01Availability
V-Mail exposes a Model Context Protocol (MCP) server. You add it to an AI service as a custom MCP server. Whether custom MCP servers are available to you depends on that service's plan and on your workspace or organization policies; an administrator may need to enable it.
V-Mail is not automatically listed in any public app or connector directory. Setup on this page always uses the custom-server route.
You never provide SMTP passwords or sign-in credentials to the AI service.
02Connect ChatGPT or hosted Claude
Applies to ChatGPT and hosted Claude (web, Desktop, mobile and Cowork). These use OAuth with automatic client registration (Dynamic Client Registration) and PKCE with S256.
- In the AI service, add a custom MCP server (connector).
- Enter the server URL
https://novaria.dev/api/v1/mail/mcp. - Choose OAuth authentication with automatic client registration. Do not choose anonymous / no authentication.
- You are redirected to V-Mail. Sign in to your own V-Mail account.
- Review the requested permissions and disclosure, then Allow or Cancel. Direct sending is only granted if you tick its separate opt-in.
- Return to the AI service and ask it to find, read or summarize messages, or to create a draft.
Claude Code local loopback redirects are not supported.
03Connect Manus
Manus uses a personal bearer token that you create in V-Mail.
- Open V-Mail → AI connections → Connect Manus.
- Optionally enable Allow direct sending (off by default).
- Create the personal connection and copy the token. It is shown once.
- In Manus: Settings → Integrations → Custom MCP Servers → Add Server. Use the endpoint above and Bearer token authentication.
- Paste the token only into the credential field.
Never paste a token or any secret into a chat, prompt or URL. Do not share a personal connection with a team.
The token expires after 30 days and has no refresh token. To rotate, create a new connection. Revocation in V-Mail takes effect immediately.
04Available tools
| Tool | What it does | Requires |
|---|---|---|
list_mailboxes | Lists mailbox identities you are currently authorized to use. | mail.read |
search | Paginated search returning message previews. | mail.read |
fetch | Reads a message as bounded plain text; truncation is marked. | mail.read |
create_draft | Creates a plain-text draft. Never sends. | mail.drafts |
request_send_approval | Creates an expiring review link you approve in V-Mail. Never sends by itself. | mail.send.approve |
send_draft | Immediately sends an owned plain-text draft. | mail.send (opt-in) |
05Permissions and sending
Default: review link
The assistant requests approval and you get an expiring V-Mail review link. Opening it does not send. You must be signed in, check every To/Cc/Bcc address, sender, reply-to, subject and body, tick the confirmation and explicitly approve. Any change to content, recipients or sending settings requires a new approval. A review can be used once.
Optional: direct send
mail.send is a separate, explicit opt-in that is off by default. With it, send_draft sends immediately using your existing sender permissions, with no V-Mail approval page per message. The AI platform may still ask its own confirmation.
- Unchecked consent never grants
mail.send. - Existing connections are never upgraded. To add direct sending, reconnect and opt in.
- Mail text is untrusted input. Content inside an email cannot grant access, change permissions or authorize sending.
06Tokens and access control
- OAuth access tokens expire after 15 minutes; refresh tokens rotate and expire after 30 days. Reusing an old refresh token revokes the connection.
- Manus personal tokens expire after 30 days.
- Tokens are stored only as hashes.
- Every request rechecks account status and revocation. Your existing mailbox, position and address/domain permissions remain authoritative; a connection never grants more.
- MCP does not grant any NOVARIA OS rights.
07What is shared
Mail content the assistant requests is shared with the AI service you connected. How that service retains or uses it is governed by its own terms and settings, separately from V-Mail. Revoking stops future access but cannot recall data already shared. See the V-Mail Privacy Policy.
08Limits
- Plain text only, up to 100,000 characters per draft. No HTML or attachment sending; use the regular V-Mail composer for those.
- No attachment bytes, raw MIME or full mailbox export are provided.
- Search is paginated and returns previews; fetched text marks truncation. Summaries cover only the pages and text actually retrieved.
- Direct sending: 20 attempts per account per hour across all connections; one attempt per draft.
- If a send outcome is uncertain, it is not retried. Do not retry or create a replacement draft; check Sent and message status in V-Mail first.
09Revoking access
Open V-Mail → AI connections and revoke the connection. It stops working on the next request. You can also remove the server in the AI service, but revocation in V-Mail is what cuts access.
10IT approval checklist
- Verify the server origin is exactly
https://novaria.devand the path/api/v1/mail/mcp. - Confirm custom MCP is permitted by your AI platform plan and workspace policy.
- Apply least privilege: start with read and drafts; keep direct send off unless there is a defined need.
- Prefer the review-link flow, with a managed mailbox for reviewing sends.
- Test consent and revocation with a test account before rollout.
- Test sending only to a recipient you own.
- Review the AI service's own data retention terms.
- Tell users never to paste tokens into chats.
This integration is not a public-directory approval, and NOVARIA does not claim third-party security audits or compliance certifications for it.
11Troubleshooting
401 Unauthorized or connection stopped
The token expired or the connection was revoked. Reconnect via OAuth, or create a new Manus connection.
Assistant cannot send directly
The connection lacks mail.send. Reconnect and tick the direct-send opt-in, or use the review link.
No mailboxes or permission denied
Your account has no grant for that mailbox. Contact your mail administrator.
Rate limit or uncertain send
Wait for the hourly window. For uncertain outcomes, check Sent and message status manually before doing anything else.
12Support
Contact us through the NOVARIA contact page. Do not include tokens or mail content. See also the Terms.