The initial administrator must be created locally on your NUC, using the documented bootstrap command.
Mailboxes are disabled by default. Saved passwords are encrypted and never returned by the API. OAuth/MCP remain disabled by default. Folder and message changes require separate organize permission and an administrator approval; sending and deletion are unavailable.
one.com settings are supplied automatically. Tests authenticate to the mail servers but never send a message.
OAuth is disabled by default; activating it requires an explicit server setting and security review. Client registration alone does not enable public access.
Rules here are separate from one.com Webmail filters and cannot execute automatically. Existing native filters are preserved.
Test against sample headers only, never message bodies.
Review proposed folder and message changes before an MCP client may apply them. Approvals expire after two minutes. Approving does not execute the operation.
Production domain: email.mcp.philco.nl
Mailbox provider: one.com
Mail: IMAP 993, SMTP 587 STARTTLS
Database: local SQLite
No external identity provider.