shipmail-mcp 0.2.9 → 0.2.10

package/README.md

@@ -192,6 +192,7 @@ All tools are namespaced with `shipmail_` to avoid collisions with peer MCP serv
 | Suppressions         | `shipmail_list_suppressions`, `shipmail_remove_suppression`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | Audiences            | `shipmail_list_audiences`, `shipmail_get_audience`, `shipmail_create_audience`, `shipmail_update_audience`, `shipmail_delete_audience`, `shipmail_list_subscribers`, `shipmail_get_subscriber`, `shipmail_get_subscriber_by_email`, `shipmail_add_subscriber`, `shipmail_add_subscribers_batch`, `shipmail_update_subscriber`, `shipmail_unsubscribe_subscriber`, `shipmail_resubscribe_subscriber`, `shipmail_remove_subscriber`                                                                                                                                                                                                                                             |
 | Newsletters          | `shipmail_list_newsletter_domains`, `shipmail_list_newsletter_assets`, `shipmail_list_newsletters`, `shipmail_get_newsletter`, `shipmail_preview_newsletter`, `shipmail_create_newsletter`, `shipmail_create_newsletter_from_changelog`, `shipmail_update_newsletter`, `shipmail_run_newsletter_preflight`, `shipmail_send_newsletter_test`, `shipmail_schedule_newsletter`, `shipmail_cancel_newsletter`, `shipmail_resume_newsletter`                                                                                                                                                                                                                                       |
+| Partner beta         | `shipmail_list_partner_organizations`, `shipmail_create_partner_organization`, `shipmail_get_partner_organization`, `shipmail_update_partner_organization`, `shipmail_resend_partner_ownership_invitation`, `shipmail_suspend_partner_organization`, `shipmail_resume_partner_organization`, `shipmail_offboard_partner_organization`, `shipmail_get_partner_usage`                                                                                                                                                                                                                                                                                                           |
 
 Message send and reply tools accept optional `client_reference`, scalar `metadata`,
 `source_rfc_message_id`, and validated safe `headers`. `shipmail_list_messages` accepts either a
@@ -240,14 +241,18 @@ Pre-built prompts the agent can use as guided workflows:
 
 ## Configuration
 
-| Variable                           | Required                         | Description                                                                                                                                                 |
-| ---------------------------------- | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `SHIPMAIL_API_KEY`                 | Yes (or `SHIPMAIL_API_KEY_FILE`) | Shipmail API key (`sm_live_...`).                                                                                                                           |
-| `SHIPMAIL_API_KEY_FILE`            | No                               | Path to a file containing the API key. Takes precedence over `SHIPMAIL_API_KEY`. Reduces env-trace leak surface (Docker secrets, systemd `LoadCredential`). |
-| `SHIPMAIL_BASE_URL`                | No                               | Override the API base URL. Must be https on a `shipmail.to` host. Defaults to `https://shipmail.to/api/v1`.                                                 |
-| `SHIPMAIL_MCP_TOOLS`               | No                               | Comma-separated tool allowlist. The `--tools` flag overrides this.                                                                                          |
-| `SHIPMAIL_ALLOW_INSECURE_BASE_URL` | No                               | Set to `1` to permit a non-https or non-`shipmail.to` base URL. Local development only.                                                                     |
-| `SHIPMAIL_MCP_DEBUG`               | No                               | Set to `1` to include `request_id` and `status` in stderr tool-call logs.                                                                                   |
+| Variable                   | Required                         | Description                                                                                                                                                 |
+| -------------------------- | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `SHIPMAIL_API_KEY`         | Yes (or `SHIPMAIL_API_KEY_FILE`) | Shipmail API key (`sm_live_...`).                                                                                                                           |
+| `SHIPMAIL_API_KEY_FILE`    | No                               | Path to a file containing the API key. Takes precedence over `SHIPMAIL_API_KEY`. Reduces env-trace leak surface (Docker secrets, systemd `LoadCredential`). |
+| `SHIPMAIL_BASE_URL`        | No                               | Override the API base URL. Must be https on a `shipmail.to` host. Defaults to `https://shipmail.to/api/v1`.                                                 |
+| `SHIPMAIL_ORGANIZATION_ID` | No                               | Delegated child organization for an approved infrastructure-only MCP session.                                                                               |
+
+In a delegated partner session, call `shipmail_create_mailbox` with `generate_password: true`.
+Shipmail generates the primary credential and never returns it to the partner.
+| `SHIPMAIL_MCP_TOOLS` | No | Comma-separated tool allowlist. The `--tools` flag overrides this. |
+| `SHIPMAIL_ALLOW_INSECURE_BASE_URL` | No | Set to `1` to permit a non-https or non-`shipmail.to` base URL. Local development only. |
+| `SHIPMAIL_MCP_DEBUG` | No | Set to `1` to include `request_id` and `status` in stderr tool-call logs. |
 
