# io.misar.mail/misarmail Full email marketing platform: inbox, campaigns, contacts, templates, and analytics via MCP. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** io.misar.mail - **License:** Unknown - **Endpoints:** streamable-http https://mail.misar.io/api/mcp - **Source:** https://mail.misar.io - **Endpoint health:** reachable (last checked 2026-09-30T00:24:15.374Z, 6 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 34 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-02T21:17:57.888Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 54 declared. Observed from a live `tools/list` probe. - `send_email` — Send a transactional email from a verified MisarMail account. `from.email` must match an email account you have already verified — use list_domains to check whi - `list_emails` — List emails from a mailbox folder with optional full-text search across subject and body. Use this for reading the unified inbox; use list_campaigns for marketi - `get_email` — Read the full content of a single email by ID, including headers, body, and attachments metadata. Side effect: marks the email as read. - `reply_to_email` — Reply to an existing email thread. The sender address and threading headers are derived from the original message, so only the body is required. - `archive_email` — Move one email out of the inbox and into the archive. Use it to clear handled mail from the working inbox. This is REVERSIBLE and non-destructive: the message i - `validate_email` — Validate an email address before sending: syntax, MX records, disposable-domain and role-account detection. Use this to protect sender reputation on imported li - `list_campaigns` — List email marketing campaigns with their status, audience size, and headline metrics. Filter by status to find drafts ready to send or campaigns still sending. - `get_campaign` — Get full details for one campaign: content, audience segment, schedule, and delivery statistics (sent, opened, clicked, bounced, complained). - `create_campaign` — Create a new email marketing campaign as a draft. Creating never sends — call send_campaign separately once the content and audience are confirmed. - `send_campaign` — Send a campaign now, or schedule it for a future time by passing scheduled_at. This delivers real email to real recipients and cannot be undone once sending sta - `list_contacts` — List contacts with their subscription status and engagement metrics. Filter by status to find unsubscribed or bounced addresses that should be excluded from sen - `create_contact` — Add a single contact. Adding a contact records consent to email them — only add addresses that opted in, or the send will damage sender reputation and may breac - `update_contact` — Update an existing contact by email address, including changing subscription status. Setting status to unsubscribed immediately excludes them from every future - `import_contacts` — Bulk-import up to 5,000 contacts in one call. Existing addresses are updated rather than duplicated. Returns per-row results so you can see which rows were reje - `get_contact_score` — Get engagement score, engagement tier, and churn risk for one contact — or the lowest-engagement contacts across the list when contact_id is omitted. Use before - `list_templates` — List the saved email templates on the account, with the variable placeholders each one expects. Use it to pick a template before composing a send, and to see wh - `create_template` — Create a reusable email template. Use {{variable}} placeholders for personalisation — they are substituted at send time and previewable via render_template. - `render_template` — Render a template with sample variables and return the resulting HTML and subject. Use this to preview personalisation before sending anything. - `list_automations` — List automation workflows on the account — welcome series, re-engagement, drip sequences — with their status and enrolment counts. Use it to see what is running - `get_automation` — Get one automation workflow in full: its trigger, every step with its settings, and current enrolment counts. Use it to understand exactly what an automation wi - `create_automation` — Create an automation workflow from a trigger and an ordered list of steps. Created paused by default — call toggle_automation to activate once the steps are rev - `toggle_automation` — Activate or pause one automation workflow. This is consequential in one direction: ACTIVATING starts enrolling contacts, which means real emails begin going out - `list_ab_tests` — List A/B tests on the account with each variant's results and whether a winner has been picked yet. Use it to see which tests are still running and which are wa - `create_ab_test` — Create an A/B test on a campaign with two or more variants. A sample percentage is sent first; the winner goes to the remainder once selected. - `select_ab_test_winner` — Select the winning variant and send it to the remaining audience. This triggers a real send to everyone who was held back — it cannot be undone. - `get_analytics` — Get delivery and engagement analytics — sent, delivered, opened, clicked, bounced, and complained — for the account or one campaign, grouped by day/week/month. - `generate_report` — Generate a structured analytics report over a date range. Report types: campaign_performance, engagement_funnel, cohort_analysis, and send_time_heatmap (best ho - `get_revenue_attribution` — Attribute ecommerce revenue to email — revenue per campaign, per contact, and average order value from tracked conversions. - `get_monetization_stats` — Get newsletter monetization figures: paid subscribers, monthly recurring revenue, churn, and revenue trend. Use it for 'how is the paid newsletter doing' questi - `get_deliverability_score` — Get the account deliverability score (0–100) and letter grade (A–F) with the factors dragging it down. Start here when asked why emails are landing in spam. - `run_deliverability_audit` — Run a full deliverability audit across authentication (SPF/DKIM/DMARC), domain reputation, list hygiene, content signals, and blocklist status. Returns prioriti - `get_warmup_status` — Get IP/domain warm-up progress and today's remaining send capacity. Exceeding warm-up capacity on a new domain is the fastest way to get throttled or blockliste - `check_dmarc` — Check live SPF, DKIM, and DMARC DNS records for a domain and report alignment problems with the exact record to publish. Works for any domain, not only your own - `list_domains` — List sending domains with verification status and their DKIM/SPF/DMARC records. Check here first when a send fails with an unverified-sender error. - `add_domain` — Add a sending domain and return the DNS records to publish. The domain cannot send until those records are live and verify_domain succeeds. - `verify_domain` — Re-check a domain's DNS records and mark it verified if they resolve. Safe to retry — DNS propagation can take up to 48 hours. - `configure_inbound_domain` — Configure inbound email routing for a subdomain so replies land in the MisarMail unified inbox. Returns the MX record to publish. - `list_forms` — List signup forms on the account with their embed status and conversion counts. Use it to find a form id before get_form or get_form_submissions, and to compare - `get_form` — Get one signup form in full: its fields, its embed code, and where it redirects after submission. Use it when you need the embed snippet to install the form, or - `get_form_submissions` — List the submissions a signup form has received, including the values entered in each field. Use it to see who signed up and what they told you. This returns PE - …and 14 more ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"misarmail\": {\n \"type\": \"http\",\n \"url\": \"https://mail.misar.io/api/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/io.misar.mail%2Fmisarmail - Install plan: https://forgeregistry.com/api/v1/packages/io.misar.mail%2Fmisarmail/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/io.misar.mail%2Fmisarmail - HTML page: https://forgeregistry.com/registry/io.misar.mail%2Fmisarmail - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.