_mcp-5.4.2/.github/pull_request_template.md

@@ -0,0 +1,22 @@
+<!-- Short: one line per section, tables over prose. Delete a section that does not apply. -->
+
+## What
+One line. `Fixes #N`
+
+## Root cause
+One line. (Skip for a feature or chore.)
+
+## Done when
+<!-- One row per "Done when" item in the issue, by number. Do not copy the wording: the issue link already shows it. -->
+
+| issue item | met | how verified |
+|---|---|---|
+| 1 | ☐ |  |
+
+## Not changed
+One line: what a reviewer might fear this touches, and does not.
+
+## Checklist
+- [ ] CI green
+- [ ] No password, address or mail host added to the repository
+- [ ] Docs (docs/) updated if a command or setup step changed

email_tool_mcp-5.4.2/.github/tools/claude-code/package-lock.json

@@ -0,0 +1,140 @@
+{
+  "name": "email-tool-ci-claude-code",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "email-tool-ci-claude-code",
+      "devDependencies": {
+        "@anthropic-ai/claude-code": "2.1.292"
+      }
+    },
+    "node_modules/@anthropic-ai/claude-code": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-2.1.292.tgz",
+      "integrity": "sha512-ptT9UcOsyR2VLNgfHgF87To8B7tCrZktIpYC4dEGt+9MG42NAWsljEGBZ3spdHcJ2akednszESVNti7hWxZrJg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "bin": {
+        "claude": "bin/claude.exe"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      },
+      "optionalDependencies": {
+        "@anthropic-ai/claude-code-darwin-arm64": "2.1.292",
+        "@anthropic-ai/claude-code-darwin-x64": "2.1.292",
+        "@anthropic-ai/claude-code-linux-arm64": "2.1.292",
+        "@anthropic-ai/claude-code-linux-arm64-musl": "2.1.292",
+        "@anthropic-ai/claude-code-linux-x64": "2.1.292",
+        "@anthropic-ai/claude-code-linux-x64-musl": "2.1.292",
+        "@anthropic-ai/claude-code-win32-arm64": "2.1.292",
+        "@anthropic-ai/claude-code-win32-x64": "2.1.292"
+      }
+    },
+    "node_modules/@anthropic-ai/claude-code-darwin-arm64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-darwin-arm64/-/claude-code-darwin-arm64-2.1.292.tgz",
+      "integrity": "sha512-SBkmDQOPbQ9bqkGrzshn92ByyqQy2P7pSs/11NdMLq2VXbcQc93z+yd8Dtx4+jeAX22G7GSvQpKDyKev70Vn8Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-darwin-x64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-darwin-x64/-/claude-code-darwin-x64-2.1.292.tgz",
+      "integrity": "sha512-1S/JscVIMFrqZsUgcwkyFCKkE2EPgPKX/6z/rgUvZIwfwDRhArzHDCAXbqZYIIBLycLGYH8mUQvud6wBumfsXQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-linux-arm64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-linux-arm64/-/claude-code-linux-arm64-2.1.292.tgz",
+      "integrity": "sha512-tkYfopUsz3AbyprMXvaXlTUewee0Of6fKd+i7Mczb0PFVi3C5SN72WqTwL7ONLD1HyoQ63Tj7TOUUOCPLf/0/w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-linux-arm64-musl": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-linux-arm64-musl/-/claude-code-linux-arm64-musl-2.1.292.tgz",
+      "integrity": "sha512-NGyuwTVwm+e/Nw2DXne/Y9DVvmF7W6tJPIsDFRFtpjmumqf3IYaO7rOSPa/GCYI+Bk17ZcLGhdz8i1sjJVaufQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-linux-x64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-linux-x64/-/claude-code-linux-x64-2.1.292.tgz",
+      "integrity": "sha512-DNQrJZomQAX23jkJXnfYtIyJdSf5CBnexXwO2hABCs7oiZpa3IbPWIo7K6SPk5tzRIERzbwpfK3tmija1C7+kQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-linux-x64-musl": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-linux-x64-musl/-/claude-code-linux-x64-musl-2.1.292.tgz",
+      "integrity": "sha512-dDsSurNwuTHMcohG8NfQQAecQ994HnLDjKmsBzlzWvKXp+1/uQY5uhUbDt5R2xXUZTJfzmG1GNClpCu6TMQWaQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-win32-arm64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-win32-arm64/-/claude-code-win32-arm64-2.1.292.tgz",
+      "integrity": "sha512-HHFc7Tt1h2ZFT8F/mMv5xlaAMCgK+9XyLjg2izmQ5b9oj4RlbIypXQkDpN6oIpIO/+cxlgB5bATR/EMCsGL11A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@anthropic-ai/claude-code-win32-x64": {
+      "version": "2.1.292",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code-win32-x64/-/claude-code-win32-x64-2.1.292.tgz",
+      "integrity": "sha512-CXrrjj7Czs9o2YossKkN3z/K+/1GmIjjt3H8muHBDzxw/WM/J9I4kz6jBI4wLwt5miVMkXwwhrwT0hhyNPYAIw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    }
+  }
+}

