@sendinel/mcp-server 1.0.91 → 1.0.93

package/README.md

@@ -20,7 +20,7 @@ Sendinel currently exposes 35 tool groups and 337 tools (gateway mode exposes 4
 | `agent-mailboxes` | 6 | Bound inbox, threads, status and always-approved replies/provisioning |
 | `advisor` | 6 | Campaign advisor: recommendations, benchmarks, subject/content/send-time guidance |
 | `ai-work` | 9 | AI work items, recommended segments, context events, agent proposals |
-| `analytics` | 18 | Stats, portfolio analytics, project switching, domain health, engagement, deliverability, revenue analytics |
+| `analytics` | 15 | Stats, portfolio analytics, project switching, domain health, engagement, deliverability, revenue analytics |
 | `approvals` | 2 | Poll and list risk-tiered action approvals |
 | `automations` | 7 | Automation triggers, previews, and response-gated escalation ladders |
 | `brand_kit` | 5 | Brand Core text import, media library upload/URL ingest, asset-context reads |
@@ -32,7 +32,7 @@ Sendinel currently exposes 35 tool groups and 337 tools (gateway mode exposes 4
 | `content` | 14 | Content blocks, gated asset links, blog ingest and auto-publish, sources |
 | `data` | 19 | Platform connectors, imports, API keys, migration jobs, notifications, tenant export |
 | `data-proposals` | 3 | Data-derived campaign proposal generation, listing, approval |
-| `delivery-ops` | 24 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates |
+| `delivery-ops` | 25 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates, abuse overrides |
 | `drafts` | 6 | Draft create/approve/reject and draft-to-campaign promotion |
 | `forms` | 3 | Form creation, listing, stats |
 | `gdpr` | 4 | Contact data deletion and GDPR log |
@@ -46,7 +46,7 @@ Sendinel currently exposes 35 tool groups and 337 tools (gateway mode exposes 4
 | `sites` | 5 | Site, sender, and brand voice management |
 | `skills` | 3 | Operator skills catalog |
 | `sms` | 7 | SMS send, log, consent, inbound |
-| `social-posts` | 15 | Social posts, engagement reads, and LinkedIn reply proposals for human review |
+| `social-posts` | 17 | Social campaign creation, publisher scheduling, social posts, engagement reads, and LinkedIn reply proposals for human review |
 | `surveys` | 5 | Survey creation, listing, status, results |
 | `templates` | 7 | Email template CRUD, version restore, migration translation |
 | `warmup` | 4 | IP/domain warmup schedule control |

package/build/server.d.ts

@@ -2,6 +2,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export interface ToolRegistrationOptions {
     scopes?: string[];
     toolGroups?: string[];
+    toolAllowlist?: string[];
 }
 declare const GROUP_REGISTRY: Record<string, (server: McpServer, options?: ToolRegistrationOptions) => void>;
 export declare const ALL_TOOL_GROUPS: string[];

package/build/server.js

@@ -256,12 +256,12 @@ export function getRegisteredToolGroups(options) {
             toolGroups[name] = currentGroup;
         },
     };
-    for (const group of groups) {
+    for (const group of options?.toolAllowlist?.length ? ALL_TOOL_GROUPS : groups) {
         const register = GROUP_REGISTRY[group];
         if (!register)
             continue;
         currentGroup = group;
-        const effectiveServer = createScopeProxy(collector, options?.scopes?.length ? options.scopes : null, group);
+        const effectiveServer = createScopeProxy(collector, options?.scopes?.length ? options.scopes : null, group, groups.includes(group) ? undefined : options?.toolAllowlist);
         register(effectiveServer, options);
     }
     return toolGroups;
@@ -317,11 +317,14 @@ function scanToolDefinition(name, config) {
  * and wraps handlers with scope enforcement.
  */
 // scopes=null means no scope restriction (all tools allowed) but scan still runs.
-function createScopeProxy(server, scopes, toolGroup) {
+function createScopeProxy(server, scopes, toolGroup, allowedTools) {
     return new Proxy(server, {
         get(target, prop, receiver) {
             if (prop === 'registerTool') {
                 return (name, config, handler) => {
+                    // A per-credential exception admits only this tool, never its entire group.
+                    if (allowedTools !== undefined && !allowedTools.includes(name))
+                        return;
                     // ── Tool definition scan (prompt injection / poisoning defense) ──
                     // Always runs, regardless of whether scope enforcement is active.
                     const findings = scanToolDefinition(name, config);
@@ -378,15 +381,15 @@ export function registerAllTools(server, options) {
     if (rawScopes.includes('gateway')) {
         const permissionScopes = rawScopes.filter((scope) => scope !== 'gateway');
         const proxied = createScopeProxy(server, permissionScopes, 'gateway');
-        registerGatewayTools(proxied, { scopes: permissionScopes, toolGroups: options?.toolGroups });
+        registerGatewayTools(proxied, { scopes: permissionScopes, toolGroups: options?.toolGroups, toolAllowlist: options?.toolAllowlist });
         return;
     }
     const groups = options?.toolGroups === undefined
         ? ALL_TOOL_GROUPS
         : options.toolGroups;
-    for (const group of groups) {
+    for (const group of options?.toolAllowlist?.length ? ALL_TOOL_GROUPS : groups) {
         const register = GROUP_REGISTRY[group];
         if (register)
-            register(createScopeProxy(server, options?.scopes?.length ? options.scopes : null, group), options);
+            register(createScopeProxy(server, options?.scopes?.length ? options.scopes : null, group, groups.includes(group) ? undefined : options?.toolAllowlist), options);
     }
 }

