Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "commsharbor": {
      "type": "http",
      "url": "https://commsharbor.com/mcp"
    }
  }
}

claude mcp add --transport http commsharbor https://commsharbor.com/mcp

[mcp_servers.commsharbor]
url = "https://commsharbor.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "commsharbor": {
      "type": "remote",
      "url": "https://commsharbor.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "commsharbor": {
      "type": "http",
      "url": "https://commsharbor.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=commsharbor&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vY29tbXNoYXJib3IuY29tL21jcCJ9"
}

{
  "servers": {
    "commsharbor": {
      "type": "http",
      "url": "https://commsharbor.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "commsharbor": {
      "httpUrl": "https://commsharbor.com/mcp"
    }
  }
}

extensions:
  "commsharbor":
    enabled: true
    name: "commsharbor"
    type: streamable_http
    uri: "https://commsharbor.com/mcp"
    timeout: 300

Quality 69 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations33 of 33 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: commsharbor_context (openWorldHint); commsharbor_audit (openWorldHint); commsharbor_email_domain_products_list (openWorldHint); …
pass
tools.token_costabout 5,837 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes369 tool changes in 30 days
fail
stability.rug_pull6 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

33 tools, about 5,837 tokens to load them all · tool set 99a1c97b1555 · tools last changed 2026-10-19 · checked 2026-10-20 13:49 UTC

Tool changes

2026-10-19commsharbor_email_security_checkadded
Check whether someone can send email as a domain: SPF, DKIM in common selectors, DMARC, MX, MTA-STS and BIMI, with a 0-100 score and the fixes, most severe first. Public DNS only. Free, no account. The same domain is served from memory for 10 minutes. A network can run 30 new checks per day. DKIM is looked up in common selectors only; `dkim_not_found` does not prove that no key exists. `incomplete: true` means a DNS answer failed and the score can be lower than the real one; `unread` names those parts, and a failed query never becomes a missing finding.
2026-10-16commsharbor_platform_contextadded
Confirm the caller's platform role. Tenant ownership grants nothing here: platform access is a separate, explicit grant.
2026-10-16commsharbor_auditadded
List tenant audit events. Audit records are never rewritten and never carry recipient PII.
2026-10-16commsharbor_meadded
Read the current account profile and platform role. `user.id` is the shared-account ID. Organizations are not listed here: they live in the shared account, which does not list them inside products yet — open a workspace by its ID with `GET /api/organizations/{organization_id}`.
2026-10-16commsharbor_logoutadded
Revoke the current session. Bootstrap/CSRF must belong to this browser and session. Other product sessions remain active.
2026-10-15commsharbor_auditremoved
List tenant audit events. Audit records are never rewritten and never carry recipient PII.
2026-10-15commsharbor_platform_contextremoved
Confirm the caller's platform role. Tenant ownership grants nothing here: platform access is a separate, explicit grant.
2026-10-15commsharbor_email_service_requestadded
Request an included service with activation on demand. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
2026-10-15commsharbor_email_job_getadded
Read one durable job in this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
2026-10-15commsharbor_email_alias_resumeadded
Restore a suspended alias without changing its destinations. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance85

liveness100

freshness100

hygiene100

+repository +dns-namespace +website +reachable +uptime-99% +updated-6d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://commsharbor.com/mcp` streamable-http	none	yes	99%	495 ms	2025-06-18	2026-10-20

Tools (33)

