groundmail-mcp 0.8.0 → 0.11.0

package/README.md

@@ -55,7 +55,7 @@ When you connect, you choose the access: **Full**, **Send only** or **Read only*
 >
 > "How is my deliverability over the last 7 days?"
 
-Tools cover emails (send, schedule, cancel, look up), domains (add, apply DNS, verify), templates, webhooks, suppressions and deliverability. Each tool carries read-only and destructive annotations and an output schema. Full list: [docs.groundmail.dev/ai/mcp](https://docs.groundmail.dev/ai/mcp).
+Tools cover emails (send, schedule, cancel, look up), domains (add, apply DNS, verify), templates, webhooks, suppressions, deliverability and tenants (one per customer you send for: create, update, pause, resume, stats; `tenant` on sends, domains and suppressions). Each tool carries read-only and destructive annotations and an output schema. Full list: [docs.groundmail.dev/ai/mcp](https://docs.groundmail.dev/ai/mcp).
 
 ## Transports
 

package/dist/index.js

@@ -150,6 +150,9 @@ var emailItem = object(
       heldBackItem(),
       "Recipients Groundmail validation held back before sending, with why; empty when none were"
     ),
+    test: boolean(
+      "True when the email never reached the mail server: sent with a test key (gm_test_\u2026) or only to simulator addresses. Its status and events are simulated"
+    ),
     tags: { description: "Tags attached to the email" },
     scheduled_at: nullableString("When the email is scheduled to send (ISO 8601)"),
     cancelled_at: nullableString("When the scheduled email was cancelled (ISO 8601)"),
@@ -158,7 +161,8 @@ var emailItem = object(
     delivered_at: nullableString("When the email was delivered (ISO 8601)"),
     bounced_at: nullableString("When the email bounced (ISO 8601)"),
     opened_at: nullableString("First open (ISO 8601); needs open tracking on the sending domain"),
-    clicked_at: nullableString("First tracked-link click (ISO 8601); needs click tracking on the sending domain")
+    clicked_at: nullableString("First tracked-link click (ISO 8601); needs click tracking on the sending domain"),
+    tenant: nullableString("External id of the tenant the email was sent as. Present only when it was sent as a tenant")
   },
   ["id", "from", "to", "subject", "status"]
 );
@@ -176,7 +180,8 @@ var domainItem = object(
     tls_mode: string("TLS mode for outgoing mail: opportunistic or enforced"),
     inbound_enabled: boolean("Whether inbound receiving is enabled"),
     inbound_status: string("Inbound status: disabled, pending, active or error"),
-    inbound_error: nullableString("Inbound setup error, if any")
+    inbound_error: nullableString("Inbound setup error, if any"),
+    tenant: nullableString("External id of the tenant that owns the domain. Absent for a domain the whole account can use")
   },
   ["id", "name", "status"]
 );
@@ -197,6 +202,7 @@ var webhookItem = object(
     url: string("URL that receives events"),
     events: stringArray("Event types delivered to this endpoint"),
     enabled: boolean("Whether the endpoint receives events"),
+    tenants: stringArray("Present only when the endpoint receives email events for some tenants only: their external ids"),
     created_at: string("When the endpoint was created (ISO 8601)"),
     updated_at: string("When the endpoint was last changed (ISO 8601)")
   },
@@ -208,6 +214,7 @@ var suppressionItem = object(
     email: string("Suppressed email address"),
     reason: nullableString("Why the address was suppressed"),
     source: string("How the suppression was created, for example api or bounce"),
+    tenant: string("External id of the tenant, on an entry of a tenant's own suppression list"),
     created_at: string("When the suppression was created (ISO 8601)"),
     updated_at: string("When the suppression was last changed (ISO 8601)")
   },
@@ -267,7 +274,8 @@ var sendEmailOutput = object(
     held_back: arrayOf(
       heldBackItem(),
       "Present when Groundmail validation held some recipients back; the email went to the rest"
-    )
+    ),
+    test: boolean("Present and true on a test send (test key or simulator addresses): nothing was delivered")
   },
   ["id", "status"]
 );
@@ -389,6 +397,37 @@ var deliverabilityOutput = object(
   ["window", "summary"]
 );
 var anyObject = (description) => ({ type: "object", description });
+var dmarcOutput = object(
+  {
+    dmarc: described(
+      object(
+        {
+          domain: string("Monitored domain"),
+          enabled: boolean("True when monitoring is on"),
