@sendinel/mcp-server 1.0.63 → 1.0.65

package/build/tools/org.js

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { readAllRows } from '@sendinel/domain';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -175,8 +175,8 @@ export function registerOrgTools(server) {
             openWorldHint: false,
         },
         description: 'Create a team invitation for the current project organization.',
-        inputSchema: { email: z.string().email(), role: z.enum(['owner', 'admin', 'member']).default('member') },
-    }, async ({ email, role }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), email: z.string().email(), role: z.enum(['owner', 'admin', 'member']).default('member') },
+    }, withApproval('invite_team_member', async ({ email, role }) => {
         const { data: project } = await db().from('projects').select('org_id').eq('id', getProjectId()).maybeSingle();
         if (!project?.org_id)
             return j({ error: 'Project has no organization', code: 'NO_ORG' });
@@ -189,7 +189,7 @@ export function registerOrgTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ invitation_id: data.id, expires_at: data.expires_at });
-    });
+    }));
     server.registerTool('remove_team_member', {
         title: 'Remove Team Member',
         annotations: {
@@ -348,11 +348,12 @@ export function registerOrgTools(server) {
         },
         description: "Replace a team member's per-project access within the org (full replace, not a merge). Org owners have implicit access to all projects and cannot be scoped this way.",
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             user_id: z.string().uuid(),
             projects: z.array(memberProjectAssignmentSchema),
             org_id: z.string().uuid().optional(),
         },
-    }, async ({ user_id, projects, org_id }) => {
+    }, withApproval('set_member_project_access', async ({ user_id, projects, org_id }) => {
         const context = await resolveCurrentOrgId(org_id);
         if (!context.ok)
             return j({ error: context.error, code: context.code });
@@ -409,7 +410,7 @@ export function registerOrgTools(server) {
             details: { org_id: context.orgId, project_ids: requestedIds },
         }).catch(() => { });
         return j({ ok: true, user_id, project_ids: requestedIds });
-    });
+    }));
     server.registerTool('list_invitations', {
         title: 'List Invitations',
         annotations: {
@@ -495,10 +496,11 @@ export function registerOrgTools(server) {
         },
         description: 'Revoke a pending org invitation before it is accepted.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             invitation_id: z.string().uuid(),
             org_id: z.string().uuid().optional(),
         },
-    }, async ({ invitation_id, org_id }) => {
+    }, withApproval('revoke_invitation', async ({ invitation_id, org_id }) => {
         const context = await resolveCurrentOrgId(org_id);
         if (!context.ok)
             return j({ error: context.error, code: context.code });
@@ -526,7 +528,7 @@ export function registerOrgTools(server) {
             details: { org_id: context.orgId, email: invitation.email, role: invitation.role },
         }).catch(() => { });
         return j({ ok: true });
-    });
+    }));
     server.registerTool('get_plan_usage', {
         title: 'Get Plan Usage',
         annotations: {
@@ -910,16 +912,17 @@ export function registerOrgTools(server) {
         },
         description: 'Start moving a sending domain between supported providers using the existing provider-switch flow.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             to_provider: z.enum(PROVIDER_SWITCH_V1_PROVIDERS),
         },
-    }, async ({ site_id, to_provider }) => {
+    }, withApproval('start_provider_switch', async ({ site_id, to_provider }) => {
         const result = await callProviderSwitchApi('/api/dashboard/provider-switch/start', {
             method: 'POST',
             body: { site_id, to_provider },
         });
         return result.ok ? j(result.data) : j({ error: result.error });
-    });
+    }));
     server.registerTool('get_provider_switch_status', {
         title: 'Get Provider Switch Status',
         annotations: {

package/build/tools/segments.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
 import { db } from '../db.js';
@@ -152,9 +153,10 @@ export function registerSegmentTools(server) {
         },
         description: 'Delete a saved segment. Campaigns using this segment will lose targeting.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             segment_id: z.string().uuid(),
         },
-    }, async ({ segment_id }) => {
+    }, withApproval('delete_segment', async ({ segment_id }) => {
         const { error } = await db()
             .from('segments')
             .delete()
@@ -163,7 +165,7 @@ export function registerSegmentTools(server) {
         if (error)
             return txt(`Error: ${error.message}`);
         return j({ deleted: true, segment_id });
-    });
+    }));
     server.registerTool('preview_segment', {
         title: 'Preview Segment',
         annotations: {

package/build/tools/signatures.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -137,8 +138,8 @@ export function registerSignatureTools(server) {
         title: 'Delete Signature',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a project-scoped sending signature block.',
-        inputSchema: { id: z.string().uuid() },
-    }, async ({ id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), id: z.string().uuid() },
+    }, withApproval('delete_signature', async ({ id }) => {
         const projectId = getProjectId();
         const { data: existing, error: existingError } = await db()
             .from('signature_blocks')
@@ -164,5 +165,5 @@ export function registerSignatureTools(server) {
             details: { name: existing.name, site_id: existing.site_id, via: 'mcp' },
         });
         return j({ ok: true, deleted: id });
-    });
+    }));
 }

