# io.github.anima-labs-ai/anima Give your AI agent an identity it owns: email inbox, US phone number, SMS, voice, and a vault. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.1 - **Author:** io.github.anima-labs-ai - **License:** Unknown - **Endpoints:** streamable-http https://mcp.useanima.sh/mcp - **Source:** https://github.com/anima-labs-ai/mcp-server - **Endpoint health:** reachable (last checked 2026-09-05T20:22:07.380Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-05T20:22:02.026Z - **Version scanned:** HEAD - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - shipped source (note) in `mcp-server-HEAD/src/shared/config.ts`: Very large base64-looking blob in source ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `anima-mcp` — Manage email, phone, SMS, webhooks, and agent infrastructure for AI agents directly from Claude. Anima is the unified identity platform for autonomous agents. - `agent_create` — Create a new agent with optional metadata, and optionally attach an initial address. Use this when provisioning a new sending identity or automation actor. To a - `agent_get` — Fetch full detail for a single agent by ID: settings, metadata, status, and the full addresses[] / emailIdentities[] / phoneIdentities[] lists. Use agent_list t - `agent_list` — List agents in the current account context with cursor pagination. Returns a lightweight per-agent record (addresses are NOT included to avoid N+1 round-trips). - `agent_update` — Update an agent's name or metadata, and/or add/update/delete an address. Use addAddress to attach a new address, updateAddress to change fields on an existing o - `agent_delete` — Delete an agent by ID. Use this to remove deprecated or compromised agents that should no longer send messages. Cascades to attached addresses, email identities - `domain_create` — Register a custom sending domain in the workspace so it can be configured for email traffic. Use this before DNS setup and verification. - `domain_verify` — Trigger a verification check for a domain after DNS records are configured. Use this to re-run DNS validation and update verification status. - `domain_get` — Fetch full detail for a single domain by ID, including verification and configuration state. Use domain_list to browse all domains. - `domain_list` — List all domains connected to the current workspace. Use this to audit configured sender domains and choose one for follow-up actions. - `domain_delete` — Delete a domain from the workspace when it is no longer needed. Use this to remove old or incorrect domain configurations. - `domain_update` — Update mutable configuration on a domain. Currently the only updatable field is `feedbackEnabled` — toggle SES bounce and complaint feedback processing on or of - `domain_zone_file` — Get the full DNS zone file for a domain. Use this for complete DNS export or to verify all records are correctly configured. - `email_send` — Send a new outbound email from the agent mailbox. Use this when you need to compose and deliver a message with optional CC, threading headers. - `email_get` — Fetch full detail for a single email by ID, including metadata and body. Use email_list to browse emails in a folder. - `email_list` — List emails with cursor pagination. Returns lightweight per-email records plus a `pagination` object — pass `pagination.nextCursor` back as `cursor` for the nex - `email_search` — Search messages by content. Fulltext mode (default) substring-matches subject/body/addresses of EMAIL messages and returns `{items, pagination}` with cursor pag - `email_label` — Add and/or remove labels on one message — the agent's workflow state. Use this to mark mail read/unread (`read`/`unread`), archive it (`archived`), or apply you - `email_reply` — Reply to an existing email thread by first loading the original message and setting threading headers. Use this when you need a proper in-thread response. - `email_forward` — Forward an existing email to another recipient by loading the original content first. Use this to share a prior message while preserving context. - `email_thread_get` — Fetch all email messages in one or more threads. Pass `id` for a single thread or `ids` for multiple. Returns messages ordered within each thread. Uses the mess - `email_attachment_get` — Get a temporary download URL for an email attachment. Use this when you need direct file access for preview or download. - `email_draft_create` — Create a new email draft (composed but not sent). Drafts can be incomplete — missing recipients, subject, or body. Use email_draft_send later to actually delive - `email_draft_get` — Fetch full detail for a single draft by ID. Use email_draft_list to browse drafts. - `email_draft_list` — List email drafts with optional filters. Returns lightweight draft records — use email_draft_get for full detail. - `email_draft_send` — Send a draft. Atomically converts the draft to a delivered Message + deletes the draft row. The draft must have at least one recipient, a subject, and a body. R - `email_draft_delete` — Discard a draft. Use this to remove drafts that are no longer needed. Use email_draft_send if you want to deliver instead. - `inbox_create` — Create a new email inbox (mailbox) that can receive mail immediately at its address. Choose a username and domain or let the platform generate them. Requires ma - `inbox_get` — Fetch full detail for a single inbox by ID, including its email address, display name, and associated agent. Use inbox_list to browse all inboxes. - `inbox_list` — List inboxes in the workspace with cursor pagination and optional free-text search. Returns the address, display name, and agent association for each inbox. - `inbox_update` — Update the display name or agent association of an inbox. Pass null for a field to clear it (unlink the agent / remove the display name); omitted fields are lef - `inbox_delete` — Permanently delete an inbox and its mailbox. Mail sent to the address after deletion bounces. This cannot be undone. Requires master key access. - `extension_connect` — Create a short-lived, single-use connect URL that links a browser extension (or a headless Puppeteer worker) to an Anima agent. - `phone_number_list` — List phone numbers assigned to an agent. Each result includes status and capability flags (sms/mms/voice). - `phone_number_provision` - `phone_number_release` — Release a previously provisioned phone number back to the carrier pool. Use this when cleaning up unused numbers. Released numbers cannot be recovered. - `phone_call_list` - `phone_call_get` - `phone_call_transcript_get` - `phone_call_recording_get` ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"anima\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.useanima.sh/mcp\"\n }\n }\n}" ``` ## Blast radius Extensive blast radius — deletes data; runs on someone else's infrastructure. - Floor 35, ceiling 59 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/io.github.anima-labs-ai%2Fanima - Install plan: https://forgeregistry.com/api/v1/packages/io.github.anima-labs-ai%2Fanima/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/io.github.anima-labs-ai%2Fanima - HTML page: https://forgeregistry.com/registry/io.github.anima-labs-ai%2Fanima - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.