Personal Mail MCP

A private tool for reading and drafting my own email, and working with my own calendar and files.

Personal Mail MCP is a small private tool, controlled by a single operator, that implements the Model Context Protocol so that an AI assistant can search and read the operator's own Gmail messages, work with the operator's own Google Calendar and Google Drive, and prepare drafts and new items for the operator to review. It runs in two forms, both under the operator's own control: a local program on the operator's own computer, and a small hosted component running on Cloudflare Workers under the operator's own Cloudflare account, so the operator's AI assistant can reach it when the computer is off. Both forms implement the same protocol.

What it does

• Gmail: searches and reads the operator's own messages and threads, lists labels, reads attachments, and creates drafts. It never sends email.
• Google Calendar: reads the operator's own calendars and events, creates new events, and edits events the operator organizes. It never sends invitations or notifications to anyone, never adds guests, and never deletes or cancels events.
• Google Drive: searches and reads the operator's own files, and creates new files. It cannot modify, share, move, or delete existing files.

What it does not do

• It cannot send email.
• It cannot delete, trash, or archive messages.
• It never sends calendar invitations or notifications, and never deletes or cancels events.
• It cannot modify, share, move, or delete existing Google Drive files.
• It refuses any Google Account but the operator's own.
• There is no sign-up and no user accounts.

Who it is for

This application is not a commercial product and is not offered to the public. It is a personal utility used by a single individual on their own Google Account. There is no sign-up, and no third party can use it without deploying their own copy of the software under their own Google Cloud and Cloudflare accounts.

Where the code lives

The software has two parts, both under the operator's own control. The local program runs on the operator's own computer, with all source code readable by whoever runs it. The hosted component runs on Cloudflare Workers, under the operator's own Cloudflare account, and is reachable only after the operator signs in with their own Google Account; sign-in from any other Google Account is refused. Both parts make outbound requests only to Google's own API endpoints at googleapis.com, and return results only to the operator's own AI assistant session.