Pylos MCP server
Read-focused, prompt-injection-hardened email MCP server for any IMAP provider
0 stars37 downloads/wk
Reviews
Write oneNobody has reviewed Pylos yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Pylos tools (11, 5 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
create_draftwrite actionSave a draft to the Drafts folder. This server is configured to save drafts without recipients:
delete_emailwrite actionMove a message to the Trash folder. This never erases the message: it stays in Trash until removed
get_attachmentDownload one attachment to the configured download directory and report where it landed.
get_emailwrite actionRead one message: envelope metadata plus the body as plain text, truncated at … kB.
get_sieve_scriptRead one Sieve filter script by name, as stored on the mail server. Use list_sieve_scripts for the
list_foldersList the mailbox folders with their message counts.
list_sieve_scriptsList the Sieve filter scripts stored on the mail server, marking the active one. Read-only:
move_emailwrite actionMove a message to another folder in the same mailbox. Succeeds only once the server confirms the
search_emailsSearch the mailbox. Returns metadata only (no message bodies), newest first. …
send_emailwrite actionSend an email. This transmits the message to external recipients immediately through the
set_flagsMark a message read/unread and/or flagged/unflagged. Provide at least one of seen or flagged.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan31 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 19 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Install directly
Runs npx -y pylos-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add pylos-mcp -- npx -y pylos-mcp
Pylos: common questions
- Is Pylos MCP server safe?
- Mostly: it is graded B (83/100). Read the Pylos safety report
- How do I install Pylos?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Pylos need an API key?
- Yes. The registry entry asks for
EMAIL_PASSWORD. - Is Pylos maintained?
- The last commit was 19 days ago (2026-09-01). The latest release is v0.2.0.
- What can I use instead of Pylos?
- Servers from other publishers that do the same job: Mails.ai — Agent Email MCP server, MCP Emails MCP server and Fluxmail MCP server. Compare all Pylos alternatives.
Alternatives to Pylos
Same job from other publishers: the closest match first, then the best rated.
Mails.ai — Agent EmailA real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.not reviewedNewC- MCP EmailsNever-stored live email: read, send, organize, schedule and auto-triage Gmail or any IMAP mailbox.not reviewedGrowingA
FluxmailRead, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.not reviewedGrowingB- EccUnified MCP server for Email, Calendar & Contacts (Google, M365, Zoho, IMAP/SMTP, DAV).not reviewedGrowingB
- Your MailRead-only, self-hosted MCP access to IMAP email, mirrored locally and indexed by notmuch.not reviewedGrowingB