@sendraven/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Common Ninja Ltd.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,156 @@
+# @sendraven/mcp
+
+The [SendRaven](https://sendraven.ai) MCP server. Send email, read replies as
+threads, run campaigns and automations, and decide approvals, from any client
+that speaks the Model Context Protocol.
+
+SendRaven is email infrastructure for AI agents: one API for transactional
+mail, campaigns, automations and inbound, priced per email sent and never per
+contact, with limits that live on the API key so an agent can run it and a
+person can stop it.
+
+## Install
+
+**Claude Code**, remote server, signs in with OAuth on first use:
+
+```bash
+claude mcp add --transport http sendraven https://mcp.sendraven.ai/mcp
+```
+
+**Cursor, Claude Desktop, and other clients with a JSON config:**
+
+```json
+{
+  "mcpServers": {
+    "sendraven": {
+      "url": "https://mcp.sendraven.ai/mcp"
+    }
+  }
+}
+```
+
+**Any client, as a local process.** Create an API key under Developers in the
+dashboard, then:
+
+```bash
+claude mcp add sendraven -e SENDRAVEN_API_KEY=sk_live_… -- npx -y @sendraven/mcp
+```
+
+```json
+{
+  "mcpServers": {
+    "sendraven": {
+      "command": "npx",
+      "args": ["-y", "@sendraven/mcp"],
+      "env": { "SENDRAVEN_API_KEY": "sk_live_…" }
+    }
+  }
+}
+```
+
+**Remote server with a key instead of OAuth**, for an agent running
+unattended:
+
+```json
+{
+  "mcpServers": {
+    "sendraven": {
+      "url": "https://mcp.sendraven.ai/mcp",
+      "headers": { "Authorization": "Bearer sk_live_…" }
+    }
+  }
+}
+```
+
+Give an agent's key a daily send limit, a recipient allowlist, or an approval
+hold. The tools respect all three. See
+[Limits for agents](https://sendraven.ai/docs/agents).
+
+## Behaviour worth knowing
+
+- **A held send is not a failure.** When a key requires approval,
+  `send_email` returns `pending_approval` with an id. Report that it awaits a
+  person; do not retry.
+- **Out of plan is 402, not 429.** `get_usage` reports plan, usage and
+  remaining, so an agent can say "you are near your limit" before a batch.
+- **Two calls cannot be undone.** `send_broadcast` mails an audience; run
+  `preview_broadcast` first. `remove_suppression` lets us mail an address that
+  bounced or complained. Neither is a way to fix a failed send.
+- A failed call returns the API's own message, so "domain not verified" comes
+  back as those words rather than a bare 403.
+
+## Tools
+
+<!-- tools:start -->
+45 tools, generated from the server's registry.
+
+| Tool | What it does |
+| --- | --- |
+| `send_email` | Send a transactional email, immediately or scheduled. Use scheduled_at with a relative phrase like 'in 3 days' or an ISO timestamp. The From domain must already be verified. |
+| `list_emails` | List recent messages with their delivery status. Filter by status (queued, scheduled, sent, delivered, bounced, complained, rejected) or recipient. |
+| `get_email` | Fetch one message with its full event timeline (send, delivery, bounce, complaint, open, click). This is the tool to reach for when asked why an email didn't arrive. |
+| `cancel_scheduled_email` | Cancel a scheduled email before it sends. Only works while status is 'scheduled'. |
+| `list_sending_domains` | List sending domains with their verification status and the DNS records each one needs. Each record shows what is currently published, so this diagnoses a stuck verification. |
+| `add_sending_domain` | Register a sending domain and get back the DNS records to publish. Give the domain you send from — mail.<domain> and news.<domain> are provisioned beneath it and the right one is chosen per message, so a marketing complaint spike can never affect password reset delivery. Pass risk_class only to provision one of the two on its own. |
+| `verify_sending_domain` | Re-check a domain's DNS records now instead of waiting for the background monitor. |
+| `list_suppressions` | List addresses we refuse to mail and why (hard_bounce, complaint, unsubscribe, manual). Check here first when someone reports not receiving email. |
+| `add_suppression` | Stop sending to an address. Scope 'marketing' leaves transactional mail working. |
+| `remove_suppression` | Remove a suppression so the address can be mailed again. Be careful with hard bounces — the address was rejected by the receiving server, and re-sending raises the bounce rate that AWS enforces on. |
+| `list_broadcasts` | List campaigns with their status and send progress. |
+| `preview_broadcast` | How many contacts a campaign would reach, and whether the reputation gate would allow it. Always run this before sending — it is the only way to see the size of a campaign without starting it. |
+| `send_broadcast` | Send a campaign now, or schedule it with scheduled_at. This mails every contact in the segment and cannot be undone once started — run preview_broadcast first. |
+| `list_threads` | List email conversations. Pass awaiting_reply=true to get only the threads where someone has written to you and you haven't answered — this is the tool to poll when deciding what needs a response. |
+| `get_thread` | Read a conversation as a chronological transcript of outbound and inbound messages. Inbound text already has quoted history and signatures stripped, so read `text`; `raw_text` holds the untrimmed body if the stripped version looks wrong. Check spf_verdict and dkim_verdict before trusting a reply's claimed sender. |
+| `reply_to_message` | Reply to a message, keeping it on the same conversation. Sets the threading headers so the recipient's mail client shows it as part of the existing exchange rather than a new one. Prefer this over send_email whenever you are answering something. |
+| `list_templates` | List stored email templates and the variables each one needs. Prefer sending via a template over composing HTML yourself — templates carry the brand styling and the unsubscribe footer. |
+| `render_template` | Render a template with values, without sending. Use this to check your copy reads correctly before mailing a real person. Returns an error listing any missing variables. |
+| `send_template_email` | Send an email built from a stored template. Variable values are HTML-escaped on substitution, so they are safe to fill from user-supplied text. |
+| `list_pending_approvals` | List messages held for human approval, with their full content. A key configured to require approval drafts rather than sends; a person releases it. If your send returned status 'pending_approval', it is waiting here — do not retry the send. |
+| `decide_approval` | Approve or reject a held message. Approving sends it immediately. Only use this when a human has explicitly told you which decision to make — the hold exists precisely so that an agent is not the one deciding. |
+| `list_automations` | List multi-step email sequences and how many people are currently in each. Use this to find the right automation before enrolling someone. |
+| `enroll_in_automation` | Put someone into a multi-step sequence. Prefer this over scheduling several emails yourself: the sequence stops on its own if they unsubscribe, reply, or hard bounce, which you would otherwise have to track and cancel by hand. Enrolling the same person twice is a no-op, so it is safe to retry a call you are unsure about. |
+| `emit_event` | Emit a named event, starting every automation that waits on it — for example 'trial_started' or 'invoice_overdue'. Use this when you want the configured sequences to decide what happens, rather than naming an automation yourself. |
+| `list_topics` | List subscription topics — the categories a person can opt out of individually. Pass a topic when sending marketing mail so recipients can unsubscribe from that kind alone rather than from everything. |
+| `get_email_preferences` | What one person has chosen to receive. Check this before asking a human why someone isn't getting a particular kind of email — an opt-out looks identical to a delivery failure from the outside. |
+| `set_email_preferences` | Set which topics a person receives. Only do this when they have actually asked — silently re-subscribing someone who opted out is what generates spam complaints. |
+| `list_audiences` | List contact lists and how many contacts each holds. |
+| `add_contact` | Add someone to an audience. A contact exists once per workspace and can be on any number of audiences, so adding an address that already exists joins them to this list rather than creating a second copy. Safe to retry. |
+| `get_contact` | Fetch one contact by id, with their audience memberships, custom properties and engagement dates. |
+| `update_contact` | Update a contact. Attributes are merged, so sending one field does not clear the rest. |
+| `list_segments` | List saved audience filters. Use a segment id when creating a campaign rather than describing the filter inline, so the same definition can be reused and counted. |
+| `list_tags` | Every tag in use in the workspace, with how many contacts carry each. Tags are free-form, so this is the only way to know what exists before applying one. |
+| `count_segment` | How many contacts a segment currently matches. Run this before building a campaign around it — a filter that matches nobody is easier to spot here than after a send. |
+| `get_email_metrics` | Delivery and engagement over a window. Open and click rates are over delivered, not sent — a low open rate with a high bounce rate is a deliverability problem, not an engagement one. |
+| `list_scheduled_emails` | Messages queued to send later but not yet sent. Cancel one with cancel_scheduled_email. |
+| `suppress_many` | Stop sending to many addresses at once — the path for importing another provider's unsubscribe list before a first campaign. Without it, everyone who already opted out there gets mailed again here. |
+| `list_webhook_deliveries` | Recent delivery attempts for a webhook endpoint, with status codes and errors. This is how to tell 'we never sent it' from 'your endpoint returned 500'. |
+| `list_broadcast_recipients` | Who a campaign reached and what happened to each message. |
+| `list_api_keys` | List this workspace's API keys with their scopes and limits. Never returns key values. |
+| `get_usage` | This workspace's plan, how many emails it has sent this month, and how many are left. Check before a large batch: a send that would cross the included allowance on a plan without overage is refused whole, so it is better to know first than to discover it halfway through a campaign. |
+| `find_contact` | Find a contact by address across every audience, without knowing which list they are on. Use email for an exact match, or q for a prefix. Returns each audience membership separately — the same address on three lists is three rows — and whether each is unsubscribed. |
+| `remove_from_audience` | Take a contact off one audience. They stay in the workspace and keep every other audience, their suppression and their engagement history. To remove the person entirely use delete_contact — leaving a list and being forgotten are different things. |
+| `delete_contact` | Remove a person from the workspace entirely, along with every audience membership. Their suppression and topic preferences are kept on purpose — an opt-out has to outlive the contact record, or the next import silently puts them back on the list. To take someone off a single audience use remove_from_audience instead. |
+| `tag_contact` | Add or remove tags on a contact. Tags are flat labels — vip, beta, churned — as opposed to custom properties, which are declared fields with a value. They are lower-cased and spaces become hyphens, so VIP and vip are the same tag. Tagging reaches the person across every audience they are on. Call list_tags first to see what the workspace already uses, rather than inventing a synonym for an existing tag. |
+<!-- tools:end -->
+
+## Environment
+
+| Variable | Purpose |
+| --- | --- |
+| `SENDRAVEN_API_KEY` | Bearer key for the local process. Not needed for the remote server with OAuth. |
+| `SENDRAVEN_API_URL` | Defaults to `https://api.sendraven.ai`. |
+| `PORT` | When set, the server listens over Streamable HTTP instead of stdio. |
+
+The server holds no database or provider credentials of its own. It is a
+proxy over the public REST API and can reach exactly what the caller's key
+can reach.
+
+## Links
+
+- [Documentation](https://sendraven.ai/docs/mcp)
+- [OpenAPI](https://sendraven.ai/openapi.json) and [llms.txt](https://sendraven.ai/llms.txt)
+- [Pricing](https://sendraven.ai/pricing)
+
+## License
+
+MIT. Copyright Common Ninja Ltd.

