Zoho Mail
The Zoho Mail connector lets AI agents read, search, send, and manage email in Zoho Mail accounts. It uses OAuth 2.0 so your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.
Required scopes#
MCPGate requests the following OAuth scopes when you connect a Zoho Mail account.
| Scope | Purpose |
|---|---|
| ZohoMail.messages.ALL | Read, send, move, and delete messages |
| ZohoMail.folders.READ | List and navigate mail folders |
| ZohoMail.accounts.READ | Read account metadata |
Tool reference#
The Zoho Mail connector exposes 10 tools. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.
| Tool | Category | Description |
|---|---|---|
| zohomail_list_messages | read | List messages in a Zoho Mail folder |
| zohomail_get_message | read | Get a specific Zoho Mail message by ID |
| zohomail_search_messages | read | Search Zoho Mail messages by query |
| zohomail_list_folders | read | List folders in a Zoho Mail account |
| zohomail_send_email | write | Send a new email via Zoho Mail |
| zohomail_reply_to_email | write | Reply to a Zoho Mail message |
| zohomail_forward_email | write | Forward a Zoho Mail message to recipients |
| zohomail_move_message | write | Move a Zoho Mail message to a different folder |
| zohomail_mark_read | write | Mark a Zoho Mail message as read or unread |
| zohomail_delete_message | delete | Delete a Zoho Mail message |
Deletion is permanent
zohomail_delete_message permanently deletes the message from Zoho Mail. It does not move it to a trash folder first. Deny this tool unless the agent explicitly needs destructive mail management.Common guardrail recipes#
Read-only access#
Apply the read_only preset to enable the four read tools and deny all write and delete tools. Suitable for agents that summarise or triage incoming mail without sending any messages.
Send and read preset#
Use the send_and_read preset to allow all read tools plus zohomail_send_email and zohomail_reply_to_email, while blocking forward, move, mark-read, and delete. This is the right default for customer-support agents that need to reply to incoming messages.
Full access#
The full_access preset enables all 10 tools. Pair it with a deny_values guardrail on zohomail_send_email targeting the to field to restrict which addresses the agent may contact.
Troubleshooting#
- Data centre mismatch — Zoho Mail is region-specific (US, EU, IN, AU). MCPGate detects the correct endpoint during OAuth. If you see token errors after reconnecting, ensure you are authorising the same regional domain your account uses.
- Account ID required— Most Zoho Mail API calls require an account ID. MCPGate automatically fetches and caches this from your account on first use. If a tool returns an "account not found" error, reconnect the connector to refresh the cached account ID.
- Message not found — Zoho Mail message IDs are folder-scoped. Ensure the agent is using an ID obtained from
zohomail_list_messagesorzohomail_search_messagesrather than constructing IDs manually.