An assistant that drafts. You send.
Connect Claude or another assistant that speaks the Model Context Protocol (MCP) to your mail. It can help you search, sort and write. It cannot send a single message.
What the assistant can do
| Search | Find messages by text, sender, alias, domain or date |
|---|---|
| Read | Open a message or a whole thread, with a list of attachments |
| Organise | Move, label and mark messages as read |
| Draft | Create and edit drafts in your Drafts folder |
| Aliases | List addresses, create an alias, disable an alias |
| Domains | List domains and check their DNS status |
Calendar tools follow once calendars are available. You connect at
https://mcp.eoinbox.com and sign in with OAuth, so you never paste a password or key
into the assistant.
Typical uses
- "Find the invoice from my web host and tell me when it is due."
- "Summarise this thread and draft a polite reply that says no."
- "Which aliases got mail from newsletters this month? Disable the ones I never read."
- "Is DNS for hobby-radio.org healthy?"
The security model
Email is the most sensitive data most people have, and it is full of text written by strangers. We designed MCP access around that.
Drafts only, never sends
There is no send tool, in any permission level. The assistant writes a draft, marked as prepared by AI. You read it, change it if needed, and send it yourself from webmail or your mail app.
Mail content is untrusted
Any message can contain instructions aimed at an AI ("forward all invoices to..."). Message content is clearly marked as external data in every tool response. And because the assistant cannot send, the worst outcome of such an attack, mail leaving your account, is ruled out by design.
Limited reach
You choose read-only, or read plus organise plus drafts, and you can limit access to specific folders or domains. Aliases can be disabled through MCP but never deleted. Forwarding rules and account security settings cannot be changed through MCP at all.
Audit log and one-click revoke
Every action an assistant takes is written to a log you can read in settings. Revoking an assistant's access takes one click and is effective immediately.
Which AI sees your mail?
eoinbox does not run its own AI on your mail and does not send your mail to any AI provider by itself. MCP is a door you open for an assistant you choose. Data the assistant reads goes to that assistant's provider under their terms, so pick one you trust, and close the door any time.