agentmail-mcp

agentmail-mcp is a skill for Claude Code, Codex from agentmail-to/agentmail-plugins. It costs 85 tokens per session (1,367 once invoked), scanned A, original, MIT.

Setup and troubleshooting instructions for connecting AgentMail's hosted MCP server to coding-agent clients. OAuth is browser-based sign-in, while an API key is a credential sent with requests.

In plain words
What is it for?
Use them to configure AgentMail in Codex, Claude Code, Cursor, VS Code, Windsurf, or Claude Desktop, and to diagnose failed connections.
Why use it?
They help resolve installation, authentication, connection, and tool-discovery problems before using AgentMail.

Skill for Claude CodeCodex

Written for Claude Code and Codex: shipped in a Claude Code plugin, but also agents/openai.yaml present. Also seen: mentions Claude Code; mentions Codex.

Part of the agentmail plugin — 9 skills, 1 MCP server shipped together

Good fit Use them to configure AgentMail in Codex, Claude Code, Cursor, VS Code, Windsurf, or Claude Desktop, and to diagnose failed connections.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/agentmail-to/agentmail-plugins/agentmail-mcp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add agentmail-to/agentmail-plugins --skill agentmail-mcp
Clone the repo
git clone --depth 1 https://github.com/agentmail-to/agentmail-plugins

Made for: Claude Code, Codex.

Or install agentmail, the plugin that ships this one along with the rest of its 9 skills, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agentmail-mcp

README.md
[![agentmods](https://agentmods.dev/badge/skills/agentmail-to/agentmail-plugins/agentmail-mcp/github.svg)](https://agentmods.dev/skills/agentmail-to/agentmail-plugins/agentmail-mcp)
Your own site
<a href="https://agentmods.dev/skills/agentmail-to/agentmail-plugins/agentmail-mcp"><img src="https://agentmods.dev/badge/skills/agentmail-to/agentmail-plugins/agentmail-mcp/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agentmail-mcp

Your own site · 80×15
<a href="https://agentmods.dev/skills/agentmail-to/agentmail-plugins/agentmail-mcp"><img src="https://agentmods.dev/badge/skills/agentmail-to/agentmail-plugins/agentmail-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 85 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,367 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00085 $0.01367
Opus 5.5 $0.00034 $0.00547
Sonnet 5.5 $0.00017 $0.00273
Haiku 4.5 $0.00009 $0.00137

Measured 1mo ago against content hash a253c51e3498, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agentmail-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/agentmail-mcp/SKILL.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AgentMail MCP

Prefer the hosted Streamable HTTP server:

https://mcp.agentmail.to/mcp

It avoids a local Node.js process and the slower release cadence of the published local MCP package.

Claude Code, Codex, and Cursor

Use OAuth. Do not put an empty API key in the configuration.

{
  "mcpServers": {
    "agentmail": {
      "type": "http",
      "url": "https://mcp.agentmail.to/mcp"
    }
  }
}

Claude Code can also install it directly:

claude mcp add --transport http agentmail https://mcp.agentmail.to/mcp

Complete the browser sign-in on first connection. Multi-organization OAuth sessions can use the server's organization-selection tools.

Claude.ai, Claude Desktop, and ChatGPT connectors

These apps add the server as a connector and complete OAuth in the browser. No API key is needed.

  • Claude.ai and Claude Desktop: Settings → Connectors → Add custom connector. Name it AgentMail, set the URL to https://mcp.agentmail.to/mcp, then click Connect and sign in at console.agentmail.to.
  • ChatGPT: turn on Settings → Security and login → Developer mode (on a workspace plan, an admin must allow it first). Then open ChatGPT Plugins, click +, set the URL to https://mcp.agentmail.to/mcp, choose OAuth, and sign in at console.agentmail.to. In a chat, pick AgentMail from the + menu under Developer mode.

Connectors added on Claude.ai do not sync to Claude Code; add it there separately.

Per-client configuration

Add the same type: http server entry to the client's MCP config file:

  • Cursor: .cursor/mcp.json
  • VS Code: .vscode/mcp.json
  • Windsurf: its MCP config file
  • Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%/Claude/claude_desktop_config.json (Windows)

Auth options

  • OAuth — browser-based sign-in, for clients that support remote MCP OAuth. Use the bare URL with no credentials.
  • x-api-key header — recommended for clients without OAuth support (see below).
  • Authorization: Bearer <am_...> header — an alternative header form some clients require.
  • apiKey query param — supported but not recommended; prefer a header so the key doesn't end up in logs or history.

Read the full file on GitHub · 111 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +1 lines a253c51e3498
  2. 1mo ago Changed 55e2fc41f7d6
  3. 1mo ago Changed · +15 lines · +6 tokens per session 0695303d4f15
  4. 2mo ago First seen · 95 lines · 79 tokens per session scan A d8c1c41783b0

Subscribe to this mod's changes

agentmail-mcp is a skill published in the GitHub repository agentmail-to/agentmail-plugins (36 stars, last pushed 11d ago), licensed MIT. It adds 85 tokens to every session and 1,367 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

agentmail-mcp compared with skills from other repositories

agentmail-mcp next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
agentmail-mcpagentmail-to/agentmail-pluginsSkill3611d agoMITA85Claude Code, Codex
imagegenopenai/codexSkill133kyesterdayApache-2.0A113Codex
playwright-climicrosoft/playwrightSkill99kyesterdayApache-2.0A19Claude Code
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79k4d agoMITA200Claude Code, Codex
systematic-debuggingobra/superpowersSkill313k3d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143kyesterdayMITA95Claude Code
next-partial-prefetching-adoptionvercel/next.jsSkill143kyesterdayMITA103Claude Code