package/dist/client.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiError = void 0;
+exports.request = request;
+/**
+ * Thin wrapper over the public REST API. The MCP server is a proxy, not a
+ * second implementation — every tool here goes through the same endpoints,
+ * auth and rate limits a customer's own integration would.
+ */
+const context_1 = require("./context");
+const BASE_URL = process.env.SENDRAVEN_API_URL || process.env.EMAILS_API_URL || "https://api.sendraven.ai";
+class ApiError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+    }
+}
+exports.ApiError = ApiError;
+function apiKey() {
+    const key = (0, context_1.currentApiKey)();
+    if (!key) {
+        throw new Error("No API key. Over HTTP, send it as 'Authorization: Bearer sk_live_...'; " +
+            "over stdio, set SENDRAVEN_API_KEY. Create one at /developers in the dashboard.");
+    }
+    return key;
+}
+async function request(method, path, body) {
+    const res = await fetch(`${BASE_URL}${path}`, {
+        method,
+        headers: {
+            Authorization: `Bearer ${apiKey()}`,
+            ...(body ? { "Content-Type": "application/json" } : {}),
+        },
+        ...(body ? { body: JSON.stringify(body) } : {}),
+    });
+    const text = await res.text();
+    const parsed = text ? JSON.parse(text) : {};
+    if (!res.ok) {
+        const message = parsed?.error?.message ?? `${method} ${path} failed with ${res.status}`;
+        throw new ApiError(message, res.status);
+    }
+    return parsed;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AA8BA,0BAuBC;AArDD;;;;GAIG;AACH,uCAA0C;AAE1C,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,0BAA0B,CAAC;AAE5F,MAAa,QAAS,SAAQ,KAAK;IAGtB;IAFX,YACE,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAQ;IAGzB,CAAC;CACF;AAPD,4BAOC;AAED,SAAS,MAAM;IACb,MAAM,GAAG,GAAG,IAAA,uBAAa,GAAE,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,MAA2C,EAC3C,IAAY,EACZ,IAAc;IAEd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;QAC5C,MAAM;QACN,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,MAAM,IAAI,IAAI,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC;QACxF,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC"}

package/dist/context.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withApiKey = withApiKey;
+exports.currentApiKey = currentApiKey;
+const node_async_hooks_1 = require("node:async_hooks");
+/**
+ * The API key for the request currently being served.
+ *
+ * Over stdio there is one user per process and the key can come from the
+ * environment. Over HTTP one process serves every customer, so the key has to
+ * come from that request's Authorization header — reading it from the
+ * environment there would hand one caller another's workspace.
+ *
+ * Threading a token argument through all 39 tools would touch every tool file
+ * for no behavioural gain; async-local storage carries it instead, which is
+ * what it is for.
+ */
+const store = new node_async_hooks_1.AsyncLocalStorage();
+function withApiKey(key, fn) {
+    return store.run(key, fn);
+}
+/** The request's key, or the environment's when running over stdio. */
+function currentApiKey() {
+    return store.getStore() ?? process.env.SENDRAVEN_API_KEY ?? process.env.EMAILS_API_KEY;
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;AAgBA,gCAEC;AAGD,sCAEC;AAvBD,uDAAqD;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,KAAK,GAAG,IAAI,oCAAiB,EAAU,CAAC;AAE9C,SAAgB,UAAU,CAAI,GAAW,EAAE,EAAoB;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,uEAAuE;AACvE,SAAgB,aAAa;IAC3B,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACzF,CAAC"}

