n24q02m/better-email-mcp

v1.22.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Data & Storage

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agents ai-coding claude claude-code cursor docker

+7 more

email imap mcp mcp-server model-context-protocol smtp typescript

Affected surfaces

deps

Summary

AI summary

Default transport switches to HTTP while preserving --stdio for backward compatibility.

Full changelog

v1.22.0 (2026-04-13)

Bug Fixes

Add tests for isSafeUrl (#378, 01e316a)
Add tests for relay schema (#377, c23d27a)
Bump @n24q02m/mcp-core to 1.0.0-beta.4 (0638f72)
Bump @n24q02m/mcp-core to ^1.0.0 stable (5d38bad)
Correct README tool count to 6 and add missing setup tool (c4e8f6b)
Dedupe repeat openBrowser calls in Outlook OAuth retry path (139663e)
Force LF line endings in .gitattributes to unblock Windows CI (07f976b)
Only mark Outlook setup complete once OAuth2 poll finishes (9078f88)
Pin @n24q02m/mcp-core to published 1.0.0-beta.3 instead of local editable path (6f02c16)
Update actions/upload-artifact digest to 043fb46 (242d88d)
Update comment reference from mcp-relay-core to mcp-core (92d2f76)
Update oven/bun:1 docker digest to 8956c76 (512cb92)
Use optional chaining on RELAY_SCHEMA.fields in test (59ceda3)
deps: Update non-major dependencies (#318, 026037c)
security: Update dependencies to fix npm audit vulnerabilities (d6a2a3f)

Chores

deps: Lock file maintenance (#368, ebf3d23)
deps: Lock file maintenance (#320, d91b532)
deps: Update non-major dependencies (#389, 3b3d091)

Features

Add cross-OS CI matrix (ubuntu/windows/macos) (f47de38)
Add setup tool for credential management via relay (ffd451a)
Auto-open browser when relay setup is triggered (49f8cf6)
Default to HTTP transport, --stdio for backward compat (ad862ba)
Hot-reload accounts after relay credentials are configured (7a1b0c4)
Implement Outlook device code OAuth flow in local HTTP mode (39f6dc7)
Migrate from mcp-relay-core to mcp-core (ddd8cf7)
Migrate to mcp-core local OAuth with IMAP connection test (1f0e7ed)
Restore multi-account email form with domain auto-detect (c97dfdc)
Sync local changes from workspace (f17b529)

Performance Improvements

Replace synchronous I/O with asynchronous in resolveCredentialState (#341, 65cc2ee)

Detailed Changes: v1.21.0...v1.22.0

Security Fixes

Update dependencies to fix npm audit vulnerabilities

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track n24q02m/better-email-mcp

Get notified when new releases ship.

About n24q02m/better-email-mcp

IMAP/SMTP email MCP server with App Passwords (no OAuth2). Auto-discovers Gmail, Outlook, Yahoo, iCloud. 5 composite tools: search, read, send, reply, forward. Multi-account support.

All releases →