KotMail: a read-only Yandex Mail connector for ChatGPT

KotMail

A read-only Yandex Mail MCP connector for ChatGPT via OAuth and IMAP XOAUTH2, with no sending, deleting or changing mail

  • 0 ★ on the repository
  • Last commit
  • MIT
MCP server

Extended access

Why this level

  • It reads the content of personal correspondence, though no tool can send, delete or change a message
  • Access tokens are stored locally in an encrypted vault on the user's machine
All reasons and checks
Russian stack

psychocatz/kotmail

Install

Services

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/kotmail

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

  • It reads the content of personal correspondence, though no tool can send, delete or change a message
  • Access tokens are stored locally in an encrypted vault on the user's machine

This is third-party code. Review the repository files before installing.

What it does

KotMail links ChatGPT to Yandex Mail through a chain of the OpenAI Secure MCP Tunnel, an MCP server, Yandex OAuth and IMAP over XOAUTH2. Login uses Yandex device OAuth scoped to mail:imap_ro and login:email only, the Yandex password is never given to the app, and tokens and mailbox data are stored locally encrypted with AES-256-GCM. The INBOX is always opened with EXAMINE in read-only mode. Five tools provide recent messages, search by sender, subject, text, date and unread status, one message's metadata and text, and a list of attachments without downloading them. Message ids are opaque and HMAC-signed, message text is capped at 50000 characters and eight text parts, and the server explicitly tells the agent that message content and headers are untrusted data. There is no sending, deleting, moving, or flag and folder changes anywhere in the project.

Who it is for. For a single user who wants to give ChatGPT read access to their Yandex Mail with zero risk of sending or deleting anything.

Good fit when

  • You want to browse and search mail in ChatGPT without standing up your own public HTTPS server
  • You care that the connector has zero write tools, even in theory
  • A one-time setup for a single test mailbox and one operator is fine

Not a fit when

  • You need to send or change mail: the project deliberately does not do that
  • You need permanent multi-user operation: the author explicitly calls this a simplified single-user spike

Example request

Through KotMail, show 10 unread emails from this week, just sender, subject and date

MCP

Transport
stdio
Authentication
OAuth

Limitations

The project is at version 0.3 and targets a single test mailbox and one operator, not permanent multi-user operation. It needs Node.js 24 and Windows scripts to run the tunnel, though the core code is not platform-locked. Attachment downloads are deliberately not implemented. Public multi-user operation would need separate work with a callback on a stable domain.

How to disable. Stop the KotMail and tunnel processes, and revoke the app's access on Yandex's authorized-apps page.

FAQ

Can KotMail send an email?

No, the project has no tool for sending, deleting, moving or changing mail at all.

Do I need my Yandex Mail password?

No, login uses Yandex device OAuth, and the password is never given to the app.

How is KotMail different from other mail connectors for ChatGPT?

It is a read-only Yandex Mail connector for ChatGPT: an OpenAI Secure MCP Tunnel chain, an MCP server, Yandex OAuth and IMAP via XOAUTH2. Sign-in uses Yandex device OAuth with only mail:imap_ro and login:email rights. There is no sending, deleting or changing of mail.

Can KotMail send an email and do I need my Yandex Mail password?

No, rights are read-only and it cannot send mail. No mail password is needed: sign-in goes through Yandex OAuth. Install with npm install, npm run bootstrap, npm run check and npm test.

Discussion

No questions or reviews yet.

Russian stack

Yandex work mail in Claude Code over IMAP: reading, searching threads and drafting replies without sending

MCP serverBroad access

Yandex Mail MCP

Yandex Mail MCP Server

Russian stack

Yandex Mail MCP server over IMAP and SMTP: search and read mail, attachments, send, move and delete

MCP serverBroad access8Repository stars

Yandex Mail Digest MCP server

MCP Server: Yandex Mail Digest

Russian stack

An MCP server that reads Yandex Mail for a period and saves a structured digest to a file

MCP serverExtended access
Russian stack

A Claude Code and Cowork plugin for Yandex Mail: inbox triage, drafts with an HTML signature, and quoted replies

PluginBroad access1Repository stars
Russian stack

A skill pack for Yandex 360: Mail, Calendar, Contacts, Directory, Telemost, Disk, Forms and Tracker

SkillBroad access12Repository stars

README in short

The README describes the ChatGPT, OpenAI tunnel, MCP server, Yandex OAuth and IMAP chain, a table of five tools with limits, how search and pagination work, why no public callback is needed, and step-by-step local setup with bootstrap, setup and the Secure MCP Tunnel via Start KotMail.cmd on Windows.

README badge

Report a problem