`commsharbor_audit`read-only	List tenant audit events. Audit records are never rewritten and never carry recipient PII.
`commsharbor_context`read-only	Resolve the active organization identity. Read this before a write when you are not certain which tenant is active. Guessing is how data lands in the wrong organization. An organization API key answers `kind: api_key` with its scopes.
`commsharbor_email_alias_create`	Create an alias to existing mailboxes in this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_alias_resume`	Restore a suspended alias without changing its destinations. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_alias_suspend`	Suspend an alias without deleting its configuration. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_alias_update`destructive	Change the alias destinations within this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_domain_assistance`	Request assisted DNS setup. The durable request waits for operator activation. It does not change DNS or expose a provider credential. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_domain_create`	Register a domain and its ownership challenge. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_domain_get`read-only	Read domain setup, DNS records and observed readiness. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_domain_products_add`	Read or associate PageAudit and HookPulse with a domain in this organization. Native product access must be enabled. The private email backend confirms domain ownership in this organization. Selected native products must already be enabled. Association is idempotent.
`commsharbor_email_domain_products_list`read-only	Read or associate PageAudit and HookPulse with a domain in this organization. Native product access must be enabled. The private email backend confirms domain ownership in this organization. Selected native products must already be enabled. Association is idempotent.
`commsharbor_email_domain_setup`read-only	Find an existing domain. Return its organization and domain IDs only when this exact caller can open that organization. Otherwise return existing: null. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_domain_verify`	Queue a check of ownership, DNS and certificates. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_google_catalog`read-only	Read authorized Google metadata. This does not prove DNS ownership. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.
`commsharbor_email_google_connect`	Start five-minute Google consent with PKCE. Return an authorization URL. Signing in does not grant this access. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.
`commsharbor_email_google_disconnect`	Remove this product's saved Google connection and pending consent. Existing email and service resources remain intact. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.
`commsharbor_email_google_resolve`	Resolve website addresses for up to 20 selected Analytics properties. Search Console does not use this route. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.
`commsharbor_email_job_get`read-only	Read one durable job in this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_mailbox_create`	Create a mailbox within the current allowance. Trial mailboxes share 1 GB and cannot send email. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_mailbox_password`	Set the mailbox password. It is encrypted for the executor and is never returned. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_mailbox_resume`	Restore suspended mailbox access. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_mailbox_suspend`	Suspend access while preserving mailbox data. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_mailbox_update`destructive	Change mailbox name or quota within the plan. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_security_check`read-only	Check whether someone can send email as a domain: SPF, DKIM in common selectors, DMARC, MX, MTA-STS and BIMI, with a 0-100 score and the fixes, most severe first. Public DNS only. Free, no account. The same domain is served from memory for 10 minutes. A network can run 30 new checks per day. DKIM is looked up in common selectors only; `dkim_not_found` does not prove that no key exists. `incomplete: true` means a DNS answer failed and the score can be lower than the real one; `unread` names those parts, and a failed query never becomes a missing finding.
`commsharbor_email_service_request`	Request an included service with activation on demand. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_trial_activate`	Start the free receive-only Trial for 7 days, once per organization: 1 GB shared storage, unlimited mailboxes and no outgoing SMTP or external filter forwarding. Requires a new workspace and operator-proved native quota. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_workspace`read-only	Read the email workspace. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.
`commsharbor_email_workspace_snapshot`read-only	Read the current email workspace, DNS progress and recent jobs. The ID must match X-Organization-Id. Membership is checked again for each snapshot and delivered event. Events contain only an opaque change ID. DNS checks run in the private backend, with a 24-hour deadline and a visible resume action after pause.
`commsharbor_health`read-only	Read deployment health and build. Smoke tests wait for their own commit to appear here instead of racing edge propagation.
`commsharbor_logout`	Revoke the current session. Bootstrap/CSRF must belong to this browser and session. Other product sessions remain active.
`commsharbor_me`read-only	Read the current account profile and platform role. `user.id` is the shared-account ID. Organizations are not listed here: they live in the shared account, which does not list them inside products yet — open a workspace by its ID with `GET /api/organizations/{organization_id}`.
`commsharbor_organization_get`read-only	Open an organization by id: name, your role and the CommsHarbor plan. This is how a workspace is opened. Name and role come from the shared account (null with an organization API key, which carries neither); the plan is the organization's global entitlement in CommsHarbor.
`commsharbor_platform_context`read-only	Confirm the caller's platform role. Tenant ownership grants nothing here: platform access is a separate, explicit grant.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.commsharbor/commsharbor",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://commsharbor.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.1",
  "repository": {
    "url": "https://github.com/wrpbr/commsharbor",
    "source": "github"
  },
  "websiteUrl": "https://commsharbor.com",
  "description": "Domain email and webmail: set up domains, mailboxes and aliases, and check DNS verification."
}