https://mhbxyz.github.io/en/tags/mcp/Recent content in MCP on mhbxyz.meHugoenTue, 13 Oct 2026 00:00:00 +0000https://mhbxyz.github.io/en/articles/protonmail-mcp-give-an-agent-email-access-with-limits/Tue, 13 Oct 2026 00:00:00 +0000https://mhbxyz.github.io/en/articles/protonmail-mcp-give-an-agent-email-access-with-limits/<h2 id="an-email-is-untrusted-input">An email is untrusted input</h2> <p>Asking an agent to summarize your messages is useful. But other people wrote those messages. A sender can place instructions in one, telling the agent to send data elsewhere, delete a message, or ignore the original request. Giving the agent unrestricted mailbox access can turn a reading task into a risk of unintended action.</p> <p>I built <a href="https://github.com/mhbxyz/protonmail-mcp">protonmail-mcp</a> around this boundary. The server connects an MCP client to Proton Mail through Proton Bridge, which exposes IMAP and SMTP locally. It offers specific tools to the agent instead of allowing arbitrary IMAP or SMTP commands.</p>