Shipmail MCP Server
shipmail-mcp
npm
v0.7.15
Source verified
Published by shipmail-to — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Official Model Context Protocol (MCP) server for Shipmail, a business email provider with REST API, webhooks, and custom-domain inboxes for AI agents.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([shipmail_get_domain, shipmail_get_mailbox, shipmail_create_mailbox_export, shipmail_get_mailbox_export, shipmail_get_mailbox_import, shipmail_get_mailbox_rule, shipmail_get_mailbox_inbox_thread, shipmail_get_mailbox_inbox_message, shipmail_read_mailbox_inbox_attachment, shipmail_get_message, shipmail_list_threads, shipmail_get_thread, shipmail_get_member, shipmail_get_webhook, shipmail_get_webhook_delivery, shipmail_get_newsletter, shipmail_get_audience, shipmail_get_audience_feed, shipmail_get_subscriber, shipmail_get_calendar_event, shipmail_get_automation, shipmail_get_booking_page]) co-exist with external-action tools ([shipmail_create_inbox_reply_draft, shipmail_prepare_staged_attachment_upload, shipmail_send_message, shipmail_list_webhooks, shipmail_get_webhook, shipmail_create_webhook, shipmail_update_webhook, shipmail_delete_webhook, shipmail_rotate_webhook_secret, shipmail_test_webhook, shipmail_list_webhook_deliveries, shipmail_get_webhook_delivery, shipmail_replay_webhook_delivery]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [shipmail_get_domain, shipmail_get_mailbox, shipmail_create_mailbox_export, shipmail_get_mailbox_export, shipmail_get_mailbox_import, shipmail_get_mai
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow shipmail_get_domain → shipmail_create_inbox_reply_draft
Tools 150
Each tool and what it can reach — statically extracted from the published source.
shipmail_get_webhookingests untrusted inputnetwork egressshipmail_get_webhook_deliveryingests untrusted inputnetwork egressshipmail_create_inbox_reply_draftnetwork egressshipmail_create_mailbox_exportingests untrusted inputshipmail_create_webhooknetwork egressshipmail_delete_webhooknetwork egressshipmail_get_audienceingests untrusted inputshipmail_get_audience_feedingests untrusted inputshipmail_get_automationingests untrusted inputshipmail_get_booking_pageingests untrusted input
Show 140 more tools ↓
shipmail_get_calendar_eventingests untrusted inputshipmail_get_domainingests untrusted inputshipmail_get_mailboxingests untrusted inputshipmail_get_mailbox_exportingests untrusted inputshipmail_get_mailbox_importingests untrusted inputshipmail_get_mailbox_inbox_messageingests untrusted inputshipmail_get_mailbox_inbox_threadingests untrusted inputshipmail_get_mailbox_ruleingests untrusted inputshipmail_get_memberingests untrusted inputshipmail_get_messageingests untrusted inputshipmail_get_newsletteringests untrusted inputshipmail_get_subscriberingests untrusted inputshipmail_get_threadingests untrusted inputshipmail_list_threadsingests untrusted inputshipmail_list_webhook_deliveriesnetwork egressshipmail_list_webhooksnetwork egressshipmail_prepare_staged_attachment_uploadnetwork egressshipmail_read_mailbox_inbox_attachmentingests untrusted inputshipmail_replay_webhook_deliverynetwork egressshipmail_rotate_webhook_secretnetwork egressshipmail_send_messagenetwork egressshipmail_test_webhooknetwork egressshipmail_update_webhooknetwork egressshipmail_add_subscriberno sensitive capabilityshipmail_add_subscribers_batchno sensitive capabilityshipmail_cancel_mailbox_importno sensitive capabilityshipmail_cancel_newsletterno sensitive capabilityshipmail_cancel_scheduled_messageno sensitive capabilityshipmail_compose_message_with_fileno sensitive capabilityshipmail_consume_partner_mailbox_credential_grantno sensitive capabilityshipmail_create_audienceno sensitive capabilityshipmail_create_automationno sensitive capabilityshipmail_create_booking_pageno sensitive capabilityshipmail_create_calendar_eventno sensitive capabilityshipmail_create_domainno sensitive capabilityshipmail_create_mailboxno sensitive capabilityshipmail_create_mailbox_app_passwordno sensitive capabilityshipmail_create_mailbox_folderno sensitive capabilityshipmail_create_mailbox_forwardingno sensitive capabilityshipmail_create_mailbox_importno sensitive capabilityshipmail_create_mailbox_ruleno sensitive capabilityshipmail_create_newsletterno sensitive capabilityshipmail_create_newsletter_from_changelogno sensitive capabilityshipmail_create_partner_organizationno sensitive capabilityshipmail_create_reply_scanno sensitive capabilityshipmail_delete_audienceno sensitive capabilityshipmail_delete_booking_pageno sensitive capabilityshipmail_delete_calendar_eventno sensitive capabilityshipmail_delete_domainno sensitive capabilityshipmail_delete_inbox_messageno sensitive capabilityshipmail_delete_mailboxno sensitive capabilityshipmail_delete_mailbox_folderno sensitive capabilityshipmail_delete_mailbox_forwardingno sensitive capabilityshipmail_delete_mailbox_ruleno sensitive capabilityshipmail_get_calendar_availabilityno sensitive capabilityshipmail_get_domain_dns_recordsno sensitive capabilityshipmail_get_mailbox_delivery_routingno sensitive capabilityshipmail_get_partner_organizationno sensitive capabilityshipmail_get_partner_usageno