Icloud MCP Server
Access iCloud mail and calendar data with read-only IMAP and CalDAV support.
Data last scanned today · Reviewed today
Overview
The iCloud MCP Server provides a bridge for AI assistants to interact with iCloud services, focusing on mail, calendars, and contacts. By leveraging the Model Context Protocol, it allows users to search and read their data using standard protocols while keeping sensitive credentials stored securely within the local system keyring rather than configuration files. While the server defaults to a read-only state for safety, it includes optional mutation tools for sending mail or modifying events. These features require explicit environment configuration and secondary interactive confirmation, ensuring that users maintain strict control over any write operations performed by their AI.
Our verdict
This server carries a high risk level with a security score of 30/100, primarily because it is a community-maintained project that has not undergone editorial review. Its status as a single-contributor repository with limited public traction means users should exercise caution. While it implements structural safety measures like read-only defaults and environment-level write gating, it is not recommended for production environments where verified, institutional-grade security is a requirement.
- Read-only defaults prevent unintended modifications
- Credentials stored in local OS keyring
- Zero direct dependencies reduce supply-chain surface
- Requires explicit opt-in for all write operations
- High security risk due to limited community review
- Single-contributor project increases bus-factor risk
- Lack of official Apple support or maintenance
- Last commit activity was 75 days ago
Tools
| Tool | Description | Risk |
|---|---|---|
| list_mail | List a folder (default INBOX), newest first, with optional since_date | low |
| search_mail | Full-text search the inbox (or a named folder) | low |
| list_folders | List the available IMAP mailbox folder names | low |
| get_message | Fetch one message by UID, with full body | low |
| list_events | Calendar events in a date window | low |
| search_events | Events whose title matches text, in a window | low |
| list_calendars | Names of all calendars | low |
| list_contacts | List address-book contacts (name, emails, phones, org) | low |
| search_contacts | Find contacts matching text across name, org, and emails | low |
| send_mail | Send a plain-text email | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›Does this server have write access to my iCloud data?
The server is read-only by default. Write capabilities like sending mail or modifying calendars are strictly disabled unless you explicitly set the environment variable ICLOUD_ENABLE_WRITES=1 and provide interactive confirmation for every action.
›Where should I store my iCloud credentials?
Credentials should be stored in your operating system's keyring, such as the macOS Keychain, rather than in configuration files. The server retrieves the password using the service name 'icloud-mcp' by default.
›Can I use this server with non-iCloud providers?
Yes, while the defaults target iCloud, every IMAP and CalDAV endpoint is overridable, allowing the server to work with any standard mail or calendar provider.
›What are the hardware and software requirements?
The server requires Python 3.11 or higher and an app-specific password generated via your Apple ID settings.
›How does the server handle my email privacy during read operations?
The server opens IMAP connections in read-only mode and uses the BODY.PEEK[] command to fetch message bodies, ensuring that your emails are not marked as read by the AI assistant.
›What should I do if the server disappears from Claude Desktop?
Claude Desktop may occasionally overwrite the configuration file when saving internal preferences. If the server is removed, you must manually re-add the mcpServers block to the configuration file.
Alternatives
Badge
Maintain this server? Add the live badge to your README.