Mailchimp (damientilman) MCP Server
mailchimp-mcp
PyPI
v1.2.0
Published by damientilman — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for the Mailchimp Marketing API — access campaigns, audiences, reports, and more from any MCP-compatible client.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 3
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: create_account_export → delete_file → create_batch_webhook. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow create_account_export → delete_file → create_batch_webhook
medium Tool "delete_file" can modify the filesystemMTC-CAP-002
Tool "delete_file" can write, overwrite or delete files (keyword "delete_file" in tool name). Verify it is scoped to a safe directory.
Fix: Constrain file operations to an explicit, non-sensitive root; reject path traversal.
Location: tool delete_file
low Mutating tool "delete_file" declares no destructiveHintMTC-CAP-005
Tool "delete_file" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool delete_file
Tools 200
Each tool and what it can reach — statically extracted from the published source.
delete_filereads sensitive datawrites filesget_fileingests untrusted inputreads sensitive datacreate_account_exportingests untrusted inputcreate_batch_webhooknetwork egresscreate_campaign_folderingests untrusted inputcreate_template_folderingests untrusted inputcreate_webhooknetwork egressdelete_batch_webhooknetwork egressdelete_webhooknetwork egressget_account_exportingests untrusted input
Show 190 more tools ↓
get_audience_abuse_reportingests untrusted inputget_audience_detailsingests untrusted inputget_authorized_appingests untrusted inputget_batch_webhookingests untrusted inputget_campaign_sub_reportsingests untrusted inputget_connected_siteingests untrusted inputget_landing_pageingests untrusted inputget_promo_ruleingests untrusted inputget_segmentingests untrusted inputget_storeingests untrusted inputget_store_cartingests untrusted inputget_store_productingests untrusted inputget_templateingests untrusted inputget_verified_domainingests untrusted inputlist_account_exportsingests untrusted inputlist_file_foldersreads sensitive datalist_filesreads sensitive datalist_templatesingests untrusted inputpause_rss_campaigningests untrusted inputresume_rss_campaigningests untrusted inputsearch_membersingests untrusted inputupdate_batch_webhooknetwork egressupload_filenetwork egressadd_automation_queue_subscriberno sensitive capabilityadd_memberno sensitive capabilityadd_member_eventno sensitive capabilityadd_member_noteno sensitive capabilityadd_members_to_segmentno sensitive capabilitybatch_subscribeno sensitive capabilitycancel_sendno sensitive capabilitycreate_audienceno sensitive capabilitycreate_batchno sensitive capabilitycreate_campaignno sensitive capabilitycreate_campaign_feedbackno sensitive capabilitycreate_connected_siteno sensitive capabilitycreate_interestno sensitive capabilitycreate_interest_categoryno sensitive capabilitycreate_landing_pageno sensitive capabilitycreate_merge_fieldno sensitive capabilitycreate_promo_codeno sensitive capabilitycreate_promo_ruleno sensitive capabilitycreate_segmentno sensitive capabilitycreate_storeno sensitive capabilitycreate_store_cartno sensitive capabilitycreate_store_productno sensitive capabilitycreate_templateno sensitive capabilitycreate_verified_domainno sensitive capabilitycustomize_signup_formno sensitive capabilitydelete_audienceno sensitive capabilitydelete_campaignno sensitive capabilitydelete_campaign_feedbackno sensitive capabilitydelete_campaign_folderno sensitive capabilitydelete_connected_siteno sensitive capabilitydelete_interestno sensitive capabilitydelete_interest_categoryno sensitive capabilitydelete_landing_pageno sensitive capabilitydelete_memberno sensitive capabilitydelete_member_noteno sensitive capabilitydelete_member_permanentno sensitive capabilitydelete_merge_fieldno sensitive capabilitydelete_promo_codeno sensitive capabilitydelete_promo_ruleno sensitive capabilitydelete_segmentno sensitive capabilitydelete_storeno sensitive capabilitydelete_store_cartno sensitive capabilitydelete_templateno sensitive capabilitydelete_template_folderno sensitive capabilitydelete_verified_domainno sensitive capabilityget_account_infono sensitive capabilityget_audience_activityno sensitive capabilityget_audience_clientsno sensitive capabilityget_audience_growth_historyno sensitive capabilityget_audience_top_locationsno sensitive capabilityget_automation_emailno sensitive capabilityget_automation_email_queueno sensitive capabilityget_automation_emailsno sensitive capabilityget_automation_queue_subscriberno sensitive capabilityget_automation_removed_subscriberno sensitive capabilityget_automation_summaryno sensitive capabilityget_batch_statusno sensitive capabilityget_campaign_abuse_reportno sensitive capabilityget_campaign_abuse_reportsno sensitive capabilityget_campaign_adviceno sensitive capabilityget_campaign_click_detailsno sensitive capabilityget_campaign_contentno sensitive capabilityget_campaign_detailsno sensitive capabilityget_campaign_feedbackno sensitive capabilityget_campaign_folderno sensitive capabilityget_campaign_locationsno sensitive capabilityget_campaign_recipientsno sensitive capabilityget_campaign_reportno sensitive capabilityget_campaign_send_checklistno sensitive capabilityget_campaign_sent_tono sensitive capabilityget_campaign_unsubscribesno sensitive capabilityget_chimp_chatterno sensitive capabilityget_domain_performanceno sensitive capabilityget_ecommerce_product_activityno sensitive capabilityget_eepurl_activityno sensitive capabilityget_email_activityno sensitive