apple-mail-mcp
CLAUDE.md0 starsChanged 4 months agoMITView on GitHub
Human- and agent-facing docs that survive outside the codebase. Plugin skills and root README.md cover user install; this folder covers agent workflows and deep engineering conventions. This repo is PUBLIC. Docs here are the easiest place to leak real mail data, because they are where live-verification output naturally gets written down. Commit counts, timings, and redacted samples, never a real address, subject, account UUID, or absolute /Users/... path. See root AGENTS.md § This repo is PUBLIC. Implementing or changing MCP…
In this repository23 other files it gives its agents.
- AGENTS.mdAGENTS.md
- apple-mail-mcpb/CLAUDE.mdCLAUDE.md
- CLAUDE.mdCLAUDE.md
- .claude-plugin/CLAUDE.mdCLAUDE.md
- tasks/CLAUDE.mdCLAUDE.md
- tests/CLAUDE.mdCLAUDE.md
- tools/CLAUDE.mdCLAUDE.md
- apple-mail-archive-exportSkill
- context-guidance-auditSkill
- cowork-plugin-customizerSkill
- create-cowork-pluginSkill
- finalize-apple-mail-mcpSkill
- find-skillsSkill
- mail-scripting-dictionarySkill
- marketplace-release-handoffSkill
- mcp-builderSkill
- plugin-creatorSkill
- plugin-settingsSkill
- plugin-structureSkill
- python-performance-optimizationSkill
- reviewing-codeSkill
- testing-pythonSkill
- thermo-nuclear-code-quality-reviewSkill
The file
We split this CLAUDE.md into the rules it gives an agent
2 rules. About 0 are common, 1 is distinctive, and 1 is very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
1
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 9
Use subagents for research and implementation when the host exposes them and the task lane permits them.
- Very specific: line 10
Use plugin-dev experts (plugin-dev:plugin-validator, plugin-dev:skill-reviewer, and the plugin-dev:mcp-integration / …
≈ “Common” is an estimate: at least 1 in 5 of the 26,980 CLAUDE.md files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
docs/ — documentation index
Human- and agent-facing docs that survive outside the codebase. Plugin skills and root README.md cover user install; this folder covers agent workflows and deep engineering conventions.
This repo is PUBLIC. Docs here are the easiest place to leak real mail data, because they are where live-verification output naturally gets written down. Commit counts, timings, and redacted samples, never a real address, subject, account UUID, or absolute /Users/... path. See root AGENTS.md § This repo is PUBLIC.
Agent orchestration
- Use subagents for research and implementation when the host exposes them and the task lane permits them.
- Use plugin-dev experts (
plugin-dev:plugin-validator,plugin-dev:skill-reviewer, and theplugin-dev:mcp-integration/plugin-dev:plugin-structureskills) whenever available and docs or conventions touch manifests, skills, or MCP integration. If unavailable, say so and run local validation.
Files
| Doc | Audience | Purpose |
AGENT_LIVE_TESTING.md | Coding agents, maintainers | Live Mail verification via repo .venv/bin/apple-mail CLI |
CLAUDE-conventions.md | All agents editing Python/tools/skills | Deep rules: perf, escaping, versioning, skill authoring, plugin-dev agents, distribution channels (five install surfaces) |
marketplace-release-handoff.md | Maintainers | Compact signed-tag to central Marketplace update path |
Who reads what
Implementing or changing MCP tools → start with root CLAUDE.md (architecture), then CLAUDE-conventions.md (anti-patterns, module line budget). Run mocked tests per tests/CLAUDE.md.
Verifying against real Mail.app → AGENT_LIVE_TESTING.md: setup, permissions, quick-check / perf-test batteries, safe probes, fixture-only HTML compose subject/focus drills (real subject never __apple_mail_mcp_…, no leading tab indent), MCP env vars (DEFAULT_MAIL_ACCOUNT, DEFAULT_MAIL_SIGNATURE, USER_EMAIL_PREFERENCES).
