This project is intentionally small, so the roadmap focuses on high-leverage additions with clear utility.
- Dedicated password tooling shipped:
generate_random_passwordgenerate_passphrasescore_password
- Immediate-utility wrappers shipped:
generate_totplist_invites,accept_invite,reject_invitelist_sharestrash_item,untrash_item
- Filtered listing support shipped in
list_items:filterType,filterState,sortBy
- Operational tooling shipped:
download_item_attachmentmove_item- vault/item member management tools
- Stage A npm distribution prep shipped:
- package metadata for npm/provenance
- release workflow that validates/packages and uploads tarball/checksum
- publish path is configured for direct trusted publishing on stable releases
- Complete npm trusted publishing cutover.
- Configure npm trusted publisher for this repo/workflow/environment.
- Cut next release and verify npm publish + provenance.
- Add MCP resources for read-heavy workflows.
- Candidate resources:
pass://vaultspass://vault/{vaultName}/itemspass://share/{shareId}/itemspass://item/{shareId}/{itemId}
- Why:
- Better for browse/read usage, caching, and context injection into LLM prompts.
- Prompt templates for common secure operations.
- Rotate login password
- Share item with role and confirm recipient
- Move item between vaults with verification
- Safer write modes.
- Optional dry-run planning for write tools
- Standardized confirmation payload (operation + target summary)
There does not appear to be a comparable public, user-facing Proton Mail CLI for full mailbox administration comparable to pass-cli for Proton Pass.
Most practical official automation-adjacent options today:
- Proton Mail Bridge CLI mode (for local IMAP/SMTP integration)
- Proton Mail Export Tool CLI mode (backup/restore workflows)
- Easy Switch (web-managed import automation from external providers)
This is useful for mailbox pipeline workflows, but it is not the same as a direct public "manage mailbox via official API" model.
- MCP scope across Proton offerings.
- The ProtonPass GitHub organization includes Proton Pass and Proton Authenticator repositories, with overlap around TOTP workflows.
- Decide whether this MCP remains strictly Proton Pass (
pass-cli) or intentionally expands to include Proton Authenticator-related capabilities. - Define whether TOTP features in this MCP should be treated as Pass-only scope or cross-offering scope.
- Proton Bridge CLI:
- Proton Mail export/import options: