protogrid

Search / io.github.Misar-AI/misarmail-mcp

MisarMail MCP Server

R1· needs a key

Send transactional email, run campaigns, manage contacts and automations, audit deliverability.

v5.1.2 · active · repository · website · descriptor JSON · versions

An agent can connect on its own if it already holds MISARMAIL_MCP_TOKEN.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
Quality85good
Trust93of 100
Uptime, 30 days96%
Latency p50657 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "misarmail-mcp": {
      "type": "http",
      "url": "https://api.misar.io/mail/mcp",
      "headers": {
        "Authorization": "Bearer ${MISARMAIL_MCP_TOKEN}"
      }
    }
  }
}
claude mcp add --transport http misarmail-mcp https://api.misar.io/mail/mcp --header "Authorization: Bearer ${MISARMAIL_MCP_TOKEN}"
[mcp_servers.misarmail-mcp]
url = "https://api.misar.io/mail/mcp"
bearer_token_env_var = "MISARMAIL_MCP_TOKEN"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "misarmail-mcp": {
      "type": "remote",
      "url": "https://api.misar.io/mail/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:MISARMAIL_MCP_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "misarmail-mcp": {
      "type": "http",
      "url": "https://api.misar.io/mail/mcp",
      "headers": {
        "Authorization": "Bearer ${MISARMAIL_MCP_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=misarmail-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLm1pc2FyLmlvL21haWwvbWNwIiwiaGVhZGVycyI6eyJBdXRob3JpemF0aW9uIjoiQmVhcmVyICR7TUlTQVJNQUlMX01DUF9UT0tFTn0ifX0%3D"
}
{
  "servers": {
    "misarmail-mcp": {
      "type": "http",
      "url": "https://api.misar.io/mail/mcp",
      "headers": {
        "Authorization": "Bearer ${MISARMAIL_MCP_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "misarmail-mcp": {
      "httpUrl": "https://api.misar.io/mail/mcp",
      "headers": {
        "Authorization": "Bearer ${MISARMAIL_MCP_TOKEN}"
      }
    }
  }
}
extensions:
  "misarmail-mcp":
    enabled: true
    name: "misarmail-mcp"
    type: streamable_http
    uri: "https://api.misar.io/mail/mcp"
    headers:
      "Authorization": "Bearer ${MISARMAIL_MCP_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${MISARMAIL_MCP_TOKEN}. The registry never accepts secret values.

Quality 85 / 100good

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations55 of 55 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • warn
    tools.token_costabout 8,163 tokens to load every tool
  • warn
    tools.api_dump55 tools, 65% named like REST operations: looks like an API mapped one endpoint per tool
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 98 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable@misarmail/[email protected] resolved: 98 packages

55 tools, about 8,163 tokens to load them all · tool set 2dd67c7cb13f · checked 2026-10-20 10:35 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

provenance90
liveness98
freshness85
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-96% ~updated-62d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@misarmail/[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.misar.io/mail/mcp streamable-httpapi_key ${MISARMAIL_MCP_TOKEN}yes96%657 ms–2026-10-20
packageregistryversionruntimesecrets
@misarmail/mcpnpm5.1.2npxMISARMAIL_API_KEY

Tools (55)

