@mailbuttons/mcp-server
MCP@rhalldearnliveMailbuttons MCP stdio server + Claude Code skill for the governed Agent Mail API (sandbox-by-default, human-in-the-loop escalation). The remote MCP endpoint is served natively by the Mailbuttons backend.
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Tools
15 tools · none privilegedRead out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
mailbuttons_audit_tailRead the most recent governed tool calls for this customer (every call,
Read the most recent governed tool calls for this customer (every call,
No input schema was published for this tool.
mailbuttons_export_auditExport the customer's tamper-evident audit log for a SIEM, including the
Export the customer's tamper-evident audit log for a SIEM, including the
No input schema was published for this tool.
mailbuttons_extract_codeExtract a one-time / verification code (a 4–8 digit number) from recent
Extract a one-time / verification code (a 4–8 digit number) from recent
No input schema was published for this tool.
mailbuttons_generate_policyBuild-time, sandbox-only. Turns an allow/block description into a valid
Build-time, sandbox-only. Turns an allow/block description into a valid
No input schema was published for this tool.
mailbuttons_get_attachment_textExtract inline text from a message attachment (text/* and text/csv). PDF and
Extract inline text from a message attachment (text/* and text/csv). PDF and
No input schema was published for this tool.
mailbuttons_get_draftFetch one held draft in full (recipients, subject, body, the reason it
Fetch one held draft in full (recipients, subject, body, the reason it
No input schema was published for this tool.
mailbuttons_get_messageFetch one message's full text body, recipients, and attachment metadata.
Fetch one message's full text body, recipients, and attachment metadata.
No input schema was published for this tool.
mailbuttons_get_threadFetch every message in a thread (full bodies + attachment metadata), oldest
Fetch every message in a thread (full bodies + attachment metadata), oldest
No input schema was published for this tool.
mailbuttons_list_draftsList sends held for human approval (an external recipient on a sandbox
List sends held for human approval (an external recipient on a sandbox
No input schema was published for this tool.
mailbuttons_list_messagesList delivered messages in a scoped inbox (id, thread, sender, subject,
List delivered messages in a scoped inbox (id, thread, sender, subject,
No input schema was published for this tool.
mailbuttons_propose_senderPropose adding an address to an inbox's send allowlist. This NEVER grants
Propose adding an address to an inbox's send allowlist. This NEVER grants
No input schema was published for this tool.
mailbuttons_request_promotionFile a human-approval request to grant additional capabilities (e.g.
File a human-approval request to grant additional capabilities (e.g.
No input schema was published for this tool.
mailbuttons_run_selftestBuild-time, sandbox-only. Sends an INTERNAL test message, polls for it to
Build-time, sandbox-only. Sends an INTERNAL test message, polls for it to
No input schema was published for this tool.
mailbuttons_scaffold_integrationBuild-time, sandbox-only. Writes a governed send wrapper and an inbound
Build-time, sandbox-only. Writes a governed send wrapper and an inbound
No input schema was published for this tool.
mailbuttons_send_emailSend or reply from a scoped inbox, subject to send policy. Sandbox tokens can
Send or reply from a scoped inbox, subject to send policy. Sandbox tokens can
No input schema was published for this tool.
15 of 15 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Mailbuttons MCP stdio server + Claude Code skill for the governed Agent Mail API (sandbox-by-default, human-in-the-loop escalation). The remote MCP endpoint is served natively by the Mailbuttons backend.