MCP server for Korean & global mail services (Naver, Daum, Gmail, Nate, Yahoo, iCloud) via IMAP with AES-256-GCM encrypted credentials and AI-powered spam detection
K-Mail-MCP has 7 tools with complete input schemas and descriptions, but quality is inconsistent. Tool names follow verb_noun convention (check_, list_, read_, reset_, set_). Descriptions are present but vary in clarity, some are verbose (check_new_mails: 180+ chars with implementation details) while others are minimal (list_accounts: 60 chars). All parameters have type and description fields. However, output schemas are not documented anywhere in the source, LLMs cannot predict what fields to expect from responses. Error handling is absent: no guidance on retryability, user-fixable vs fatal errors, or recovery paths. Security sanitization for prompt injection is implemented but not reflected in tool descriptions. STDIO transport caps protocol readiness at 50, limiting overall score despite reasonable definition structure.
Check new emails from configured mail accounts with multi-folder scanning, spam detection (4-stage: regex patterns, DNSBL, SPF/DKIM/DMARC headers, Claude Haiku AI), and dynamic mailbox discovery
Get the current watched mailboxes configuration for an account including discovered, excluded, and last sync timestamp
List all registered mail accounts with their service type and labels
List all mailboxes (folders) for an account with discovery status, exclusion status, and effective scan folders
Read the full content of a specific email by ID with prompt injection sanitization and email content wrapping
Reset the last sync timestamp for an account to re-scan all emails from 7 days ago
No output schemas documented. LLMs cannot predict response structure (fields, types, nesting). Forces agents to guess what data is available after each call.
No error handling guidance. Tools fail silently or return raw errors without recovery hints. LLMs cannot distinguish retryable (network timeout) from fatal (invalid account) errors.
Descriptions lack dependency hints and prerequisites. E.g., check_new_mails does not state 'Call list_accounts first if you need account labels' or 'Requires IMAP credentials configured'.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 55 | <=2025-11-25 | v2 |
Update the watched mailboxes configuration for an account by modifying excluded folders list
check_new_mails description embeds implementation details (4-stage spam detection, DNSBL, SPF/DKIM/DMARC) instead of user-facing intent. Verbose (180+ chars) and distracts from WHEN to call it.
Destructive tools (reset_last_run, set_watched_mailboxes) lack confirmation or dry-run support. No pattern:confirmation-request. Agents could accidentally reset sync state or exclude critical folders.