sensitive capabilityshipmail_get_reply_scanno sensitive capabilityshipmail_get_scheduled_messageno sensitive capabilityshipmail_get_subscriber_by_emailno sensitive capabilityshipmail_inject_sandbox_inboundno sensitive capabilityshipmail_list_audiencesno sensitive capabilityshipmail_list_automationsno sensitive capabilityshipmail_list_booking_pagesno sensitive capabilityshipmail_list_calendar_eventsno sensitive capabilityshipmail_list_domainsno sensitive capabilityshipmail_list_mailbox_app_passwordsno sensitive capabilityshipmail_list_mailbox_foldersno sensitive capabilityshipmail_list_mailbox_forwardingno sensitive capabilityshipmail_list_mailbox_identitiesno sensitive capabilityshipmail_list_mailbox_importsno sensitive capabilityshipmail_list_mailbox_inbox_messagesno sensitive capabilityshipmail_list_mailbox_inbox_threadsno sensitive capabilityshipmail_list_mailbox_rulesno sensitive capabilityshipmail_list_mailboxesno sensitive capabilityshipmail_list_membersno sensitive capabilityshipmail_list_message_analyticsno sensitive capabilityshipmail_list_messagesno sensitive capabilityshipmail_list_newsletter_assetsno sensitive capabilityshipmail_list_newsletter_domainsno sensitive capabilityshipmail_list_newsletter_sender_identitiesno sensitive capabilityshipmail_list_newslettersno sensitive capabilityshipmail_list_partner_mailbox_credential_grantsno sensitive capabilityshipmail_list_partner_organizationsno sensitive capabilityshipmail_list_reply_scan_resultsno sensitive capabilityshipmail_list_scheduled_messagesno sensitive capabilityshipmail_list_subscribersno sensitive capabilityshipmail_list_suppressionsno sensitive capabilityshipmail_move_inbox_messageno sensitive capabilityshipmail_prepare_newsletter_asset_uploadno sensitive capabilityshipmail_preview_newsletterno sensitive capabilityshipmail_register_newsletter_assetno sensitive capabilityshipmail_remove_subscriberno sensitive capabilityshipmail_remove_suppressionno sensitive capabilityshipmail_reply_to_inbox_messageno sensitive capabilityshipmail_reply_to_inbox_threadno sensitive capabilityshipmail_reply_to_messageno sensitive capabilityshipmail_reply_to_threadno sensitive capabilityshipmail_resend_partner_ownership_invitationno sensitive capabilityshipmail_reset_mailbox_passwordno sensitive capabilityshipmail_restore_mailbox_importno sensitive capabilityshipmail_resubscribe_subscriberno sensitive capabilityshipmail_resume_mailboxno sensitive capabilityshipmail_resume_mailbox_importno sensitive capabilityshipmail_resume_newsletterno sensitive capabilityshipmail_revoke_audience_feedno sensitive capabilityshipmail_revoke_mailbox_app_passwordno sensitive capabilityshipmail_rotate_audience_feedno sensitive capabilityshipmail_run_automationno sensitive capabilityshipmail_run_newsletter_preflightno sensitive capabilityshipmail_schedule_newsletterno sensitive capabilityshipmail_search_domainsno sensitive capabilityshipmail_send_inbox_reply_draftno sensitive capabilityshipmail_send_newsletter_testno sensitive capabilityshipmail_set_auto_replyno sensitive capabilityshipmail_set_spam_filterno sensitive capabilityshipmail_statusno sensitive capabilityshipmail_suspend_mailboxno sensitive capabilityshipmail_undo_mailbox_importno sensitive capabilityshipmail_unsubscribe_subscriberno sensitive capabilityshipmail_update_audienceno sensitive capabilityshipmail_update_audience_feedno sensitive capabilityshipmail_update_automationno sensitive capabilityshipmail_update_booking_pageno sensitive capabilityshipmail_update_calendar_eventno sensitive capabilityshipmail_update_domainno sensitive capabilityshipmail_update_inbox_messageno sensitive capabilityshipmail_update_inbox_thread_attentionno sensitive capabilityshipmail_update_mailboxno sensitive capabilityshipmail_update_mailbox_delivery_routingno sensitive capabilityshipmail_update_mailbox_folderno sensitive capabilityshipmail_update_mailbox_ruleno sensitive capabilityshipmail_update_newsletterno sensitive capabilityshipmail_update_partner_organizationno sensitive capabilityshipmail_update_scheduled_messageno sensitive capabilityshipmail_update_subscriberno sensitive capabilityshipmail_upload_newsletter_asset_with_fileno sensitive capabilityshipmail_verify_domainno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (150 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.7.15 latest |
A 97/100 | 1 | 1.13.0 | 2026-09-07 |
v0.7.14 |
A 97/100 | 1 | 1.13.0 | 2026-09-01 |
v0.7.13 |
A 97/100 | 1 | 1.13.0 | 2026-08-30 |
v0.7.3 |
A 97/100 | 1 | 1.13.0 | 2026-08-28 |
v0.7.2 |
A 97/100 | 1 | 1.12.1 | 2026-08-02 |
Show 5 more versions ↓
v0.5.10 |
A 97/100 | 1 | 1.12.1 | 2026-07-29 |
v0.5.9 |
A 97/100 | 1 | 1.12.1 | 2026-07-28 |
v0.5.7 |
A 97/100 | 1 | 1.12.1 | 2026-07-27 |
v0.5.4 |
A 97/100 | 1 | 1.12.1 | 2026-07-27 |
v0.4.0 |
A 97/100 | 1 | 1.10.0 | 2026-07-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan shipmail-mcp --onlineMore in API Development
Adapters for the FrontMCP framework
Transcend MCP Server — Admin tools.
Transcend MCP Server — Assessments tools.
MCP Server for Bling
MCP Server for Blogger API
Official MCP server for Brilliant Directories — manage members, posts, leads, reviews, and more.