@multimail/mcp-server 0.1.9 → 0.1.10

package/README.md

@@ -61,7 +61,6 @@ Any MCP-compatible client uses the same config. Add MultiMail to your client's M
 | `check_inbox` | List emails (filterable by unread/read/archived) |
 | `read_email` | Get the full content of a specific email |
 | `reply_email` | Reply to an email in its existing thread |
-| `search_identity` | Look up the public identity of any MultiMail address (operator, oversight, verification status) |
 | `resend_confirmation` | Resend the activation email with a new code |
 | `activate_account` | Activate an account using the code from the confirmation email |
 
@@ -71,7 +70,7 @@ Any MCP-compatible client uses the same config. Add MultiMail to your client's M
 - Incoming email arrives as **clean markdown**. No HTML parsing or MIME decoding.
 - Threading is automatic. Reply to an email and headers are set correctly.
 - If your mailbox uses gated oversight, sends return `pending_approval` status. Do not retry.
-- Verify other agents before communicating using `search_identity`.
+- Verify other agents by checking the `X-MultiMail-Identity` signed header on received emails.
 
 ## Development
 

package/dist/index.js

@@ -68,7 +68,7 @@ function getMailboxId(argsMailboxId) {
 // --- Server ---
 const server = new McpServer({
     name: "multimail",
-    version: "0.1.9",
+    version: "0.1.10",
 });
 // Tool 1: list_mailboxes
 server.tool("list_mailboxes", "List all mailboxes available to this API key. Returns each mailbox's ID, email address, oversight mode, and display name. Use this to discover your mailbox ID if MULTIMAIL_MAILBOX_ID is not set.", {}, async () => {
@@ -81,12 +81,15 @@ server.tool("send_email", "Send an email from your MultiMail address. The body i
     subject: z.string().describe("Email subject line"),
     markdown: z.string().describe("Email body in markdown format"),
     cc: z.array(z.string().email()).optional().describe("CC email addresses"),
+    bcc: z.array(z.string().email()).optional().describe("BCC email addresses"),
     mailbox_id: z.string().optional().describe("Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided)"),
-}, async ({ to, subject, markdown, cc, mailbox_id }) => {
+}, async ({ to, subject, markdown, cc, bcc, mailbox_id }) => {
     const id = getMailboxId(mailbox_id);
     const body = { to, subject, markdown };
     if (cc?.length)
         body.cc = cc;
+    if (bcc?.length)
+        body.bcc = bcc;
     const data = await apiCall("POST", `/v1/mailboxes/${encodeURIComponent(id)}/send`, body);
     return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
 });
@@ -114,23 +117,19 @@ server.tool("reply_email", "Reply to an email in its existing thread. Threading
     email_id: z.string().describe("The email ID to reply to"),
     markdown: z.string().describe("Reply body in markdown format"),
     cc: z.array(z.string().email()).optional().describe("CC email addresses"),
+    bcc: z.array(z.string().email()).optional().describe("BCC email addresses"),
     mailbox_id: z.string().optional().describe("Mailbox ID (uses MULTIMAIL_MAILBOX_ID env var if not provided)"),
-}, async ({ email_id, markdown, cc, mailbox_id }) => {
+}, async ({ email_id, markdown, cc, bcc, mailbox_id }) => {
     const id = getMailboxId(mailbox_id);
     const body = { markdown };
     if (cc?.length)
         body.cc = cc;
+    if (bcc?.length)
+        body.bcc = bcc;
     const data = await apiCall("POST", `/v1/mailboxes/${encodeURIComponent(id)}/reply/${encodeURIComponent(email_id)}`, body);
     return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
 });
-// Tool 6: search_identity
-server.tool("search_identity", "Look up the public identity document for any MultiMail address. Returns the operator, oversight mode, capabilities, and whether the operator is verified. No authentication required. Use this to verify another agent before sending sensitive information. Reputation data is delivered via the X-MultiMail-Reputation email header, not this endpoint.", {
-    address: z.string().email().describe("The MultiMail address to look up"),
-}, async ({ address }) => {
-    const data = await publicFetch(`/.well-known/agent/${encodeURIComponent(address)}`);
-    return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
-});
-// Tool 7: resend_confirmation
+// Tool 6: resend_confirmation (search_identity removed — identity now delivered via signed X-MultiMail-Identity email header)
 server.tool("resend_confirmation", "Resend the activation email with a new code. Use this if the account is stuck in 'pending_operator_confirmation' status because the original email was lost or filtered. The operator must enter the code at the activation page or via the activate_account tool to activate the account. Rate limited to 1 request per 5 minutes. Only works for unconfirmed accounts.", {}, async () => {
     const data = await apiCall("POST", "/v1/account/resend-confirmation");
     return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multimail/mcp-server",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "MCP server for MultiMail — email for AI agents",
   "type": "module",
   "bin": {