
Security News
How AI Agents Expand the Software Supply Chain Attack Surface
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.
thunderbird-cli-mcp
Advanced tools
MCP server that gives Claude Desktop full access to your email through Mozilla Thunderbird. 12 high-level tools: search, read, compose, reply, attachments, folders.
MCP server that gives Claude Desktop full access to your email through Mozilla Thunderbird.
Read, search, compose, reply, and manage 22+ email accounts and 250K+ messages from any MCP-compatible client. All credentials stay in Thunderbird — nothing leaves your machine.
Part of the thunderbird-cli project.
Exposes 12 email management tools to Claude Desktop:
| Tool | Description |
|---|---|
email_stats | Account/folder overview, unread counts, totals |
email_search | Cross-account search (15 filter options, relative dates) |
email_list | List folder contents with sort/pagination |
email_read | Read message (5 modes: default, headers, full, raw, check-download) |
email_thread | Get full conversation thread |
email_compose | Send/draft new email (default: draft, never auto-sends) |
email_reply | Reply to message (default: draft) |
email_forward | Forward to new recipient (default: draft) |
email_mark | Read/flagged/junk flags (batch supported) |
email_archive | Archive, move, or delete messages |
email_attachments | List + download attachments (base64) |
email_folders | List folders, get info, trigger sync |
Safe defaults: compose/reply/forward all default to draft mode. Claude must explicitly pass mode: "send" to actually send anything. Permanent delete requires confirm: true.
Claude Desktop ──stdio──> tb-mcp ──HTTP──> bridge daemon ──WS──> Thunderbird Extension
↓
All your email accounts
The MCP server is stateless. It calls the bridge daemon which forwards to the Thunderbird WebExtension. Your email accounts stay configured in Thunderbird where they always were.
You need three things running on your machine:
127.0.0.1:7700See the main repo setup guide for installing the bridge and extension.
Add to your Claude Desktop config (no installation step needed — npx fetches it on demand):
{
"mcpServers": {
"thunderbird": {
"command": "npx",
"args": ["-y", "thunderbird-cli-mcp"]
}
}
}
npm install -g thunderbird-cli-mcp
Then in Claude Desktop config:
{
"mcpServers": {
"thunderbird": {
"command": "tb-mcp"
}
}
}
git clone https://github.com/vitalio-sh/thunderbird-cli
cd thunderbird-cli
npm install
Then in Claude Desktop config:
{
"mcpServers": {
"thunderbird": {
"command": "node",
"args": ["/absolute/path/to/thunderbird-cli/mcp/src/server.js"]
}
}
}
| OS | Path |
|---|---|
| macOS | ~/Library/Application Support/Claude/claude_desktop_config.json |
| Windows | %APPDATA%\Claude\claude_desktop_config.json |
| Linux | ~/.config/Claude/claude_desktop_config.json |
After editing, restart Claude Desktop. You should see "thunderbird" in the MCP servers list when you click the tool icon.
The MCP server reads these environment variables (set in your Claude Desktop config under env):
| Variable | Default | Purpose |
|---|---|---|
TB_BRIDGE_HOST | 127.0.0.1 | Bridge daemon host |
TB_BRIDGE_PORT | 7700 | Bridge daemon HTTP port |
TB_AUTH_TOKEN | (none) | Optional auth token |
Example with custom bridge host:
{
"mcpServers": {
"thunderbird": {
"command": "npx",
"args": ["-y", "thunderbird-cli-mcp"],
"env": {
"TB_BRIDGE_HOST": "127.0.0.1",
"TB_BRIDGE_PORT": "7700"
}
}
}
}
Once configured, try these in Claude Desktop:
"How many unread emails do I have across all accounts?"
"Search for invoices from AWS in the last 30 days"
"Show me the thread about the GMI Cloud SCALE program"
"Reply to message ID 118 saying I'll be there Monday — save as draft so I can review"
"List all attachments on message 245 and download the PDF"
"Mark all messages from noreply@github.com in my inbox as read"
mode: "send".confirm: true.127.0.0.1 only.See SECURITY.md for the full threat model and prompt-injection defenses.
127.0.0.1:7700? Test: curl http://127.0.0.1:7700/bridge/status--timeout 60000git clone https://github.com/vitalio-sh/thunderbird-cli
cd thunderbird-cli
npm install
npm run test:mcp # 34 integration tests against mock bridge
MIT — see LICENSE
FAQs
MCP server that gives Claude Desktop full access to your email through Mozilla Thunderbird. 12 high-level tools: search, read, compose, reply, attachments, folders.
The npm package thunderbird-cli-mcp receives a total of 29 weekly downloads. As such, thunderbird-cli-mcp popularity was classified as not popular.
We found that thunderbird-cli-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.