Email infrastructure for AI agents: send, read replies as threads, campaigns, per-key limits.
MCPpedia last refreshed this data
ai.sendraven/mcp is an MCP server that email infrastructure for AI agents: send, read replies as threads, campaigns, per-key limits. Its tool list has not been published yet over http and stdio, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"sendraven": {
"url": "https://mcp.sendraven.ai/mcp"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Email infrastructure for AI agents: send, read replies as threads, campaigns, per-key limits.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked @sendraven/mcp against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml / communication
A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
An open-source AI agent that brings the power of Gemini directly into your terminal.
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
MCP Security Weekly
Get CVE alerts and security updates for ai.sendraven/mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
The SendRaven MCP server. Send email, read replies as threads, run campaigns and automations, and decide approvals, from any client that speaks the Model Context Protocol.
SendRaven is email infrastructure for AI agents. Agents use it over REST or MCP to run real email conversations: sending, reading replies as threads, and running campaigns and automations, within limits and approvals set on the API key. It is priced per email sent, never per contact.
Claude Code, remote server, signs in with OAuth on first use:
claude mcp add --transport http sendraven https://mcp.sendraven.ai/mcp
Claude Code, as a plugin (signs in with OAuth on first use):
/plugin marketplace add CommonNinja/sendraven-mcp-server
/plugin install sendraven@sendraven
Gemini CLI, as an extension (signs in with OAuth on first use):
gemini extensions install https://github.com/CommonNinja/sendraven-mcp-server
Cursor, Claude Desktop, and other clients with a JSON config:
{
"mcpServers": {
"sendraven": {
"url": "https://mcp.sendraven.ai/mcp"
}
}
}
Any client, as a local process. Create an API key under Developers in the dashboard, then:
claude mcp add sendraven -e SENDRAVEN_API_KEY=sk_live_… -- npx -y @sendraven/mcp
{
"mcpServers": {
"sendraven": {
"command": "npx",
"args": ["-y", "@sendraven/mcp"],
"env": { "SENDRAVEN_API_KEY": "sk_live_…" }
}
}
}
Remote server with a key instead of OAuth, for an agent running unattended:
{
"mcpServers": {
"sendraven": {
"url": "https://mcp.sendraven.ai/mcp",
"headers": { "Authorization": "Bearer sk_live_…" }
}
}
}
Give an agent's key a daily send limit, a recipient allowlist, or an approval hold. The tools respect all three, campaigns included: a key with an approval hold or an allowlist cannot start a campaign, and a key with a daily limit can start one only if its recipients fit what is left of the day. See Limits for agents.
send_email returns pending_approval with an id. Report that it awaits a
person; do not retry.get_usage reports plan, usage and
remaining, so an agent can say "you are near your limit" before a batch.send_broadcast mails an audience; run
preview_broadcast first. remove_suppression lets us mail an address that
bounced or complained. Neither is a way to fix a failed send.decide_approval answers 403 when
the client signed in with OAuth, when the key drafted the message, and when
the key has any guardrail. Use the dashboard, or a key without guardrails.idempotency_key, and only for the identical
message. A retry replays the first answer instead of sending twice; the
same key with different arguments is refused with
idempotency_key_reused and nothing is sent.HTTP 422 no_verified_identity, and a missing template
variable lists the names in missing. Types mean the same thing on every
tool; see Errors.67 tools, generated from the server's registry.
| Tool | What it does |
|---|---|
send_email | Send a transactional email, immediately or scheduled. scheduled_at takes a relative phrase like 'in 3 days' or an ISO timestamp. The From domain must already be verified. Every accepted send answers with the same fields: id, status, thread_id, scheduled_at, skipped, reason and approval_id. skipped: true (status 'rejecte |