KotMail: a read-only Yandex Mail connector for ChatGPT
KotMail
A read-only Yandex Mail MCP connector for ChatGPT via OAuth and IMAP XOAUTH2, with no sending, deleting or changing mail
- 0 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- It reads the content of personal correspondence, though no tool can send, delete or change a message
- Access tokens are stored locally in an encrypted vault on the user's machine
Install
- Works in
- Services
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/kotmailDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- It reads the content of personal correspondence, though no tool can send, delete or change a message
- Access tokens are stored locally in an encrypted vault on the user's machine
This is third-party code. Review the repository files before installing.
What it does
KotMail links ChatGPT to Yandex Mail through a chain of the OpenAI Secure MCP Tunnel, an MCP server, Yandex OAuth and IMAP over XOAUTH2. Login uses Yandex device OAuth scoped to mail:imap_ro and login:email only, the Yandex password is never given to the app, and tokens and mailbox data are stored locally encrypted with AES-256-GCM. The INBOX is always opened with EXAMINE in read-only mode. Five tools provide recent messages, search by sender, subject, text, date and unread status, one message's metadata and text, and a list of attachments without downloading them. Message ids are opaque and HMAC-signed, message text is capped at 50000 characters and eight text parts, and the server explicitly tells the agent that message content and headers are untrusted data. There is no sending, deleting, moving, or flag and folder changes anywhere in the project.
Who it is for. For a single user who wants to give ChatGPT read access to their Yandex Mail with zero risk of sending or deleting anything.
Good fit when
- You want to browse and search mail in ChatGPT without standing up your own public HTTPS server
- You care that the connector has zero write tools, even in theory
- A one-time setup for a single test mailbox and one operator is fine
Not a fit when
- You need to send or change mail: the project deliberately does not do that
- You need permanent multi-user operation: the author explicitly calls this a simplified single-user spike
Example request
Through KotMail, show 10 unread emails from this week, just sender, subject and dateMCP
- Transport
- stdio
- Authentication
- OAuth
Limitations
The project is at version 0.3 and targets a single test mailbox and one operator, not permanent multi-user operation. It needs Node.js 24 and Windows scripts to run the tunnel, though the core code is not platform-locked. Attachment downloads are deliberately not implemented. Public multi-user operation would need separate work with a callback on a stable domain.
How to disable. Stop the KotMail and tunnel processes, and revoke the app's access on Yandex's authorized-apps page.
FAQ
Can KotMail send an email?
No, the project has no tool for sending, deleting, moving or changing mail at all.
Do I need my Yandex Mail password?
No, login uses Yandex device OAuth, and the password is never given to the app.
How is KotMail different from other mail connectors for ChatGPT?
It is a read-only Yandex Mail connector for ChatGPT: an OpenAI Secure MCP Tunnel chain, an MCP server, Yandex OAuth and IMAP via XOAUTH2. Sign-in uses Yandex device OAuth with only mail:imap_ro and login:email rights. There is no sending, deleting or changing of mail.
Can KotMail send an email and do I need my Yandex Mail password?
No, rights are read-only and it cannot send mail. No mail password is needed: sign-in goes through Yandex OAuth. Install with npm install, npm run bootstrap, npm run check and npm test.
Discussion
No questions or reviews yet.
Related
All Yandex 360 toolsYandex Mail MCP server
ymail-mcp
Yandex work mail in Claude Code over IMAP: reading, searching threads and drafting replies without sending
Yandex 360 MCP: mail and calendar for an AI agent
yandex-360-mcp
Two separate MCP servers for Yandex 360: mail over IMAP and SMTP and a calendar over CalDAV, with one-command Yandex OAuth sign-in
Yandex Mail MCP
Yandex Mail MCP Server
Yandex Mail MCP server over IMAP and SMTP: search and read mail, attachments, send, move and delete
Yandex Mail Digest MCP server
MCP Server: Yandex Mail Digest
An MCP server that reads Yandex Mail for a period and saves a structured digest to a file
Yandex Mail plugin for Claude
claude-yandex-mail
A Claude Code and Cowork plugin for Yandex Mail: inbox triage, drafts with an HTML signature, and quoted replies
A skill pack for Yandex 360: Mail, Calendar, Contacts, Directory, Telemost, Disk, Forms and Tracker
README in short
The README describes the ChatGPT, OpenAI tunnel, MCP server, Yandex OAuth and IMAP chain, a table of five tools with limits, how search and pagination work, why no public callback is needed, and step-by-step local setup with bootstrap, setup and the Secure MCP Tunnel via Start KotMail.cmd on Windows.