package/build/tools/analytics.js

@@ -1,6 +1,5 @@
 import { isTrueConversionEvent, TRUE_CONVERSION_DEFINITION } from "@sendinel/domain";
 import { percentRate, groupMetricRows, readRevenue, isComplainedRow, isOpenedRow, countPeople, isClickedRow, summarizeEmailRows, countEmailRows, isDeliveredRow, isBouncedRow, fetchAllRows, readAllRows } from "@sendinel/domain";
-import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db, adminDb, requestContext } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -14,66 +13,6 @@ const pctNumber = (rate) => Math.round(rate * 1000) / 10;
 const roundRate = (rate) => Math.round(rate * 1000) / 1000;
 const clamp = (value, min, max) => Math.min(max, Math.max(min, value));
 const stripeLifecycleStatuses = ['active', 'trialing', 'past_due', 'canceled', 'unpaid', 'incomplete', 'incomplete_expired', 'paused'];
-const socialPlatforms = ['instagram', 'linkedin', 'twitter', 'facebook', 'tiktok', 'youtube', 'pinterest', 'uploadpost', 'other'];
-const socialPublishers = ['uploadpost', 'buffer'];
-const UPLOADPOST_API_BASE = process.env.UPLOADPOST_API_BASE || 'https://api.upload-post.com/api';
-function slugifyCampaign(value) {
-    return value
-        .trim()
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, '-')
-        .replace(/^-+|-+$/g, '')
-        .slice(0, 100) || 'campaign';
-}
-function buildSocialTrackedUrl(params) {
-    const url = new URL(params.destination_url);
-    const utmCampaign = params.utm_campaign?.trim() || slugifyCampaign(params.name);
-    url.searchParams.set('utm_source', params.platform);
-    url.searchParams.set('utm_medium', 'social');
-    url.searchParams.set('utm_campaign', utmCampaign);
-    if (params.utm_content?.trim())
-        url.searchParams.set('utm_content', params.utm_content.trim());
-    return {
-        tracked_url: url.toString(),
-        utm_source: params.platform,
-        utm_medium: 'social',
-        utm_campaign: utmCampaign,
-    };
-}
-async function scheduleUploadPost(apiKey, params) {
-    const res = await fetch(`${UPLOADPOST_API_BASE}/uploadposts/schedule`, {
-        method: 'POST',
-        headers: {
-            Authorization: `Apikey ${apiKey}`,
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify({
-            platform: params.platform,
-            content: params.link ? `${params.content}\n\n${params.link}` : params.content,
-            scheduled_at: params.scheduledAt?.toISOString(),
-            media_urls: params.mediaUrls,
-            link: params.link ?? undefined,
-        }),
-    });
-    if (!res.ok) {
-        const text = await res.text().catch(() => '');
-        throw new Error(`UploadPost schedule failed: ${res.status}${text ? ` ${text.slice(0, 200)}` : ''}`);
-    }
-    const json = await res.json();
-    const publisherPostId = json.id ?? json.request_id ?? json.post_id;
-    if (!publisherPostId)
-        throw new Error('UploadPost schedule response did not include a post id.');
-    return {
-        publisherPostId: String(publisherPostId),
-        scheduledAt: json.scheduled_at ? new Date(json.scheduled_at) : params.scheduledAt,
-        postUrl: json.post_url ?? json.post?.post_url,
-    };
-}
-async function publishViaByoPublisher(publisher, credentials, params) {
-    if (publisher === 'uploadpost')
-        return scheduleUploadPost(credentials, params);
-    throw new Error('Buffer publisher is not yet implemented. Connect UploadPost instead.');
-}
 export function computeAnalyticsMetrics(rows, eventCounts) {
     const metrics = summarizeEmailRows(rows);
     return { ...metrics, delivery_rate: metrics.delivery_rate ?? 0, open_rate: metrics.open_rate ?? 0,
@@ -1239,60 +1178,6 @@ export function registerAnalyticsTools(server) {
             reputation_signals_30d: reputationSignals30d ?? 0,
         });
     });
-    server.registerTool('abuse_monitor_override', {
-        title: 'Abuse Monitor Override',
-        annotations: {
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: false,
-            openWorldHint: false,
-        },
-        description: 'Create a temporary abuse monitor override for a paused site. Overrides expire automatically and are capped at 72 hours.',
-        inputSchema: {
-            siteId: z.string().uuid(),
-            reason: z.string().min(3).max(500),
-            ttlHours: z.number().int().min(1).max(72),
-        },
