Announcing Beacon: Self-improving memory for coding agents
← All MCP servers
MCP server

io.github.wildsurfer/your-mail-mcp

mcp:wildsurfer/your-mail-mcp

Read-only, self-hosted MCP access to IMAP email, mirrored locally and indexed by notmuch.

Verdict
Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 26, 2026, 13:34 UTC at 590c90e

Dispute security verdict

If you believe this verdict is incorrect, submit a dispute and we'll review it.

0
findings
—
highest severity
0
threat classes
49
files scanned
266/266
checks satisfied
0
package advisories

Why this verdict

plugin . Suspicious
  • suspicious: floor fact RX-EVASION-DELIMITER-FORGERY (DET:4b78e9dbd6e0712c)
skill skills/email No issues found
  • benign: 15 checks satisfied, no findings for skill:skills/email

Security findings 0

No individual findings recorded

The suspicious verdict rests on the coverage gaps below.

Coverage gaps 6

Parts of the artifact the static analysis could not fully examine.

no_dataflow_for_go go file: string-literal extraction only
bridge.go
no_dataflow_for_go go file: string-literal extraction only
main.go
no_dataflow_for_go go file: string-literal extraction only
mcp.go
no_dataflow_for_go go file: string-literal extraction only
notmuch.go
no_dataflow_for_go go file: string-literal extraction only
oauth.go
no_dataflow_for_go go file: string-literal extraction only
sync.go