Yomiko The Paper Yomiko — The Paper

Yomiko

The Paper

Read. Leave. Do not send.

A mailbox and calendar desk your assistants can actually use — safely.

Yomiko is a secure, self-hosted gateway that lets AI assistants and MCP clients read and search your mail, prepare replies as drafts, and work with your calendars — through carefully scoped permissions. It supports Gmail and Microsoft mail and calendars where the provider allows it, plus standard IMAP for mail.

How it works

1. Receive an invite.

Private instances run invite-only: an administrator creates a single-use link, and your account stays yours alone.

2. Create your account.

Your login, your password, your passkeys. Nothing is shared with the person who invited you.

UNREAD

3. Connect your own provider.

Link your own Gmail or Microsoft account with OAuth, or plain IMAP for mail. Your grants and tokens are encrypted on this server and isolated to your account — even though the server administrator configures the provider application once for everyone.

DRAFT

4. Use Yomiko from your assistant.

Point any MCP client at this instance, sign in through OAuth, and choose which mailboxes and calendars the assistant may see.

The safety model

Yomiko favors reading, searching, reply drafts, and controlled calendar actions. It does not silently send or delete mail, and it does not perform unsupported mutations merely because an assistant asks — calendar changes are proposals that need a separate confirmation before they touch the provider.

The draft stays. The letter does not go.

Privacy and isolation

Every user connects their own provider accounts. OAuth grants, mailboxes, calendars, and MCP permissions are isolated per user — one person can never list, read, or act on another person’s mail or schedule, and no provider application credentials are shared with users.

Secrets and tokens are encrypted at rest with least-privilege scopes and never exposed to assistants. Administrative actions are logged with minimal, non-sensitive metadata.

Get started

This instance is private: new accounts need an invite link from the administrator. Already invited? Use your invite link to create your account, then connect a provider.