email_tool_mcp-5.4.2/.github/tools/claude-code/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "email-tool-ci-claude-code",
+  "private": true,
+  "description": "One agent CLI for CI, locked by hash in package-lock.json and installed with npm ci.",
+  "devDependencies": {
+    "@anthropic-ai/claude-code": "2.1.292"
+  }
+}

email_tool_mcp-5.4.2/.github/tools/codex/package-lock.json

@@ -0,0 +1,135 @@
+{
+  "name": "email-tool-ci-codex",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "email-tool-ci-codex",
+      "devDependencies": {
+        "@openai/codex": "0.160.1"
+      }
+    },
+    "node_modules/@openai/codex": {
+      "version": "0.160.1",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1.tgz",
+      "integrity": "sha512-f1yrJhwgimKQI1kYQlxdPJcFwkNZxZrbz7Hf89EAcnLqkQ7TiESzr2FgSZn13Ga5RuHjlVUfurzwq10wk9zw2g==",
+      "dev": true,
+      "bin": {
+        "codex": "bin/codex.js"
+      },
+      "engines": {
+        "node": ">=16"
+      },
+      "optionalDependencies": {
+        "@openai/codex-darwin-arm64": "npm:@openai/codex@0.160.1-darwin-arm64",
+        "@openai/codex-darwin-x64": "npm:@openai/codex@0.160.1-darwin-x64",
+        "@openai/codex-linux-arm64": "npm:@openai/codex@0.160.1-linux-arm64",
+        "@openai/codex-linux-x64": "npm:@openai/codex@0.160.1-linux-x64",
+        "@openai/codex-win32-arm64": "npm:@openai/codex@0.160.1-win32-arm64",
+        "@openai/codex-win32-x64": "npm:@openai/codex@0.160.1-win32-x64"
+      }
+    },
+    "node_modules/@openai/codex-darwin-arm64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-darwin-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-arm64.tgz",
+      "integrity": "sha512-6Znu97O7+Ie/cnUpsWLx6NlcPc7DNuj6sAs58xpt0/tKRgx4+xgE9zca1YrwqQUBjUQO1HexudyimmhpZjdWlA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@openai/codex-darwin-x64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-darwin-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-x64.tgz",
+      "integrity": "sha512-Q33hmY6BxhoQRgCo4f/xS20yMxORnilQMNdr5w1bXSkXGYAty8/z9odcHbsNYUM6m0fNle12DHLQ5F0Dpfji3A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@openai/codex-linux-arm64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-linux-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-arm64.tgz",
+      "integrity": "sha512-JLyjBlmjPvwTaicHemw+y5xQSz3Uja2r7F/xkvS8gFufTA2g132Ak+0fo35xnJ/k2uc9fTtjm0LrsEGI78L6Ng==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@openai/codex-linux-x64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-linux-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-x64.tgz",
+      "integrity": "sha512-sIDhqV+bsZKKVaVFVY5iB+pAzyOz2XRm3H1KXCsSJwGj5p98qnrT0Fweo1Hfe7WnyTp8mfBNdbVzUeO+mHYugA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@openai/codex-win32-arm64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-win32-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-arm64.tgz",
+      "integrity": "sha512-PCGz2kVUBKKzyKv/cqo/1WqWN8GVUyk9sk0LyWIyXftdU0t+SSsGp45c2I6iOitm88ftGB3LxFHpTMnaiIKU7w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@openai/codex-win32-x64": {
+      "name": "@openai/codex",
+      "version": "0.160.1-win32-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-x64.tgz",
+      "integrity": "sha512-yyqykHtHNhm0ZViofGozz9a4ffUyXDsiyRu9Q2hPNg/cu4uzSsovNr5kDmzBXPFWAilmlZuNkwpw1W7uae2nlg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    }
+  }
+}

email_tool_mcp-5.4.2/.github/tools/codex/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "email-tool-ci-codex",
+  "private": true,
+  "description": "One agent CLI for CI, locked by hash in package-lock.json and installed with npm ci.",
+  "devDependencies": {
+    "@openai/codex": "0.160.1"
+  }
+}

email_tool_mcp-5.4.2/.github/tools/mcpb/osv-scanner.toml

@@ -0,0 +1,10 @@
+# Known vulnerabilities in this folder's lockfile that do not apply, each with its reason
+# and an end date. osv-scanner and OpenSSF Scorecard read this file next to the lockfile.
+
+[[IgnoredVulns]]
+# node-forge accepts a malformed RSA PKCS#1 v1.5 signature. No fixed release exists.
+# CI and the release workflow run only `mcpb validate` and `mcpb pack`, which never verify
+# a signature, and the bundle is signed by Sigstore in release.yml, not by node-forge.
+id = "GHSA-86w9-cpqp-85rv"
+ignoreUntil = 2027-01-23T00:00:00Z
+reason = "No fixed node-forge release; mcpb validate and pack never verify signatures."