-    }, async ({ siteId, reason, ttlHours }) => {
-        const projectId = getProjectId();
-        const { data: site, error: siteErr } = await db()
-            .from('sites')
-            .select('id')
-            .eq('id', siteId)
-            .eq('project_id', projectId)
-            .maybeSingle();
-        if (siteErr || !site)
-            return j({ error: siteErr?.message ?? 'Site not found', code: 'NOT_FOUND' });
-        const expiresAt = new Date(Date.now() + ttlHours * 3600 * 1000).toISOString();
-        const { data: metrics } = await db()
-            .from('tenant_email_metrics')
-            .select('complaint_rate, pause_level')
-            .eq('site_id', siteId)
-            .maybeSingle();
-        const { error } = await db().from('audit_log').insert({
-            project_id: projectId,
-            actor_type: 'mcp_tool',
-            actor_id: 'abuse_monitor_override',
-            action: 'abuse_override',
-            resource_type: 'site',
-            resource_id: siteId,
-            entity_id: siteId,
-            metadata: { reason, expires_at: expiresAt },
-            details: { reason, expires_at: expiresAt },
-        });
-        if (error)
-            return j({ error: error.message });
-        return j({
-            ok: true,
-            site_id: siteId,
-            expires_at: expiresAt,
-            complaint_rate: metrics?.complaint_rate ?? null,
-            pause_level: metrics?.pause_level ?? null,
-            warning: Number(metrics?.complaint_rate ?? 0) >= 0.001
-                ? 'Complaint rate is still at or above 0.10%; use this override only for verified false positives.'
-                : null,
-        });
-    });
     server.registerTool('get_site_insights', {
         title: 'Get Site Insights',
         annotations: {
@@ -1333,46 +1218,6 @@ export function registerAnalyticsTools(server) {
         const rank = { critical: 0, warning: 1, info: 2 };
         return j((data ?? []).sort((a, b) => (rank[a.severity] ?? 9) - (rank[b.severity] ?? 9)));
     });
-    server.registerTool('create_social_campaign', {
-        title: 'Create Social Campaign',
-        annotations: {
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: false,
-            openWorldHint: false,
-        },
-        description: 'Create a social media campaign with a UTM-tracked link. Returns the tracked URL to paste into the social post.',
-        inputSchema: {
-            name: z.string(),
-            platform: z.enum(['instagram', 'linkedin', 'twitter', 'facebook', 'tiktok', 'youtube', 'pinterest', 'uploadpost', 'other']),
-            destination_url: z.string().url(),
-            site_id: z.string().uuid().optional(),
-            utm_campaign: z.string().optional(),
-            utm_content: z.string().optional(),
-            notes: z.string().optional(),
-        },
-    }, async (p) => {
-        const projectId = getProjectId();
-        const utm = buildSocialTrackedUrl(p);
-        const insert = {
-            project_id: projectId,
-            site_id: p.site_id ?? null,
-            name: p.name,
-            platform: p.platform,
-            destination_url: p.destination_url,
-            utm_source: utm.utm_source,
-            utm_medium: utm.utm_medium,
-            utm_campaign: utm.utm_campaign,
-            utm_content: p.utm_content ?? null,
-            tracked_url: utm.tracked_url,
-            notes: p.notes ?? null,
-            status: 'draft',
-        };
-        const { data, error } = await db().from('social_campaigns').insert(insert).select().single();
-        if (error)
-            return txt(`Error: ${error.message}`);
-        return j({ id: data.id, tracked_url: data.tracked_url, campaign: data });
-    });
     server.registerTool('list_social_campaigns', {
         title: 'List Social Campaigns',
         annotations: {
@@ -1403,99 +1248,4 @@ export function registerAnalyticsTools(server) {
             return txt(`Error: ${error.message}`);
         return j({ campaigns: data ?? [] });
     });
-    server.registerTool('schedule_social_post', {
-        title: 'Schedule Social Post',
-        annotations: {
-            readOnlyHint: false,
-            destructiveHint: true,
-            idempotentHint: false,
-            openWorldHint: true,
-        },
