
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@atomicmail/agent-skill-modelcontextprotocol
Advanced tools
Atomic Mail AgentSkill — register, jmap_request, and help CLI for AI agents. (modelcontextprotocol install channel)
Install package for modelcontextprotocol integration (same as @atomicmail/agent-skill).
Atomic Mail AgentSkill CLI for shell-capable AI agents. It exposes three
commands: register, jmap_request, and help. jmap_request uses the
same shared library as @atomicmail/mcp-gh-pages.
atomicmail helpInvoke atomicmail help before improvising JMAP or preset details. The CLI
embeds the topic docs — written for agents,
version-matched to your install, and cheaper to fetch on demand than reconstructing
placeholder grammar or attachment flows from memory.
When to call help: at the start of a mail task (atomicmail help or
help --topic overview); before custom batches (help --topic presets and
help --topic jmap_cheatsheet); right after register (help --topic cron
for hourly inbox polling after register); when errors mention missing
placeholders, auth, or an old preset file on disk (help --topic troubleshooting). Prefer the installed binary over static README copies in
other repos — trust help from the package you are running.
npx --package=@atomicmail/agent-skill-gh-pages atomicmail --help
npx --package=@atomicmail/agent-skill-gh-pages atomicmail register \
--username "myagent"
npx --package=@atomicmail/agent-skill-gh-pages atomicmail jmap_request \
--ops '[["Mailbox/get", {"accountId": "$ACCOUNT_ID"}, "m0"]]'
Usernames must be 5–21 characters (local-part of your @atomicmail.ai
address).
If credentials already exist for a different username, register fails by
default. Pass --forced only after backing up the credential directory.
After register, arrange hourly inbox polling per your runtime. Native cron
hosts (OpenClaw, Hermes, atomic-agent) schedule an hourly AI agent to
fetch and triage mail with preset list_inbox.json. Hosts without native
cron should ask the operator to set up polling on a capable host, or remind
manual fetch — do not work around with OS schedulers or cross-platform
scheduling. Do not cron atomicmail jmap_request alone.
Hermes users: follow Hermes Agent — accept the skill
blueprint via /suggestions after register.
Options and agent prompt:
SKILL.md · atomicmail help --topic cron
· MCP help topic cron
Hermes ships a bundled Atomic Mail skill with a launcher CLI and an hourly inbox blueprint. Requires Hermes with the skills toolset and Node.js 20+ (for the bundled launcher).
Unified in-repo tap (updated on each GitHub release):
hermes skills install Atomic-Mail/atomic-mail-agentic/integrations/skill/atomicmail
On Hermes the default credential directory is ~/.hermes/atomicmail, not
~/.atomicmail (used by npm/npx AgentSkill and MCP defaults).
The skill launcher sets ATOMIC_MAIL_CREDENTIALS_DIR to $HOME/.hermes/atomicmail
when that variable is not already set. Override explicitly with
ATOMIC_MAIL_CREDENTIALS_DIR or atomicmail.credentials_dir in Hermes config.
| Runtime | Default credentials dir |
|---|---|
| Hermes skill | ~/.hermes/atomicmail |
| npm/npx AgentSkill, MCP | ~/.atomicmail |
Files in each directory (mode 0600): credentials.json, session.jwt,
capability.jwt.
Use the skill's bundled CLI — no npx:
atomicmail register --username "myagent"
The launcher handles the credentials directory; omit --credentials-dir in the
default single-inbox flow. For multiple inboxes, pass --credentials-dir
with a separate directory per account on register and jmap_request.
/suggestions in Hermes and accept the Atomic Mail hourly inbox
blueprint.no_agent: false) with
list_inbox.json and deliver: origin. Do not skip this step.jmap_request alone or use --no-agent (no LLM triage).Manual fallback if you skip the blueprint:
hermes cron create "0 * * * *" \
"Use atomicmail jmap_request --ops-file list_inbox.json to fetch my inbox. Summarize new messages, highlight what needs a reply, and stay available — I may ask you to reply, forward, search, or dig into something important." \
--name "atomicmail-inbox" \
--deliver origin
See atomicmail help --topic cron for the full prompt and delivery options.
jmap_request, presets, and placeholdersjmap_request accepts inline --ops JSON or --ops-file (same shapes as MCP:
methodCalls array or full { "using", "methodCalls" }). Pass custom
$PLACEHOLDERS via --vars '{"PLACEHOLDER":"value"}' (keys without $).
npx --package=@atomicmail/agent-skill-gh-pages atomicmail jmap_request \
--ops-file send_mail.json \
--vars '{"TO":"alice@example.com","SUBJECT":"Hello","BODY":"Hi there"}'
Resolution: relative --ops-file resolves to --credentials-dir (default
~/.atomicmail), then bundled presets.
Details (placeholder grammar, built-ins, shadowing, bundled preset list,
attachments): see @atomicmail/mcp-gh-pages and the embedded help topic
presets (atomicmail help --topic presets).
Each credential directory is an isolated account (default ~/.atomicmail,
mode 0600 files):
credentials.jsonsession.jwtcapability.jwtThe CLI and MCP read and write the directory you select per command
(--credentials-dir / credentials_dir) or the default from
ATOMIC_MAIL_CREDENTIALS_DIR. Multiple accounts = multiple directories; see
MCP help topic multi_account or mcp.md.
https://auth.atomicmail.aihttps://api.atomicmail.ai~/.atomicmail--auth-url, --api-url or ATOMIC_MAIL_AUTH_URL,
ATOMIC_MAIL_API_URL--credentials-dir or ATOMIC_MAIL_CREDENTIALS_DIR--scrypt-salt or ATOMIC_MAIL_SCRYPT_SALT--utm or ATOMICMAIL_UTM (see below)Optionally tag a register with where the install came from. Pass a
URL-query-style string of utm_* fields on the register command:
npx --package=@atomicmail/agent-skill atomicmail register \
--username "myagent" \
--utm "utm_source=blog&utm_medium=cpc&utm_campaign=launch"
utm_source, utm_medium, utm_campaign, utm_term,
utm_content. Anything else in the string is ignored; each value is capped at
64 characters.--utm flag takes precedence over the ATOMICMAIL_UTM environment
variable when both are set.--username), not --api-key
login. It never blocks registration — a malformed value simply sends nothing.FAQs
Atomic Mail AgentSkill — register, jmap_request, and help CLI for AI agents. (modelcontextprotocol install channel)
We found that @atomicmail/agent-skill-modelcontextprotocol demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.