Proton Safe MCP

Read Proton Mail, extract bounded attachment text, and create explicitly confirmed drafts. It runs locally over stdio via the published package.

People who work with email, fastmcp and human in the loop and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-16 · ★ 3 · #16 OF 90 MAINTAINED EMAIL · VERIFIED 2026-09-18

MIT · Python servers · how we verify → /methodology

01 · Install Proton Safe MCP

before you install - you'll need

Set PROTON_BRIDGE_USER, PROTON_IMAP_PORT, PROTON_BRIDGE_ALIASES before connecting.

Claude Code

claude mcp add fbossiere-proton-safe-mcp -- uvx proton-safe-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "fbossiere-proton-safe-mcp": {
      "command": "uvx",
      "args": [
        "proton-safe-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-08-29 - young repo, little track record yet

license MIT - declared in the repository

pypi package proton-safe-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.fbossiere is GitHub-verified and matches the repo owner

03 · What Proton Safe MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v2.3.0 · 2026-09-16

Tool descriptions are what an MCP client reads before it decides which call to make. This release makes them say what the schema alone could not. · Changed · Every tool parameter now carries a description in the…

v2.2.0 · 2026-09-14

This release improves desktop setup and recovery and introduces the Windows installer foundation. · Desktop improvements · One assistant window per account, with safe recovery after an interrupted launch. · An explicit…

v2.1.2 · 2026-09-13

This is the recommended update for reply-draft handling. · Reply targets are refused before creating a draft unless the user explicitly accepts a possibly separate draft. The plugin explains how to use Reply or Reply…

04 · Who maintains Proton Safe MCP

Proton Safe MCP is maintained by fbossiere. We track 2 MCP servers from fbossiere - 2 actively maintained, 4 combined GitHub stars, oldest repo from Aug 2026.

05 · Facts

repository: github.com/fbossiere/proton-safe-mcp
website: https://fbossiere.github.io/proton-safe-mcp/
category: email - ranked #16 of 90 actively-maintained email servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-16)
registry: io.github.fbossiere/proton-safe-mcp (active, first published 2026-08-29 · 14 versions)
packages: pypi:proton-safe-mcp

06 · Proton Safe MCP FAQ

What is Proton Safe MCP?

Read Proton Mail, extract bounded attachment text, and create explicitly confirmed drafts. It runs locally over stdio via the published package.

Is Proton Safe MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-16 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Proton Safe MCP?

Run `uvx proton-safe-mcp`. The README documents 3 environment variables (PROTON_BRIDGE_USER, PROTON_IMAP_PORT, PROTON_BRIDGE_ALIASES) to set first. Set PROTON_BRIDGE_USER, PROTON_IMAP_PORT, PROTON_BRIDGE_ALIASES before connecting. You can also paste the ready-made client config above.

Does Proton Safe MCP run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Proton Safe MCP

Alternatives to Proton Safe MCP

Maintained email servers if Proton Safe MCP isn't the fit.

More email MCP servers · Full Enrich · GBG Loqate - Reach · Multi Gmail MCP · Hail

More Python MCP servers · Aihawk · Create Survey · Nano Pay · Spend Shield · LLM Preflight · see all