-        description: 'Schedule a social campaign post via a connected BYO publisher (UploadPost, Buffer). Returns publisherPostId on success.',
-        inputSchema: {
-            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
-            campaign_id: z.string().uuid().describe('UUID of the social campaign in Sendinel'),
-            content: z.string().min(1).describe('Post body text'),
-            publisher: z.enum(socialPublishers).describe('Which BYO publisher to route through'),
-            scheduled_at: z.string().optional().describe('ISO 8601 datetime. Omit for immediate publish.'),
-            media_urls: z.array(z.string().url()).optional().describe('Optional image/video URLs'),
-        },
-    }, withApproval('schedule_social_post', async (p) => {
-        const projectId = getProjectId();
-        const scheduledAt = p.scheduled_at ? new Date(p.scheduled_at) : undefined;
-        if (scheduledAt && Number.isNaN(scheduledAt.getTime()))
-            return txt('Error: scheduled_at must be a valid ISO 8601 datetime.');
-        const admin = adminDb();
-        const { data: campaign, error: campaignError } = await admin
-            .from('social_campaigns')
-            .select('id, project_id, platform, tracked_url')
-            .eq('project_id', projectId)
-            .eq('id', p.campaign_id)
-            .maybeSingle();
-        if (campaignError)
-            return txt(`Error: ${campaignError.message}`);
-        if (!campaign)
-            return j({ error: 'Campaign not found', code: 'NOT_FOUND' });
-        const { data: project, error: projectError } = await admin
-            .from('projects')
-            .select('org_id')
-            .eq('id', campaign.project_id)
-            .maybeSingle();
-        if (projectError)
-            return txt(`Error: ${projectError.message}`);
-        if (!project?.org_id)
-            return j({ error: 'Project not found', code: 'NOT_FOUND' });
-        const { data: connection, error: connectionError } = await admin
-            .from('social_platform_connections')
-            .select('encrypted_access_token')
-            .eq('org_id', project.org_id)
-            .eq('platform', p.publisher)
-            .maybeSingle();
-        if (connectionError)
-            return txt(`Error: ${connectionError.message}`);
-        if (!connection?.encrypted_access_token) {
-            return j({ error: `No ${p.publisher} connection found. Connect it in Settings -> Integrations.`, code: 'NO_CONNECTION' });
-        }
-        try {
-            const result = await publishViaByoPublisher(p.publisher, decrypt(connection.encrypted_access_token), {
-                content: p.content,
-                platform: campaign.platform,
-                scheduledAt,
-                mediaUrls: p.media_urls,
-                link: campaign.tracked_url,
-            });
-            const publishStatus = result.scheduledAt || scheduledAt ? 'scheduled' : 'published';
-            const { error: updateError } = await admin
-                .from('social_campaigns')
-                .update({
-                publisher: p.publisher,
-                publisher_post_id: result.publisherPostId,
-                scheduled_at: result.scheduledAt?.toISOString() ?? scheduledAt?.toISOString() ?? null,
-                publish_status: publishStatus,
-                publish_error: null,
-                platform_post_url: result.postUrl ?? null,
-                status: 'active',
-                updated_at: new Date().toISOString(),
-            })
-                .eq('project_id', projectId)
-                .eq('id', p.campaign_id);
-            if (updateError)
-                return txt(`Error: ${updateError.message}`);
-            return j({ success: true, publisherPostId: result.publisherPostId, publish_status: publishStatus, post_url: result.postUrl ?? null });
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : 'Publish failed';
-            await admin
-                .from('social_campaigns')
-                .update({
-                publisher: p.publisher,
-                publish_status: 'failed',
-                publish_error: message.slice(0, 500),
-                updated_at: new Date().toISOString(),
-            })
-                .eq('project_id', projectId)
-                .eq('id', p.campaign_id);
-            return txt(`Error: ${message}`);
-        }
-    }));
 }

