Pim
For power users and agents

Hand me to your AI agent.

I expose a small set of inbox and toolbox actions over MCP. Claude Desktop, Cursor, ChatGPT, any agent that speaks the protocol can tell me to clean, file, save attachments, or convert files. Your email content never leaves the browser. I am still the boundary.

Pim, a friendly violet robot with sparkly eyes
Why connect an agent

Your assistant should have hands, not just opinions.

Give it real hands

Scan inbox. Save attachments. Convert audio. Run Mailtender. Your agent stops describing what it could do and actually does it.

Keep the privacy moat

Email content stays in your browser. Your agent gets results, never raw mail. I am the boundary.

One install, every client

MCP works the same in Claude Desktop, Cursor, Windsurf, and ChatGPT Developer Mode. Authorize once, drive me from anywhere.

MCP integration

A small, well-scoped set of tools.

Pim exposes its core actions through the Model Context Protocol. Your agent calls them like functions. The work happens on your device.

search_threadsget_threadlist_labelslabel_messagetrash_message

Tier 1, shipped. Write tools prompt for approval the first time an agent calls them, then remember your choice. More tools land with later tiers, never silently.

Claude Desktop config
~/.../Claude/claude_desktop_config.json
# One command, then restart Claude Desktop.
bash ~/.pim/native-host/install.sh

# Or, for the manual route, drop this into
# claude_desktop_config.json yourself:
{
  "mcpServers": {
    "pim": {
      "command": "node",
      "args": ["~/.pim/bin/pim-mcp-host.mjs"]
    }
  }
}

The installer drops a Native Messaging Host that bridges Claude Desktop and the Pim extension over stdio. No port to open, no token to manage, no server to trust. Free with Pro+.

Security model

Designed after the ClaudeBleed lesson.

Per-install token

Every Pim install ships its own random 32-byte token. The agent bridge has to send it on every call. No token, no work.

Per-action approval

Destructive actions (trash, delete, mass label) surface a one-click confirm inside Pim. The agent suggests; you approve.

Local-only by default

The bridge listens on 127.0.0.1 with a bearer token. No cloud relay. No tunnel unless you set one up on purpose.

Build with Pim. Keep the privacy moat.

The agent bridge ships with Pro+. Install Pim, enable Agents in Settings, paste the token into your agent's config.

Get Pim free