capabilityget_landing_page_reportno sensitive capabilityget_member_activityno sensitive capabilityget_member_eventsno sensitive capabilityget_member_goalsno sensitive capabilityget_member_journey_eventsno sensitive capabilityget_member_tagsno sensitive capabilityget_open_detailsno sensitive capabilityget_promo_codeno sensitive capabilityget_surveyno sensitive capabilityget_survey_question_answersno sensitive capabilityget_survey_questions_reportno sensitive capabilityget_survey_reportno sensitive capabilityget_survey_responseno sensitive capabilityget_survey_responsesno sensitive capabilityget_template_default_contentno sensitive capabilityget_template_folderno sensitive capabilitylist_accountsno sensitive capabilitylist_audience_abuse_reportsno sensitive capabilitylist_audience_membersno sensitive capabilitylist_audiencesno sensitive capabilitylist_authorized_appsno sensitive capabilitylist_automation_removed_subscribersno sensitive capabilitylist_automationsno sensitive capabilitylist_batch_webhooksno sensitive capabilitylist_batchesno sensitive capabilitylist_campaign_feedbackno sensitive capabilitylist_campaign_foldersno sensitive capabilitylist_campaignsno sensitive capabilitylist_connected_sitesno sensitive capabilitylist_ecommerce_storesno sensitive capabilitylist_interest_categoriesno sensitive capabilitylist_interestsno sensitive capabilitylist_landing_page_reportsno sensitive capabilitylist_landing_pagesno sensitive capabilitylist_member_notesno sensitive capabilitylist_merge_fieldsno sensitive capabilitylist_promo_codesno sensitive capabilitylist_promo_rulesno sensitive capabilitylist_segment_membersno sensitive capabilitylist_segmentsno sensitive capabilitylist_signup_formsno sensitive capabilitylist_store_cartsno sensitive capabilitylist_store_customersno sensitive capabilitylist_store_ordersno sensitive capabilitylist_store_productsno sensitive capabilitylist_survey_reportsno sensitive capabilitylist_surveysno sensitive capabilitylist_template_foldersno sensitive capabilitylist_verified_domainsno sensitive capabilitylist_webhooksno sensitive capabilitypause_automationno sensitive capabilitypause_automation_emailno sensitive capabilitypingno sensitive capabilitypublish_landing_pageno sensitive capabilitypublish_surveyno sensitive capabilityremove_automation_subscriberno sensitive capabilityremove_members_from_segmentno sensitive capabilityreplicate_campaignno sensitive capabilityresend_to_non_openersno sensitive capabilityschedule_campaignno sensitive capabilitysearch_automation_campaignsno sensitive capabilitysearch_campaignsno sensitive capabilitysend_campaignno sensitive capabilitysend_test_emailno sensitive capabilityset_campaign_contentno sensitive capabilitystart_automationno sensitive capabilitystart_automation_emailno sensitive capabilitytag_memberno sensitive capabilitytrigger_customer_journeyno sensitive capabilityunpublish_landing_pageno sensitive capabilityunpublish_surveyno sensitive capabilityunschedule_campaignno sensitive capabilityunsubscribe_memberno sensitive capabilityupdate_audienceno sensitive capabilityupdate_campaignno sensitive capabilityupdate_campaign_feedbackno sensitive capabilityupdate_campaign_folderno sensitive capabilityupdate_landing_pageno sensitive capabilityupdate_memberno sensitive capabilityupdate_member_noteno sensitive capabilityupdate_merge_fieldno sensitive capabilityupdate_promo_codeno sensitive capabilityupdate_promo_ruleno sensitive capabilityupdate_segmentno sensitive capabilityupdate_storeno sensitive capabilityupdate_store_cartno sensitive capabilityupdate_templateno sensitive capabilityupdate_template_folderno sensitive capabilityupsert_memberno sensitive capabilityverify_connected_site_scriptno sensitive capabilityverify_verified_domainno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.2.0 latest |
A 93/100 | 3 | 1.13.0 | 2026-08-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mailchimp-mcp --online --registry pypiOther implementations of Mailchimp 7
Independent packages implementing the same tool, scanned with the same engine. Compare all 8 side by side →
AgentX MCP server for Mailchimp Automations API
Draft, test, and send Mailchimp campaigns straight from your MCP client — with audience management, subscriber CRUD, and post-send analytics behind safe-by-default send gates. STDIO or Streamable HTTP.
MCP server for Mailchimp Marketing API v3 — 286 tools covering campaigns, lists, automations, e-commerce, templates, reports, and more
MCP server for Mailchimp API integration
Mailchimp MCP Pack — manage audiences, campaigns, and members via Mailchimp Marketing API.
The only local-first, AI-native Mailchimp assistant. Get CSM intelligence, marketing analytics, and campaign execution—all through Claude Desktop conversations. Free read-only tier available. Upgrade for full automation.
More in Marketing & Social
Official Abyssfall game info, newsletter double opt-in, and merch reservation tools.
AdCritter ads platform: docs, API reference, app scaffolding, and white-label integration.
Google AdSense MCP Server - Monitor earnings, reports, and account health via Claude/AI
Operational empathy for technical founders + PE/VC operators navigating high-stakes B2B interactions. 28 MCP tools + CLI: ICP scoring, persona simulation, battlecards, deal classification, prospect discovery, investor matching, founder wellness, plus mark
MCP server for Bing Webmaster Tools — SEO site management, URL submission, sitemaps, stats, keywords
MCP (Model Context Protocol) server that helps AI agents use Primer Brand (@primer/react-brand) correctly when building GitHub marketing and landing pages.