package/dist/index.js

@@ -0,0 +1,178 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const express_1 = __importDefault(require("express"));
+const context_1 = require("./context");
+const client_1 = require("./client");
+const tools_1 = require("./tools");
+/**
+ * A server instance for one caller.
+ *
+ * Built per request rather than once at startup: over HTTP the tools act on
+ * whichever workspace the request's key belongs to, so a shared instance would
+ * be a shared identity.
+ */
+function buildServer() {
+    const server = new mcp_js_1.McpServer({
+        name: "sendraven",
+        title: "SendRaven",
+        version: "0.1.0",
+    });
+    for (const tool of tools_1.TOOLS) {
+        server.tool(tool.name, tool.description, 
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        tool.schema, async (args) => {
+            try {
+                const result = await tool.handler(args);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            catch (e) {
+                // Surface the API's own message rather than a stack trace — an agent
+                // can usually act on "domain not verified" but not on a bare 403.
+                const message = e instanceof client_1.ApiError ? `${e.message} (HTTP ${e.status})` : e.message;
+                return { content: [{ type: "text", text: `Error: ${message}` }], isError: true };
+            }
+        });
+    }
+    return server;
+}
+/* ---------------------------------------------------------------- stdio --- */
+async function runStdio() {
+    const server = buildServer();
+    await server.connect(new stdio_js_1.StdioServerTransport());
+}
+/* ----------------------------------------------------------------- http --- */
+const MCP_SERVER_URL = process.env.MCP_SERVER_URL || "https://mcp.sendraven.ai";
+const APP_URL = process.env.APP_URL || "https://sendraven.ai";
+const PUBLIC_API_URL = process.env.SENDRAVEN_API_URL || process.env.PUBLIC_API_URL || "https://api.sendraven.ai";
+/** Kept in step with api-server/src/oauth/scopes.ts. */
+const OAUTH_SCOPES = [
+    "emails:send",
+    "emails:read",
+    "domains:read",
+    "domains:write",
+    "contacts:read",
+    "contacts:write",
+    "broadcasts:read",
+    "broadcasts:write",
+    "webhooks:read",
+    "webhooks:write",
+    "threads:read",
+    "templates:read",
+    "templates:write",
+];
+/**
+ * Does this request need a key?
+ *
+ * Only `tools/call` does. `initialize` and `tools/list` are answered
+ * anonymously on purpose: MCP registries and client directories probe with an
+ * unauthenticated `tools/list`, and a blanket 401 makes a server look like it
+ * exposes nothing at all. Every tool here still reaches the REST API, which
+ * rejects an absent or invalid key on its own — the check below only decides
+ * when to send the challenge.
+ */
+function requiresAuth(body) {
+    const messages = Array.isArray(body) ? body : [body];
+    return messages.some((m) => m?.method === "tools/call");
+}
+async function handleMcp(req, res, token) {
+    const server = buildServer();
+    // Stateless: one transport per request, no session to resume.
+    const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+    res.on("close", () => {
+        void transport.close();
+        void server.close();
+    });
+    await server.connect(transport);
+    await (0, context_1.withApiKey)(token, async () => {
+        await transport.handleRequest(req, res, req.body);
+    });
+}
+function runHttp() {
+    const port = Number(process.env.PORT || 5100);
+    const app = (0, express_1.default)();
+    app.use(express_1.default.json({ limit: "5mb" }));
+    // RFC 9728. After a 401 an MCP client reads this to find out where to send
+    // the user to authorize.
+    app.get("/.well-known/oauth-protected-resource", (_req, res) => {
+        res.json({
+            resource: MCP_SERVER_URL,
+            authorization_servers: [PUBLIC_API_URL],
+            scopes_supported: OAUTH_SCOPES,
+            bearer_methods_supported: ["header"],
+            resource_name: "SendRaven",
+            resource_documentation: `${APP_URL}/docs`,
+        });
+    });
+    // RFC 8414. Some clients probe the resource host for this before following
+    // authorization_servers, so it is answered here as well as on the API.
+    app.get("/.well-known/oauth-authorization-server", (_req, res) => {
+        res.json({
+            issuer: PUBLIC_API_URL,
+            authorization_endpoint: `${APP_URL}/oauth/authorize`,
+            token_endpoint: `${PUBLIC_API_URL}/oauth/token`,
+            registration_endpoint: `${PUBLIC_API_URL}/oauth/register`,
+            revocation_endpoint: `${PUBLIC_API_URL}/oauth/revoke`,
+            token_endpoint_auth_methods_supported: ["none", "client_secret_post"],
+            scopes_supported: OAUTH_SCOPES,
+            response_types_supported: ["code"],
+            grant_types_supported: ["authorization_code", "refresh_token"],
+            // S256 only. "plain" offers no protection against an intercepted code,
+            // which is the entire reason PKCE exists.
+            code_challenge_methods_supported: ["S256"],
+        });
+    });
+    app.post("/mcp", async (req, res) => {
+        const auth = req.headers.authorization || "";
+        const token = auth.startsWith("Bearer ") ? auth.slice(7).trim() : "";
+        if (!token && requiresAuth(req.body)) {
+            // Pointing at the protected-resource document is what starts the OAuth
+            // flow in an MCP client: it reads this header, fetches the metadata, and
+            // sends the user to the consent screen. A plain API key also works for
+            // anyone who would rather paste one.
+            res
+                .status(401)
+                .set("WWW-Authenticate", `Bearer resource_metadata="${MCP_SERVER_URL}/.well-known/oauth-protected-resource"`)
+                .json({
+                error: "Unauthorized",
+                message: `Authorize this client, or send an API key as 'Authorization: Bearer sk_live_...' from ${APP_URL}/developers.`,
+            });
+            return;
+        }
+        await handleMcp(req, res, token);
+    });
+    // Streamable HTTP says a server with no SSE stream on GET, and no session to
+    // DELETE, answers 405 — not 404. Registry health checks probe with GET, and
+    // Express's default 404 reads as the server being down.
+    const methodNotAllowed = (_req, res) => res.status(405).json({
+        jsonrpc: "2.0",
+        error: { code: -32000, message: "Method not allowed." },
+        id: null,
+    });
+    app.get("/mcp", methodNotAllowed);
+    app.delete("/mcp", methodNotAllowed);
+    app.get("/healthz", (_req, res) => res.json({ ok: true }));
+    app.listen(port, () => {
+        console.error(`SendRaven MCP server listening on :${port} (${MCP_SERVER_URL})`);
+    });
+}
+/* ----------------------------------------------------------------- main --- */
+// stdio when asked for explicitly or when there is no PORT to bind, which is
+// what an MCP client launching this as a subprocess looks like.
+const useStdio = process.argv.includes("--stdio") || process.env.MCP_TRANSPORT === "stdio" || !process.env.PORT;
+if (useStdio) {
+    runStdio().catch((e) => {
+        console.error("SendRaven MCP server failed to start:", e);
+        process.exit(1);
+    });
+}
+else {
+    runHttp();
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AACA,oEAAoE;AACpE,wEAAiF;AACjF,0FAAmG;AACnG,sDAA+D;AAC/D,uCAAuC;AACvC,qCAAoC;AACpC,mCAAgC;AAEhC;;;;;;GAMG;AACH,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,aAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW;QAChB,8DAA8D;QAC9D,IAAI,CAAC,MAAa,EAClB,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACzF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,OAAO,GACX,CAAC,YAAY,iBAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAW,CAAC,OAAO,CAAC;gBACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,QAAQ;IACrB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+BAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,gFAAgF;AAEhF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,0BAA0B,CAAC;AAChF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,sBAAsB,CAAC;AAC9D,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,0BAA0B,CAAC;AAE5F,wDAAwD;AACxD,MAAM,YAAY,GAAG;IACnB,aAAa;IACb,aAAa;IACb,cAAc;IACd,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,iBAAiB;CAClB,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAiC,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAY,EAAE,GAAa,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,MAAM,SAAS,GAAG,IAAI,iDAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,IAAA,oBAAU,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,2EAA2E;IAC3E,yBAAyB;IACzB,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAChF,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,cAAc;YACxB,qBAAqB,EAAE,CAAC,cAAc,CAAC;YACvC,gBAAgB,EAAE,YAAY;YAC9B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,aAAa,EAAE,WAAW;YAC1B,sBAAsB,EAAE,GAAG,OAAO,OAAO;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAClF,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,cAAc;YACtB,sBAAsB,EAAE,GAAG,OAAO,kBAAkB;YACpD,cAAc,EAAE,GAAG,cAAc,cAAc;YAC/C,qBAAqB,EAAE,GAAG,cAAc,iBAAiB;YACzD,mBAAmB,EAAE,GAAG,cAAc,eAAe;YACrD,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC;YACrE,gBAAgB,EAAE,YAAY;YAC9B,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,uEAAuE;YACvE,0CAA0C;YAC1C,gCAAgC,EAAE,CAAC,MAAM,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAErE,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,uEAAuE;YACvE,yEAAyE;YACzE,uEAAuE;YACvE,qCAAqC;YACrC,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,GAAG,CACF,kBAAkB,EAClB,6BAA6B,cAAc,wCAAwC,CACpF;iBACA,IAAI,CAAC;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,yFAAyF,OAAO,cAAc;aACxH,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QAED,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,gBAAgB,GAAG,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE,CACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE;QACvD,EAAE,EAAE,IAAI;KACT,CAAC,CAAC;IACL,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAErC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9E,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,sCAAsC,IAAI,KAAK,cAAc,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;AAEjG,IAAI,QAAQ,EAAE,CAAC;IACb,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/tools/approvals.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decideApprovalTool = exports.listApprovalsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listApprovalsTool = {
+    name: "list_pending_approvals",
+    description: "List messages held for human approval, with their full content. A key configured to " +
+        "require approval drafts rather than sends; a person releases it. If your send returned " +
+        "status 'pending_approval', it is waiting here — do not retry the send.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/approvals"),
+};
+exports.decideApprovalTool = {
+    name: "decide_approval",
+    description: "Approve or reject a held message. Approving sends it immediately. Only use this when a " +
+        "human has explicitly told you which decision to make — the hold exists precisely so that " +
+        "an agent is not the one deciding.",
+    schema: {
+        id: zod_1.z.string(),
+        decision: zod_1.z.enum(["approve", "reject"]),
+        decided_by: zod_1.z.string().describe("Who authorised this decision"),
+        reason: zod_1.z.string().optional(),
+    },
+    handler: async (args) => {
+        const { id, ...body } = args;
+        return (0, client_1.request)("POST", `/v1/approvals/${id}`, body);
+    },
+};
+//# sourceMappingURL=approvals.js.map

