
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@lettio/mcp
Advanced tools
MCP server for Lettio — let your AI agent read, search and send email from a private, EU-hosted mailbox (JMAP).
Let your AI assistant read, search and send email from a private, EU-hosted mailbox.
Lettio MCP is a Model Context Protocol server that connects an AI agent (Claude, Cursor, and any other MCP client) to a Lettio mailbox over JMAP. Your assistant can triage your inbox, find a message, and send a reply — without your email ever leaving Europe.
Prefer nothing to install? Lettio also runs as a hosted, OAuth‑secured MCP server at
https://mcp.lettio.eu/mcp— add that URL in your client and sign in. This npm package is the local / self‑hosted option for people who want to run it on their own machine.
| Tool | What it does |
|---|---|
list_accounts | List the mailboxes this server is configured for. |
list_mailboxes | List folders in an account, with message and unread counts. |
list_recent_emails | Most recent messages in a mailbox (defaults to the inbox). |
search_emails | Free‑text search across sender, subject and body. |
read_email | Full content of one message by id. |
send_email | Send a plain‑text email as the signed‑in mailbox. |
reply_email | Reply in‑thread (keeps the conversation), optionally reply‑all. |
set_read_status | Mark a message read or unread. |
flag_email | Flag (star) or unflag a message. |
move_email | Move to a folder — archive, trash (reversible), or a folder name. |
Add this to your claude_desktop_config.json:
{
"mcpServers": {
"lettio": {
"command": "npx",
"args": ["-y", "@lettio/mcp"],
"env": {
"LETTIO_USERNAME": "you@yourcompany.eu",
"LETTIO_PASSWORD": "your-app-password"
}
}
}
}
Restart Claude Desktop; the Lettio tools appear in the tools menu.
Configured entirely through environment variables.
| Variable | Required | Description |
|---|---|---|
LETTIO_USERNAME | yes | Full email address, e.g. you@yourcompany.eu. |
LETTIO_PASSWORD | yes | Mailbox app password. |
LETTIO_HOST | no | Mail host. Defaults to https://mail.lettio.eu. |
LETTIO_ACCOUNT_NAME | no | Friendly name for the account (default: the username). |
Set LETTIO_ACCOUNTS to a JSON array and omit the single‑account variables:
[
{ "name": "work", "username": "you@yourcompany.eu", "password": "app-password" },
{ "name": "sales", "username": "sales@yourcompany.eu", "password": "app-password" }
]
Then pass account: "work" to any tool to choose which mailbox to use.
Sending is deliberately constrained. Before it sends, the server asks the mail host for the
identities the signed‑in mailbox is allowed to use and requires one that matches the login
address. The From header and the SMTP envelope MAIL FROM are both pinned to that
address. There is no parameter for choosing a different sender, so an agent can never send
"from" a foreign or arbitrary mailbox. Credentials are read from the environment, kept only in
memory, and never logged.
npm install
npm run build
LETTIO_USERNAME=you@yourcompany.eu LETTIO_PASSWORD=app-password npm start
MIT © Valmia Solutions s.r.o.
FAQs
MCP server for Lettio — let your AI agent read, search and send email from a private, EU-hosted mailbox (JMAP).
We found that @lettio/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.