package/build/tools/sms.js

@@ -1,4 +1,5 @@
 import { randomUUID } from 'crypto';
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { decrypt } from '../crypto.js';
 import { db } from '../db.js';
@@ -308,13 +309,14 @@ export function registerSmsTools(server) {
         },
         description: 'Manually record an opt-in or opt-out for a contact (e.g., from a paper form or phone conversation).',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contact_id: z.string().uuid(),
             status: z.enum(['opt_in', 'opt_out']),
             source: z.string().optional(),
             consent_text: z.string().optional(),
             reason: z.string().optional(),
         },
-    }, async ({ contact_id, status, source, consent_text, reason }) => {
+    }, withApproval('set_contact_sms_consent', async ({ contact_id, status, source, consent_text, reason }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         if (!orgId)
@@ -366,7 +368,7 @@ export function registerSmsTools(server) {
                 return j({ error: suppressionError.message });
         }
         return j({ ok: true, contact_id, phone_e164: contact.phone_e164, status });
-    });
+    }));
     server.registerTool('preview_sms_cost', {
         title: 'Preview SMS Cost',
         annotations: {
@@ -403,6 +405,7 @@ export function registerSmsTools(server) {
         },
         description: "Launch an SMS campaign or broadcast to a segment. Same shape as email campaigns but with channel='sms'.",
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             name: z.string().min(1).max(200),
             body: z.string().min(1),
@@ -411,7 +414,7 @@ export function registerSmsTools(server) {
             scheduled_at: z.string().optional(),
             activate: z.boolean().optional().default(false),
         },
-    }, async ({ site_id, name, body, type, segment_id, scheduled_at, activate }) => {
+    }, withApproval('send_sms_campaign', async ({ site_id, name, body, type, segment_id, scheduled_at, activate }) => {
         const projectId = getProjectId();
         const { data: campaign, error: campaignError } = await db()
             .from('campaigns')
@@ -452,7 +455,7 @@ export function registerSmsTools(server) {
             segment_id: segment_id ?? null,
             note: segment_id ? 'Campaign created. Enroll the target segment through the campaign workflow to start delivery.' : 'Campaign created as SMS-ready.',
         });
-    });
+    }));
     server.registerTool('send_sms', {
         title: 'Send SMS',
         annotations: {
@@ -461,15 +464,16 @@ export function registerSmsTools(server) {
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a single SMS through the active SMS provider to a contact or raw phone number. Validates consent and quiet hours before sending.',
+        description: 'Send a single SMS through the active SMS provider to a contact or raw phone number. Validates consent and quiet hours before sending. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             body: z.string().min(1),
             to_number: z.string().optional(),
             contact_id: z.string().uuid().optional(),
             site_id: z.string().uuid().optional(),
             classification: z.enum(['marketing', 'transactional', 'conversational']).optional().default('marketing'),
         },
-    }, async ({ body, to_number, contact_id, site_id, classification }) => {
+    }, withApproval('send_sms', async ({ body, to_number, contact_id, site_id, classification }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         if (!orgId)
@@ -534,5 +538,5 @@ export function registerSmsTools(server) {
             encoding: sendResult.encoding,
             estimated_cost_cents: sendResult.estimated_cost_cents,
         });
-    });
+    }));
 }

package/build/tools/social-posts.js

@@ -1,4 +1,5 @@
 import Anthropic from '@anthropic-ai/sdk';
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -558,8 +559,8 @@ export function registerSocialPostTools(server) {
             openWorldHint: true,
         },
         description: 'Archive a social post so it disappears from active planner and list views.',
-        inputSchema: { post_id: z.string().uuid() },
-    }, async ({ post_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), post_id: z.string().uuid() },
+    }, withApproval('delete_social_post', async ({ post_id }) => {
         const { data, error } = await db()
             .from('social_posts')
             .update({ status: 'archived', updated_at: new Date().toISOString() })
@@ -571,5 +572,5 @@ export function registerSocialPostTools(server) {
             return txt(`Error: ${error.message}`);
         fireWebhookEvent('social.post.archived', { social_post_id: data.id, title: data.title }, getProjectId()).catch(() => { });
         return j(data);
-    });
+    }));
 }