+          status: string("waiting (no report yet), receiving, or disabled"),
+          report_address: string("Where receivers send the domain's aggregate reports"),
+          rua: string("The rua= value to add to the DMARC record (mailto:<report_address>)"),
+          dns: anyObject("The DMARC record now (host, record, policy), whether it lists the report address (rua_present), and suggested_record: the record to publish"),
+          digest_enabled: boolean("True when the weekly digest email is on"),
+          last_report_at: nullableString("End of the newest report received (ISO 8601)"),
+          window_days: number("Days of reports the summary covers"),
+          summary: anyObject("Totals: messages, dmarc_pass, dmarc_fail, pass_rate (0-1), reports, reporters"),
+          sources: arrayOf(
+            anyObject("A sending source: name, provider, status (passing, failing, or unknown = possible spoofing), messages, pass_rate, spf_aligned_rate, dkim_aligned_rate, ips"),
+            "Who sends mail as the domain, grouped by provider, busiest first"
+          ),
+          daily: arrayOf(anyObject("date, messages, dmarc_pass, pass_rate"), "Pass rate by day"),
+          readiness: anyObject("Whether it is safe to enforce DMARC: verdict (no_data, collecting, fix_sources, ready_quarantine, ready_reject, enforced), label, detail, blocking_sources")
+        },
+        ["domain", "enabled"]
+      ),
+      "DMARC monitoring for the domain"
+    ),
+    applied: { type: ["object", "null"], description: "When apply was used: the DNS provider and what changed" },
+    apply_error: string("Why the DNS provider could not update the record (add it by hand instead)")
+  },
+  ["dmarc"]
+);
 var migrationOutput = object(
   {
     migration: described(
@@ -425,6 +464,80 @@ var migrationOutput = object(
   },
   ["migration"]
 );
+var nullableNumber = (description) => ({ type: ["number", "null"], description });
+var tenantItem = object(
+  {
+    id: string("Groundmail tenant id"),
+    object: string("Always tenant"),
+    external_id: string("Your id for this customer; unique in the account"),
+    name: nullableString("Display name"),
+    status: { type: "string", enum: ["active", "paused"], description: "active, or paused (new sends are refused)" },
+    paused_reason: nullableString("Why the tenant was paused"),
+    paused_at: nullableString("When the tenant was paused (ISO 8601)"),
+    pause_source: {
+      type: ["string", "null"],
+      enum: ["api", "admin", "automated", null],
+      description: "Who paused it: api (you), admin (Groundmail support) or automated (Groundmail's bounce and complaint checks). Only a tenant paused over the API can be resumed over the API"
+    },
+    default_from_domain: nullableString("Completes a bare from (billing \u2192 billing@<domain>) on sends that name this tenant"),
+    stream_policy: string("all, or transactional_only (product email is refused for this tenant)"),
+    daily_limit: nullableNumber("Most recipients per UTC day for this tenant; null for no tenant limit"),
+    metadata: { type: ["object", "null"], description: "Your own data about the tenant" },
+    created_at: string("When the tenant was created (ISO 8601)"),
+    updated_at: string("When the tenant was last changed (ISO 8601)")
+  },
+  ["id", "external_id", "status"]
+);
+var tenantOutput = object({ tenant: described(tenantItem, "The tenant") }, ["tenant"]);
+var streamCounts = (description) => ({
+  ...object({
+    transactional: nullableNumber("Transactional email recipients"),
+    product: nullableNumber("Product email recipients")
+  }),
+  description
+});
+var tenantStatsOutput = object(
+  {
+    tenant: string("External id of the tenant"),
+    stats: described(
+      object(
+        {
+          object: string("Always tenant_stats"),
+          days: number("Days covered"),
+          from: string("Start of the window (ISO 8601)"),
+          total: number("Emails created in the window"),
+          queued: number("Emails waiting to be sent"),
+          scheduled: number("Emails still scheduled"),
+          sent: number("Emails handed off for delivery"),
+          delivered: number("Emails delivered"),
+          bounced: number("Emails that bounced"),
+          complained: number("Emails reported as spam"),
+          failed: number("Emails that failed"),
+          suppressed: number("Emails not sent because the recipient was suppressed"),
+          opened: number("Emails opened"),
+          clicked: number("Emails with a tracked click"),
