MCP server subprocess env is filtered through _build_safe_env() which only passes safe baseline vars (PATH, HOME, XDG_*) plus whatever is explicitly in the config's env: block. Env vars from ~/.hermes/.env are NOT inherited by MCP subprocesses. The key must go directly in the config.yaml mcp_servers.agentmail.env section.