package/build/tools/campaigns.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import { assertSendAccepted, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, readAllRows, } from '@sendinel/domain';
+import { assertSendAccepted, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, brandWarnings, readAllRows, } from '@sendinel/domain';
 // Subpath import, not the barrel above -- reply-actions.ts uses node:crypto,
 // and MCP-server-side that's fine (this never runs in an Edge Function), but
 // keeping it off the shared barrel avoids re-creating the Edge-Function
@@ -2342,7 +2342,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         // Site verification
         const { data: site } = await db()
             .from('sites')
-            .select('from_email, from_name, name, brand_voice')
+            .select('from_email, from_name, name, brand_voice, physical_address')
             .eq('id', site_id)
             .eq('project_id', projectId)
             .maybeSingle();
@@ -2351,6 +2351,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let resolvedSubject = subject;
         let resolvedHtml = html;
         let resolvedText = text;
+        let brandWarningCodes = [];
         if (template_id) {
             const { data: template, error: templateError } = await db()
                 .from('campaign_templates')
@@ -2366,7 +2367,10 @@ Do not include body_html in your response; Sendinel renders body_html from block
             const projectBrand = (project?.brand_settings ?? null);
             const siteBrand = (site.brand_voice ?? null);
             const mergedBrand = projectBrand || siteBrand ? { ...(projectBrand ?? {}), ...(siteBrand ?? {}) } : null;
-            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined);
+            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined, { address: site.physical_address ?? undefined });
+            brandWarningCodes = brandWarnings(mergedBrand);
+            if (brandWarningCodes.length)
+                console.warn('MCP send brand warnings', { projectId, site_id, warnings: brandWarningCodes });
             const vars = template_vars ?? {};
             const renderVars = { ...brandVars, ...vars };
             const subjectFallingBack = !subject?.trim();
@@ -2378,6 +2382,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             const satisfied = new Set([
                 ...Object.keys(vars),
                 'brand_name', 'brand_logo_url', 'brand_bg_color', 'brand_text_color', 'brand_accent_color',
+                'brand_logo_html', 'brand_font', 'brand_address',
                 ...Object.keys(NAME_FALLBACKS),
             ]);
             const missing = requiredVars.filter((name) => !satisfied.has(name));
@@ -2385,14 +2390,14 @@ Do not include body_html in your response; Sendinel renders body_html from block
                 return txt(`Error: Missing required template variable(s): ${missing.join(', ')}`);
             }
             if (template.format === 'text') {
-                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars);
+                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars, { brandTokens: brandVars });
                 resolvedHtml = undefined;
             }
             else {
-                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars);
+                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars, { brandTokens: brandVars });
                 resolvedText = text ?? stripHtml(resolvedHtml);
             }
-            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars);
+            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
         }
         if (!resolvedSubject?.trim())
             return txt('Error: subject is required');
@@ -2432,6 +2437,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         }).select('id').single();
         return j({
             sent: true,
+            ...(brandWarningCodes.length ? { warnings: brandWarningCodes } : {}),
             id: logRow?.id,
             to,
             provider: sendResult.provider,
@@ -2525,7 +2531,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         // Site verification
         const { data: site } = await db()
             .from('sites')
-            .select('from_email, from_name, name, brand_voice')
+            .select('from_email, from_name, name, brand_voice, physical_address')
             .eq('id', site_id)
             .eq('project_id', projectId)
             .maybeSingle();
@@ -2534,6 +2540,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let resolvedSubject = subject;
         let resolvedHtml = html;
         let resolvedText = text;
+        let brandWarningCodes = [];
         if (template_id) {
             const { data: template, error: templateError } = await db()
                 .from('campaign_templates')
@@ -2549,7 +2556,10 @@ Do not include body_html in your response; Sendinel renders body_html from block
             const projectBrand = (project?.brand_settings ?? null);
             const siteBrand = (site.brand_voice ?? null);
             const mergedBrand = projectBrand || siteBrand ? { ...(projectBrand ?? {}), ...(siteBrand ?? {}) } : null;
-            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined);
+            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined, { address: site.physical_address ?? undefined });
+            brandWarningCodes = brandWarnings(mergedBrand);
+            if (brandWarningCodes.length)
+                console.warn('MCP send brand warnings', { projectId, site_id, warnings: brandWarningCodes });
             const vars = template_vars ?? {};
             const renderVars = { ...brandVars, ...vars };
             const subjectFallingBack = !subject?.trim();
@@ -2561,6 +2571,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             const satisfied = new Set([
                 ...Object.keys(vars),
                 'brand_name', 'brand_logo_url', 'brand_bg_color', 'brand_text_color', 'brand_accent_color',
+                'brand_logo_html', 'brand_font', 'brand_address',
                 ...Object.keys(NAME_FALLBACKS),
             ]);
             const missing = requiredVars.filter((name) => !satisfied.has(name));
@@ -2568,14 +2579,14 @@ Do not include body_html in your response; Sendinel renders body_html from block
                 return txt(`Error: Missing required template variable(s): ${missing.join(', ')}`);
             }
             if (template.format === 'text') {
-                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars);
+                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars, { brandTokens: brandVars });
                 resolvedHtml = undefined;
             }
             else {
-                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars);
+                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars, { brandTokens: brandVars });
                 resolvedText = text ?? stripHtml(resolvedHtml);
             }
-            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars);
+            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
         }
         if (!resolvedSubject?.trim())
             return txt('Error: subject is required');
@@ -2666,6 +2677,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         }).eq('id', logRow.id);
         return j({
             sent: true,
+            ...(brandWarningCodes.length ? { warnings: brandWarningCodes } : {}),
             id: logRow.id,
             reply_action_id: minted.id,
             correlation_id,