+          bounce_rate: number("Bounced / (delivered + bounced + complained), as a fraction"),
+          complaint_rate: number("Complained / (delivered + bounced + complained), as a fraction")
+        },
+        ["days", "total"]
+      ),
+      "Email counts and rates over the window"
+    ),
+    ramp: described(
+      object({
+        object: string("Always tenant_ramp"),
+        active: boolean("True when a ramp-up daily limit applies to this tenant today"),
+        stage: nullableNumber("Ramp-up stage, 1-based; null when the ramp does not apply"),
+        daily_limit: { ...streamCounts("Today's limit for each stream"), type: ["object", "null"] },
+        used_today: streamCounts("Recipients sent today on each stream"),
+        completed: boolean("True when the tenant finished its ramp-up"),
+        resets_at: string("The next 00:00 UTC (ISO 8601)")
+      }),
+      "The tenant's sending ramp today, when known"
+    )
+  },
+  ["tenant", "stats"]
+);
 
 // src/tools.ts
 function textResult(value, isError = false) {
@@ -459,6 +572,34 @@ function optStringArray(args, key) {
   if (Array.isArray(value)) return value.map((v) => String(v));
   return void 0;
 }
+function tenantSettings(args) {
+  const out = {};
+  if (args.name !== void 0) out.name = args.name == null ? null : String(args.name);
+  if (args.default_from_domain !== void 0) {
+    out.default_from_domain = args.default_from_domain == null ? null : String(args.default_from_domain);
+  }
+  if (args.stream_policy !== void 0) {
+    if (args.stream_policy !== "all" && args.stream_policy !== "transactional_only") {
+      return "stream_policy must be all or transactional_only";
+    }
+    out.stream_policy = args.stream_policy;
+  }
+  if (args.daily_limit !== void 0) {
+    if (args.daily_limit === null) out.daily_limit = null;
+    else {
+      const n = Number(args.daily_limit);
+      if (!Number.isInteger(n) || n < 0) return "daily_limit must be a whole number, or null for no limit";
+      out.daily_limit = n;
+    }
+  }
+  if (args.metadata !== void 0) {
+    if (args.metadata !== null && (typeof args.metadata !== "object" || Array.isArray(args.metadata))) {
+      return "metadata must be an object, or null";
+    }
+    out.metadata = args.metadata;
+  }
+  return out;
+}
 var EMAIL_WEBHOOK_EVENTS = /* @__PURE__ */ new Set([
   "email.received",
   "email.sent",
@@ -493,6 +634,7 @@ async function callMcpTool(client, name, args) {
           html: optString(args, "html"),
           text: optString(args, "text"),
           reply_to: optString(args, "reply_to"),
+          ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {},
           ...templateId ? { template: { id: templateId, ...variables ? { variables } : {} } } : {}
         });
         return textResult(result);
@@ -500,7 +642,9 @@ async function callMcpTool(client, name, args) {
       case "list_emails": {
         const result = await client.emails.list({
           limit: optNumber(args, "limit"),
-          cursor: optString(args, "cursor")
+          cursor: optString(args, "cursor"),
+          ...typeof args.test === "boolean" ? { test: args.test } : {},
+          ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
         });
         return textResult(result);
       }
@@ -537,7 +681,8 @@ async function callMcpTool(client, name, args) {
       case "list_domains": {
         const result = await client.domains.list({
           limit: optNumber(args, "limit"),
-          cursor: optString(args, "cursor")
+          cursor: optString(args, "cursor"),
+          ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
         });
         return textResult(result);
       }
@@ -548,7 +693,8 @@ async function callMcpTool(client, name, args) {
         return textResult(
           await client.domains.create({
             name: domainName,
-            ...inbound !== void 0 ? { inbound_enabled: inbound } : {}
+            ...inbound !== void 0 ? { inbound_enabled: inbound } : {},
+            ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
           })
         );
       }
@@ -564,10 +710,12 @@ async function callMcpTool(client, name, args) {
         const url = optString(args, "url");
         if (!url) return textResult("Missing required argument: url", true);
         const events = optStringArray(args, "events");
+        const tenants = optStringArray(args, "tenants");
         return textResult(
           await client.webhooks.create({
             url,
-            ...events ? { events } : {}
+            ...events ? { events } : {},
