Radmail MCP server
{
"mcpServers": {
"radmail": {
"command": "npx",
"args": [
"-y",
"radmail-mcp@latest"
],
"env": {
"RADMAIL_API_KEY": "<radmail_api_key>",
"RADMAIL_API_URL": "https://..."
}
}
}
}{
"mcpServers": {
"radmail": {
"command": "npx",
"args": [
"-y",
"radmail-mcp@latest"
],
"env": {
"RADMAIL_API_KEY": "<radmail_api_key>",
"RADMAIL_API_URL": "https://..."
}
}
}
}{
"mcpServers": {
"radmail": {
"command": "npx",
"args": [
"-y",
"radmail-mcp@latest"
],
"env": {
"RADMAIL_API_KEY": "<radmail_api_key>",
"RADMAIL_API_URL": "https://..."
}
}
}
}{
"servers": {
"radmail": {
"command": "npx",
"args": [
"-y",
"radmail-mcp@latest"
],
"env": {
"RADMAIL_API_KEY": "${input:radmail_api_key}",
"RADMAIL_API_URL": "${input:radmail_api_url}"
}
}
},
"inputs": [
{
"id": "radmail_api_key",
"type": "promptString",
"description": "Radmail api key",
"password": true
},
{
"id": "radmail_api_url",
"type": "promptString",
"description": "Radmail api url",
"password": true
}
]
}{
"mcpServers": {
"radmail": {
"command": "npx",
"args": [
"-y",
"radmail-mcp@latest"
],
"env": {
"RADMAIL_API_KEY": "<radmail_api_key>",
"RADMAIL_API_URL": "https://..."
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y radmail-mcpversion 0.5.0
What it does
RadMail is an MCP server that exposes inbox operations—triage, prioritization, commitment tracking, search, and drafting—to AI agents, while blocking send capability for messages involving money, banking changes, first-contact senders, decisions, or prompt injection at the code level. It targets developers building autonomous agents that need to interact with email without the risk of an agent being manipulated into sending consequential messages. A zero-auth sandbox is available without credentials; connected mode requires a RadMail API key for access to a real inbox.
- Triage a batch of incoming emails to surface the highest-priority messages and open commitments in a single call, without the agent ever being able to auto-send a reply to a flagged message.
- Search a real inbox by sender, subject, or content and read full message bodies to gather context for a task, with all body-derived fields tagged as untrusted data.
- Check the SPF, DKIM, and DMARC configuration of any domain to identify email authentication issues, without needing an account or API key.
Tools this server exposes
| Tool | Does |
|---|---|
| triage_inbox | Returns the Right Now lane, all open commitments, and all hard-stop messages for a batch of emails in one call. |
| list_right_now | Returns only the highest-priority messages with the reason each was surfaced; uses passed messages in sandbox mode or a real inbox in connected mode. |
| why_surfaced | Explains in plain English the importance and urgency signals that caused a specific message to surface. |
| draft_reply | Drafts a reply that discharges a commitment; refuses to draft for any hard-stopped message category. |
| list_commitments | Lists open promises with direction, party, action, due date, state, and confidence; uses passed messages in sandbox mode or a real inbox in connected mode. |
| search | Finds messages by sender, subject, or content, returning results ranked by relevance and recency; supports the real inbox in connected mode. |
| read_email | Fetches the full headers and text body of a single email by id from a connected real inbox; read-only. |
| check_send_domain | Reads SPF, DKIM, and DMARC DNS records for any domain and returns verdicts, raw records, and plain-language advice; requires no credentials. |
| triage | Scores a single message for priority and hard-stop status, the per-message equivalent of triage_inbox. |
| provision_sandbox | Explicitly creates a free sandbox tenant and returns a token for subsequent calls. |
| report_need | Sends a report of something that was awkward or missing to RadMail for product feedback. |
| request_capability | Sends a request for a specific capability that does not yet exist to RadMail for product feedback. |
| radmail_learning_insights | Returns what the server has learned about how the inbox owner works. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.