mxMCP is mxHERO's remote MCP server. It connects an AI assistant such as Claude or ChatGPT to your organization's Mail2Cloud Advanced email index, so you can ask questions about your email in plain language. This page shows how to add mxMCP to an assistant, sign in, and get good results.
Note: Mail2Cloud Advanced, including mxMCP, is in early access. mxHERO provisions it for your organization on request; there is no setting to turn it on yourself. Contact your mxHERO representative or support@mxhero.com.
Before you begin
- Mail2Cloud Advanced, provisioned by mxHERO. Mail2Cloud Advanced and mxMCP are in early access, and mxHERO sets them up for your organization on request. Your organization also needs at least one rule that stores email in AI. Without it, nothing is indexed. See Mail2Cloud Advanced Overview.
- An address that mxHERO has linked to a scope. When mxHERO sets up Mail2Cloud Advanced, it links each user's email address to one scope of your AI index. You sign in with that address and search that scope. Ask your administrator if you aren't sure your address is set up.
- An assistant that supports remote MCP connectors, for example Claude or ChatGPT, on a plan that allows custom connectors.
-
Network access over HTTPS (port 443) to
mcp.mxhero.comandmcp-login.mxhero.com, if your network filters outbound traffic.
Note: To try mxMCP before your own email is indexed, use the demo tenant. See Demo Account.
Connection details
| Setting | Value |
|---|---|
| Server URL | https://mcp.mxhero.com/mcp2/connect |
| Transport | Streamable HTTP |
| Authentication | OAuth: a consent screen, then sign-in with your email address and an emailed code. The assistant registers itself; you don't need a client ID or secret. |
| Tools |
email_search and user_time, both read-only |
The assistant's own model reads your question and fills in the search fields, so current, capable models give the best results.
Connect mxMCP in Claude
Team and Enterprise organizations can add the connector once for everyone. Individual users add it themselves.
For Claude Team and Enterprise owners (once for the organization)
- In Claude, open Organization settings › Connectors.
- Click Add, point to Custom, and select Web.
- Enter a name, for example
Mail2Cloud Advanced, and the server URLhttps://mcp.mxhero.com/mcp2/connect. - Click Continue, review the detected authentication settings, and click Add.
Members then connect it for themselves in the next procedure (they start at step 3).
For each user
In Claude, open Customize › Connectors.
If Mail2Cloud Advanced (or the name your admin chose) is already listed, click Connect and go to step 5.
Otherwise, click + Add, then Add custom connector.
Enter a name and the server URL
https://mcp.mxhero.com/mcp2/connect, click Continue, review the detected authentication settings, and click Add.-
On the mxHERO consent screen, "Claude wants to access your mxHERO email archive", check two things:
- The application name is the assistant you're using.
- The address you'll return to, shown after "then return to", belongs to that assistant.
If either looks wrong, click Cancel and contact your administrator or support@mxhero.com.
Click Allow.
On Sign in to mxHERO, enter your email address in Email or demo account and click Email me a code.
Open the email "Your mxHERO sign-in code" from
no-reply@mxhero.net. You can read it on any device.Back in the same browser window, type the code (format
XXXX-XXXX) and click Sign in. The code expires after 15 minutes.
The email contains only the code, never a sign-in link. Keep the sign-in window open while you get the code: the sign-in must finish in the browser window that started it.
Claude's menu names change from time to time. For the current steps, see Anthropic's article Get started with custom connectors using remote MCP.
Connect mxMCP in other assistants
ChatGPT, Microsoft Copilot Studio and other MCP-capable assistants follow the same pattern:
- Add a custom or remote MCP connector in the assistant's settings.
- Enter the server URL
https://mcp.mxhero.com/mcp2/connectand choose OAuth authentication. - Approve the mxHERO consent screen after checking the app name and return address.
- Sign in with your email address and the emailed code.
Verify
Ask a question you know the answer to, for example:
How many emails do we have from Acme in the last three months?
The assistant should call the mxHERO Email Search tool and return results with links to the source email.
What the connector can do
mxMCP exposes two tools. Both are read-only.
| Tool | Title | What it does |
|---|---|---|
email_search |
Email Search | Searches the indexed email and returns a count, a list of messages, matching passages, or full messages with their attachment text |
user_time |
User Time | Returns your current local date and time, so "last quarter" or "since yesterday" resolve in your time zone |
What you can reach:
- Read-only. It can't send, reply, forward, change, move or delete anything.
- One scope. You search the scope your address is linked to, and no other scope.
- The whole scope. Everyone linked to a scope can search all the email in it, not only their own mailbox. There is no per-mailbox filter inside a scope. Your administrator decides which email goes into each scope.
- Indexed mail only. It finds only email that a Store in AI rule captured.