+            ...tenants?.length ? { tenants } : {}
           })
         );
       }
@@ -581,7 +729,8 @@ async function callMcpTool(client, name, args) {
           await client.suppressions.list({
             limit: optNumber(args, "limit"),
             cursor: optString(args, "cursor"),
-            email: optString(args, "email")
+            email: optString(args, "email"),
+            ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
           })
         );
       }
@@ -596,7 +745,8 @@ async function callMcpTool(client, name, args) {
         return textResult(
           await client.suppressions.create({
             email,
-            reason: optString(args, "reason")
+            reason: optString(args, "reason"),
+            ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
           })
         );
       }
@@ -605,7 +755,8 @@ async function callMcpTool(client, name, args) {
         if (!idOrEmail) {
           return textResult("Missing required argument: id or email", true);
         }
-        return textResult(await client.suppressions.remove(idOrEmail));
+        const tenant = optString(args, "tenant");
+        return textResult(tenant ? await client.suppressions.remove(idOrEmail, { tenant }) : await client.suppressions.remove(idOrEmail));
       }
       case "list_templates": {
         const status = optString(args, "status");
@@ -656,10 +807,79 @@ async function callMcpTool(client, name, args) {
           await client.emails.testWebhook({
             event,
             email_id: optString(args, "email_id"),
-            deliver: optBoolean(args, "deliver")
+            deliver: optBoolean(args, "deliver"),
+            ...optString(args, "tenant") ? { tenant: optString(args, "tenant") } : {}
           })
         );
       }
+      case "list_tenants": {
+        const status = optString(args, "status");
+        return textResult(
+          await client.tenants.list({
+            limit: optNumber(args, "limit"),
+            cursor: optString(args, "cursor"),
+            ...status === "active" || status === "paused" ? { status } : {}
+          })
+        );
+      }
+      case "create_tenant": {
+        const externalId = optString(args, "external_id");
+        if (!externalId) return textResult("Missing required argument: external_id", true);
+        const settings = tenantSettings(args);
+        if (typeof settings === "string") return textResult(settings, true);
+        const { name: name2, ...rest } = settings;
+        return textResult(
+          await client.tenants.create({ external_id: externalId, ...name2 ? { name: name2 } : {}, ...rest })
+        );
+      }
+      case "get_tenant": {
+        const tenant = optString(args, "tenant");
+        if (!tenant) return textResult("Missing required argument: tenant", true);
+        return textResult(await client.tenants.get(tenant));
+      }
+      case "update_tenant": {
+        const tenant = optString(args, "tenant");
+        if (!tenant) return textResult("Missing required argument: tenant", true);
+        const settings = tenantSettings(args);
+        if (typeof settings === "string") return textResult(settings, true);
+        if (!Object.keys(settings).length) {
+          return textResult(
+            "Nothing to update: pass name, default_from_domain, stream_policy, daily_limit or metadata (use pause_tenant / resume_tenant to pause or resume)",
+            true
+          );
+        }
+        return textResult(await client.tenants.update(tenant, settings));
+      }
+      case "pause_tenant": {
+        const tenant = optString(args, "tenant");
+        if (!tenant) return textResult("Missing required argument: tenant", true);
+        return textResult(await client.tenants.pause(tenant, optString(args, "reason")));
+      }
+      case "resume_tenant": {
+        const tenant = optString(args, "tenant");
+        if (!tenant) return textResult("Missing required argument: tenant", true);
+        return textResult(await client.tenants.resume(tenant));
+      }
+      case "get_tenant_stats": {
+        const tenant = optString(args, "tenant");
+        if (!tenant) return textResult("Missing required argument: tenant", true);
+        const days = optNumber(args, "days");
+        return textResult(await client.tenants.stats(tenant, days !== void 0 ? { days } : {}));
+      }
+      case "get_dmarc_report": {
+        const domain = optString(args, "domain");
+        if (!domain) return textResult("Missing required argument: domain", true);
