vaemail

MCPattested
v1.1.0io.github.vaemailMITUpdated 12d agonpmGitHub

Email infrastructure for AI agents: send, authenticate domains, track delivery, diagnose issues.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
291Downloads/wk
12d agoLast update
Needs 1 credential before it runs
  • VAEMAIL_API_KEYAPI keyrequired

    VaEmail API key (created in the dashboard, ideally scoped and capped for this agent). Required for every tool except vaemail_capabilities.

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.vaemail
LicenseMIT
Version1.1.0
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
Listed in Forge index+10/10
Identity verified · attested build+20/20
Ed25519 publish signature+0/5
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+5/5
npm maintainer match+0/5
Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
CVE scan · clean+30/30
Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain
Provenance✓ Sigstore-verified · fa38f9b
Dependencies✓ 0 resolved · none vulnerable
Tool surface13 tools · none privileged
Security scan✓ Cleanv1.0.2 · 16d agoHow well does this scan work?
EvalsNone
IndexedSep 7, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

13 tools · none privileged
Statically extracted from the published packagev1.0.2 · 16d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

vaemail_capabilitiesReturn what VaEmail supports: interfaces, capabilities, limits, scopes and region.

Return what VaEmail supports: interfaces, capabilities, limits, scopes and region.

No input schema was published for this tool.

vaemail_send_emailQueue a transactional email and return its id. The call returns as soon as the message is ACCEPTED,

Queue a transactional email and return its id. The call returns as soon as the message is ACCEPTED,

No input schema was published for this tool.

vaemail_validate_emailDry run: report whether the email would go out, and name what would block it. Sends nothing.

Dry run: report whether the email would go out, and name what would block it. Sends nothing.

No input schema was published for this tool.

vaemail_get_messageReturn the delivery status of a message and every event known about it

Return the delivery status of a message and every event known about it

No input schema was published for this tool.

vaemail_list_messagesList messages newest first, filtered by status, tag or recipient. Paginate with the returned next_cursor.

List messages newest first, filtered by status, tag or recipient. Paginate with the returned next_cursor.

No input schema was published for this tool.

vaemail_list_domainsList the sending domains of the account with the live state of their SPF, DKIM and DMARC records.

List the sending domains of the account with the live state of their SPF, DKIM and DMARC records.

No input schema was published for this tool.

vaemail_create_domainDeclare a domain and return the DNS records to add at the registrar, each with what it is for.

Declare a domain and return the DNS records to add at the registrar, each with what it is for.

No input schema was published for this tool.

vaemail_verify_domainRead SPF, DKIM and DMARC for a domain in the public DNS and report each record.

Read SPF, DKIM and DMARC for a domain in the public DNS and report each record.

No input schema was published for this tool.

vaemail_dns_requirementsReturn the DNS records a declared domain needs, record by record, with the role of each.

Return the DNS records a declared domain needs, record by record, with the role of each.

No input schema was published for this tool.

vaemail_diagnose_deliverabilityDiagnose deliverability for the account: authentication of every domain, reputation findings

Diagnose deliverability for the account: authentication of every domain, reputation findings

No input schema was published for this tool.

vaemail_list_bouncesList addresses excluded from sending: hard bounces, complaints and unsubscribes, with the reason for each.

List addresses excluded from sending: hard bounces, complaints and unsubscribes, with the reason for each.

No input schema was published for this tool.

vaemail_get_usageReturn the monthly quota and what is left of it, today's sends, and for the key in use: its scopes,

Return the monthly quota and what is left of it, today's sends, and for the key in use: its scopes,

No input schema was published for this tool.

vaemail_get_audit_logReturn the log of API actions: which key, which operation, which parameters, which result.

Return the log of API actions: which key, which operation, which parameters, which result.

No input schema was published for this tool.

13 of 13 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Email infrastructure for AI agents: send, authenticate domains, track delivery, diagnose issues.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-07 — observed resolution, not a publisher declaration.

0 packages resolved · 0 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

This package declares no runtime dependencies.