iCloud Mail MCP Bridge

What it does

Connect your iCloud Mail to an AI assistant once, then just ask in plain language: "Summarize my 3 newest unread emails," "Find receipt emails from this month," "Sort today's mail by type." The AI does the reading and the sorting; you stay in control.

• 🔒
  Local & private by default

  Everything runs on your Mac. Your iCloud app-specific password lives only in the macOS Keychain, and the only network connection is to Apple's own IMAP server (imap.mail.me.com over TLS). No third party, no cloud relay, no analytics.

• 🛡
  Safe, read-biased toolset

  The AI never touches raw IMAP. It gets a fixed set of high-level tools — search, read, summarize, label, move. No permanent delete, no EXPUNGE, no bulk operations. Read-only out of the box; you explicitly opt in to let it make changes.

• 🙈
  Protects your sensitive mail

  The bridge detects OTP, 2FA, verification-code, password-reset, and security-alert emails and refuses to hand their contents to the AI. Your login codes stay between you and the sender.

• 🤝
  Works with the tools you already use

  Built on the Model Context Protocol, so it plugs into Claude Desktop, Claude Code, and any other MCP-compatible client. One click writes the config for you — no JSON editing, no Terminal.

How it works

1. 1
   Sign in with an app-specific password

   Enter your iCloud email and an Apple app-specific password. The app walks you through creating one at appleid.apple.com — it takes a minute and is stored straight into your Keychain.

2. 2
   Choose a mode

   Pick Read-only (recommended) so the AI can only look, or Allow changes if you want it to move, label, and trash mail for you. You can switch any time.

3. 3
   One-click "Connect Claude Desktop"

   The app writes the MCP configuration for you and you're done. Open Claude and start asking about your inbox — no config files to hand-edit.

Safe by design — what it never does

This is your email, so the bridge is built to be conservative. By design, the AI cannot:

• Permanently delete mail or run an EXPUNGE
• Issue raw IMAP commands
• Run bulk operations across your mailbox
• Open or read attachments
• See the body of OTP / 2FA / verification-code emails
• Send mail on your behalf

Move, mark-as-read, and move-to-trash are available only after you explicitly switch to Allow changes mode — and even then, "trash" means Apple's recoverable Trash folder, never a permanent wipe.

FAQ

Do I need an Apple app-specific password?

Yes — Apple requires one for third-party apps that access iCloud Mail, and it's the secure way to do this. The app guides you to appleid.apple.com, you generate the password in a few clicks, and paste it in once. It's never your real Apple ID password, and you can revoke it from Apple at any time.

Is my password safe?

The app-specific password is stored only in the macOS Keychain on your Mac, the same vault that protects your other system credentials. It's never written to a config file, never sent to us, and never sent anywhere except Apple's own IMAP server over an encrypted TLS connection.

Does it work with Claude Desktop?

Yes. The "Connect Claude Desktop" button writes the right MCP configuration automatically. It also works with Claude Code and any other client that speaks the Model Context Protocol — for those, point the client at the bundled MCP helper.

Do I need to keep the app open?

No. The window is just a setup panel. When your AI assistant needs your inbox, it launches the lightweight MCP helper itself, and that runs independently of the main app. You can quit the setup window and everything keeps working.

Does it run on Intel Macs?

Yes. The app is a Universal build, so it runs natively on both Apple Silicon and Intel Macs running macOS 14.0 (Sonoma) or later.