 ## Security
 

package/dist/index.js

@@ -18,6 +18,8 @@ Environment:
                         SHIPMAIL_API_KEY when set; reduces env-trace leak surface for hosts that
                         log environment variables.
   SHIPMAIL_BASE_URL     Optional API base URL. Must be https. Defaults to ${DEFAULT_BASE_URL}.
+  SHIPMAIL_ORGANIZATION_ID
+                        Optional delegated child organization ID for infrastructure tools.
   SHIPMAIL_MCP_TOOLS    Optional comma-separated tool allowlist. --tools overrides this.
   SHIPMAIL_ALLOW_INSECURE_BASE_URL=1
                         Permit non-https or non-shipmail.to base URL (development only).`;
@@ -95,6 +97,7 @@ function readConfig(argv = process.argv.slice(2)) {
   return {
     apiKey,
     baseUrl,
+    organizationId: env["SHIPMAIL_ORGANIZATION_ID"] || void 0,
     selectedTools: parseToolsArg(argv) ?? parseToolsList(env["SHIPMAIL_MCP_TOOLS"])
   };
 }
@@ -110,6 +113,7 @@ import { z as z2 } from "zod/v4";
 
 // src/schemas.ts
 import {
+  CONFERENCING_PROVIDER_IDS,
   DOMAIN_STATUSES,
   MESSAGE_SOURCES,
   MESSAGE_STATUSES,
@@ -971,9 +975,18 @@ var createMailboxInputSchema = z.object({
   password: z.string().min(8).max(128).refine((value) => /[a-z]/.test(value), "Password must include a lowercase letter.").refine((value) => /[A-Z]/.test(value), "Password must include an uppercase letter.").refine((value) => /[0-9]/.test(value), "Password must include a number.").refine(
     (value) => !COMMON_MAILBOX_PASSWORDS.has(value.toLowerCase()),
     "This password is too common. Choose something stronger."
-  ),
+  ).optional(),
+  generate_password: z.literal(true).optional(),
   display_name: recipientNameSchema.max(128).optional(),
   idempotency_key: idempotencyKeySchema
+}).superRefine((value, ctx) => {
+  if (Boolean(value.password) === Boolean(value.generate_password)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["password"],
+      message: "Provide password or set generate_password to true, but not both."
+    });
+  }
 });
 var updateMailboxInputSchema = z.object({
   id: idSchema,
@@ -1776,6 +1789,7 @@ var bookingPageSchema = z.object({
   buffer_minutes: z.number(),
   minimum_notice_minutes: z.number(),
   max_advance_days: z.number(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullable(),
   active: z.boolean(),
   created_at: z.string(),
   updated_at: z.string()
@@ -1892,6 +1906,9 @@ var createBookingPageInputSchema = z.object({
   buffer_minutes: z.number().int().min(0).max(240).optional(),
   minimum_notice_minutes: z.number().int().min(0).optional(),
   max_advance_days: z.number().int().min(1).max(365).optional(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullish().describe(
+    "Opt-in meeting provider. It must already be connected to the page's mailbox. Null means no meeting link."
+  ),
   active: z.boolean().optional(),
   idempotency_key: idempotencyKeySchema
 });
@@ -1909,9 +1926,95 @@ var updateBookingPageInputSchema = z.object({
   buffer_minutes: z.number().int().min(0).max(240).optional(),
   minimum_notice_minutes: z.number().int().min(0).optional(),
   max_advance_days: z.number().int().min(1).max(365).optional(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullish().describe(
+    "Opt-in meeting provider. It must already be connected to the page's mailbox. Set null to stop creating meeting links."
+  ),
   active: z.boolean().optional(),
   idempotency_key: idempotencyKeySchema
 });
+var partnerOrganizationSchema = z.object({
+  object: z.literal("partner_organization"),
+  id: z.string(),
+  organization_id: z.string(),
+  name: z.string(),
+  external_reference: z.string(),
+  owner_email: z.string(),
+  owner_user_id: z.string().nullable(),
+  status: z.enum(["pending_owner", "active", "suspended", "offboarding", "disconnected"]),
+  data_classification: z.enum(["internal_test", "customer"]),
+  mailbox_limit: z.number().int(),
+  delegated_permissions: z.array(z.string()),
+  owner_accepted_at: z.string().nullable(),
+  activated_at: z.string().nullable(),
+  suspended_at: z.string().nullable(),
+  disconnected_at: z.string().nullable(),
+  created_at: z.string(),
+  updated_at: z.string()
+});
+var partnerOrganizationOutputSchema = z.object({
+  organization: partnerOrganizationSchema
+});
+var createdPartnerOrganizationSchema = partnerOrganizationSchema.extend({
+  ownership_invitation: z.object({
+    object: z.literal("partner_ownership_invitation"),
+    owner_email: z.string(),
+    email_sent: z.boolean(),
+    expires_at: z.string()
+  }).nullable()
+});
+var createdPartnerOrganizationOutputSchema = z.object({
+  organization: createdPartnerOrganizationSchema
+});
+var partnerOrganizationsOutputSchema = z.object({
+  data: z.array(partnerOrganizationSchema)
+});
+var partnerInvitationOutputSchema = z.object({
+  invitation: z.object({
+    object: z.literal("partner_ownership_invitation"),
+    owner_email: z.string(),
+    email_sent: z.boolean(),
+    expires_at: z.string()
+  })
+});
+var partnerUsageOutputSchema = z.object({
+  usage: z.object({
+    object: z.literal("partner_usage"),
+    period_start: z.string(),
+    period_end: z.string(),
+    closed_through: z.string().nullable(),
+    active_children: z.number().int(),
+    active_mailboxes: z.number().int(),
+    child_active_seconds: z.number().int(),
+    mailbox_active_seconds: z.number().int(),
+    child_subtotal: z.number().int(),
+    mailbox_subtotal: z.number().int(),
+    minimum_shortfall: z.number().int(),
+    projected_total: z.number().int(),
+    currency: z.string()
+  })
+});
+var createPartnerOrganizationInputSchema = z.object({
+  name: noControlString(120, "name").min(1),
+  external_reference: noControlString(200, "external reference").min(1),
+  owner_email: emailSchema,
+  mailbox_limit: z.number().int().min(1).max(50).default(3),
+  data_classification: z.enum(["internal_test", "customer"]).default("customer"),
+  idempotency_key: idempotencyKeySchema
+});
+var partnerOrganizationByIdInputSchema = z.object({
+  id: idSchema.describe("Partner organization relationship ID.")
+});
+var updatePartnerOrganizationInputSchema = partnerOrganizationByIdInputSchema.extend({
+  name: noControlString(120, "name").min(1).optional(),
+  mailbox_limit: z.number().int().min(1).max(50).optional(),
+  idempotency_key: idempotencyKeySchema
+}).refine((value) => value.name !== void 0 || value.mailbox_limit !== void 0, {
+  message: "Provide name or mailbox_limit."
+});
+var resendPartnerInvitationInputSchema = partnerOrganizationByIdInputSchema.extend({
+  owner_email: emailSchema.optional(),
+  idempotency_key: idempotencyKeySchema
+});
 
