Pure client-side Outlook mail receiving and management tool. Support importing accounts with custom format (including Xinlan format), local state preservation, batch refreshing Access Tokens and retrieving mail.
Select or import accounts on the left, then click fetch
Supports Microsoft Graph API direct connect or proxy fetch
Key Features
Pure client-side Outlook email helper powered by Microsoft Graph API.
Client-Side Running
All token refreshing and mail fetching happen directly in your browser. Data is never uploaded to any server, ensuring 100% privacy.
Custom Format Import
Support importing Xinlan Email Helper format, allowing customized column sequence (Email, Password, Tokens, etc.) and custom delimiters (like ----).
Batch Refresh Tokens
Refresh OAuth Access Tokens in batch with one click, automatically extending validity and updating the local Refresh Token.
Secure Email Reader
Built-in sandboxed HTML email viewer to prevent CSS bleeding and XSS risks while preserving the original email styles.
Smart Proxy Testing
Built-in high-availability CORS proxies with auto latency testing on page load. Fully supports private Worker domain overrides.
Flexible Custom Export
Select specific fields and define custom row separators to export your mail accounts back to text or backup storage.
Frequently Asked Questions
Find answers to the most common questions.
The tool uses your imported Refresh Token and Client ID to send direct requests to Microsoft OAuth endpoints to refresh the Access Token, then uses that token to call Microsoft Graph API to retrieve emails.
Yes, completely safe. This is a purely client-side tool without any backend database. All account information is stored locally on your device in your browser's local storage (localStorage). However, do not use it on public computers and keep your browser data secure.
Due to Microsoft Login endpoint security, if your Client ID is registered in Azure as a 'Web' app instead of a 'SPA (Single Page Application)', Microsoft will block direct browser-based token refresh requests. You can enable 'CORS Proxy' in settings, or install a browser Allow-CORS extension to resolve it.
You can register a free application in the Azure portal, grant it 'Mail.Read' and 'offline_access' permissions to get a Client ID, and direct users to complete OAuth login to get a Refresh Token. The tool also provides common public Client ID presets (like Azure CLI).
It is a text file format where each line represents an account, commonly separated by '----', e.g., 'Account----Password----ClientID----ClientSecret----RefreshToken'. You can match any column ordering with our custom parser mappings.