MCP privacy and security
Your mail goes where you send it. Messages, attachments, contacts and calendar items your assistant reads are sent to that assistant and its AI provider, under that provider's terms. XgenPlus does not send your mail to any AI provider itself and does not run AI on it. The MCP service only passes data between your mailbox and your assistant, and keeps no copy.
When to use it
Before connecting Claude to her mailbox, Meera checks her Claude plan's data terms and chooses read-only permissions. She knows she can revoke access in webmail at any time.
You stay in control
- Nothing happens until you create an agent password.
- You choose each permission, and you can revoke access at any time in webmail.
- The agent password is separate from your mailbox password and works only for MCP.
- An assistant can reach only your own mailbox, never another user's. It never has admin rights.
Safety built in
- No permanent deletion. Trash is always recoverable.
- Held sends. Risky sends, such as to a first-time external recipient or with attachments leaving your domain, are kept as drafts for your review.
- Marked sends. Mail sent by an assistant carries a signed header identifying it.
- Untrusted content. Mail content is marked to the assistant as untrusted, so the assistant is told not to follow instructions hidden in emails. Still check what an assistant proposes before you approve a send.
- Limits. 120 calls and 30 searches per minute; 20 sends per hour and 100 per day.
What XgenPlus records
- For security and abuse prevention, the MCP service keeps an activity log: which tool was used, when, from which address, and whether it succeeded.
- The log does not store message content: no bodies, subjects or attachments.
- Other people's addresses, such as recipients, are stored only in pseudonymised form.
- The log is kept for 60 days and is protected against tampering.
For organisation administrators
- MCP is available to every customer domain. It stays off for each user until that user enables AI Agent (XgenPlus MCP) on their own account.
- Administrators can see in the XgenPlus admin console which users have enabled it.
Transport
- Connections to the server use HTTPS only, with HSTS.
- The server runs in XgenPlus's own infrastructure, next to the mail system.
Common questions
Will the AI provider train on my mail?
That depends on the assistant and your account plan with it. Some plans let the provider use data for training. Choose an assistant and plan whose data-use terms you accept.
Can my administrator see that I use it?
Yes. Administrators can see which users have enabled AI Agent (XgenPlus MCP). XgenPlus keeps access logs for security, and message content is never logged.