Loading…
Email for AI agents: send mail, manage contacts, automations & webhooks. Zero-DNS first send.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 6 days ago
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The send16 MCP server exposes 79 tools, focused primarily on communication, web, and AI capabilities. Its published description reads: "Email for AI agents: send mail, manage contacts, automations & webhooks". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates send16 F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Tool input schema requests a secret". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check send16's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add send16 to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.send16.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Verify the API key and return the authenticated workspace: name, plan, email quota (used/limit), and owner. Call this first to confirm the key works before sending. Pair with list_domains to see which
Send a transactional email through Send16. Provide `html`, `text`, or both (text-only is fine for OTPs/receipts/alerts). `from_email` must belong to a domain that is verified in the workspace — call `
Send a test email for an existing campaign to preview how it will look in recipients' inboxes.
Create a new email campaign as a draft: optionally with full HTML content and recipients (exactly ONE of audienceIds / segmentId / contactIds / tagIds / sendToAll) so it's ready to test and send. Noth
Use AI to generate a complete email HTML template based on a description. Returns ready-to-use HTML that can be sent or used in campaigns.
List email campaigns, newest first. Use `search` to find a past campaign the user describes vaguely ('the invite one', 'that July newsletter') — it matches name and subject case-insensitively; try dis
Add a single new contact, optionally straight into audiences and/or with tags — e.g. 'add this person from my email into the newsletter list'. Contacts are subscribed by default. For more than a handf
Search contacts by email address or name. Returns matching contacts with their tags and subscription status.
List all contacts with optional filtering by subscription status and tag. Supports pagination.
Bulk import contacts from CSV data (min column: email), optionally straight into audiences and/or with tags. This is the tool for cross-app flows — e.g. pulling people out of Gmail, a CRM, or a spread
List all sending domains configured in your Send16 workspace, including their verification status and DNS records.
Check the DNS health of a specific domain, including DKIM, SPF, DMARC, and MX record verification status. Triggers a fresh DNS lookup.
Get detailed performance statistics for a specific campaign including open rate, click rate, bounce rate, and delivery metrics.
Get your workspace's deliverability summary — sending reputation, domain authentication status, and recent bounce/complaint health. (Deliverability Hub plan feature.)
List all automations in the workspace, including draft/active/paused status and trigger types.
Get a single automation by ID, including its trigger, steps, and current status.
Manually enroll a contact in an active automation. The automation must be in 'active' status. Use send_event for event-driven enrollment.
Fire a custom event for a contact. Automations whose trigger is `{type:'custom_event', eventName:'<name>'}` will enroll the contact and start running. Payload is exposed to condition steps as `event.<
List starter-gallery email templates available to every workspace.
Get a single starter template by ID, including its EmailContent JSON.
Compile an EmailContent JSON object (the shape used by the Send16 builder + templates) into HTML using the platform's authoritative renderer. Returns the exact HTML the API would send. Useful for prev
Register a new sending domain. Returns the DNS records the user must add to their DNS provider, after which they should call check_domain_health to verify.
Run an AI pre-send review on an email's HTML before sending. Surfaces tone issues, broken links, missing alt text, spam triggers, and accessibility problems.
Scrape a URL (e.g. a launch blog post or product page) and generate an email draft from its content. Returns subject, preview text, and HTML body.
List messages from the unified send log (transactional + campaign). Filter by recipient, sender, status, date range, or source.
Fetch a single message with its full event timeline (created → sent → delivered → opened → clicked → ...).
Get just the delivery event timeline for a message — no body or recipient details.
List inbox conversations. Filter by state, mailbox, label, screener status, or full-text search. Send16's unified inbox combines transactional reply threading with team-managed shared inboxes.
Get a single conversation with its full thread of posts (incoming + outgoing).
Reply to an inbox conversation. The reply is sent from the original recipient address (the alias the convo arrived on) and threaded back to the contact.
Mark a conversation as read for the current viewer.
Update conversation status (open/closed/archived/snoozed) or assignee.
Add a private internal note on a conversation. Notes are visible only to workspace members.
Decide a pending screener conversation (first-time sender). 'allow' lets future emails through, 'reject' blocks, 'cold' marks as cold outreach.
Get unread/total counts per category and label for the inbox sidebar (newsletter, transactional, marketing, calendar, social, cold).
List subscription topics. Topics are granular categories contacts can subscribe to (e.g. 'product-updates', 'weekly-digest'). Campaigns and automations can be gated to subscribers of a specific topic.
Create a new subscription topic. Contacts opt into topics individually via the preference center.
Update a subscription topic (name, description, default).
Delete a subscription topic. All subscribers will be detached.