add_domainAdd a sending domain and return the DNS records to publish. The domain cannot send until those records are live and verify_domain succeeds.
archive_emailMove an email to the archive folder. Reversible — the message is not deleted.
categorize_inbox_emailsRun AI categorisation over a batch of inbox emails to label intent and priority. Consumes AI credits — pass only the emails you actually need triaged.
check_dmarcread-onlyCheck live SPF, DKIM, and DMARC DNS records for a domain and report alignment problems with the exact record to publish. Works for any domain, not only your own.
clear_sandboxdestructiveDelete every captured sandbox email. Affects only intercepted test messages, never real sent mail.
configure_inbound_domainConfigure inbound email routing for a subdomain so replies land in the MisarMail unified inbox. Returns the MX record to publish.
create_ab_testCreate one A/B test variant on a campaign. The real API stores a single variant per call, so build a test by calling this once per variant (e.g. twice for a plain A/B split) using the same campaign_id and distinct `variant` labels. Each variant gets send_percent of the audience; auto_select_winner (with winner_wait_hours) can pick and send the winner automatically, or use select_ab_test_winner to do it manually.
create_automationCreate an automation workflow from a trigger, saved as a paused draft. The API's create endpoint only accepts a name and trigger — it has no fields for workflow steps or starting active; configure the step sequence in the MisarMail dashboard's visual builder, and use toggle_automation to activate once reviewed.
create_campaignCreate a new email marketing campaign as a draft. Creating never sends or schedules anything — once the content and audience are confirmed, call send_campaign to send it now or schedule it for later.
create_contactAdd a single contact. Adding a contact records consent to email them — only add addresses that opted in, or the send will damage sender reputation and may breach CAN-SPAM/GDPR.
create_landing_pageCreate a hosted landing page with a single hero block (headline, subheadline, CTA). Returns the public URL. The real API stores pages as a page-builder block array with no dedicated headline/CTA fields, so this tool translates your inputs into one 'hero' block — for multi-block pages or a real CTA link, use the landing page editor in the MisarMail dashboard.
create_templateCreate a reusable email template. Use {{variable}} placeholders for personalisation — they are substituted at send time and previewable via render_template.
generate_reportread-onlyGenerate a structured analytics report over a date range. Report types: campaign_performance, engagement_funnel, cohort_analysis, and send_time_heatmap (best hour/day to send).
generate_subject_linesGenerate AI subject-line variants for a campaign topic, optionally tuned to a tone and audience. Good input for create_ab_test.
get_analyticsread-onlyGet delivery and engagement analytics — sent, delivered, opened, clicked, bounced, and complained — for the account or one campaign, grouped by day/week/month.
get_analytics_timelineread-onlyGet a day/week/month breakdown of sent, delivered, opened, clicked, bounced, complained, replied, and unsubscribed — across every send medium (campaigns, inbox compose, API, MCP, SDKs, GraphQL, automations). The timeline counterpart to get_analytics's period totals.
get_automationread-onlyGet one automation workflow in full: trigger, every step with its delay, and per-step completion stats.
get_campaignread-onlyGet full details for one campaign: content, audience segment, schedule, and delivery statistics (sent, opened, clicked, bounced, complained).
get_contact_scoreread-onlyGet engagement score, engagement tier, and churn risk for one contact — or the lowest-engagement contacts across the list when contact_id is omitted. Use before a re-engagement campaign.
get_deliverability_scoreread-onlyGet the account deliverability score (0–100) and letter grade (A–F) with the factors dragging it down. Start here when asked why emails are landing in spam.
get_emailRead the full content of a single email by ID, including headers, body, and attachments metadata. Side effect: marks the email as read.
get_formread-onlyGet one signup form including its fields, embed code, and redirect behaviour.
get_form_submissionsread-onlyList submissions for a signup form, including the submitted field values and timestamps.
get_inbox_conversation_messagesread-onlyGet every message in one inbox conversation, oldest first, with sender and timestamps.
get_integrationread-onlyGet one integration's configuration, scopes, and last sync result.
get_marketplace_itemread-onlyGet one marketplace listing with its full preview, author, and install count.
get_monetization_statsread-onlyGet newsletter monetization stats: paid subscribers, MRR, churn, and sponsorship revenue for the period.
get_revenue_attributionread-onlyAttribute ecommerce revenue to email — revenue per campaign, per contact, and average order value from tracked conversions.
get_warmup_statusread-onlyGet IP/domain warm-up progress and today's remaining send capacity. Exceeding warm-up capacity on a new domain is the fastest way to get throttled or blocklisted.
import_contactsdestructiveBulk-import up to 5,000 contacts in one call. By default, addresses that already exist are skipped rather than duplicated — pass update_existing: true to update them instead. Returns per-row results so you can see which rows were rejected and why.
list_ab_testsread-onlyList A/B tests with per-variant results and whether a winner has been selected yet.