package/dist/tools/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/tools/approvals.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,sFAAsF;QACtF,yFAAyF;QACzF,wEAAwE;IAC1E,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,eAAe,CAAC;CACrD,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,yFAAyF;QACzF,2FAA2F;QAC3F,mCAAmC;IACrC,MAAM,EAAE;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;QACd,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC/D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC7B,OAAO,IAAA,gBAAO,EAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;CACF,CAAC"}

package/dist/tools/audiences.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listTagsTool = exports.tagContactTool = exports.deleteContactTool = exports.removeFromAudienceTool = exports.findContactTool = exports.countSegmentTool = exports.listSegmentsTool = exports.updateContactTool = exports.getContactTool = exports.addContactTool = exports.listAudiencesTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listAudiencesTool = {
+    name: "list_audiences",
+    description: "List contact lists and how many contacts each holds.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/audiences"),
+};
+exports.addContactTool = {
+    name: "add_contact",
+    description: "Add someone to an audience. A contact exists once per workspace and can be on any number " +
+        "of audiences, so adding an address that already exists joins them to this list rather than " +
+        "creating a second copy. Safe to retry.",
+    schema: {
+        audience_id: zod_1.z.string(),
+        email: zod_1.z.string().email(),
+        first_name: zod_1.z.string().optional(),
+        last_name: zod_1.z.string().optional(),
+    },
+    handler: async (args) => {
+        const { audience_id, ...body } = args;
+        return (0, client_1.request)("POST", `/v1/audiences/${audience_id}/contacts`, body);
+    },
+};
+exports.getContactTool = {
+    name: "get_contact",
+    description: "Fetch one contact by id, with their audience memberships, custom properties and " +
+        "engagement dates.",
+    schema: { id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/contacts/${args.id}`),
+};
+exports.updateContactTool = {
+    name: "update_contact",
+    description: "Update a contact. Attributes are merged, so sending one field does not clear the rest.",
+    schema: {
+        id: zod_1.z.string(),
+        first_name: zod_1.z.string().optional(),
+        last_name: zod_1.z.string().optional(),
+        attributes: zod_1.z.record(zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean()])).optional(),
+    },
+    handler: async (args) => {
+        const { id, ...body } = args;
+        return (0, client_1.request)("PATCH", `/v1/contacts/${id}`, body);
+    },
+};
+exports.listSegmentsTool = {
+    name: "list_segments",
+    description: "List saved audience filters. Use a segment id when creating a campaign rather than " +
+        "describing the filter inline, so the same definition can be reused and counted.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/segments"),
+};
+exports.countSegmentTool = {
+    name: "count_segment",
+    description: "How many contacts a segment currently matches. Run this before building a campaign " +
+        "around it — a filter that matches nobody is easier to spot here than after a send.",
+    schema: { id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/segments/${args.id}/metrics`),
+};
+exports.findContactTool = {
+    name: "find_contact",
+    description: "Find a contact by address across every audience, without knowing which list they are on. " +
+        "Use email for an exact match, or q for a prefix. Returns each audience membership " +
+        "separately — the same address on three lists is three rows — and whether each is " +
+        "unsubscribed.",
+    schema: {
+        email: zod_1.z.string().optional().describe("Exact address"),
+        q: zod_1.z.string().optional().describe("Address prefix, for a partial match"),
+        unsubscribed: zod_1.z.boolean().optional().describe("Filter to only opted-in or only opted-out"),
+        limit: zod_1.z.number().optional(),
+        cursor: zod_1.z.string().optional().describe("An address, from a previous call's next_cursor"),
+    },
+    handler: async (args) => {
+        const q = new URLSearchParams();
+        for (const k of ["email", "q", "limit", "cursor"]) {
+            if (args[k] !== undefined)
+                q.set(k, String(args[k]));
+        }
+        if (args.unsubscribed !== undefined)
+            q.set("unsubscribed", String(args.unsubscribed));
+        return (0, client_1.request)("GET", `/v1/contacts?${q.toString()}`);
+    },
+};
+exports.removeFromAudienceTool = {
+    name: "remove_from_audience",
+    description: "Take a contact off one audience. They stay in the workspace and keep every other audience, " +
+        "their suppression and their engagement history. To remove the person entirely use " +
+        "delete_contact — leaving a list and being forgotten are different things.",
+    schema: {
+        audience_id: zod_1.z.string(),
+        contact_id: zod_1.z.string(),
+    },
+    handler: async (args) => (0, client_1.request)("DELETE", `/v1/audiences/${args.audience_id}/contacts/${args.contact_id}`),
+};
+exports.deleteContactTool = {
+    name: "delete_contact",
+    description: "Remove a person from the workspace entirely, along with every audience membership. Their " +
+        "suppression and topic preferences are kept on purpose — an opt-out has to outlive the " +
+        "contact record, or the next import silently puts them back on the list. To take someone " +
+        "off a single audience use remove_from_audience instead.",
+    schema: { contact_id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("DELETE", `/v1/contacts/${args.contact_id}`),
+};
+exports.tagContactTool = {
+    name: "tag_contact",
+    description: "Add or remove tags on a contact. Tags are flat labels — vip, beta, churned — as opposed to " +
+        "custom properties, which are declared fields with a value. They are lower-cased and spaces " +
+        "become hyphens, so VIP and vip are the same tag. Tagging reaches the person across every " +
+        "audience they are on. Call list_tags first to see what the workspace already uses, rather " +
+        "than inventing a synonym for an existing tag.",
+    schema: {
+        contact_id: zod_1.z.string(),
+        add: zod_1.z.array(zod_1.z.string()).optional(),
+        remove: zod_1.z.array(zod_1.z.string()).optional(),
+    },
+    handler: async (args) => {
+        const { contact_id, ...body } = args;
+        return (0, client_1.request)("POST", `/v1/contacts/${contact_id}/tags`, body);
+    },
+};
+exports.listTagsTool = {
+    name: "list_tags",
+    description: "Every tag in use in the workspace, with how many contacts carry each. Tags are free-form, " +
+        "so this is the only way to know what exists before applying one.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/contacts/tags"),
+};
+//# sourceMappingURL=audiences.js.map