List Actions. Actions fire a transactional template when a custom event arrives — Plunk-style 'event_name → template' pairings, simpler than full automations.
Get a single Action with its trigger config and template binding.
Create an Action that maps an event name to a transactional template. Each matching event sends one email to the contact.
Update an Action (toggle enabled, change template, change event name).
Delete an Action.
List audiences (lists). An audience is a static, manually-managed group of contacts.
Create a new audience.
Add contacts (by ID) to an audience.
Remove a contact from an audience.
Delete an audience (list). Contacts are not deleted — only the list and its memberships are removed.
List dynamic segments. Segments compute their members from a filter expression at send time.
Preview the contacts that match a segment without sending.
Update a contact's profile fields, custom fields, or subscription state.
Delete a contact and all associated events. Irreversible.
Get a contact's full activity timeline: emails received, events fired, opens, clicks, automation enrollments, topic changes.
Get a contact's 0-100 health score based on recent engagement (opens, clicks, replies).
One-shot broadcast: create a campaign and immediately schedule it to send, in a single call. Pass either an audienceId, segmentId, topicId, or fully-qualified filter. Provide html OR templateSlug.
Schedule (or send immediately) an existing draft campaign to an audience/segment/topic.
Update a draft campaign: name, subject, preview text, sender info, HTML content, and/or recipients. Retarget with exactly ONE of audienceIds / segmentId / contactIds / tagIds / sendToAll, then verify
Pause a sending campaign. Already-sent messages are unaffected; remaining sends halt.
Resume a paused campaign.
Duplicate a campaign (template, content, and settings) as a new draft — works on sent campaigns too, so this is the way to re-use a past campaign's design. Optionally rename and retarget in the same c
Delete a draft campaign. Sent campaigns cannot be deleted (only archived).
Preview the recipient set for a campaign before sending. Returns count + sample list.
Activate an automation. New events matching its triggers will start enrolling contacts.
Pause an automation. Existing enrollments freeze in place; no new contacts enroll.
Get aggregate analytics for an automation: total enrollments, completed, exited, open/click rates per step.
List active and historical enrollments for an automation.
List workspaces the authenticated user has access to (owner or member).
Get the current workspace (the one the API key belongs to).
Get the workspace's brand settings: colors, logo, fonts, and the DESIGN.md spec injected into AI generation prompts.
Update workspace brand settings. The designSpec field is a Markdown DESIGN.md document fed into AI generation system prompts — use it to encode voice, do/don't lists, and visual rules.
Get the current month's send count, contact count, and plan limits.
List suppressed email addresses (bounces, complaints, unsubscribes, manual).
Add an email to the suppression list. Future sends to this address will be blocked.
Remove an email from the suppression list. Use only when you've confirmed the recipient wants to receive mail again.
List configured outgoing webhooks (your endpoints that Send16 POSTs delivery events to). Outgoing webhooks are a plan feature.
Register an outgoing webhook endpoint. Send16 POSTs event JSON to this URL with an HMAC-SHA256 signature. Outgoing webhooks are a plan feature.
Delete an outgoing webhook endpoint.
Rotate the HMAC signing secret for an outgoing webhook endpoint. Returns the new secret once.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: whoami
A tool description tries to alter the model’s use of another tool.
ding. Pair with list_domains to see which `from` addresses are allowed.RecommendationDescriptions must describe only their own tool.
tool: whoami
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: send_email
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
roperties":{}},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: send_email
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: send_email
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: send_campaign_test
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
the test to"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: send_campaign_test
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_campaign
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
pe":"boolean"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: create_campaign
A tool description tries to alter the model’s use of another tool.
g is sent until schedule_campaign.RecommendationDescriptions must describe only their own tool.
tool: create_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: design_email_template
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: design_email_template
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_campaigns
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_contact
A tool description tries to alter the model’s use of another tool.
of people, use import_contacts instead.RecommendationDescriptions must describe only their own tool.
tool: create_contact
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: search_contacts
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_contacts
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: import_contacts
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_domains
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: check_domain_health
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_campaign_stats
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_deliverability_status
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_automations
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_automation
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: enroll_in_automation
A tool description tries to alter the model’s use of another tool.
ve' status. Use send_event for event-driven enrollment.RecommendationDescriptions must describe only their own tool.
tool: enroll_in_automation
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: send_event
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_templates
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_template
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: render_email_content
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
pe":"string"}},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: render_email_content
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: add_domain
A tool description tries to alter the model’s use of another tool.
hey should call check_domain_health to verify.RecommendationDescriptions must describe only their own tool.
tool: add_domain
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: pre_send_review
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: pre_send_review
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: generate_email_from_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: generate_email_from_url
One tool reads private data, ingests untrusted content, AND can send data outbound — the three preconditions for autonomous data theft in a single call. A prompt injection reaching this tool can exfiltrate secrets with no further step.