 // src/prompts.ts
 var MAILBOX_LOCAL_REGEX = /^[a-zA-Z0-9]([a-zA-Z0-9._-]{0,62}[a-zA-Z0-9])?$/;
@@ -2404,7 +2507,13 @@ var SESSION_LIMITS = {
   shipmail_delete_calendar_event: 50,
   shipmail_create_booking_page: 20,
   shipmail_update_booking_page: 20,
-  shipmail_delete_booking_page: 10
+  shipmail_delete_booking_page: 10,
+  shipmail_create_partner_organization: 20,
+  shipmail_update_partner_organization: 50,
+  shipmail_resend_partner_ownership_invitation: 20,
+  shipmail_suspend_partner_organization: 20,
+  shipmail_resume_partner_organization: 20,
+  shipmail_offboard_partner_organization: 10
 };
 var SESSION_TOTAL_LIMIT = 500;
 var DEBUG_ENABLED = process.env["SHIPMAIL_MCP_DEBUG"] === "1";
@@ -2751,9 +2860,24 @@ function registerTools(server, client, selectedTools) {
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_create_mailbox", mailboxOutputSchema, async () => ({
-        mailbox: await client.mailboxes.create(stripIdempotencyKey(args), mutationOptions(args))
-      }))
+      async (args) => runTool("shipmail_create_mailbox", mailboxOutputSchema, async () => {
+        const base = {
+          domain_id: args.domain_id,
+          address: args.address,
+          ...args.display_name === void 0 ? {} : { display_name: args.display_name }
+        };
+        let params;
+        if (args.generate_password === true) {
+          params = { ...base, generate_password: true };
+        } else if (args.password !== void 0) {
+          params = { ...base, password: args.password };
+        } else {
+          throw new Error("Mailbox password validation failed.");
+        }
+        return {
+          mailbox: await client.mailboxes.create(params, mutationOptions(args))
+        };
+      })
     );
   });
   registerIfAllowed("shipmail_create_mailbox_export", () => {
@@ -4493,7 +4617,7 @@ function registerTools(server, client, selectedTools) {
       "shipmail_create_booking_page",
       {
         title: "Create Booking Page",
-        description: "Create a booking page exposing one mailbox's availability. availability_days is 0=Sunday..6=Saturday.",
+        description: "Create a booking page exposing one mailbox's availability. availability_days is 0=Sunday..6=Saturday. conferencing_provider is opt-in and must already be connected to the mailbox.",
         inputSchema: createBookingPageInputSchema,
         outputSchema: bookingPageOutputSchema,
         annotations: {
@@ -4516,7 +4640,7 @@ function registerTools(server, client, selectedTools) {
       "shipmail_update_booking_page",
       {
         title: "Update Booking Page",
-        description: "Update a booking page. All fields optional; provide at least one.",
+        description: "Update a booking page. All fields optional; provide at least one. Set conferencing_provider to null to stop creating meeting links.",
         inputSchema: updateBookingPageInputSchema,
         outputSchema: bookingPageOutputSchema,
         annotations: {
@@ -4555,6 +4679,160 @@ function registerTools(server, client, selectedTools) {
       })
     );
   });
+  registerIfAllowed("shipmail_list_partner_organizations", () => {
+    server.registerTool(
+      "shipmail_list_partner_organizations",
+      {
+        title: "List Partner Organizations",
+        description: "List operator-owned organizations connected to the partner account.",
+        outputSchema: partnerOrganizationsOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool(
+        "shipmail_list_partner_organizations",
+        partnerOrganizationsOutputSchema,
+        () => client.partner.listOrganizations()
+      )
+    );
+  });
+  registerIfAllowed("shipmail_create_partner_organization", () => {
+    server.registerTool(
+      "shipmail_create_partner_organization",
+      {
+        title: "Create Partner Organization",
+        description: "Create an operator organization and email its ownership invitation. No domain or mailbox is created.",
+        inputSchema: createPartnerOrganizationInputSchema,
+        outputSchema: createdPartnerOrganizationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
+      async (args) => runTool(
+        "shipmail_create_partner_organization",
+        createdPartnerOrganizationOutputSchema,
+        async () => ({
+          organization: await client.partner.createOrganization(
+            stripIdempotencyKey(args),
+            mutationOptions(args)
+          )