package/dist/tools/audiences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audiences.js","sourceRoot":"","sources":["../../src/tools/audiences.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,sDAAsD;IACnE,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,eAAe,CAAC;CACrD,CAAC;AAEW,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,2FAA2F;QAC3F,6FAA6F;QAC7F,wCAAwC;IAC1C,MAAM,EAAE;QACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACtC,OAAO,IAAA,gBAAO,EAAC,MAAM,EAAE,iBAAiB,WAAW,WAAW,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;CACF,CAAC;AAEW,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,kFAAkF;QAClF,mBAAmB;IACrB,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,gBAAgB,IAAI,CAAC,EAAE,EAAE,CAAC;CAC5F,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,wFAAwF;IAC1F,MAAM,EAAE;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;QACd,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAChF;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC7B,OAAO,IAAA,gBAAO,EAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;CACF,CAAC;AAEW,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,qFAAqF;QACrF,iFAAiF;IACnF,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,cAAc,CAAC;CACpD,CAAC;AAEW,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,qFAAqF;QACrF,oFAAoF;IACtF,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,gBAAgB,IAAI,CAAC,EAAE,UAAU,CAAC;CACpG,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,2FAA2F;QAC3F,oFAAoF;QACpF,mFAAmF;QACnF,eAAe;IACjB,MAAM,EAAE;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QACtD,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACxE,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC1F,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KACzF;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtF,OAAO,IAAA,gBAAO,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAC;AAEW,QAAA,sBAAsB,GAAG;IACpC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,6FAA6F;QAC7F,oFAAoF;QACpF,2EAA2E;IAC7E,MAAM,EAAE;QACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;KACvB;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,QAAQ,EAAE,iBAAiB,IAAI,CAAC,WAAW,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;CACrF,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,yDAAyD;IAC3D,MAAM,EAAE,EAAE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAClC,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,QAAQ,EAAE,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;CACvD,CAAC;AAEW,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,6FAA6F;QAC7F,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,+CAA+C;IACjD,MAAM,EAAE;QACN,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACrC,OAAO,IAAA,gBAAO,EAAC,MAAM,EAAE,gBAAgB,UAAU,OAAO,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;CACF,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,4FAA4F;QAC5F,kEAAkE;IACpE,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,mBAAmB,CAAC;CACzD,CAAC"}

package/dist/tools/automations.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emitEventTool = exports.enrollTool = exports.listAutomationsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listAutomationsTool = {
+    name: "list_automations",
+    description: "List multi-step email sequences and how many people are currently in each. Use this " +
+        "to find the right automation before enrolling someone.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/automations"),
+};
+exports.enrollTool = {
+    name: "enroll_in_automation",
+    description: "Put someone into a multi-step sequence. Prefer this over scheduling several emails " +
+        "yourself: the sequence stops on its own if they unsubscribe, reply, or hard bounce, " +
+        "which you would otherwise have to track and cancel by hand. Enrolling the same person " +
+        "twice is a no-op, so it is safe to retry a call you are unsure about.",
+    schema: {
+        automation_id: zod_1.z.string(),
+        email: zod_1.z.string().email(),
+        variables: zod_1.z
+            .record(zod_1.z.string())
+            .optional()
+            .describe("Values for any templated steps in the sequence"),
+    },
+    handler: async (args) => {
+        const { automation_id, ...body } = args;
+        return (0, client_1.request)("POST", `/v1/automations/${automation_id}/enroll`, body);
+    },
+};
+exports.emitEventTool = {
+    name: "emit_event",
+    description: "Emit a named event, starting every automation that waits on it — for example " +
+        "'trial_started' or 'invoice_overdue'. Use this when you want the configured sequences " +
+        "to decide what happens, rather than naming an automation yourself.",
+    schema: {
+        name: zod_1.z.string().describe("Event name, e.g. trial_started"),
+        email: zod_1.z.string().email(),
+        variables: zod_1.z.record(zod_1.z.string()).optional(),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/events", args),
+};
+//# sourceMappingURL=automations.js.map

package/dist/tools/automations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations.js","sourceRoot":"","sources":["../../src/tools/automations.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,mBAAmB,GAAG;IACjC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,sFAAsF;QACtF,wDAAwD;IAC1D,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,iBAAiB,CAAC;CACvD,CAAC;AAEW,QAAA,UAAU,GAAG;IACxB,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,qFAAqF;QACrF,sFAAsF;QACtF,wFAAwF;QACxF,uEAAuE;IACzE,MAAM,EAAE;QACN,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;QACzB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,OAAC;aACT,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;aAClB,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;KAC9D;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACxC,OAAO,IAAA,gBAAO,EAAC,MAAM,EAAE,mBAAmB,aAAa,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,+EAA+E;QAC/E,wFAAwF;QACxF,oEAAoE;IACtE,MAAM,EAAE;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC3D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3C;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;CACtF,CAAC"}

package/dist/tools/broadcasts.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendBroadcastTool = exports.previewBroadcastTool = exports.listBroadcastsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listBroadcastsTool = {
+    name: "list_broadcasts",
+    description: "List campaigns with their status and send progress.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/broadcasts"),
+};
+exports.previewBroadcastTool = {
+    name: "preview_broadcast",
+    description: "How many contacts a campaign would reach, and whether the reputation gate would allow it. " +
+        "Always run this before sending — it is the only way to see the size of a campaign without " +
+        "starting it.",
+    schema: { id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/broadcasts/${args.id}/preview`),
+};
+exports.sendBroadcastTool = {
+    name: "send_broadcast",
+    description: "Send a campaign now, or schedule it with scheduled_at. This mails every contact in the " +
+        "segment and cannot be undone once started — run preview_broadcast first.",
+    schema: {
+        id: zod_1.z.string(),
+        scheduled_at: zod_1.z.string().optional().describe("ISO 8601 timestamp; omit to send now"),
+    },
+    handler: async (args) => {
+        const { id, ...body } = args;
+        return (0, client_1.request)("POST", `/v1/broadcasts/${id}/send`, body);
+    },
+};
+//# sourceMappingURL=broadcasts.js.map

package/dist/tools/broadcasts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.js","sourceRoot":"","sources":["../../src/tools/broadcasts.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,qDAAqD;IAClE,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,gBAAgB,CAAC;CACtD,CAAC;AAEW,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,4FAA4F;QAC5F,4FAA4F;QAC5F,cAAc;IAChB,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,kBAAkB,IAAI,CAAC,EAAE,UAAU,CAAC;CACtD,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,yFAAyF;QACzF,0EAA0E;IAC5E,MAAM,EAAE;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;QACd,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KACrF;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC7B,OAAO,IAAA,gBAAO,EAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;CACF,CAAC"}

package/dist/tools/domains.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyDomainTool = exports.addDomainTool = exports.listDomainsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listDomainsTool = {
+    name: "list_sending_domains",
+    description: "List sending domains with their verification status and the DNS records each one needs. " +
+        "Each record shows what is currently published, so this diagnoses a stuck verification.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/domains"),
+};
+exports.addDomainTool = {
+    name: "add_sending_domain",
+    description: "Register a sending domain and get back the DNS records to publish. Give the domain you " +
+        "send from — mail.<domain> and news.<domain> are provisioned beneath it and the right one " +
+        "is chosen per message, so a marketing complaint spike can never affect password reset " +
+        "delivery. Pass risk_class only to provision one of the two on its own.",
+    schema: {
+        domain: zod_1.z.string().describe("The domain you send from, e.g. example.com"),
+        risk_class: zod_1.z
+            .enum(["transactional", "marketing"])
+            .optional()
+            .describe("Omit to provision both, which is almost always what you want"),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/domains", args),
+};
+exports.verifyDomainTool = {
+    name: "verify_sending_domain",
+    description: "Re-check a domain's DNS records now instead of waiting for the background monitor.",
+    schema: { id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("POST", `/v1/domains/${args.id}/verify`),
+};
+//# sourceMappingURL=domains.js.map