_email_from_url Scrape a URL (e.g. a launch blog post or product page) and gRecommendationSplit the capabilities across separate least-privilege tools so no single tool can read secrets, read untrusted input, and reach the network at once.
tool: generate_email_from_url
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_messages
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
7199254740991},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: list_messages
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_message
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_message_events
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_convos
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_convo
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: send_reply
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: mark_convo_read
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_convo
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: add_convo_note
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: screener_decide
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_inbox_counts
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_topics
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_topic
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_topic
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_topic
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_actions
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_action
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_action
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
7199254740991},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: create_action
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_action
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_action
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_audiences
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_audience
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: add_contacts_to_audience
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: remove_contact_from_audience
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_audience
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_segments
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
,"properties":{"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: list_segments
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: preview_segment
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_contact
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_contact
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_contact_timeline
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_contact_health_score
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: send_broadcast
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: send_broadcast
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: schedule_campaign
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: schedule_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_campaign
A tool description tries to alter the model’s use of another tool.
hen verify with preview_campaign_recipients before sending. Only drafts can be edited.RecommendationDescriptions must describe only their own tool.
tool: update_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: pause_campaign
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
"Campaign ID"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: pause_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: resume_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: duplicate_campaign
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
pe":"boolean"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: duplicate_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: preview_campaign_recipients
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: activate_automation
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: pause_automation
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_automation_stats
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_automation_enrollments
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_workspaces
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_workspace
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_brand
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_brand
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_workspace_usage
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
,"properties":{"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: get_workspace_usage
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_suppressions
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: add_suppression
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ype":"string"},"apiKey":{"description":"Send16 API key (overrides SENDRecommendationRemove side-channel parameters; constrain tool inputs.
tool: add_suppression
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: remove_suppression
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_webhooks
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_webhook
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: create_webhook
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_webhook
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: regenerate_webhook_secret
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: send_email
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "send_email"RecommendationScope tools to the minimum needed.
tool: send_campaign_test
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "send_campaign_test"RecommendationScope tools to the minimum needed.
tool: create_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_campaign"RecommendationScope tools to the minimum needed.
tool: import_contacts
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "import_contacts"RecommendationScope tools to the minimum needed.
tool: render_email_content
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "render_email_content"RecommendationScope tools to the minimum needed.
tool: pre_send_review
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "pre_send_review"RecommendationScope tools to the minimum needed.
tool: generate_email_from_url
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "generate_email_from_url"RecommendationScope tools to the minimum needed.
tool: list_messages
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "list_messages"RecommendationScope tools to the minimum needed.
tool: update_convo
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_convo"RecommendationScope tools to the minimum needed.
tool: list_topics
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "list_topics"RecommendationScope tools to the minimum needed.
tool: create_topic
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_topic"RecommendationScope tools to the minimum needed.
tool: update_topic
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_topic"RecommendationScope tools to the minimum needed.
tool: delete_topic
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_topic"RecommendationScope tools to the minimum needed.
tool: create_action
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_action"RecommendationScope tools to the minimum needed.
tool: update_action
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_action"RecommendationScope tools to the minimum needed.
tool: delete_action
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_action"RecommendationScope tools to the minimum needed.
tool: create_audience
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_audience"RecommendationScope tools to the minimum needed.
tool: remove_contact_from_audience
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "remove_contact_from_audience"RecommendationScope tools to the minimum needed.
tool: delete_audience
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_audience"RecommendationScope tools to the minimum needed.
tool: list_segments
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "list_segments"RecommendationScope tools to the minimum needed.
tool: update_contact
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_contact"RecommendationScope tools to the minimum needed.
tool: delete_contact
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_contact"RecommendationScope tools to the minimum needed.
tool: send_broadcast
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "send_broadcast"RecommendationScope tools to the minimum needed.
tool: schedule_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "schedule_campaign"RecommendationScope tools to the minimum needed.
tool: update_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_campaign"RecommendationScope tools to the minimum needed.
tool: pause_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "pause_campaign"RecommendationScope tools to the minimum needed.
tool: delete_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_campaign"RecommendationScope tools to the minimum needed.
tool: preview_campaign_recipients
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "preview_campaign_recipients"RecommendationScope tools to the minimum needed.
tool: update_brand
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_brand"RecommendationScope tools to the minimum needed.
tool: get_workspace_usage
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_workspace_usage"RecommendationScope tools to the minimum needed.
tool: add_suppression
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "add_suppression"RecommendationScope tools to the minimum needed.
tool: remove_suppression
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "remove_suppression"RecommendationScope tools to the minimum needed.
tool: delete_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_webhook"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.