list_api_keysread-onlyList API keys on the account with their scopes and last-used time. Key secrets are never returned — only metadata.
list_automationsread-onlyList automation workflows (welcome series, re-engagement, drip sequences) with their trigger type and active state.
list_campaignsread-onlyList email marketing campaigns with their status, audience size, and headline metrics. Filter by status to find drafts ready to send or campaigns still sending.
list_contactsread-onlyList contacts with their subscription status and engagement metrics. Filter by status to find unsubscribed or bounced addresses that should be excluded from sends.
list_domainsread-onlyList sending domains with verification status and their DKIM/SPF/DMARC records. Check here first when a send fails with an unverified-sender error.
list_emailsread-onlyList emails from a mailbox folder with optional full-text search across subject and body. Use this for reading the unified inbox; use list_campaigns for marketing sends.
list_formsread-onlyList signup forms with their embed status and conversion counts.
list_inbox_conversationsread-onlyList unified-inbox conversations (threads) with their status and detected intent. Use this for triage; use list_emails for individual messages in a folder.
list_integrationsread-onlyList connected third-party integrations and their sync status.
list_marketplace_itemsread-onlyBrowse the MisarMail template marketplace for ready-made email and automation templates.
list_sandbox_sendsread-onlyList emails captured by sandbox mode. Sandbox intercepts sends instead of delivering them — use it to verify templates and automations without emailing anyone.
list_templatesread-onlyList saved email templates with their variable placeholders, so you can pick one for a campaign or transactional send.
render_templateread-onlyRender a template with sample variables and return the resulting HTML and subject. Use this to preview personalisation before sending anything.
reply_to_emailReply to an existing email thread. The sender address and threading headers are derived from the original message, so only the body is required.
run_deliverability_auditread-onlyRun a full deliverability audit across authentication (SPF/DKIM/DMARC), domain reputation, list hygiene, content signals, and blocklist status. Returns prioritized findings.
select_ab_test_winnerdestructiveSelect the winning variant and send it to the remaining audience. This triggers a real send to everyone who was held back — it cannot be undone.
send_campaigndestructiveSend a campaign now, or schedule it for a future time by passing scheduled_at. This delivers real email to real recipients and cannot be undone once sending starts — confirm the audience with get_campaign first.
send_emailSend a transactional email from a verified MisarMail account. `from.email` must match an email account you have already verified — use list_domains to check which sender domains are available. Returns the message ID and queue status.
toggle_automationActivate or pause an automation. Activating starts enrolling contacts and sending on the configured schedule.
toggle_integrationEnable or disable an integration. Disabling stops all syncing but preserves the stored credentials.
update_contactdestructiveUpdate an existing contact by email address, including changing subscription status. Setting status to unsubscribed immediately excludes them from every future campaign. Does not support tags, phone, company, or job title — the API has no fields for them.
upgraderead-onlyShow the current MisarMail plan, how much of each quota is left, and what upgrading unlocks, with the link to upgrade. Call it any time — not only after hitting a limit. Reads only: it never changes the plan or takes payment; the user upgrades by following the link. On a local install, open=true also opens that link in the user's browser.
validate_emailread-onlyValidate an email address before sending: syntax, MX records, disposable-domain and role-account detection. Use this to protect sender reputation on imported lists.
verify_domainRe-check a domain's DNS records and mark it verified if they resolve. Safe to retry — DNS propagation can take up to 48 hours.

Schemas: list_tools.

Similar MCP servers

More from io.github.Misar-AI

Official server.json
{
  "name": "io.github.Misar-AI/misarmail-mcp",
  "title": "MisarMail MCP Server",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.misar.io/mail/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "isRequired": true,
          "description": "MisarMail API key. Format: Bearer msk_… — create one at https://mail.misar.io/developers"
        }
      ]
    }
  ],
  "version": "5.1.2",
  "packages": [
    {
      "version": "5.1.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@misarmail/mcp",
      "runtimeHint": "npx",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "MISARMAIL_API_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Your MisarMail API key (msk_…). Create one at https://mail.misar.io/developers, or omit it and run the \"login\" tool to authenticate via browser."
        },
        {
          "name": "MISARMAIL_BASE_URL",
          "format": "string",
          "description": "Override the API base URL. Only needed for self-hosted instances."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/Misar-AI/misarmail-mcp",
    "source": "github"
  },
  "websiteUrl": "https://www.misarmail.com",
  "description": "Send transactional email, run campaigns, manage contacts and automations, audit deliverability."
}