Support

Only 2 pre-approved email addresses. Use Sign up on the sign-in page; if your address is not on the list the sign-up is refused and the attempt is logged. Ask the operator to have the list changed — it is a code change, on purpose.

Sign-in is handled by Amazon Cognito. To change your password, sign out and use Forgot your password? on the sign-in page (a code is mailed to you). If you lost your authenticator app, the operator resets it on the command line (see the manual); you set up a new one at your next sign-in.

Sign in, open Connect Claude, create a token and run the command shown. The token is displayed once; if you lose it, revoke it and create another.

claude mcp add --transport http --scope user private-office <MCP URL> --header "Authorization: Bearer <token>"

Tokens expire after 90 days by default and can be revoked at any time.

Settings → Connectors → Add custom connector → paste the MCP URL → Connect. Claude sends you to this server's consent screen where you sign in with your email, password and second factor. The app then appears under Connect Claude → Connected apps, where you can disconnect it.

Use an app-specific password, never your main account password: Gmail (Google Account → Security → App passwords, requires 2-step verification), iCloud (appleid.apple.com → Sign-In and Security → App-Specific Passwords), Yahoo (Account Security → Generate app password). Outlook/Microsoft 365 needs IMAP enabled by the tenant and an app password where MFA is on. The presets fill in host and port.

Open Calendars → Add calendar, keep Apple iCloud Calendar, enter your Apple ID address and an app-specific password (the same kind as for iCloud Mail; you can reuse one or create a second at appleid.apple.com), then Connect & list calendars and pick Home, Work, … Each iCloud calendar is added separately. Step-by-step with screenshots-in-words in the manual.

Choose ICS / webcal subscription and paste the link (holiday feeds, a team calendar, anything Calendar.app's “New Calendar Subscription” accepts). ICS feeds are always read-only; only public https/webcal links work. Calendars you subscribed to inside iCloud show up in the iCloud pick list as read-only subscriptions.

List and search events (recurring ones expanded), read details, and — unless the calendar is read-only — create, change and delete events including recurring rules and reminders. Events with attendees: iCloud sends the invitation e-mails itself the moment the event is saved, so Claude is instructed to show you the attendee list and wait for your go-ahead. Deleting needs your explicit confirmation. All of it is in your Activity log.

On a read-only account Claude can list folders, search and read messages and download attachments. Every tool that changes anything — send, draft, flag, move, archive, create or delete folders, even marking a message as read — is refused, and the refusal is logged. Mailboxes are opened in IMAP read-only mode, so reading does not alter server state.

By default Claude cannot put mail on the wire. send_message composes the message, saves it to your Drafts folder and adds it to your Outbox. Press Send now there to release it (the exact bytes you reviewed are sent), or Discard to drop the request — the draft stays in Drafts. Queued mail expires after 7 days. The toggle above the Outbox lets you allow direct sending; it is off by default and every change is logged.

Ask the operator to reset your two-factor setup on the command line (npm run user -- reset-mfa you@example.com --stage …). This also signs you out everywhere and revokes tokens and connected apps; at your next sign-in Cognito walks you through setting up a new authenticator.

Connect Claude lists your tokens and connected apps; revoke any of them and it stops working immediately. Security → Sessions shows every browser signed in as you, with a “sign out everywhere” button that also revokes your Cognito refresh tokens. Deleting a mail account removes its credentials from the server.

Clients cache the tool list when they connect. After the server is updated, toggle the connector off and on, or start a new conversation.

Sign-ins (successful and failed), second-factor use, token and app changes, mail-account changes, Outbox decisions and every tool call Claude makes (tool name, account, folder/uid/recipients/subject — never message bodies or attachments). You see your own log under Activity; nobody sees anyone else's. Entries are kept for one year.