package/build/tools/social-replies.js

@@ -1,4 +1,5 @@
 import Anthropic from '@anthropic-ai/sdk';
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { parseLinkedInCommentUrl, parseLinkedInPostUrl, parseLinkedInTargetUrl } from '@sendinel/domain';
 import { db, requestContext } from '../db.js';
@@ -144,10 +145,10 @@ export function registerSocialReplyTools(server) {
         inputSchema: { post_url_or_urn: z.string().min(1), text: replyText, target_member_id: z.string().uuid().optional() },
     }, async ({ post_url_or_urn, text, target_member_id }) => proposePersonal('post_comment', post_url_or_urn, text, target_member_id));
     server.registerTool('reply_to_comment', {
-        title: 'Propose LinkedIn Comment Reply', description: 'Create a review card for a personal LinkedIn reply. Never posts.',
+        title: 'Propose LinkedIn Comment Reply', description: 'Create a review card for a personal LinkedIn reply. Never posts. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
-        inputSchema: { comment_url_or_urn: z.string().min(1), text: replyText, target_member_id: z.string().uuid().optional() },
-    }, async ({ comment_url_or_urn, text, target_member_id }) => proposePersonal('comment_reply', comment_url_or_urn, text, target_member_id));
+        inputSchema: { comment_url_or_urn: z.string().min(1), text: replyText, target_member_id: z.string().uuid().optional(), approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.') },
+    }, withApproval('reply_to_comment', async ({ comment_url_or_urn, text, target_member_id }) => proposePersonal('comment_reply', comment_url_or_urn, text, target_member_id)));
     server.registerTool('request_social_reply', {
         title: 'Request LinkedIn Reply Proposal',
         description: 'Create a review card for a personal LinkedIn reply from an external trigger or email notification. Never posts; a human Accept posts it.',

package/build/tools/templates.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { snapshotTemplateVersion, versionHasBodySnapshot } from '@sendinel/domain';
 import { z } from 'zod';
 import { logAudit } from '../audit.js';
@@ -377,8 +378,8 @@ export function registerTemplateTools(server) {
             openWorldHint: false,
         },
         description: 'Archive an email template. System templates cannot be deleted.',
-        inputSchema: { id: z.string().uuid() },
-    }, async ({ id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), id: z.string().uuid() },
+    }, withApproval('delete_template', async ({ id }) => {
         const projectId = getProjectId();
         const { data: existing, error: existingErr } = await db().from('campaign_templates')
             .select('id, project_id')
@@ -395,7 +396,7 @@ export function registerTemplateTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ ok: true, deleted: id });
-    });
+    }));
     server.registerTool('restore_template_version', {
         title: 'Restore Template Version',
         annotations: {

package/build/tools/webhooks.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -34,11 +35,12 @@ export function registerWebhookTools(server) {
         },
         description: `Register a webhook URL to receive push notifications when events occur. Sendinel signs each payload with HMAC-SHA256 so you can verify authenticity. Valid events: ${VALID_EVENTS.join(', ')}`,
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             url: z.string().url().describe('HTTPS endpoint that will receive POST requests'),
             events: z.array(z.enum(VALID_EVENTS)).min(1).describe('Events to subscribe to'),
             description: z.string().optional().describe('Human-readable label, e.g. "Production orchestrator"'),
         },
-    }, async ({ url, events, description }) => {
+    }, withApproval('subscribe_webhook', async ({ url, events, description }) => {
         // SSRF protection
         const validation = validateWebhookUrl(url);
         if (!validation.valid)
@@ -63,7 +65,7 @@ export function registerWebhookTools(server) {
             message: `Webhook registered. Store the secret — it won't be shown again. Sendinel will POST to ${url} with X-Sendinel-Signature header for verification.`,
             verification_example: `const expected = crypto.createHmac('sha256', secret).update(requestBody).digest('hex'); if (header === 'sha256=' + expected) { /* valid */ }`,
         });
-    });
+    }));
     server.registerTool('list_webhook_subscriptions', {
         title: 'List Webhook Subscriptions',
         annotations: {
@@ -99,13 +101,14 @@ export function registerWebhookTools(server) {
         },
         description: 'Update a webhook subscription — change URL, events, or active status.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             subscription_id: z.string().uuid(),
             url: z.string().url().optional(),
             events: z.array(z.enum(VALID_EVENTS)).min(1).optional(),
             active: z.boolean().optional(),
             description: z.string().optional(),
         },
-    }, async ({ subscription_id, url, events, active, description }) => {
+    }, withApproval('update_webhook_subscription', async ({ subscription_id, url, events, active, description }) => {
         if (url) {
             const validation = validateWebhookUrl(url);
             if (!validation.valid)
@@ -130,7 +133,7 @@ export function registerWebhookTools(server) {
         if (error)
             return txt(`Error: ${error.message}`);
         return j(data);
-    });
+    }));
     server.registerTool('delete_webhook_subscription', {
         title: 'Delete Webhook Subscription',
         annotations: {
@@ -141,9 +144,10 @@ export function registerWebhookTools(server) {
         },
         description: 'Permanently delete a webhook subscription. This also deletes all delivery history for this subscription.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             subscription_id: z.string().uuid(),
         },
-    }, async ({ subscription_id }) => {
+    }, withApproval('delete_webhook_subscription', async ({ subscription_id }) => {
         const { error } = await db()
             .from('webhook_subscriptions')
             .delete()
@@ -152,5 +156,5 @@ export function registerWebhookTools(server) {
         if (error)
             return txt(`Error: ${error.message}`);
         return txt(`Subscription ${subscription_id} deleted.`);
-    });
+    }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.63",
+  "version": "1.0.65",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",