LZ Virtual Mail
Read, search and act on scanned postal mail in a LegalZoom Virtual Mail box from an AI agent. 28 tools, and three of them destroy physical paper irreversibly. A documented read-only endpoint exists, and the server declares readOnlyHint and destructiveHint on every tool.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect LZ Virtual Mail via MCP
https://api.earthclassmail.com/v2/mcp/claudeWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
LZ Virtual Mail Tools & Capabilities (28)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- One application scope covers everything. The server's RFC 9728 descriptor, fetched 2026-08-24, advertises
openid,email,profile,offline_accessandlegalzoom_mcp. Four are identity claims and a refresh grant.legalzoom_mcpis unqualified — it names no object and no verb, so granting it grants whatever the server implements now and later. No boundary falls between reading a letter and shredding one. The read-only endpoint is the only granularity available, and it lives in your client config rather than in the token. - The undo window is a race, not a guarantee.
cancel_mail_items_shredworks only while the request is still pending. Once the mailroom acts, the paper is gone. - No confirmation is enforced server-side. LegalZoom states the server executes any authorized request and places approval responsibility on your MCP client.
- We could not read tool schemas or annotations. An anonymous request to the endpoint returned HTTP 401 on 2026-08-24, so no
tools/listresponse was seen and no parameter detail is published here. LegalZoom's claim that every tool carriesreadOnlyHint/destructiveHintis the vendor's, not our observation. - The tool surface is explicitly growing. LegalZoom writes that it is "actively developing the MCP server — more tools and capabilities will be gradually added." Today's clean 28-name diff is a snapshot; the REST API already exposes shipment creation and scan-emailing that MCP does not.
- AI summaries are account-gated. The document type and summary fields in
list_mail_itemsandget_mail_itemappear only "on accounts with AI features," per LegalZoom's documentation. Plans and feature availability vary. - Usage summaries are admin-only. LegalZoom notes account standing and usage counts are read-only and that usage summaries are limited to account admins, so a non-admin connection sees less of
get_inbox_overviewthan an admin one. - OAuth access dies after 7 days of inactivity. LegalZoom states refresh tokens last up to 30 days, but that not using the server for 7 consecutive days automatically removes the OAuth client and invalidates its refresh token, requiring re-authorization. API-key access is unaffected.
- Rate limited to 300 requests per minute per client IP, which LegalZoom notes is subject to change. Exceeding it throttles requests.
- An API key reaches every mailbox you can. LegalZoom is explicit that the key is per-user, not per-mailbox, and there is no narrower key.
- Scanning is not instant. Both scan and shred are performed by mailroom staff. An agent that requests a scan and immediately reads the text will find nothing.
- We did not call any tool. No tool on this server was invoked, no account was authenticated, and no mail was scanned, shredded or moved in producing this page.
Frequently asked questions
Yes. Two tools request permanent destruction: request_mail_items_shred, and request_mail_items_scan_then_shred which digitizes an item and then destroys the paper. LegalZoom's documentation calls shredding irreversible and distinguishes it from moving mail to trash. A third tool, cancel_mail_items_shred, undoes a pending request only while the mailroom has not yet acted.
Yes, and it is the strongest safety feature on this connector. LegalZoom publishes a separate endpoint at api.earthclassmail.com/v2/mcp/readonly, plus an equivalent X-MCP-ReadOnly header on the standard URL. Both drop every tool that scans, shreds, moves, tags or transfers mail. The directory lists the full-access Claude endpoint, not this one.
No tool among the 28 creates a shipment. get_shipment_by_mail_item only reads tracking for a shipment someone else already created. LegalZoom's own REST API does expose Create Shipment and Get Shipping Rates, and its MCP limitations page states the assistant cannot create or modify shipping addresses. Forwarding stays outside this tool surface.
Scanning can. LegalZoom's pricing page includes 5 digitized items monthly on the $39 Starter MailBox plan and charges $3 per mail item received over plan limits, plus $0.15 per colour page beyond 20 pages per document. Secure shredding is listed as free. No tool in the 28 reports a credit balance or remaining quota.
The contents of your postal mail. get_mail_item_text returns extracted text from scanned documents, get_mail_item_pdf_url returns temporary links to scanned PDFs, and get_mail_item_envelope_image_url returns exterior photos showing sender details on unopened items. get_current_user returns your name, email and phone. Links expire after roughly an hour.
Five, and only one is application-specific. The server's RFC 9728 descriptor advertises openid, email, profile, offline_access and legalzoom_mcp. The first four are OpenID identity claims and a refresh grant, so legalzoom_mcp alone carries the mail permission. It names no object and no verb, so it cannot separate reading a letter from shredding one.
Run claude mcp add with the HTTP transport against the server URL, then approve the browser sign-in. LegalZoom documents OAuth Dynamic Client Registration as the recommended path, so no client ID or secret is needed. An API key generated under Settings then Integrations is the documented fallback for clients without OAuth support.
No. They are separate servers on separate hosts from the same company. LegalZoom's other connector runs at legalzoom.com and dispatches matters to attorneys through request_attorney_review. This one runs at api.earthclassmail.com and manages postal mail. LegalZoom's machine-readable capability catalogue covers the attorney server only and names none of these 28 tools.
Sources
- LegalZoom Virtual Mail public MCP documentation (retrieved 2026-08-24). The page renders through Postman's documenter; its 2 rendered words sit in a client-side shell, and the full 150 KB collection — the MCP overview, authentication, per-client setup, all 28 tool descriptions and the limitations page — is served as JSON from the same host at
/api/collections/4138716/RWaHzAKJ. · retrieved 2026-08-24 - LegalZoom Virtual Mail public REST API documentation, same collection — Create Shipment, Get Shipping Rates and Share Scan via Email, none of which has an MCP counterpart (retrieved 2026-08-24) · retrieved 2026-08-24
- Earth Class Mail pricing and detailed fee schedule (retrieved 2026-08-24) · retrieved 2026-08-24
- Live OAuth posture check: RFC 9728 metadata at
https://api.earthclassmail.com/.well-known/oauth-protected-resource, which returned identical bodies for the root and for the/v2/mcp,/v2/mcp/claudeand/v2/mcp/readonlysuffixes while a control path returned 401 — confirming a genuine descriptor rather than an interpolating catch-all (2026-08-24) · retrieved 2026-08-24 - Live authentication challenge: anonymous MCP
initializeto the listed endpoint returned HTTP 401 (2026-08-24) · retrieved 2026-08-24 - LegalZoom capability catalogue, checked and found to cover the attorney-assistance server only (retrieved 2026-08-24) · retrieved 2026-08-24
- LegalZoom privacy policy — · Support
- Anthropic Connectors Directory entry — , read from our directory snapshot dated 2026-08-23 · retrieved 2026-08-23
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- LZ Virtual Mail
- Tools
- 28
- Domain
- api.earthclassmail.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.