Bottled (email.bottled/bottled@1.0.0) Bottled, a branded email server for sending, replying, searching, aliases, contacts and campaigns, was published to the official MCP registry as version 1.0.0 on 2026-09-16, distributed as a hosted remote over streamable-http and filed under Email by the mcpindex index. The index reports no verdict has been recorded for the tool, so its status is REVIEW or UNVERIFIED rather than a clearing ALLOW, and it advises agents to treat Bottled as not-yet-cleared until the semantic screen and deterministic conformance probe run on the public corpus. The mcpindex gate pins each server's tool contracts and holds calls when a contract drifts silently, a check the index says applies to Bottled's contracts from first sight. ← Index https://mcpindex.ai/leaderboard Bottled Branded email on your own domain: send, reply, search, aliases, contacts and campaigns. The current version, v1.0.0, was published to the official MCP registry on 2026-09-16. It is distributed as a hosted remote over streamable-http, filed under Email by this index. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts https://mcpindex.ai/stats put this record in context. Using Bottled in Claude, Cursor, Gemini CLI, Cline, or Zed? MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself use Install this server for that . Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less uv tool install mcpindex-gate && mcpindex-config-wire method https://mcpindex.ai/methodology Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands 15/150 labels to graduation . The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits https://mcpindex.ai/methodology . Own this server? Screen its description → https://mcpindex.ai/screen That verdict was true at screening time snapshot 2026-09-16 . Contracts can change after screening, with no version bump. The gate pins Bottled’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday. See your first HOLD in 2 minutes → https://mcpindex.ai/guides/install-the-gate-first-hold Related: how to trust an MCP server https://mcpindex.ai/guides/how-to-trust-an-mcp-server · screen before install https://mcpindex.ai/guides/screen-mcp-server-before-install · silent contract drift https://mcpindex.ai/guides/mcp-silent-contract-drift methodology https://mcpindex.ai/methodology Mermailapp.mermail/mcp https://mcpindex.ai/server/app-mermail-mcp Privacy-first email inboxes for AI agents with MCP mail tools and Composio connect/execute. MCP Emailscom.mcpemails/emails https://mcpindex.ai/server/com-mcpemails-emails Never-stored live email: read, send, organize, schedule and auto-triage Gmail or any IMAP mailbox. Dead Simple Emailemail.deadsimple/dead-simple-email https://mcpindex.ai/server/email-deadsimple-dead-simple-email Give an agent its own inbox: send, receive, and pull signup codes from real email.