package/build/tools/delivery-ops.js

@@ -1054,4 +1054,58 @@ export function registerDeliveryOpsTools(server) {
             return j({ error: v1ErrorMessage(result.error), status: result.status });
         return j(result.data);
     });
+    server.registerTool('abuse_monitor_override', {
+        title: 'Abuse Monitor Override',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+        description: 'Create a temporary abuse monitor override for a paused site. Overrides expire automatically and are capped at 72 hours.',
+        inputSchema: {
+            siteId: z.string().uuid(),
+            reason: z.string().min(3).max(500),
+            ttlHours: z.number().int().min(1).max(72),
+        },
+    }, async ({ siteId, reason, ttlHours }) => {
+        const projectId = getProjectId();
+        const { data: site, error: siteErr } = await db()
+            .from('sites')
+            .select('id')
+            .eq('id', siteId)
+            .eq('project_id', projectId)
+            .maybeSingle();
+        if (siteErr || !site)
+            return j({ error: siteErr?.message ?? 'Site not found', code: 'NOT_FOUND' });
+        const expiresAt = new Date(Date.now() + ttlHours * 3600 * 1000).toISOString();
+        const { data: metrics } = await db()
+            .from('tenant_email_metrics')
+            .select('complaint_rate, pause_level')
+            .eq('site_id', siteId)
+            .maybeSingle();
+        const { error } = await db().from('audit_log').insert({
+            project_id: projectId,
+            actor_type: 'mcp_tool',
+            actor_id: 'abuse_monitor_override',
+            action: 'abuse_override',
+            resource_type: 'site',
+            resource_id: siteId,
+            entity_id: siteId,
+            metadata: { reason, expires_at: expiresAt },
+            details: { reason, expires_at: expiresAt },
+        });
+        if (error)
+            return j({ error: error.message });
+        return j({
+            ok: true,
+            site_id: siteId,
+            expires_at: expiresAt,
+            complaint_rate: metrics?.complaint_rate ?? null,
+            pause_level: metrics?.pause_level ?? null,
+            warning: Number(metrics?.complaint_rate ?? 0) >= 0.001
+                ? 'Complaint rate is still at or above 0.10%; use this override only for verified false positives.'
+                : null,
+        });
+    });
 }

package/build/tools/gateway.d.ts

@@ -2,6 +2,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export interface GatewayOptions {
     scopes?: string[];
     toolGroups?: string[];
+    toolAllowlist?: string[];
 }
 /**
  * Plain words people use for a tool (#3669, #4059). The map lives in tool-search.ts so how_to can

package/build/tools/gateway.js

@@ -25,12 +25,12 @@ export function matchesToolQuery(entry, query) {
 const SEARCH_LIMIT = 10;
 async function buildCatalog(options) {
     const innerServer = new McpServer({ name: 'sendinel-gateway-inner', version: '1.0.0' });
-    registerAllTools(innerServer, { scopes: options.scopes, toolGroups: options.toolGroups });
+    registerAllTools(innerServer, { scopes: options.scopes, toolGroups: options.toolGroups, toolAllowlist: options.toolAllowlist });
     const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
     const client = new Client({ name: 'sendinel-gateway', version: '1.0.0' });
     await innerServer.connect(serverTransport);
     await client.connect(clientTransport);
-    const toolGroupMap = getRegisteredToolGroups({ scopes: options.scopes, toolGroups: options.toolGroups });
+    const toolGroupMap = getRegisteredToolGroups({ scopes: options.scopes, toolGroups: options.toolGroups, toolAllowlist: options.toolAllowlist });
     const { tools } = await client.listTools();
     const entries = tools
         .map((tool) => ({