+        })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_get_partner_organization", () => {
+    server.registerTool(
+      "shipmail_get_partner_organization",
+      {
+        title: "Get Partner Organization",
+        description: "Get one partner child relationship and its ownership state.",
+        inputSchema: partnerOrganizationByIdInputSchema,
+        outputSchema: partnerOrganizationOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async ({ id }) => runTool("shipmail_get_partner_organization", partnerOrganizationOutputSchema, async () => ({
+        organization: await client.partner.getOrganization(id)
+      }))
+    );
+  });
+  registerIfAllowed("shipmail_update_partner_organization", () => {
+    server.registerTool(
+      "shipmail_update_partner_organization",
+      {
+        title: "Update Partner Organization",
+        description: "Update an operator organization name or mailbox allocation.",
+        inputSchema: updatePartnerOrganizationInputSchema,
+        outputSchema: partnerOrganizationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
+      async (args) => runTool(
+        "shipmail_update_partner_organization",
+        partnerOrganizationOutputSchema,
+        async () => {
+          const { id, idempotency_key: _key, ...params } = args;
+          return {
+            organization: await client.partner.updateOrganization(
+              id,
+              params,
+              mutationOptions(args)
+            )
+          };
+        }
+      )
+    );
+  });
+  registerIfAllowed("shipmail_resend_partner_ownership_invitation", () => {
+    server.registerTool(
+      "shipmail_resend_partner_ownership_invitation",
+      {
+        title: "Resend Partner Ownership Invitation",
+        description: "Revoke the pending ownership link and email a new single-use link.",
+        inputSchema: resendPartnerInvitationInputSchema,
+        outputSchema: partnerInvitationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: true
+        }
+      },
+      async (args) => runTool(
+        "shipmail_resend_partner_ownership_invitation",
+        partnerInvitationOutputSchema,
+        async () => ({
+          invitation: await client.partner.resendOwnershipInvitation(
+            args.id,
+            { owner_email: args.owner_email },
+            mutationOptions(args)
+          )
+        })
+      )
+    );
+  });
+  for (const transition of ["suspend", "resume", "offboard"]) {
+    const toolName = `shipmail_${transition}_partner_organization`;
+    registerIfAllowed(toolName, () => {
+      server.registerTool(
+        toolName,
+        {
+          title: `${transition[0]?.toUpperCase() ?? ""}${transition.slice(1)} Partner Organization`,
+          description: transition === "suspend" ? "Suspend outbound sending for one operator organization. Inbound mail and storage continue." : transition === "resume" ? "Resume partner-managed outbound sending for one operator organization." : "Start non-destructive offboarding and immediately remove delegated access.",
+          inputSchema: partnerOrganizationByIdInputSchema,
+          outputSchema: partnerOrganizationOutputSchema,
+          annotations: {
+            readOnlyHint: false,
+            destructiveHint: transition !== "resume",
+            idempotentHint: true,
+            openWorldHint: false
+          }
+        },
+        async ({ id }) => runTool(toolName, partnerOrganizationOutputSchema, async () => ({
+          organization: transition === "suspend" ? await client.partner.suspendOrganization(id) : transition === "resume" ? await client.partner.resumeOrganization(id) : await client.partner.offboardOrganization(id)
+        }))
+      );
+    });
+  }
+  registerIfAllowed("shipmail_get_partner_usage", () => {
+    server.registerTool(
+      "shipmail_get_partner_usage",
+      {
+        title: "Get Partner Usage",
+        description: "Get consolidated child and mailbox usage for the current UTC month.",
+        outputSchema: partnerUsageOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool("shipmail_get_partner_usage", partnerUsageOutputSchema, async () => ({
+        usage: await client.partner.usage()
+      }))
+    );
+  });
   if (selectedTools) {
     const unknown = [...selectedTools].filter((name) => !knownTools.includes(name));
     if (unknown.length > 0) {
@@ -4565,7 +4843,7 @@ function registerTools(server, client, selectedTools) {
 }
 