+        return textResult(await client.dmarc.get(domain));
+      }
+      case "enable_dmarc_monitoring": {
+        const domain = optString(args, "domain");
+        if (!domain) return textResult("Missing required argument: domain", true);
+        const apply = optString(args, "apply");
+        if (apply && apply !== "cloudflare" && apply !== "vercel" && apply !== "godaddy") {
+          return textResult("apply must be cloudflare, vercel or godaddy", true);
+        }
+        return textResult(await client.dmarc.enable(domain, apply ? { apply } : {}));
+      }
       case "get_deliverability": {
         const window = args.window === "7d" ? "7d" : "30d";
         const result = await client.emails.insights(window);
@@ -733,6 +953,27 @@ var paginationProps = {
   limit: { type: "number", description: "Page size (1\u2013100)" },
   cursor: { type: "string", description: "Opaque cursor for the next page" }
 };
+var tenantProp = (description) => ({
+  type: "string",
+  description: `${description}. The tenant's external id (your id for that customer) or its Groundmail id`
+});
+var tenantSettingsProps = {
+  name: { type: "string", description: "Display name" },
+  default_from_domain: {
+    type: ["string", "null"],
+    description: "Domain that completes a bare from (billing \u2192 billing@<domain>) on sends naming this tenant; null to clear"
+  },
+  stream_policy: {
+    type: "string",
+    enum: ["all", "transactional_only"],
+    description: "all (default), or transactional_only to refuse product email for this tenant"
+  },
+  daily_limit: {
+    type: ["number", "null"],
+    description: "Most recipients per UTC day for this tenant; null for no tenant limit"
+  },
+  metadata: { type: ["object", "null"], description: "Your own data about the tenant (JSON object); null to clear" }
+};
 var readOnly = (title) => ({
   title,
   readOnlyHint: true,
@@ -743,12 +984,15 @@ var readOnly = (title) => ({
 var MCP_TOOLS = [
   {
     name: "send_email",
-    description: "Send a transactional email via Groundmail. Provide subject + html/text, or a published template_id / template_alias with optional variables.",
+    description: "Send a transactional email via Groundmail. Provide subject + html/text, or a published template_id / template_alias with optional variables. To test without delivering anything, send to a simulator address: delivered@, bounce@, block@, complaint@, suppressed@ or delayed@simulator.groundmail.dev (plus addressing like bounce+test1@ works); the result has test: true and webhooks fire as for real mail.",
     inputSchema: {
       type: "object",
       properties: {
         from: { type: "string", description: "Sender address (must match a verified domain or sandbox sender)" },
-        to: { type: "string", description: "Recipient email address" },
+        to: {
+          type: "string",
+          description: "Recipient email address. A \u2026@simulator.groundmail.dev address simulates an outcome and never delivers"
+        },
         subject: { type: "string", description: "Subject line. Optional when using a published template" },
         html: { type: "string", description: "HTML body. Do not combine with template_id or template_alias" },
         text: { type: "string", description: "Plain-text body. Do not combine with template_id or template_alias" },
@@ -759,7 +1003,10 @@ var MCP_TOOLS = [
           type: "object",
           description: "Template variables when using template_id or template_alias",
           additionalProperties: true
-        }
+        },
+        tenant: tenantProp(
+          "Send as this tenant: the send uses its domains, suppression list, pause switch and daily limit. Omit to send from the account as a whole"
+        )
       },
       required: ["from", "to"]
     },
@@ -774,10 +1021,14 @@ var MCP_TOOLS = [
   },
   {
     name: "list_emails",
-    description: "List recent emails sent from this account.",
+    description: "List recent emails sent from this account. Test emails (test keys, simulator addresses) have test: true.",
     inputSchema: {
       type: "object",
-      properties: { ...paginationProps }
+      properties: {
+        ...paginationProps,
+        test: { type: "boolean", description: "true: only test emails; false: only live ones. Omit for both" },
+        tenant: tenantProp("Only emails sent as this tenant")
+      }
     },
     outputSchema: pagedOutput("emails", emailItem, "Emails on this page, newest first"),
     annotations: readOnly("List emails")
@@ -800,7 +1051,7 @@ var MCP_TOOLS = [
