# apple-mail-mcp

> 🤖 MCP server for Apple Mail - Manage emails with AI using Claude Desktop. Search, send, organize mail with natural language.

- **URL**: https://www.freshcrate.ai/projects/apple-mail-mcp
- **Author**: s-morgan-jeffries
- **Category**: MCP Servers
- **Latest version**: `v0.9.0` (2026-06-01)
- **License**: MIT
- **Source**: https://github.com/s-morgan-jeffries/apple-mail-mcp
- **Language**: Python
- **GitHub**: 45 stars, 21 forks
- **Registry**: github
- **Tags**: `apple-mail`, `applescript`, `claude`, `email-automation`, `macos`, `mcp`, `python`

## Description

🤖 MCP server for Apple Mail - Manage emails with AI using Claude Desktop. Search, send, organize mail with natural language.

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.9.0` | 2026-06-01 | High | Minor release. The theme is **hardening the destructive-operation surface and the IMAP fast path**: explicit user-confirmation gates now front the remaining unguarded deletes and rule mutations, `save_attachments` is bounded against disk-fill, a contributor-reported IMAP CRLF command-injection vector is closed, and a STRIDE threat model now documents the trust boundaries those defenses sit on. Alongside the security work: an opt-in read-only server mode, a new recency search filter, several IMA |
| `v0.8.2` | 2026-05-20 | High | Patch release. Three substantive bug fixes — one security regression in our own gate chain, one regression introduced at v0.8.1, and one long-latent AppleEvent timeout bug surfaced by use on slow Exchange/EWS accounts. Two of the three are contributor-authored: [@fmasi](https://github.com/fmasi) reported and fixed the v0.8.1 regression they noticed within hours of release; [@allenpan05](https://github.com/allenpan05) reported and fixed the AppleEvent timeout bug. Thanks to both.  ### Fixed  **` |
| `v0.8.1` | 2026-05-17 | High | Patch release. Three user-facing bug fixes — two reported by external contributor [@fmasi](https://github.com/fmasi) with full reproductions — plus a refactor sweep that drops every remaining function below the CC 20 threshold (complexity allowlist now empty).  ### Fixed  **`_resolve_imap_config` prefers Mail.app's `user name` for IMAP LOGIN; CLI keychain key matches runtime (#201):** `AppleMailConnector._resolve_imap_config` previously preferred `email_addresses[0]` over Mail.app's `user name` |
| `v0.8.0` | 2026-05-13 | High | Performance + correctness release. The headline arc is **IMAP fast paths for every single-field mutation** (#149 move / #150 delete / #151 read / #152 flag): when callers provide `account` + `source_mailbox`, the four mutation paths skip the AppleScript `whose message id is` linear scan (~57s on a 47k-message Gmail INBOX per #147's bench) and run server-side via `UID MOVE` / `UID STORE`. The dual-emit `rfc_message_id` field (#148) means callers naturally have an ID in the right form regardless |
| `v0.7.0` | 2026-05-10 | High | API-surface release. Two parallel arcs landed: (1) the #129 audit-driven consolidation that collapsed seven near-duplicate tools into shared verbs (`update_message`, `update_rule`, `get_messages`, expanded `search_messages` filters), and (2) the mailbox + drafts CRUD additions that complete the write-side surface (`update_mailbox`, `delete_mailbox`, `create_draft` / `update_draft` / `delete_draft`). The IMAP thread-discovery work from v0.6.0 is now fully tiered with Tier 1.5 (Gmail per-mailbox |
| `v0.6.0` | 2026-05-03 | High | Performance and ergonomics release. The IMAP delegation arc started in v0.5.0 is now complete: , , , and  all delegate to IMAP transparently when configured, with a clean cross-provider fallback story. Headline numbers: search drops 60s → 2.7s on a populous mailbox, the IMAP fast path is wired through every read tool, and a small per-account circuit breaker keeps offline / stale-credential bursts bounded. Setup is no longer a four-line raw-shell incantation — there's a real CLI with verificatio |
| `v0.5.0` | 2026-04-27 | High | Major minor release. Fifteen new MCP tools across four feature areas (account discovery, rule management, email templates, IMAP-backed performance), several long-standing AppleScript-injection bugs closed, and contributor-experience tightening prompted by an honest look at how earlier external PRs got handled. The README, CONTRIBUTING.md, and  were all reworked to make the project safer and more welcoming to contribute to.  ### Added  **Rule CRUD (#63):** , , , . Addresses rules by 1-based posi |
| `v0.4.1` | 2026-04-20 | High | Patch release: dep hygiene and v0.4.0 follow-ups. Four connector bugs that unit tests couldn't catch were surfaced by running the three new integration tests against real Mail.app.  ### Added - Integration tests for , , and  against real Mail.app, fulfilling the #23 design doc commitment (#57)  ### Changed - Bumped transitive deps to clear  findings from the v0.4.0 release:  1.6.9 → 1.7.0,  46.0.6 → 46.0.7,  9.0.2 → 9.0.3,  0.0.22 → 0.0.26. //// unchanged (#57)  ### Fixed -  with no filter cond |
| `v0.4.0` | 2026-04-19 | High | Quality and infrastructure milestone. No new MCP tools; focus on test coverage, safety, and parsing robustness.  ### Added - Test-mode safety system (, ) — account-gated destructive operations are constrained to a designated test account and sends are constrained to RFC 2606 reserved domains (#19) - Three-tier sliding-window rate limiting (general / send / expensive) replacing the previous stub (#17) - Proper MCP elicitation for destructive operation confirmation, replacing the previous stub (# |
| `main@2026-04-19` | 2026-04-19 | High | Latest activity on main branch |

## Citation

- HTML: https://www.freshcrate.ai/projects/apple-mail-mcp
- Markdown: https://www.freshcrate.ai/projects/apple-mail-mcp.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/apple-mail-mcp/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._