go-mapi Edge extension security report

go-mapi brings "Send to → Mail recipient" to Gmail and Google Workspace users on Windows. Right-click any file in Windows Explorer, click "Send to → Mail recipient", and the email appears ready to send in Gmail - no subscription fees, completely open source. ## ⚠️ COMPANION INSTALLER REQUIRED This extension requires a free, open-source Windows installer that registers two small local components: 1. A MAPI Interceptor DLL — captures email requests from Windows applications 2. A Native Messaging Host — relays those requests to this browser extension Download the installer from GitHub Releases (one-click setup, no terminal needed): https://github.com/marcfargas/go-mapi/releases/latest/download/go-mapi-setup.exe Both components are open-source, run entirely on your local machine, and are removed cleanly via Windows Settings → Apps. Source code: https://github.com/marcfargas/go-mapi ## THE PROBLEM Windows has a built-in email feature called MAPI (Messaging Application Programming Interface) that lets any program send emails through your default email client. This powers: • "Send to → Mail recipient" in Windows Explorer • "Email" buttons in PDF readers, Office apps, and thousands of Windows programs • Print-to-PDF-and-email workflows • Document sharing from any application Gmail and Google Workspace have never supported MAPI. If Gmail is your email provider, these features simply don't work. Third-party tools like Affixa filled this gap for years, but Affixa shut down in 2024, leaving Google Workspace users with no native solution. go-mapi is the free, open-source replacement. ## WHAT MAKES GO-MAPI DIFFERENT ✓ Free & Open Source - No subscription fees, no paid tiers, no feature locks ✓ Privacy-First - Data stays on your computer until you send; no third-party servers ✓ Simple Setup - Install extension + run one PowerShell command to install local components; works immediately ✓ Enterprise-Ready - Deployable via Group Policy and Chrome Enterprise Policy ✓ Active Development - Open source on GitHub with regular updates ## KEY FEATURES • Windows Integration: Makes Gmail your default MAPI email client • Right-Click Sending: "Send to → Mail recipient" from Windows Explorer • Application Support: Works with any Windows app that uses MAPI • Attachment Support: Send files of any size (up to Gmail's limits) • Draft or Send: Save emails as Gmail drafts to edit later, or send immediately • UTF-8 Support: Handles international characters correctly • Notifications: Desktop alerts when new emails are ready • Chrome & Edge: Works in both browsers ## HOW IT WORKS go-mapi uses a three-part architecture designed for security and simplicity: 1. MAPI Interceptor (DLL) - Captures email requests from Windows applications 2. Native Messaging Host (Local Service) - Watches for new emails and sends them to the browser 3. Browser Extension (This Extension) - Displays emails and uses Gmail API to send All data stays on your local machine until you explicitly send the email. No third-party servers, no data collection. ## SETUP INSTRUCTIONS Step 1: Install This Extension Click "Add to Chrome" above. Step 2: Download and Run the Installer Download from: https://github.com/marcfargas/go-mapi/releases/latest/download/go-mapi-setup.exe Click through the UAC prompt. The installer registers the DLL, native host, and browser manifests for Chrome, Edge, Brave, Vivaldi, and Chromium automatically. Step 3: Test It 1. Right-click any file in Windows Explorer 2. Select "Send to → Mail recipient" 3. The go-mapi popup opens with the file attached 4. Click "Save as Draft" or "Send Now" That's it! Any Windows program that supports email will now use Gmail. ## PRIVACY & SECURITY What data does go-mapi collect? None. go-mapi is 100% local. Email data is stored temporarily in your Windows temp folder and deleted after processing. No analytics, no telemetry, no tracking, no external servers except Gmail API (only when you send). What permissions does the extension need? • nativeMessaging - Communicate with the local service • identity - Sign in to Google via Chrome's OAuth • storage - Save your preferences • notifications - Desktop alerts • Gmail API access - Send emails you approve Can go-mapi access my existing emails? No. The extension only requests gmail.compose and gmail.send scopes. It cannot read your inbox or existing messages. ## REQUIREMENTS • Windows 10 or 11 • Google Chrome or Microsoft Edge • Gmail or Google Workspace account • Administrator access for initial installation ## ENTERPRISE DEPLOYMENT Deploy binaries via MSI/SCCM, force-install extension via Chrome Enterprise Policy, export registry keys for GPO. See GitHub for full deployment guide. ## SUPPORT • GitHub: https://github.com/marcfargas/go-mapi • Issues: https://github.com/marcfargas/go-mapi/issues ## TROUBLESHOOTING Extension popup says "Not Connected": • Verify the installer ran successfully (check C:\Program Files\go-mapi\) • Restart your browser after installation • The extension auto-reconnects every 6 seconds "Send to → Mail recipient" doesn't work: • Check that go-mapi is your default mail client in Windows Settings → Apps → Default apps • Re-run the installer if needed • Restart Windows if the DLL was recently registered Open an issue on GitHub if you need help. ## LICENSE go-mapi is licensed under LGPL-3.0-or-later. Free to use, modify, and distribute. You must share modifications under the same license. ## CONTRIBUTING We welcome bug reports, feature requests, code contributions, and documentation improvements. Visit the GitHub repository to get started. Built with C++ (MinGW), Go, React, and TypeScript.