proton-mcp

MCP server for the Proton privacy suite — Mail, Pass, Drive, Calendar, and VPN. 36 tools for Claude and other MCP-compatible AI agents.

Built by Scott Jorgensen and Jorgenclaw (AI agent) for the jorgenclaw.ai sovereignty stack.

Requirements

• Proton Mail Bridge — running on the host (provides IMAP/SMTP access to Proton Mail)
• pass-cli — Proton Pass CLI for password manager tools
• Node.js 22+

Installation

git clone https://github.com/jorgenclaw/proton-mcp.git
cd proton-mcp
npm install

Create a .env file from the example:

cp .env.example .env
# Edit .env with your Proton Bridge credentials

Configuration

PROTON_BRIDGE_HOST=127.0.0.1
PROTON_BRIDGE_IMAP_PORT=1143
PROTON_BRIDGE_SMTP_PORT=1025
PROTON_BRIDGE_USER=your@proton.me
PROTON_BRIDGE_PASS=your-bridge-password
PROTON_BRIDGE_FROM=your@proton.me

The Bridge password is found in Proton Bridge → Settings → your account → IMAP/SMTP password (this is NOT your Proton account password).

Usage

With Claude Desktop

Add to your Claude Desktop config (~/.config/claude/claude_desktop_config.json):

{
  "mcpServers": {
    "proton": {
      "command": "node",
      "args": ["/path/to/proton-mcp/index.js"],
      "env": {
        "PROTON_BRIDGE_HOST": "127.0.0.1",
        "PROTON_BRIDGE_IMAP_PORT": "1143",
        "PROTON_BRIDGE_SMTP_PORT": "1025",
        "PROTON_BRIDGE_USER": "your@proton.me",
        "PROTON_BRIDGE_PASS": "your-bridge-password",
        "PROTON_BRIDGE_FROM": "your@proton.me"
      }
    }
  }
}

With NanoClaw

Mount as an MCP server in the container configuration. See the NanoClaw docs for MCP server setup.

Standalone

node --env-file=.env index.js

The server communicates via MCP stdio protocol.

Tools (36)

Mail (16 tools)

Pass (9 tools)

Drive (6 tools)

Calendar (5 tools)

VPN (1 tool)

Security Notes

• Proton Bridge password is NOT your Proton account password — it's a Bridge-specific IMAP/SMTP password
• pass__list_items and pass__search_items never expose passwords or TOTP seeds
• Only pass__get_item returns the actual password — use it deliberately
• The .env file contains credentials — keep it out of version control

License

MIT — see LICENSE