Mmcp.market

Pylos MCP server

by adamVass·io.github.adamVass/pylos-mcp·v0.2.0

Read-focused, prompt-injection-hardened email MCP server for any IMAP provider

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars37 downloads/wk

Reviews

Write one

Nobody has reviewed Pylos yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Pylos tools (11, 5 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_draftwrite action

    Save a draft to the Drafts folder. This server is configured to save drafts without recipients:

  • delete_emailwrite action

    Move a message to the Trash folder. This never erases the message: it stays in Trash until removed

  • get_attachment

    Download one attachment to the configured download directory and report where it landed.

  • get_emailwrite action

    Read one message: envelope metadata plus the body as plain text, truncated at … kB.

  • get_sieve_script

    Read one Sieve filter script by name, as stored on the mail server. Use list_sieve_scripts for the

  • list_folders

    List the mailbox folders with their message counts.

  • list_sieve_scripts

    List the Sieve filter scripts stored on the mail server, marking the active one. Read-only:

  • move_emailwrite action

    Move a message to another folder in the same mailbox. Succeeds only once the server confirms the

  • search_emails

    Search the mailbox. Returns metadata only (no message bodies), newest first. …

  • send_emailwrite action

    Send an email. This transmits the message to external recipients immediately through the

  • set_flags

    Mark a message read/unread and/or flagged/unflagged. Provide at least one of seen or flagged.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings
  • Code scan31 source files scanned25/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 19 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

Runs npx -y pylos-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add pylos-mcp -- npx -y pylos-mcp
Add to Cursor

Pylos: common questions

Is Pylos MCP server safe?
Mostly: it is graded B (83/100). Read the Pylos safety report
How do I install Pylos?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Pylos need an API key?
Yes. The registry entry asks for EMAIL_PASSWORD.
Is Pylos maintained?
The last commit was 19 days ago (2026-09-01). The latest release is v0.2.0.
What can I use instead of Pylos?
Servers from other publishers that do the same job: Mails.ai — Agent Email MCP server, MCP Emails MCP server and Fluxmail MCP server. Compare all Pylos alternatives.

Alternatives to Pylos

Same job from other publishers: the closest match first, then the best rated.

All Pylos alternatives →
  • Mails.ai — Agent Email
    A real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.
    C
  • MCP Emails
    Never-stored live email: read, send, organize, schedule and auto-triage Gmail or any IMAP mailbox.
    A
  • Fluxmail
    Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes.
    B
  • Ecc
    Unified MCP server for Email, Calendar & Contacts (Google, M365, Zoho, IMAP/SMTP, DAV).
    B
  • Your Mail
    Read-only, self-hosted MCP access to IMAP email, mirrored locally and indexed by notmuch.
    B

More from adamVass