GhosterMail MCP server

Give your AI assistant its own private email. It can create mailboxes, read incoming messages, pick up verification codes and send email — without touching your personal inbox.

Server URL https://api.ghostermail.com/mcp

Requirements
Connect
Tools
Examples
Security & data
Troubleshooting

What you can do

Sign-ups and codes

Create a fresh mailbox, register on a site and let the assistant wait for the confirmation code or link.
Test email flows

Check that welcome emails, password resets and notifications from your app arrive and look right.
Keep your address private

Use a separate mailbox per service, newsletter or project and delete it when you are done.
Send email

Plain text or HTML, CC/BCC and scheduled delivery up to 65 days ahead.

Requirements

A GhosterMail account with Full Access ($4 per month). You can create a free account and upgrade on the Payments page.
An MCP client that supports remote servers over Streamable HTTP (all clients below do).

Without Full Access you can still connect and sign in, but every tool returns a message with a link to the upgrade page instead of a result.

Connect

Add the server URL to your client and sign in with your GhosterMail account when the browser opens. The client receives and refreshes its access tokens on its own — no config files, packages or local processes are needed.

Claude (web, Desktop and mobile)

Open Settings → Connectors and choose Add custom connector.
Name: GhosterMail, URL: https://api.ghostermail.com/mcp.
Select Connect and sign in to GhosterMail.
Enable the connector in a chat from the tools menu.

Claude Code

claude mcp add --transport http ghostermail https://api.ghostermail.com/mcp

Then run /mcp, select ghostermail and choose Authenticate.

ChatGPT

In Settings → Apps & Connectors, enable developer mode under Advanced settings, then choose Create.
Enter https://api.ghostermail.com/mcp, choose OAuth and sign in to GhosterMail.

Cursor

Install in Cursor, or add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "ghostermail": { "url": "https://api.ghostermail.com/mcp" }
  }
}

VS Code

Install in VS Code, or add to .vscode/mcp.json:

{
  "servers": {
    "ghostermail": { "type": "http", "url": "https://api.ghostermail.com/mcp" }
  }
}

Other clients

Any client that supports remote MCP servers with OAuth works with the same URL. A generic configuration:

{
  "mcpServers": {
    "ghostermail": { "type": "http", "url": "https://api.ghostermail.com/mcp" }
  }
}

Using an API key instead of signing in

Clients that can send custom headers can use a GhosterMail API key (create one on the API → Keys page). A read-only key allows only the reading tools.

claude mcp add --transport http ghostermail https://api.ghostermail.com/mcp \
  --header "X-API-KEY: <your key>"

Tools

Tool	What it does	Access
`list_accounts`	Lists your mailboxes with their ids, addresses and folders.	Read
`list_messages`	Lists messages in a folder, newest first, with sender, subject and text filters.	Read
`read_message`	Returns a full message as clean text with links, or the original HTML. Marks it as read.	Write
`wait_for_message`	Waits for a new incoming message (up to the timeout you set) — ideal for codes and links.	Read
`create_accounts`	Creates mailboxes by name, or several with random names.	Write
`send_message`	Sends an email from one of your mailboxes, optionally scheduled for later.	Write
`delete_accounts`	Permanently deletes mailboxes together with their messages.	Destructive

Every tool declares MCP annotations, so clients can run reading tools freely and ask you to confirm sending and deleting.

Example prompts

“Create a new GhosterMail mailbox and sign me up for the newsletter at example.com with it.”
“Wait for the verification email in shop-test@ghostermail.com and give me the code.”
“Show the last five messages in my inbox from noreply@github.com.”
“Send a test email from qa-run@ghostermail.com to me and schedule it for 9:00 tomorrow.”
“Delete all mailboxes I created for yesterday's test run.”

Security & data

Sign-in uses OAuth 2.1 with PKCE on GhosterMail's own sign-in page, including two-factor authentication. Your password is never shared with the AI client.
Access tokens issued for MCP are valid only for the MCP server and cannot be used with other parts of the GhosterMail API.
The server only works with your own mailboxes and follows the same limits as the web app. It does not store your conversations with the assistant.
To revoke access, remove the connector in your client. API keys can be disabled or deleted on the API → Keys page at any time.
See the privacy policy for how GhosterMail handles data.

Troubleshooting

The tools say Full Access is required

MCP tools work only with Full Access. Upgrade on the Payments page, then reconnect the client so it gets a fresh token.

The sign-in window does not open or fails

Remove the connector, add it again and complete the sign-in in the same browser. Make sure pop-ups are allowed.

“401 Unauthorized” with an API key

Check that the key is active, not expired, belongs to an account with Full Access and is sent in the X-API-KEY header without extra spaces.

Sending or deleting does not work with an API key

Read-only keys allow only listing and reading. Create a key without the read-only option for write tools.

Support

Questions or problems? Write to info@ghostermail.com or use the contact form.