Optional dashboard connectors
mxHERO also runs two separate connectors that turn search results into a web dashboard. They don't search email: add one next to the mxMCP connector, as its own custom connector, with the steps above.
| Connector | Server URL | What it creates |
|---|---|---|
| Dashboard Generator | https://mcp.mxhero.com/dashboard/connect |
A simple dashboard of metrics and lists of linked items |
| Rich Dashboard Generator | https://mcp.mxhero.com/dashboard2/connect |
A dashboard with Overview, Timeline, Contacts, Emails, Documents and Next Steps tabs |
The assistant writes the dashboard's content from your search results, and the connector returns a link such as https://mcp.mxhero.com/dashboard/<id>.
Warning: Anyone who has a dashboard's link can open it, without signing in, for 90 days. A dashboard can contain email excerpts, names and links to your stored email, and you can't delete it before it expires. Don't build dashboards for confidential matters, and share a link only with people who may see everything in it.
Assistants that can create documents or artifacts, such as Claude, can also build a dashboard themselves from the search results, without these connectors.
Get better answers
Ask in plain language. You don't need a document number.
Name senders and recipients as parties. "Emails from Acme" matches the sender's name, address or domain. Organizations that appear only in email addresses are found this way, not as topic words.
Name identifiers when you have them: policy, matter, invoice, RFI, change-order, patent or case numbers. Messages containing the exact identifier are listed first, up to three identifiers per search. When the same number appears in mail with different outside organizations, the answer flags it so you can check you have the right file.
Ask for a count first, then narrow down. Counts include text inside attachments.
-
Give a date range, even a rough one. It narrows the search and gives more complete answers. Dates are read in your own time zone, and an end date includes that whole day, so "through January 31" includes January 31.
Good Better Get the email from Ralph about Project XGet the emails from Ralph to Alex sent last June about Project X Ask for a timeline. Whole threads can be returned, including messages outside the dates you asked for. The answer says when it includes them.
Ask about attachments. Attachment text is searched, and the full text of a message's attachments can be read.
Ask for sources: "Provide links to the source emails." Each result links to the copy of the email saved in your cloud storage, typically a PDF that links to its attachments.
Follow up in the same conversation. One answer holds about five full messages; when there are more, the answer says that it is partial, and the assistant can search again or fetch more.
Disconnect
- In Claude: open Customize › Connectors and remove or disconnect the connector. Other assistants have a similar option. The assistant discards its sign-in.
- To remove a user's access to your index: contact support@mxhero.com. mxHERO can pause the user's access, sign the user out of every assistant, or remove the address from your scope. mxMCP checks the user's account on every request, so the change takes effect at once, even for assistants that are already connected. There is no screen for doing this yourself.
Disconnecting doesn't delete indexed email. To delete indexed data, contact support@mxhero.com.
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| "Could not connect" | Wrong URL, or outbound traffic is filtered | Check the URL exactly: https://mcp.mxhero.com/mcp2/connect. Ask IT to allow HTTPS to mcp.mxhero.com and mcp-login.mxhero.com. |
| Sign-in code doesn't arrive | Code is in spam or quarantine | Check junk and quarantine for "Your mxHERO sign-in code" from no-reply@mxhero.net. Ask IT to allow it. |
| "That code doesn't match" | A mistyped code, or an older code after you asked for a new one | Use the code from the newest email. Letters can be typed in upper or lower case. |
| "no sign-in in progress in this browser" | The code was entered in a different browser or window | Start again from the assistant and enter the code in the window that opened. |
| "This sign-in is no longer valid…" | The sign-in took longer than about 15 minutes, was already used, or a newer attempt replaced it | Start again from the assistant. |
| "No mxHERO account is set up for…" when signing in or searching | mxHERO hasn't linked your address to a scope | Ask your administrator to have mxHERO link your address to your organization's scope. Then sign in again. If the message came from a search, the existing connection starts working on its own. |
| Searches return nothing relevant | The mailbox, folder or period you're asking about isn't indexed, or it is in another scope | Ask your administrator which email is indexed in your scope. See Store in AI. |
| An answer says it is partial, or a search timed out | Too many matching messages for one answer | Add a sender, a date range or an identifier, or ask for a count first. |
| You're asked to sign in every day | You use a demo account; demo sessions last 24 hours | Expected for demo accounts. Other sessions refresh automatically. |
| A personal access token issued before October 2026 stops working | Tokens created before the current token format stop working after 2026-10-31 | Connect the assistant with the steps above, or generate a new token at https://mcp.mxhero.com/tokens. |
| Consent screen shows an unexpected app or return address | Possible phishing or misconfiguration | Click Cancel. Contact your administrator or support@mxhero.com. |
For other problems, contact support@mxhero.com. See Getting Support.
Comments
0 comments
Please sign in to leave a comment.