Install
$ agentstack add mcp-jorgenclaw-proton-mcp ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
proton-mcp
MCP server for the Proton privacy suite — Mail, Pass, Drive, Calendar, and VPN. 36 tools for Claude and other MCP-compatible AI agents.
Built by Scott Jorgensen and Jorgenclaw (AI agent) for the jorgenclaw.ai sovereignty stack.
Requirements
- Proton Mail Bridge — running on the host (provides IMAP/SMTP access to Proton Mail)
- pass-cli — Proton Pass CLI for password manager tools
- Node.js 22+
Installation
git clone https://github.com/jorgenclaw/proton-mcp.git
cd proton-mcp
npm install
Create a .env file from the example:
cp .env.example .env
# Edit .env with your Proton Bridge credentials
Configuration
PROTON_BRIDGE_HOST=127.0.0.1
PROTON_BRIDGE_IMAP_PORT=1143
PROTON_BRIDGE_SMTP_PORT=1025
PROTON_BRIDGE_USER=your@proton.me
PROTON_BRIDGE_PASS=your-bridge-password
PROTON_BRIDGE_FROM=your@proton.me
The Bridge password is found in Proton Bridge → Settings → your account → IMAP/SMTP password (this is NOT your Proton account password).
Usage
With Claude Desktop
Add to your Claude Desktop config (~/.config/claude/claude_desktop_config.json):
{
"mcpServers": {
"proton": {
"command": "node",
"args": ["/path/to/proton-mcp/index.js"],
"env": {
"PROTON_BRIDGE_HOST": "127.0.0.1",
"PROTON_BRIDGE_IMAP_PORT": "1143",
"PROTON_BRIDGE_SMTP_PORT": "1025",
"PROTON_BRIDGE_USER": "your@proton.me",
"PROTON_BRIDGE_PASS": "your-bridge-password",
"PROTON_BRIDGE_FROM": "your@proton.me"
}
}
}
}
With NanoClaw
Mount as an MCP server in the container configuration. See the NanoClaw docs for MCP server setup.
Standalone
node --env-file=.env index.js
The server communicates via MCP stdio protocol.
Tools (36)
Mail (16 tools)
| Tool | Description | |------|-------------| | mail__get_unread | Get unread message count and summaries | | mail__list_messages | List recent messages from inbox | | mail__get_message | Get full message content by ID | | mail__search_messages | Search across INBOX, Sent, Drafts, Archive | | mail__get_thread | Get all messages in a thread | | mail__send_message | Send a new email | | mail__reply_message | Reply to a message (preserves threading) | | mail__forward_message | Forward a message to another recipient | | mail__mark_message | Mark as read/unread | | mail__star_message | Star/unstar a message | | mail__delete_message | Permanently delete a message | | mail__move_message | Move to a different folder | | mail__list_folders | List all mail folders | | mail__list_folder_messages | List messages in a specific folder | | mail__get_attachments | Download message attachments | | mail__get_thread | Reconstruct full conversation thread |
Pass (9 tools)
| Tool | Description | |------|-------------| | pass__list_vaults | List available Proton Pass vaults | | pass__list_items | List items in a vault (no passwords shown) | | pass__search_items | Search items by keyword (no passwords shown) | | pass__get_item | Get full credential (username, password, URLs) | | pass__create_item | Store a new login credential | | pass__update_item | Update an existing credential | | pass__trash_item | Move an item to trash | | pass__get_totp | Generate current TOTP code for 2FA | | pass__generate_password | Generate a secure random password |
Drive (6 tools)
| Tool | Description | |------|-------------| | drive__list | List files and folders | | drive__download | Download a file | | drive__upload | Upload a file | | drive__upload_folder | Upload an entire folder | | drive__mkdir | Create a directory | | drive__delete | Delete a file or folder |
Calendar (5 tools)
| Tool | Description | |------|-------------| | calendar__list_events | List upcoming events | | calendar__get_event | Get event details | | calendar__create_event | Create a new event | | calendar__update_event | Update an existing event | | calendar__delete_event | Delete an event |
VPN (1 tool)
| Tool | Description | |------|-------------| | vpn__status | Check Proton VPN connection status |
Security Notes
- Proton Bridge password is NOT your Proton account password — it's a Bridge-specific IMAP/SMTP password
- pass__listitems and pass_search_items never expose passwords or TOTP seeds
- Only pass__get_item returns the actual password — use it deliberately
- The
.envfile contains credentials — keep it out of version control
License
MIT — see [LICENSE](LICENSE)
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: jorgenclaw
- Source: jorgenclaw/proton-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.