package/dist/tools/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/tools/domains.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,0FAA0F;QAC1F,wFAAwF;IAC1F,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,aAAa,CAAC;CACnD,CAAC;AAEW,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,yFAAyF;QACzF,2FAA2F;QAC3F,wFAAwF;QACxF,wEAAwE;IAC1E,MAAM,EAAE;QACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;QACzE,UAAU,EAAE,OAAC;aACV,IAAI,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;aACpC,QAAQ,EAAE;aACV,QAAQ,CAAC,8DAA8D,CAAC;KAC5E;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC;CACvF,CAAC;AAEW,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,oFAAoF;IACjG,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,MAAM,EAAE,eAAe,IAAI,CAAC,EAAE,SAAS,CAAC;CACnD,CAAC"}

package/dist/tools/emails.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cancelEmailTool = exports.getEmailTool = exports.listEmailsTool = exports.sendEmailTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.sendEmailTool = {
+    name: "send_email",
+    description: "Send a transactional email, immediately or scheduled. Use scheduled_at with a relative " +
+        "phrase like 'in 3 days' or an ISO timestamp. The From domain must already be verified.",
+    schema: {
+        from: zod_1.z.string().describe("Sender address on a verified domain, e.g. 'Team <team@mail.example.com>'"),
+        to: zod_1.z.string().email().describe("Recipient address"),
+        subject: zod_1.z.string(),
+        html: zod_1.z.string().optional().describe("HTML body; provide html, text, or both"),
+        text: zod_1.z.string().optional(),
+        scheduled_at: zod_1.z.string().optional().describe("'in 3 days' or an ISO 8601 timestamp"),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/emails", args),
+};
+exports.listEmailsTool = {
+    name: "list_emails",
+    description: "List recent messages with their delivery status. Filter by status " +
+        "(queued, scheduled, sent, delivered, bounced, complained, rejected) or recipient.",
+    schema: {
+        status: zod_1.z.string().optional(),
+        to: zod_1.z.string().optional().describe("Filter to one recipient address"),
+        limit: zod_1.z.number().int().min(1).max(200).optional(),
+    },
+    handler: async (args) => {
+        const qs = new URLSearchParams(Object.entries(args)
+            .filter(([, v]) => v !== undefined)
+            .map(([k, v]) => [k, String(v)]));
+        return (0, client_1.request)("GET", `/v1/emails?${qs}`);
+    },
+};
+exports.getEmailTool = {
+    name: "get_email",
+    description: "Fetch one message with its full event timeline (send, delivery, bounce, complaint, " +
+        "open, click). This is the tool to reach for when asked why an email didn't arrive.",
+    schema: { id: zod_1.z.string().describe("Message id") },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/emails/${args.id}`),
+};
+exports.cancelEmailTool = {
+    name: "cancel_scheduled_email",
+    description: "Cancel a scheduled email before it sends. Only works while status is 'scheduled'.",
+    schema: { id: zod_1.z.string() },
+    handler: async (args) => (0, client_1.request)("DELETE", `/v1/emails/${args.id}`),
+};
+//# sourceMappingURL=emails.js.map

package/dist/tools/emails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emails.js","sourceRoot":"","sources":["../../src/tools/emails.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,yFAAyF;QACzF,wFAAwF;IAC1F,MAAM,EAAE;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;QACrG,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACpD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KACrF;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;CACtC,CAAC;AAEW,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,oEAAoE;QACpE,mFAAmF;IACrF,MAAM,EAAE;QACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACrE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACnD;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,IAAI,eAAe,CAC5B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAqB,CAAC,CACvD,CAAC;QACF,OAAO,IAAA,gBAAO,EAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,qFAAqF;QACrF,oFAAoF;IACtF,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;IACjD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC;CAC1F,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,mFAAmF;IAChG,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC;CAC7F,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOLS = void 0;
+/**
+ * The registry: every tool the server exposes, in the order they are listed
+ * to clients.
+ *
+ * Kept in its own module so it can be read without starting a server —
+ * `scripts/export-tools.ts` writes the names and descriptions to
+ * `web/lib/content/mcp-tools.json`, which is what the marketing site renders.
+ * The site used to state the count by hand and was wrong within a month.
+ */
+const emails_1 = require("./emails");
+const domains_1 = require("./domains");
+const suppressions_1 = require("./suppressions");
+const broadcasts_1 = require("./broadcasts");
+const threads_1 = require("./threads");
+const templates_1 = require("./templates");
+const approvals_1 = require("./approvals");
+const automations_1 = require("./automations");
+const topics_1 = require("./topics");
+const audiences_1 = require("./audiences");
+const operations_1 = require("./operations");
+exports.TOOLS = [
+    emails_1.sendEmailTool,
+    emails_1.listEmailsTool,
+    emails_1.getEmailTool,
+    emails_1.cancelEmailTool,
+    domains_1.listDomainsTool,
+    domains_1.addDomainTool,
+    domains_1.verifyDomainTool,
+    suppressions_1.listSuppressionsTool,
+    suppressions_1.addSuppressionTool,
+    suppressions_1.removeSuppressionTool,
+    broadcasts_1.listBroadcastsTool,
+    broadcasts_1.previewBroadcastTool,
+    broadcasts_1.sendBroadcastTool,
+    threads_1.listThreadsTool,
+    threads_1.getThreadTool,
+    threads_1.replyToMessageTool,
+    templates_1.listTemplatesTool,
+    templates_1.renderTemplateTool,
+    templates_1.sendTemplateTool,
+    approvals_1.listApprovalsTool,
+    approvals_1.decideApprovalTool,
+    automations_1.listAutomationsTool,
+    automations_1.enrollTool,
+    automations_1.emitEventTool,
+    topics_1.listTopicsTool,
+    topics_1.getPreferencesTool,
+    topics_1.setPreferencesTool,
+    audiences_1.listAudiencesTool,
+    audiences_1.addContactTool,
+    audiences_1.getContactTool,
+    audiences_1.updateContactTool,
+    audiences_1.listSegmentsTool,
+    audiences_1.listTagsTool,
+    audiences_1.countSegmentTool,
+    operations_1.metricsTool,
+    operations_1.listScheduledTool,
+    operations_1.batchSuppressTool,
+    operations_1.listWebhookEventsTool,
+    operations_1.broadcastRecipientsTool,
+    operations_1.listApiKeysTool,
+    operations_1.getUsageTool,
+    audiences_1.findContactTool,
+    audiences_1.removeFromAudienceTool,
+    audiences_1.deleteContactTool,
+    audiences_1.tagContactTool,
+];
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACH,qCAKkB;AAClB,uCAA6E;AAC7E,iDAIwB;AACxB,6CAIsB;AACtB,uCAA+E;AAC/E,2CAAsF;AACtF,2CAAoE;AACpE,+CAA+E;AAC/E,qCAAkF;AAClF,2CAYqB;AACrB,6CAQsB;AAeT,QAAA,KAAK,GAAc;IAC9B,sBAAa;IACb,uBAAc;IACd,qBAAY;IACZ,wBAAe;IACf,yBAAe;IACf,uBAAa;IACb,0BAAgB;IAChB,mCAAoB;IACpB,iCAAkB;IAClB,oCAAqB;IACrB,+BAAkB;IAClB,iCAAoB;IACpB,8BAAiB;IACjB,yBAAe;IACf,uBAAa;IACb,4BAAkB;IAClB,6BAAiB;IACjB,8BAAkB;IAClB,4BAAgB;IAChB,6BAAiB;IACjB,8BAAkB;IAClB,iCAAmB;IACnB,wBAAU;IACV,2BAAa;IACb,uBAAc;IACd,2BAAkB;IAClB,2BAAkB;IAClB,6BAAiB;IACjB,0BAAc;IACd,0BAAc;IACd,6BAAiB;IACjB,4BAAgB;IAChB,wBAAY;IACZ,4BAAgB;IAChB,wBAAW;IACX,8BAAiB;IACjB,8BAAiB;IACjB,kCAAqB;IACrB,oCAAuB;IACvB,4BAAe;IACf,yBAAY;IACZ,2BAAe;IACf,kCAAsB;IACtB,6BAAiB;IACjB,0BAAc;CACf,CAAC"}

