MCP.so
登录

RadMail — the email operating system for agents MCP Server

@radmail-ai

基本信息

分类

沟通协作

许可证

MIT

传输方式

stdio

作者

radmail-ai

提交者

D Sureel

关于 RadMail — the email operating system for agents MCP Server

Email OS for agents over MCP: two-axis triage, a Right Now lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money/banking-change/first-contact = human-only). Zero-auth sandbox.

RadMail — the email operating system for agents MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "radmail": {
      "url": "https://radmail.ai/api/mcp/sandbox",
      "transport": "streamable-http"
    }
  }
}

RadMail — the email operating system for agents MCP Server 工具

6

Rank a mailbox on two axes (importance x urgency) and return what needs a human now versus what can wait or is already handled — with each thread's open commitment (the promise you owe or are owed, and whether it's overdue) surfaced inline, so the follow-through is visible on the very first call.

Return only the 'Right Now' lane — the most recent and most important messages that genuinely can't be missed.

Explain in plain English why a given message was surfaced — the signals (sender, urgency, commitment) behind its rank.

Extract the open commitments in the correspondence, both owed by you and owed to you, with who and by-when.

Draft a reply for a thread. It returns text for a human to review — it does not and cannot send it.

Find a specific message by sender, subject, or content. Results come back most-relevant + newest first, and every hit says where it matched (from / subject / body) and why. On this hosted sandbox it searches the built-in demo inbox; run the radmail-mcp package with RADMAIL_API_KEY set and the same tool searches your REAL ingested inbox read-only (with from / after / before filters) via the v1 search API.

概览

What is RadMail?

RadMail is an email operating system for agents — an MCP server that provides triage, search, and commitment tracking with a safety contract hard-coded at the infrastructure level. Certain actions (money, changed-banking details, first-contact senders, decisions, and prompt-injection) are permanently human-only and never auto-sendable, regardless of model or prompt. It serves developers who need an AI agent that can safely interact with email without risk of consequential auto-sends.

How to use RadMail?

Call triage_inbox with no token — RadMail auto-provisions a free sandbox tenant and returns a working triage in a single round-trip. For quick setup, point any MCP client at https://radmail.ai/api/mcp/sandbox (streamable-http, no auth). Alternatively, run npx -y radmail-mcp locally via stdio. For connected mode with a real inbox, set RADMAIL_API_KEY (starts with tmk_) and omit the messages parameter on search, list_right_now, list_commitments, and read_email.

Key features of RadMail

  • One-call triage via triage_inbox (full wedge)
  • Explain why a message surfaced (why_surfaced)
  • Draft replies only for non‑hardstopped commitments (draft_reply)
  • Search real inbox by sender, subject, or content (search)
  • Hard‑stops enforced in code: money, banking, first‑contact, decisions, injection
  • Machine‑verifiable safety contract at /.well-known/agent-safety.json
  • Read-only connected mode (only GETs; never drafts or sends)
  • Telemetry opt‑out via RADMAIL_TELEMETRY=off

Use cases of RadMail

  • AI triages a busy inbox and surfaces must‑act items first
  • Draft replies to open commitments without risk of auto‑sending dangerous actions
  • Search across all received email to find a specific message fast
  • Audit exactly why a message was surfaced (transparency, not a black box)
  • Agents safely handle email with a verified, un‑bypassable safety contract

常见问题

1

How do I start using RadMail without an account or API key?

Use the zero-auth hosted sandbox at `https://radmail.ai/api/mcp/sandbox` — no install, no key, no signup. Call `triage_inbox` with no arguments and it returns a fully triaged demo inbox.

2

What actions are hard‑stopped and never auto‑sendable?

Money‑related, changed‑banking details, first‑contact senders, decisions/sign‑offs, and prompt‑injection attempts are **hard‑stopped** in deterministic code. RadMail will never hand an agent an auto‑sendable reply for these.

3

How do I connect RadMail to my real inbox?

Set the environment variable `RADMAIL_API_KEY` (keys start with `tmk_` — create one at `https://app.radmail.ai/settings/api-keys`). Then omit the `messages` parameter on `search`, `list_right_now`, `list_commitments`, and `read_email` — those tools become read-only queries against your actual RadMail inbox.

4

Is connected mode read‑only?

Yes. Connected mode only issues GET requests to the RadMail API. It never sends, drafts against, or mutates real mail, and the hard‑stops remain human

评论

沟通协作 分类下的更多 MCP 服务器