Plugin shell / manifests / skills → plugin/docs/CLAUDE.md, .claude-plugin/CLAUDE.md, apple-mail-mcpb/CLAUDE.md, plugin/skills/CLAUDE.md. Codex routing lives in ../.agents/plugins/marketplace.json, ../plugin/.codex-plugin/plugin.json, and ../plugin/.mcp.json. Cursor routing lives in ../plugin/.cursor-plugin/plugin.json and ../plugin/mcp.json; local 41-tool Cursor Agent acceptance passed, while Cursor marketplace/UI admission remains unverified. Run plugin-dev:plugin-validator after manifest edits; plugin-dev:skill-reviewer after skill edits.
Marketplace identity / promotion →
tools/marketplace_identity.json. Primary
Agentic Assets installs use apple-mail@agentic-assets from
Agentic-Assets/Agentic-Assets-Marketplace. This repository retains
apple-mail@apple-mail-mcp only as a standalone development/public
compatibility selector. Marketplace payloads are immutable snapshots promoted
from allowlisted signed tags; the marketplace owns policy, evidence, and
attestation records.
Planning / backlog → tasks/CLAUDE.md (read § Agent requirements) and tasks/todo.md.
Plugin workflow skills (Claude Code and Codex)
Eleven skills ship under plugin/skills/ and auto-load with Claude Code and Codex plugin installs. They teach when and how to call the 41 MCP tools; they do not implement tool logic.
| Skill | Use when the user wants… |
apple-mail-operator | MCP setup, accounts/mailboxes, safe read/search, performance troubleshooting |
inbox-triage | 5–10 min read-first scan (needs-response, awaiting-reply) |
email-management | Sustained Inbox Zero habits and cross-cutting programs |
mailbox-taxonomy | Folder strategy, noise diagnosis, structural create_mailbox |
email-archive-cleanup | Staged archive / bulk move / trash with dry runs + exports |
mail-rules-advisor | Mail filter / rule proposals (manual apply in Mail.app — no rule API) |
email-drafting | Compose, reply, forward, rich/HTML drafts (body_html, subject restore); --draft-safe aware |
email-style-profile | Voice from Sent mail + USER_EMAIL_PREFERENCES before drafting |
email-attachments | List and save attachments with path safety |
calendar-operator | Bounded calendar reads, safe event CRUD, ID-first deletes, TCC troubleshooting |
meeting-scheduler | Find-slot workflow, cross-timezone scheduling, invitation limits |
Routing index: plugin/skills/CLAUDE.md (sibling cheat sheet). Authoring rules: CLAUDE-conventions.md § Skill authoring. User install blurb: root README.md § Claude Code Skills.
Workflow entry points are skills-only. Do not add or restore legacy slash commands; use plugin/skills/<name>/SKILL.md.
AGENT_LIVE_TESTING.md structure
- Setup (venv,
DEFAULT_MAIL_ACCOUNT) - macOS permissions (Automation, Mail Data Access)
- Safe commands — batteries (
quick-check,perf-test,smoke-test) and individual probes - Post-edit workflow (fast loop → full perf gate + thresholds)
- Unit tests vs live Mail (CI = mocked only)
- Opt-in fixture drills (repo-CLI
draft-verify-smoke, EML export, guarded reply cleanup, HTML compose subject/focus, calendar participant filter) - MCP config for agents (
mcp-config --repo, draft-safe)
CI vs live
Local CI-equivalent gates never touch Mail.app. bash tools/gates/dev-check.sh
runs the committed-identity gate first
(tools/validators/validate_no_committed_identity.py),
then manifest validation, the module line budget report, pytest, and the
test-count drift gate (tools/CLAUDE.md). Live testing is
manual on macOS after local changes.
Related
- User-facing primary install: root
README.md(marketplace slugagentic-assets, pluginapple-mail@agentic-assets) - Standalone compatibility install: marketplace slug
apple-mail-mcp, pluginapple-mail@apple-mail-mcp - Cross-session backlog:
tasks/todo.md - Active robustness goal:
tasks/reference/apple-mail-plugin-robustness-goal-2026-05-22.md· historical phase sequencing:tasks/reference/phase-plan-3.1.7.md· live baseline:tasks/reference/live-test-baseline-2026-05-21.md
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