package/dist/tools/operations.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUsageTool = exports.listApiKeysTool = exports.broadcastRecipientsTool = exports.listWebhookEventsTool = exports.batchSuppressTool = exports.listScheduledTool = exports.metricsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.metricsTool = {
+    name: "get_email_metrics",
+    description: "Delivery and engagement over a window. Open and click rates are over delivered, not " +
+        "sent — a low open rate with a high bounce rate is a deliverability problem, not an " +
+        "engagement one.",
+    schema: { days: zod_1.z.number().int().min(1).max(365).optional().describe("Defaults to 30") },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/emails/metrics?days=${args.days ?? 30}`),
+};
+exports.listScheduledTool = {
+    name: "list_scheduled_emails",
+    description: "Messages queued to send later but not yet sent. Cancel one with cancel_scheduled_email.",
+    schema: { limit: zod_1.z.number().int().min(1).max(200).optional() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/emails?status=scheduled&limit=${args.limit ?? 50}`),
+};
+exports.batchSuppressTool = {
+    name: "suppress_many",
+    description: "Stop sending to many addresses at once — the path for importing another provider's " +
+        "unsubscribe list before a first campaign. Without it, everyone who already opted out " +
+        "there gets mailed again here.",
+    schema: {
+        emails: zod_1.z.array(zod_1.z.string().email()).max(10000),
+        scope: zod_1.z.enum(["all", "transactional", "marketing"]).optional(),
+        reason: zod_1.z.enum(["manual", "list_hygiene", "unsubscribe"]).optional(),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/suppressions/batch", args),
+};
+exports.listWebhookEventsTool = {
+    name: "list_webhook_deliveries",
+    description: "Recent delivery attempts for a webhook endpoint, with status codes and errors. This " +
+        "is how to tell 'we never sent it' from 'your endpoint returned 500'.",
+    schema: { endpoint_id: zod_1.z.string(), limit: zod_1.z.number().int().min(1).max(200).optional() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/webhook-endpoints/${args.endpoint_id}/events?limit=${args.limit ?? 50}`),
+};
+exports.broadcastRecipientsTool = {
+    name: "list_broadcast_recipients",
+    description: "Who a campaign reached and what happened to each message.",
+    schema: { id: zod_1.z.string(), limit: zod_1.z.number().int().min(1).max(1000).optional() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/broadcasts/${args.id}/recipients?limit=${args.limit ?? 200}`),
+};
+exports.listApiKeysTool = {
+    name: "list_api_keys",
+    description: "List this workspace's API keys with their scopes and limits. Never returns key values.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/api-keys"),
+};
+exports.getUsageTool = {
+    name: "get_usage",
+    description: "This workspace's plan, how many emails it has sent this month, and how many are " +
+        "left. Check before a large batch: a send that would cross the included allowance " +
+        "on a plan without overage is refused whole, so it is better to know first than to " +
+        "discover it halfway through a campaign.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/usage"),
+};
+//# sourceMappingURL=operations.js.map

package/dist/tools/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/tools/operations.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,WAAW,GAAG;IACzB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,sFAAsF;QACtF,qFAAqF;QACrF,iBAAiB;IACnB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;IACxF,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,2BAA2B,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;CAC/D,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,yFAAyF;IAC3F,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;IAC9D,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,qCAAqC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;CAC1E,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,qFAAqF;QACrF,uFAAuF;QACvF,+BAA+B;IACjC,MAAM,EAAE;QACN,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/D,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrE;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,wBAAwB,EAAE,IAAI,CAAC;CAClG,CAAC;AAEW,QAAA,qBAAqB,GAAG;IACnC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,sFAAsF;QACtF,sEAAsE;IACxE,MAAM,EAAE,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;IACvF,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,yBAAyB,IAAI,CAAC,WAAW,iBAAiB,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;CAC/F,CAAC;AAEW,QAAA,uBAAuB,GAAG;IACrC,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;IAC/E,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,kBAAkB,IAAI,CAAC,EAAE,qBAAqB,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;CACpF,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,wFAAwF;IAC1F,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,cAAc,CAAC;CACpD,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,kFAAkF;QAClF,mFAAmF;QACnF,oFAAoF;QACpF,yCAAyC;IAC3C,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,WAAW,CAAC;CACjD,CAAC"}

package/dist/tools/suppressions.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeSuppressionTool = exports.addSuppressionTool = exports.listSuppressionsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listSuppressionsTool = {
+    name: "list_suppressions",
+    description: "List addresses we refuse to mail and why (hard_bounce, complaint, unsubscribe, manual). " +
+        "Check here first when someone reports not receiving email.",
+    schema: { limit: zod_1.z.number().int().min(1).max(500).optional() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/suppressions?limit=${args.limit ?? 100}`),
+};
+exports.addSuppressionTool = {
+    name: "add_suppression",
+    description: "Stop sending to an address. Scope 'marketing' leaves transactional mail working.",
+    schema: {
+        email: zod_1.z.string().email(),
+        scope: zod_1.z.enum(["all", "transactional", "marketing"]).optional(),
+        reason: zod_1.z.enum(["manual", "list_hygiene", "unsubscribe"]).optional(),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/suppressions", args),
+};
+exports.removeSuppressionTool = {
+    name: "remove_suppression",
+    description: "Remove a suppression so the address can be mailed again. Be careful with hard bounces — " +
+        "the address was rejected by the receiving server, and re-sending raises the bounce rate " +
+        "that AWS enforces on.",
+    schema: {
+        email: zod_1.z.string().email(),
+        scope: zod_1.z.enum(["all", "transactional", "marketing"]).optional(),
+    },
+    handler: async (args) => (0, client_1.request)("DELETE", `/v1/suppressions/${encodeURIComponent(String(args.email))}?scope=${args.scope ?? "all"}`),
+};
+//# sourceMappingURL=suppressions.js.map

package/dist/tools/suppressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppressions.js","sourceRoot":"","sources":["../../src/tools/suppressions.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,0FAA0F;QAC1F,4DAA4D;IAC9D,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;IAC9D,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,0BAA0B,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;CAChE,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,kFAAkF;IAC/F,MAAM,EAAE;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/D,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrE;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,CAAC;CAC5F,CAAC;AAEW,QAAA,qBAAqB,GAAG;IACnC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,0FAA0F;QAC1F,0FAA0F;QAC1F,uBAAuB;IACzB,MAAM,EAAE;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;KAChE;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,QAAQ,EAAE,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;CAC/G,CAAC"}

package/dist/tools/templates.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendTemplateTool = exports.renderTemplateTool = exports.listTemplatesTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listTemplatesTool = {
+    name: "list_templates",
+    description: "List stored email templates and the variables each one needs. Prefer sending via a " +
+        "template over composing HTML yourself — templates carry the brand styling and the " +
+        "unsubscribe footer.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/templates"),
+};
+exports.renderTemplateTool = {
+    name: "render_template",
+    description: "Render a template with values, without sending. Use this to check your copy reads " +
+        "correctly before mailing a real person. Returns an error listing any missing variables.",
+    schema: {
+        slug: zod_1.z.string(),
+        variables: zod_1.z.record(zod_1.z.string()),
+    },
+    handler: async (args) => (0, client_1.request)("POST", `/v1/templates/${args.slug}/render`, { variables: args.variables }),
+};
+exports.sendTemplateTool = {
+    name: "send_template_email",
+    description: "Send an email built from a stored template. Variable values are HTML-escaped on " +
+        "substitution, so they are safe to fill from user-supplied text.",
+    schema: {
+        template: zod_1.z.string().describe("Template slug"),
+        variables: zod_1.z.record(zod_1.z.string()),
+        from: zod_1.z.string(),
+        to: zod_1.z.string().email(),
+        subject: zod_1.z.string().optional().describe("Overrides the template's subject"),
+        scheduled_at: zod_1.z.string().optional(),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/emails", args),
+};
+//# sourceMappingURL=templates.js.map

