A setup guide for mcp-ecc, a server that connects an agent to email, calendars, and contacts from services such as Google, Microsoft 365, Zoho, IMAP, and CardDAV.

It is for connecting clients to shared email, calendar, and contact services and understanding which providers support each type of data.

It explains how to install the server, configure provider accounts, and give each user a separate key for access.

mcp-ecc — Skill for Claude Code and Codex by karljsamuel

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add karljsamuel/mcp-ecc --skill mcp-ecc

Clone the repo

git clone --depth 1 https://github.com/karljsamuel/mcp-ecc

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/karljsamuel/mcp-ecc/mcp-ecc/github.svg)](https://agentmods.dev/skills/karljsamuel/mcp-ecc/mcp-ecc)

Your own site

<a href="https://agentmods.dev/skills/karljsamuel/mcp-ecc/mcp-ecc"><img src="https://agentmods.dev/badge/skills/karljsamuel/mcp-ecc/mcp-ecc/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/karljsamuel/mcp-ecc/mcp-ecc"><img src="https://agentmods.dev/badge/skills/karljsamuel/mcp-ecc/mcp-ecc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 101 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,218 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00101	$0.01218
Opus 5	$0.00051	$0.00609
Sonnet 5	$0.00020	$0.00244
Haiku 4.5	$0.00010	$0.00122

Measured 8d ago against content hash 02231264d174, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

mcp-ecc scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

SKILL.md · 91 lines

How it starts

The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.

mcp-ecc runbook

mcp-ecc is a multi-user MCP server aggregating email, calendar and contacts from Google, Microsoft 365/Outlook, Zoho, IMAP/SMTP, CalDAV and CardDAV. Each user self-manages their own accounts and has their own per-user MCP API key.

Infer provider capabilities

Provider	Mail	Calendar	Contacts	Cloudflare Workers?
Google	✅	✅	✅	✅
Microsoft (Graph)	✅	✅	✅	✅
Zoho	✅	✅	✅	✅
IMAP / SMTP	✅	❌	❌	❌ (Node only)
CalDAV	❌	✅	❌	❌ (Node only)
CardDAV	❌	❌	✅	❌ (Node only)

Google / Microsoft / Zoho are full-fidelity (mail + calendar + contacts, OAuth).
IMAP/SMTP is mail only (no calendar/contacts); Microsoft 365 is OAuth-only — app passwords / SMTP basic auth are retired or being retired during 2026.
CalDAV is calendar only, CardDAV is contacts only (currently scaffolded stubs).
Cloudflare Workers supports only the HTTP providers (Google, Microsoft, Zoho).

Install & run

Local CLI (stdio — for a desktop agent host)

git clone https://github.com/karljsamuel/mcp-ecc.git
cd mcp-ecc
npm install
npm run build
node packages/cli/dist/bin.js start

Point an MCP host at the stdio command node /abs/path/packages/cli/dist/bin.js start (set MCP_ENCRYPTION_KEY in the host env).

Docker (single container — web UI + REST + MCP on one port 3001)

docker compose up -d      # builds + starts; web UI at http://localhost:3001

The /mcp endpoint is Streamable HTTP on the same port: http://<host>:3001/mcp.

First run: bootstrap the admin

Fresh installs have no users. Either use the web UI bootstrap screen, or:

POST /api/auth/bootstrap
{ "username": "admin", "password": "...", "displayName": "Site Admin" }

Only available while the system is empty; this creates the sole admin. Admin endpoints (create/delete users, reset passwords) live under /api/users.

Read the full file on GitHub · 91 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 91 lines · 101 tokens per session scan A 02231264d174

Subscribe to this mod's changes

mcp-ecc is a skill published in the GitHub repository karljsamuel/mcp-ecc (2 stars, last pushed 2d ago), licensed MIT. It adds 101 tokens to every session and 1,218 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Backend and APIs Productivity

recipe-fullstack-implement

Orchestrate full-cycle implementation across backend and frontend layers.

shinpr/claude-code-workflows · 17 tokens

notion

Notion workspace integration for searching pages, managing databases, creating postmortems, and exporting RCA findings.

Arvo-AI/aurora · 23 tokens

news-search

Search current news for a topic, company, competitor, or hook and return dated, attributed articles. Uses the newsjack CLI and Medialyst REST API when available, tries direct Medialyst MCP if the CLI is missing, and falls back to host web/browser search with explicit caveats only when neither cloud path is available.

elvisun/newsjack · 69 tokens

mcp-ecc