Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/sandraschi/email-mcp/agents-mdgit clone --depth 1 https://github.com/sandraschi/email-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/sandraschi/email-mcp/agents-md)<a href="https://agentmods.dev/instructions/sandraschi/email-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/sandraschi/email-mcp/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01262 | $0.01262 |
| Opus 5 | $0.00631 | $0.00631 |
| Sonnet 5 | $0.00252 | $0.00252 |
| Haiku 4.5 | $0.00126 | $0.00126 |
Grade A, and why
email-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md -- Session Context
Repo: email-mcp
Full-featured email server for MCP clients. Web dashboard at 10812, backend at 10813. 188 tests, 42 MCP tools. Microsoft Graph support for personal Outlook/Hotmail (basic SMTP auth is disabled on those accounts — 535 5.7.139).
Key Architecture
| Layer | Tech | Notes |
|---|---|---|
| MCP Framework | FastMCP 3.2+ | fastmcp>=3.2.0,<4 |
| Web Framework | FastAPI | REST endpoints in web.py |
| Frontend | React 19 + Vite + Tailwind | Port 10812 |
| Tests | pytest (69) + Playwright (17) | 86 total |
| SMTP Testing | aiosmtpd 1.4+ | Throwaway servers for testing |
| DB | JSON file storage | Contacts, drafts, rules, pending |
Critical Gotcha
mcp_app.call_tool() returns CallToolResult objects in FastMCP 3.2, not raw dicts. Always use _extract_tool_result() when calling tools from web.py REST endpoints. See web.py for the helper.
Current State (2026-08-03)
Features
- 42+ MCP tools: send, receive, search, delete, move, copy, forward, mark-read/unread, folders CRUD, list/configure/remove services, mailing lists, email_help, suggest_subject, agentic_assist, watcher, contacts, workflows, auto-respond, email_connector
- Microsoft Graph: personal Outlook/Hotmail via Graph REST (send/receive/search/folders); OAuth device flow with public client ID (no Azure registration);
service="default"auto-backs onto Graph when a token exists for an Outlook account - Folder treeview: Inbox sidebar tree (expandable, unread badges, icons) + inline folder CRUD (new/rename/delete); custom folder names resolve to Graph folder ids
- Fleet connectors:
email_connectortool + REST — aiwatcher fleet ingest and robofang email hook (opt-in env, fail-soft) - Auto-Respond: rule engine + AI drafting + pending queue + spam spoof mode (irate/mock-stupid/absurd/polite-but-confused)
- Bulk Send: paste email lists, max 50, anti-spam warnings
- Mail Watcher: background IMAP polling with webhook POST
- Mail Lab: throwaway aiosmtpd SMTP server with AI message generator
- Contacts: full CRUD + CSV/vCard/Google People/Microsoft Graph import + curated public official lists (US Congress, Austrian Parliament, EU Commission)
- Creative Workflows: 7 AI presets (love letter, complaint, etc.) with text/ascii/svg output
- Expander: short-note-to-full-email with 6 fictional contexts
- Quick Setup: 8 providers (Gmail/Outlook/Yahoo/iCloud/ProtonMail/Zoho/GMX/Fastmail)
- Prompt injection defense: 37 Unicode chars stripped + safety boundary wrapping
- Folder CRUD: list/create/delete/rename IMAP folders
- justfile: SOTA standard (inline dashboard, build=uv sync, check=fmt+lint, ci pipeline)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 89 lines · 1,262 tokens per session scan A 3725e71483ce
email-mcp AGENTS.md is an instructions file published in the GitHub repository sandraschi/email-mcp (2 stars, last pushed 3d ago), licensed MIT. It adds 1,262 tokens to every session, about $0.0063 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
mcp-email-server AGENTS.md
AGENTS.md instructions for Wh1isper/mcp-email-server, covering repository overview, project conventions, current architecture direction, development workflow and documentation requirements.
better-email-mcp CLAUDE.md
Claude Code instructions for n24q02m/better-email-mcp, covering claude.md - better-email-mcp, commands, setup, lint & type check and fix.
worldlabs-mcp AGENTS.md
AGENTS.md instructions for sandraschi/worldlabs-mcp, covering worldlabs-mcp — agent guide, entry points, quick ref, ports and standards.
blender-mcp AGENTS.md
AGENTS.md instructions for sandraschi/blender-mcp, covering blender-mcp agent context and quick ref.
virtualization-mcp AGENTS.md
AGENTS.md instructions for sandraschi/virtualization-mcp, covering virtualization-mcp — agent guide, entry points, standards, key files and quick ref.
blender-mcp CLAUDE.md
Claude Code instructions for sandraschi/blender-mcp, covering blender-mcp — ai-powered blender automation, commands, architecture and code style & standards.