package/dist/tools/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/tools/templates.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,qFAAqF;QACrF,oFAAoF;QACpF,qBAAqB;IACvB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,eAAe,CAAC;CACrD,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,oFAAoF;QACpF,yFAAyF;IAC3F,MAAM,EAAE;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;KAChC;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,MAAM,EAAE,iBAAiB,IAAI,CAAC,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;CACtF,CAAC;AAEW,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,kFAAkF;QAClF,iEAAiE;IACnE,MAAM,EAAE;QACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACtB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC3E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;CACtF,CAAC"}

package/dist/tools/threads.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.replyToMessageTool = exports.getThreadTool = exports.listThreadsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listThreadsTool = {
+    name: "list_threads",
+    description: "List email conversations. Pass awaiting_reply=true to get only the threads where someone " +
+        "has written to you and you haven't answered — this is the tool to poll when deciding what " +
+        "needs a response.",
+    schema: {
+        awaiting_reply: zod_1.z.boolean().optional(),
+        limit: zod_1.z.number().int().min(1).max(200).optional(),
+    },
+    handler: async (args) => {
+        const qs = new URLSearchParams();
+        if (args.awaiting_reply !== undefined)
+            qs.set("awaiting_reply", String(args.awaiting_reply));
+        if (args.limit !== undefined)
+            qs.set("limit", String(args.limit));
+        return (0, client_1.request)("GET", `/v1/threads?${qs}`);
+    },
+};
+exports.getThreadTool = {
+    name: "get_thread",
+    description: "Read a conversation as a chronological transcript of outbound and inbound messages. " +
+        "Inbound text already has quoted history and signatures stripped, so read `text`; " +
+        "`raw_text` holds the untrimmed body if the stripped version looks wrong. Check " +
+        "spf_verdict and dkim_verdict before trusting a reply's claimed sender.",
+    schema: { id: zod_1.z.string().describe("Thread id") },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/threads/${args.id}`),
+};
+exports.replyToMessageTool = {
+    name: "reply_to_message",
+    description: "Reply to a message, keeping it on the same conversation. Sets the threading headers so " +
+        "the recipient's mail client shows it as part of the existing exchange rather than a new " +
+        "one. Prefer this over send_email whenever you are answering something.",
+    schema: {
+        reply_to_message_id: zod_1.z.string().describe("Id of the message being replied to"),
+        from: zod_1.z.string().describe("Sender address on a verified domain"),
+        to: zod_1.z.string().email(),
+        subject: zod_1.z.string(),
+        text: zod_1.z.string().optional(),
+        html: zod_1.z.string().optional(),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/emails", args),
+};
+//# sourceMappingURL=threads.js.map

package/dist/tools/threads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threads.js","sourceRoot":"","sources":["../../src/tools/threads.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,2FAA2F;QAC3F,4FAA4F;QAC5F,mBAAmB;IACrB,MAAM,EAAE;QACN,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACnD;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,OAAO,IAAA,gBAAO,EAAC,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,sFAAsF;QACtF,mFAAmF;QACnF,iFAAiF;QACjF,wEAAwE;IAC1E,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;IAChD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,eAAe,IAAI,CAAC,EAAE,EAAE,CAAC;CAC3F,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,yFAAyF;QACzF,0FAA0F;QAC1F,wEAAwE;IAC1E,MAAM,EAAE;QACN,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAChE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACtB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;CACtF,CAAC"}

package/dist/tools/topics.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setPreferencesTool = exports.getPreferencesTool = exports.listTopicsTool = void 0;
+const zod_1 = require("zod");
+const client_1 = require("../client");
+exports.listTopicsTool = {
+    name: "list_topics",
+    description: "List subscription topics — the categories a person can opt out of individually. " +
+        "Pass a topic when sending marketing mail so recipients can unsubscribe from that " +
+        "kind alone rather than from everything.",
+    schema: {},
+    handler: async () => (0, client_1.request)("GET", "/v1/topics"),
+};
+exports.getPreferencesTool = {
+    name: "get_email_preferences",
+    description: "What one person has chosen to receive. Check this before asking a human why someone " +
+        "isn't getting a particular kind of email — an opt-out looks identical to a delivery " +
+        "failure from the outside.",
+    schema: { email: zod_1.z.string().email() },
+    handler: async (args) => (0, client_1.request)("GET", `/v1/topics/preferences?email=${encodeURIComponent(String(args.email))}`),
+};
+exports.setPreferencesTool = {
+    name: "set_email_preferences",
+    description: "Set which topics a person receives. Only do this when they have actually asked — " +
+        "silently re-subscribing someone who opted out is what generates spam complaints.",
+    schema: {
+        email: zod_1.z.string().email(),
+        topics: zod_1.z.record(zod_1.z.boolean()).describe("Topic key to subscribed, e.g. {\"newsletter\": false}"),
+    },
+    handler: async (args) => (0, client_1.request)("POST", "/v1/topics/preferences", args),
+};
+//# sourceMappingURL=topics.js.map

package/dist/tools/topics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../src/tools/topics.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,sCAAoC;AAEvB,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,kFAAkF;QAClF,mFAAmF;QACnF,yCAAyC;IAC3C,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,gBAAO,EAAC,KAAK,EAAE,YAAY,CAAC;CAClD,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,sFAAsF;QACtF,sFAAsF;QACtF,2BAA2B;IAC7B,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;IACrC,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAC/C,IAAA,gBAAO,EAAC,KAAK,EAAE,gCAAgC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;CAC3F,CAAC;AAEW,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,mFAAmF;QACnF,kFAAkF;IACpF,MAAM,EAAE;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;KAChG;IACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,MAAM,EAAE,wBAAwB,EAAE,IAAI,CAAC;CAClG,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@sendraven/mcp",
+  "version": "0.1.0",
+  "description": "MCP server for SendRaven: send email, read replies as threads, run campaigns, and decide approvals, with per-key limits for agents.",
+  "license": "MIT",
+  "author": "Common Ninja Ltd.",
+  "homepage": "https://sendraven.ai/mcp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/CommonNinja/sendraven-mcp-server.git"
+  },
+  "bugs": {
+    "url": "https://github.com/CommonNinja/sendraven-mcp-server/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "email",
+    "email-api",
+    "ai-agents",
+    "claude",
+    "cursor",
+    "sendraven"
+  ],
+  "type": "commonjs",
+  "bin": {
+    "sendraven-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "server.json"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "dev": "PORT=5100 tsx watch src/index.ts",
+    "build": "tsc && tsx scripts/export-tools.ts",
+    "prepublishOnly": "npm run build",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "export-tools": "tsx scripts/export-tools.ts"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "express": "^4.21.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.14.12",
+    "tsx": "^4.23.1",
+    "typescript": "^5.5.4"
+  }
+}

package/server.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
+  "name": "ai.sendraven/mcp",
+  "description": "Email for AI agents: send, read replies as threads, run campaigns, decide approvals, with per-key limits.",
+  "repository": {
+    "url": "https://github.com/CommonNinja/sendraven-mcp-server",
+    "source": "github"
+  },
+  "version": "0.1.0",
+  "websiteUrl": "https://sendraven.ai/mcp",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "@sendraven/mcp",
+      "version": "0.1.0",
+      "transport": { "type": "stdio" },
+      "environmentVariables": [
+        {
+          "name": "SENDRAVEN_API_KEY",
+          "description": "API key from the SendRaven dashboard (Developers).",
+          "isRequired": true,
+          "isSecret": true
+        }
+      ]
+    }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://mcp.sendraven.ai/mcp"
+    }
+  ]
+}