package/build/tools/social-posts.js

@@ -1,7 +1,8 @@
 import Anthropic from '@anthropic-ai/sdk';
 import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
-import { db } from '../db.js';
+import { db, adminDb } from '../db.js';
+import { decrypt } from '../crypto.js';
 import { getProjectId } from '../project.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
 import { assertUsableStopReason } from '@sendinel/domain';
@@ -12,6 +13,66 @@ import { resolveSurveyShortLink } from '../lib/survey-link-resolver.js';
 import { registerSocialReplyTools } from './social-replies.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
+const socialPlatforms = ['instagram', 'linkedin', 'twitter', 'facebook', 'tiktok', 'youtube', 'pinterest', 'uploadpost', 'other'];
+const socialPublishers = ['uploadpost', 'buffer'];
+const UPLOADPOST_API_BASE = process.env.UPLOADPOST_API_BASE || 'https://api.upload-post.com/api';
+function slugifyCampaign(value) {
+    return value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 100) || 'campaign';
+}
+function buildSocialTrackedUrl(params) {
+    const url = new URL(params.destination_url);
+    const utmCampaign = params.utm_campaign?.trim() || slugifyCampaign(params.name);
+    url.searchParams.set('utm_source', params.platform);
+    url.searchParams.set('utm_medium', 'social');
+    url.searchParams.set('utm_campaign', utmCampaign);
+    if (params.utm_content?.trim())
+        url.searchParams.set('utm_content', params.utm_content.trim());
+    return {
+        tracked_url: url.toString(),
+        utm_source: params.platform,
+        utm_medium: 'social',
+        utm_campaign: utmCampaign,
+    };
+}
+async function scheduleUploadPost(apiKey, params) {
+    const res = await fetch(`${UPLOADPOST_API_BASE}/uploadposts/schedule`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Apikey ${apiKey}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            platform: params.platform,
+            content: params.link ? `${params.content}\n\n${params.link}` : params.content,
+            scheduled_at: params.scheduledAt?.toISOString(),
+            media_urls: params.mediaUrls,
+            link: params.link ?? undefined,
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`UploadPost schedule failed: ${res.status}${text ? ` ${text.slice(0, 200)}` : ''}`);
+    }
+    const json = await res.json();
+    const publisherPostId = json.id ?? json.request_id ?? json.post_id;
+    if (!publisherPostId)
+        throw new Error('UploadPost schedule response did not include a post id.');
+    return {
+        publisherPostId: String(publisherPostId),
+        scheduledAt: json.scheduled_at ? new Date(json.scheduled_at) : params.scheduledAt,
+        postUrl: json.post_url ?? json.post?.post_url,
+    };
+}
+async function publishViaByoPublisher(publisher, credentials, params) {
+    if (publisher === 'uploadpost')
+        return scheduleUploadPost(credentials, params);
+    throw new Error('Buffer publisher is not yet implemented. Connect UploadPost instead.');
+}
 const PLATFORMS = [
     'instagram', 'linkedin', 'twitter', 'x', 'facebook', 'tiktok',
     'youtube', 'pinterest', 'threads', 'reddit', 'bluesky', 'google_business',
@@ -577,4 +638,139 @@ export function registerSocialPostTools(server) {
         fireWebhookEvent('social.post.archived', { social_post_id: data.id, title: data.title }, getProjectId()).catch(() => { });
         return j(data);
     }));
+    server.registerTool('create_social_campaign', {
+        title: 'Create Social Campaign',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+        description: 'Create a social media campaign with a UTM-tracked link. Returns the tracked URL to paste into the social post.',
+        inputSchema: {
+            name: z.string(),
+            platform: z.enum(['instagram', 'linkedin', 'twitter', 'facebook', 'tiktok', 'youtube', 'pinterest', 'uploadpost', 'other']),
+            destination_url: z.string().url(),
+            site_id: z.string().uuid().optional(),
+            utm_campaign: z.string().optional(),
+            utm_content: z.string().optional(),
+            notes: z.string().optional(),
+        },
+    }, async (p) => {
+        const projectId = getProjectId();
+        const utm = buildSocialTrackedUrl(p);
+        const insert = {
+            project_id: projectId,
+            site_id: p.site_id ?? null,
+            name: p.name,
+            platform: p.platform,
+            destination_url: p.destination_url,
+            utm_source: utm.utm_source,
+            utm_medium: utm.utm_medium,
+            utm_campaign: utm.utm_campaign,
+            utm_content: p.utm_content ?? null,
+            tracked_url: utm.tracked_url,
+            notes: p.notes ?? null,
+            status: 'draft',
+        };
+        const { data, error } = await db().from('social_campaigns').insert(insert).select().single();
+        if (error)
+            return txt(`Error: ${error.message}`);