 // src/version.ts
-var VERSION = "0.2.9";
+var VERSION = "0.2.10";
 
 // src/server.ts
 var INSTRUCTIONS = `ShipMail MCP exposes business email tools for domains, mailboxes, messages, threads, webhooks, and suppressions.
@@ -4590,6 +4868,7 @@ function createShipMailMcpServer(config) {
   const client = new ShipMailClient({
     apiKey: config.apiKey,
     ...config.baseUrl ? { baseUrl: config.baseUrl } : {},
+    ...config.organizationId ? { organizationId: config.organizationId } : {},
     defaultHeaders
   });
   const server = new McpServer4(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail-mcp",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "mcpName": "io.github.jcoulaud/shipmail-mcp",
   "description": "Official Model Context Protocol (MCP) server for Shipmail, a business email provider with REST API, webhooks, and custom-domain inboxes for AI agents.",
   "type": "module",
@@ -59,7 +59,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
-    "shipmail": "0.1.32",
+    "shipmail": "0.1.33",
     "zod": "4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -6,14 +6,14 @@
     "url": "https://github.com/jcoulaud/shipmail-mcp",
     "source": "github"
   },
-  "version": "0.2.9",
+  "version": "0.2.10",
   "websiteUrl": "https://shipmail.to/docs/mcp",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "shipmail-mcp",
-      "version": "0.2.9",
+      "version": "0.2.10",
       "transport": {
         "type": "stdio"
       },

package/smithery.yaml

@@ -1,6 +1,6 @@
 # Smithery configuration file: https://smithery.ai/docs/build/project-config/smithery-yaml
 name: shipmail-mcp
-version: 0.2.9
+version: 0.2.10
 description: Official Shipmail MCP server for AI-agent custom-domain business email inboxes with REST API and webhooks.
 author: ShipMail
 repository: https://github.com/jcoulaud/shipmail-mcp