     description: "List sending domains for this account.",
     inputSchema: {
       type: "object",
-      properties: { ...paginationProps }
+      properties: { ...paginationProps, tenant: tenantProp("Only domains this tenant owns") }
     },
     outputSchema: pagedOutput("domains", domainItem, "Sending domains on this page"),
     annotations: readOnly("List domains")
@@ -812,7 +1063,8 @@ var MCP_TOOLS = [
       type: "object",
       properties: {
         name: { type: "string", description: "Domain name (example.com)" },
-        inbound_enabled: { type: "boolean", description: "Enable inbound receiving on this domain" }
+        inbound_enabled: { type: "boolean", description: "Enable inbound receiving on this domain" },
+        tenant: tenantProp("Give the domain to this tenant; only that tenant can then send from it")
       },
       required: ["name"]
     },
@@ -896,6 +1148,11 @@ var MCP_TOOLS = [
           type: "array",
           items: { type: "string" },
           description: "Optional event types (defaults apply when omitted)"
+        },
+        tenants: {
+          type: "array",
+          items: { type: "string" },
+          description: "Optional: only these tenants' email events (external ids or Groundmail ids). Omit for all"
         }
       },
       required: ["url"]
@@ -935,7 +1192,8 @@ var MCP_TOOLS = [
       type: "object",
       properties: {
         ...paginationProps,
-        email: { type: "string", description: "Optional filter by email" }
+        email: { type: "string", description: "Optional filter by email" },
+        tenant: tenantProp("List this tenant's own suppression list instead of the account's")
       }
     },
     outputSchema: pagedOutput("data", suppressionItem, "Suppressed addresses on this page"),
@@ -961,7 +1219,8 @@ var MCP_TOOLS = [
       type: "object",
       properties: {
         email: { type: "string", description: "Email address to stop sending to" },
-        reason: { type: "string", description: "Optional note on why the address is suppressed" }
+        reason: { type: "string", description: "Optional note on why the address is suppressed" },
+        tenant: tenantProp("Add to this tenant's own list instead of the account's")
       },
       required: ["email"]
     },
@@ -982,7 +1241,8 @@ var MCP_TOOLS = [
       type: "object",
       properties: {
         id: { type: "string", description: "Suppression id" },
-        email: { type: "string", description: "Email address (alternative to id)" }
+        email: { type: "string", description: "Email address (alternative to id)" },
+        tenant: tenantProp("Remove the address (by email) from this tenant's own list")
       }
     },
     outputSchema: okOutput,
@@ -1079,7 +1339,8 @@ var MCP_TOOLS = [
         deliver: {
           type: "boolean",
           description: "When true (default), enqueue delivery to account webhooks"
-        }
+        },
+        tenant: tenantProp("Put this tenant on the test event, to test endpoints that only receive some tenants")
       },
       required: ["event"]
     },
@@ -1092,6 +1353,158 @@ var MCP_TOOLS = [
       openWorldHint: true
     }
   },
+  {
+    name: "list_tenants",
+    description: "List tenants: one per customer you send email for, each with its own domains, suppression list, stats, pause switch and daily limit. Tenants are included on the Scale and Dedicated plans.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...paginationProps,
+        status: { type: "string", enum: ["active", "paused"], description: "Optional filter by status" }
+      }
+    },
+    outputSchema: pagedOutput("data", tenantItem, "Tenants on this page, newest first"),
+    annotations: readOnly("List tenants")
+  },
+  {
+    name: "create_tenant",
+    description: "Create a tenant for one of your customers. Then send with tenant set to its external id, and give it its own domains with create_domain (tenant).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        external_id: {
+          type: "string",
+          description: "Your id for this customer: 1\u2013128 characters of letters, digits and . _ : @ -. Cannot be changed later"
+        },
+        ...tenantSettingsProps
+      },
+      required: ["external_id"]
+    },
+    outputSchema: tenantOutput,
+    annotations: {
+      title: "Create tenant",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    }
+  },
+  {
+    name: "get_tenant",
+    description: "Get one tenant, including whether it is paused and why.",