+        return j({ id: data.id, tracked_url: data.tracked_url, campaign: data });
+    });
+    server.registerTool('schedule_social_post', {
+        title: 'Schedule Social Post',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+        description: 'Schedule a social campaign post via a connected BYO publisher (UploadPost, Buffer). Returns publisherPostId on success.',
+        inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
+            campaign_id: z.string().uuid().describe('UUID of the social campaign in Sendinel'),
+            content: z.string().min(1).describe('Post body text'),
+            publisher: z.enum(socialPublishers).describe('Which BYO publisher to route through'),
+            scheduled_at: z.string().optional().describe('ISO 8601 datetime. Omit for immediate publish.'),
+            media_urls: z.array(z.string().url()).optional().describe('Optional image/video URLs'),
+        },
+    }, withApproval('schedule_social_post', async (p) => {
+        const projectId = getProjectId();
+        const scheduledAt = p.scheduled_at ? new Date(p.scheduled_at) : undefined;
+        if (scheduledAt && Number.isNaN(scheduledAt.getTime()))
+            return txt('Error: scheduled_at must be a valid ISO 8601 datetime.');
+        const admin = adminDb();
+        const { data: campaign, error: campaignError } = await admin
+            .from('social_campaigns')
+            .select('id, project_id, platform, tracked_url')
+            .eq('project_id', projectId)
+            .eq('id', p.campaign_id)
+            .maybeSingle();
+        if (campaignError)
+            return txt(`Error: ${campaignError.message}`);
+        if (!campaign)
+            return j({ error: 'Campaign not found', code: 'NOT_FOUND' });
+        const { data: project, error: projectError } = await admin
+            .from('projects')
+            .select('org_id')
+            .eq('id', campaign.project_id)
+            .maybeSingle();
+        if (projectError)
+            return txt(`Error: ${projectError.message}`);
+        if (!project?.org_id)
+            return j({ error: 'Project not found', code: 'NOT_FOUND' });
+        const { data: connection, error: connectionError } = await admin
+            .from('social_platform_connections')
+            .select('encrypted_access_token')
+            .eq('org_id', project.org_id)
+            .eq('platform', p.publisher)
+            .maybeSingle();
+        if (connectionError)
+            return txt(`Error: ${connectionError.message}`);
+        if (!connection?.encrypted_access_token) {
+            return j({ error: `No ${p.publisher} connection found. Connect it in Settings -> Integrations.`, code: 'NO_CONNECTION' });
+        }
+        try {
+            const result = await publishViaByoPublisher(p.publisher, decrypt(connection.encrypted_access_token), {
+                content: p.content,
+                platform: campaign.platform,
+                scheduledAt,
+                mediaUrls: p.media_urls,
+                link: campaign.tracked_url,
+            });
+            const publishStatus = result.scheduledAt || scheduledAt ? 'scheduled' : 'published';
+            const { error: updateError } = await admin
+                .from('social_campaigns')
+                .update({
+                publisher: p.publisher,
+                publisher_post_id: result.publisherPostId,
+                scheduled_at: result.scheduledAt?.toISOString() ?? scheduledAt?.toISOString() ?? null,
+                publish_status: publishStatus,
+                publish_error: null,
+                platform_post_url: result.postUrl ?? null,
+                status: 'active',
+                updated_at: new Date().toISOString(),
+            })
+                .eq('project_id', projectId)
+                .eq('id', p.campaign_id);
+            if (updateError)
+                return txt(`Error: ${updateError.message}`);
+            return j({ success: true, publisherPostId: result.publisherPostId, publish_status: publishStatus, post_url: result.postUrl ?? null });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Publish failed';
+            await admin
+                .from('social_campaigns')
+                .update({
+                publisher: p.publisher,
+                publish_status: 'failed',
+                publish_error: message.slice(0, 500),
+                updated_at: new Date().toISOString(),
+            })
+                .eq('project_id', projectId)
+                .eq('id', p.campaign_id);
+            return txt(`Error: ${message}`);
+        }
+    }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.91",
+  "version": "1.0.93",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",
@@ -35,7 +35,7 @@
     "jose": "^6.2.12",
     "qrcode": "^1.5.4",
     "resend": "^6.32.0",
-    "undici": "^8.10.0",
+    "undici": "^8.12.2",
     "zod": "^4.4.3"
   },
   "devDependencies": {