+    inputSchema: {
+      type: "object",
+      properties: { tenant: tenantProp("The tenant") },
+      required: ["tenant"]
+    },
+    outputSchema: tenantOutput,
+    annotations: readOnly("Get tenant")
+  },
+  {
+    name: "update_tenant",
+    description: "Change a tenant's name, default from domain, stream policy, daily limit or metadata.",
+    inputSchema: {
+      type: "object",
+      properties: { tenant: tenantProp("The tenant to change"), ...tenantSettingsProps },
+      required: ["tenant"]
+    },
+    outputSchema: tenantOutput,
+    annotations: {
+      title: "Update tenant",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  },
+  {
+    name: "pause_tenant",
+    description: "Pause a tenant: its new sends are refused until it is resumed. The rest of the account keeps sending. Confirm with the user first.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        tenant: tenantProp("The tenant to pause"),
+        reason: { type: "string", description: "Why it is paused (shown on the tenant)" }
+      },
+      required: ["tenant"]
+    },
+    outputSchema: tenantOutput,
+    annotations: {
+      title: "Pause tenant",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  },
+  {
+    name: "resume_tenant",
+    description: "Resume a paused tenant so it can send again. A tenant Groundmail paused (pause_source automated or admin) cannot be resumed this way; the user should fix the cause and contact support.",
+    inputSchema: {
+      type: "object",
+      properties: { tenant: tenantProp("The tenant to resume") },
+      required: ["tenant"]
+    },
+    outputSchema: tenantOutput,
+    annotations: {
+      title: "Resume tenant",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    }
+  },
+  {
+    name: "get_tenant_stats",
+    description: "A tenant's email counts, bounce and complaint rates over the last days (1\u201390, default 7), and its sending ramp today.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        tenant: tenantProp("The tenant"),
+        days: { type: "number", description: "Days to cover, 1\u201390 (default 7)" }
+      },
+      required: ["tenant"]
+    },
+    outputSchema: tenantStatsOutput,
+    annotations: readOnly("Get tenant stats")
+  },
+  {
+    name: "get_dmarc_report",
+    description: "DMARC monitoring for a sending domain: who sends mail as it (grouped by provider, with unknown senders flagged as possible spoofing), SPF/DKIM/DMARC pass rates over the last 30 days, and whether it is safe to move the DMARC policy to quarantine. If monitoring is off, shows the current DMARC record; turn it on with enable_dmarc_monitoring.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        domain: { type: "string", description: "Domain name or id (example.com)" }
+      },
+      required: ["domain"]
+    },
+    outputSchema: dmarcOutput,
+    annotations: readOnly("Get DMARC report")
+  },
+  {
+    name: "enable_dmarc_monitoring",
+    description: "Turn on free DMARC monitoring for a sending domain. Returns the report address and the exact DMARC record to publish (the current record with the address added to rua=, keeping the policy and other report addresses). Pass apply to update the record through a DNS provider connected in the dashboard. Reports start arriving within 24 to 48 hours.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        domain: { type: "string", description: "Domain name or id (example.com)" },
+        apply: {
+          type: "string",
+          enum: ["cloudflare", "vercel", "godaddy"],
+          description: "Also write the DMARC record through this DNS provider (connected under Settings \u2192 Integrations)"
+        }
+      },
+      required: ["domain"]
+    },
+    outputSchema: dmarcOutput,
+    annotations: {
+      title: "Enable DMARC monitoring",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    }
+  },
   {
     name: "get_deliverability",
     description: "Fetch best-effort deliverability metrics for recent sends (7d or 30d window).",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groundmail-mcp",
-  "version": "0.8.0",
+  "version": "0.11.0",
   "mcpName": "io.github.Groundmail/groundmail",
   "description": "Groundmail MCP server: send transactional email, manage domains, templates, webhooks and suppressions from Claude, Cursor, ChatGPT and other MCP clients",
   "license": "MIT",
@@ -41,7 +41,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "groundmail": "0.16.0"
+    "groundmail": "0.19.0"
   },
   "devDependencies": {
     "tsup": "^8.5.0",