shipmail-mcp 0.2.9 → 0.3.0

package/README.md

@@ -181,17 +181,18 @@ Once connected, ask your agent:
 
 All tools are namespaced with `shipmail_` to avoid collisions with peer MCP servers.
 
-| Group                | Tools                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Status               | `shipmail_status`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| Domains              | `shipmail_list_domains`, `shipmail_get_domain`, `shipmail_get_domain_dns_records`, `shipmail_create_domain`, `shipmail_update_domain`, `shipmail_delete_domain`, `shipmail_verify_domain`, `shipmail_search_domains`                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
-| Mailboxes            | `shipmail_list_mailboxes`, `shipmail_get_mailbox`, `shipmail_create_mailbox`, `shipmail_update_mailbox`, `shipmail_delete_mailbox`, `shipmail_suspend_mailbox`, `shipmail_resume_mailbox`, `shipmail_list_mailbox_forwarding`, `shipmail_create_mailbox_forwarding`, `shipmail_delete_mailbox_forwarding`, `shipmail_list_mailbox_folders`, `shipmail_create_mailbox_folder`, `shipmail_update_mailbox_folder`, `shipmail_delete_mailbox_folder`, `shipmail_list_mailbox_identities`, `shipmail_get_mailbox_rules`, `shipmail_set_mailbox_rules`, `shipmail_reset_mailbox_password`, `shipmail_set_auto_reply`, `shipmail_set_spam_filter`, `shipmail_inject_sandbox_inbound` |
-| Mailbox inbox        | `shipmail_list_mailbox_inbox_messages`, `shipmail_get_mailbox_inbox_thread`, `shipmail_update_inbox_message`, `shipmail_move_inbox_message`, `shipmail_delete_inbox_message`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
-| Messages and threads | `shipmail_list_messages`, `shipmail_get_message`, `shipmail_send_message`, `shipmail_reply_to_message`, `shipmail_list_threads`, `shipmail_get_thread`, `shipmail_reply_to_thread`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
-| Webhooks             | `shipmail_list_webhooks`, `shipmail_get_webhook`, `shipmail_create_webhook`, `shipmail_update_webhook`, `shipmail_delete_webhook`, `shipmail_rotate_webhook_secret`, `shipmail_test_webhook`, `shipmail_list_webhook_deliveries`, `shipmail_get_webhook_delivery`, `shipmail_replay_webhook_delivery`                                                                                                                                                                                                                                                                                                                                                                         |
-| Suppressions         | `shipmail_list_suppressions`, `shipmail_remove_suppression`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
-| Audiences            | `shipmail_list_audiences`, `shipmail_get_audience`, `shipmail_create_audience`, `shipmail_update_audience`, `shipmail_delete_audience`, `shipmail_list_subscribers`, `shipmail_get_subscriber`, `shipmail_get_subscriber_by_email`, `shipmail_add_subscriber`, `shipmail_add_subscribers_batch`, `shipmail_update_subscriber`, `shipmail_unsubscribe_subscriber`, `shipmail_resubscribe_subscriber`, `shipmail_remove_subscriber`                                                                                                                                                                                                                                             |
-| Newsletters          | `shipmail_list_newsletter_domains`, `shipmail_list_newsletter_assets`, `shipmail_list_newsletters`, `shipmail_get_newsletter`, `shipmail_preview_newsletter`, `shipmail_create_newsletter`, `shipmail_create_newsletter_from_changelog`, `shipmail_update_newsletter`, `shipmail_run_newsletter_preflight`, `shipmail_send_newsletter_test`, `shipmail_schedule_newsletter`, `shipmail_cancel_newsletter`, `shipmail_resume_newsletter`                                                                                                                                                                                                                                       |
+| Group                | Tools                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Status               | `shipmail_status`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| Domains              | `shipmail_list_domains`, `shipmail_get_domain`, `shipmail_get_domain_dns_records`, `shipmail_create_domain`, `shipmail_update_domain`, `shipmail_delete_domain`, `shipmail_verify_domain`, `shipmail_search_domains`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+| Mailboxes            | `shipmail_list_mailboxes`, `shipmail_get_mailbox`, `shipmail_create_mailbox`, `shipmail_update_mailbox`, `shipmail_delete_mailbox`, `shipmail_suspend_mailbox`, `shipmail_resume_mailbox`, `shipmail_list_mailbox_app_passwords`, `shipmail_create_mailbox_app_password`, `shipmail_revoke_mailbox_app_password`, `shipmail_list_mailbox_forwarding`, `shipmail_create_mailbox_forwarding`, `shipmail_delete_mailbox_forwarding`, `shipmail_list_mailbox_folders`, `shipmail_create_mailbox_folder`, `shipmail_update_mailbox_folder`, `shipmail_delete_mailbox_folder`, `shipmail_list_mailbox_identities`, `shipmail_get_mailbox_rules`, `shipmail_set_mailbox_rules`, `shipmail_reset_mailbox_password`, `shipmail_set_auto_reply`, `shipmail_set_spam_filter`, `shipmail_inject_sandbox_inbound` |
+| Mailbox inbox        | `shipmail_list_mailbox_inbox_messages`, `shipmail_get_mailbox_inbox_thread`, `shipmail_update_inbox_message`, `shipmail_move_inbox_message`, `shipmail_delete_inbox_message`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| Messages and threads | `shipmail_list_messages`, `shipmail_get_message`, `shipmail_send_message`, `shipmail_reply_to_message`, `shipmail_list_threads`, `shipmail_get_thread`, `shipmail_reply_to_thread`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| Webhooks             | `shipmail_list_webhooks`, `shipmail_get_webhook`, `shipmail_create_webhook`, `shipmail_update_webhook`, `shipmail_delete_webhook`, `shipmail_rotate_webhook_secret`, `shipmail_test_webhook`, `shipmail_list_webhook_deliveries`, `shipmail_get_webhook_delivery`, `shipmail_replay_webhook_delivery`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| Suppressions         | `shipmail_list_suppressions`, `shipmail_remove_suppression`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| Audiences            | `shipmail_list_audiences`, `shipmail_get_audience`, `shipmail_create_audience`, `shipmail_update_audience`, `shipmail_delete_audience`, `shipmail_list_subscribers`, `shipmail_get_subscriber`, `shipmail_get_subscriber_by_email`, `shipmail_add_subscriber`, `shipmail_add_subscribers_batch`, `shipmail_update_subscriber`, `shipmail_unsubscribe_subscriber`, `shipmail_resubscribe_subscriber`, `shipmail_remove_subscriber`                                                                                                                                                                                                                                                                                                                                                                    |
+| Newsletters          | `shipmail_list_newsletter_domains`, `shipmail_list_newsletter_assets`, `shipmail_list_newsletters`, `shipmail_get_newsletter`, `shipmail_preview_newsletter`, `shipmail_create_newsletter`, `shipmail_create_newsletter_from_changelog`, `shipmail_update_newsletter`, `shipmail_run_newsletter_preflight`, `shipmail_send_newsletter_test`, `shipmail_schedule_newsletter`, `shipmail_cancel_newsletter`, `shipmail_resume_newsletter`                                                                                                                                                                                                                                                                                                                                                              |
+| Partner beta         | `shipmail_list_partner_organizations`, `shipmail_create_partner_organization`, `shipmail_get_partner_organization`, `shipmail_update_partner_organization`, `shipmail_resend_partner_ownership_invitation`, `shipmail_suspend_partner_organization`, `shipmail_resume_partner_organization`, `shipmail_offboard_partner_organization`, `shipmail_list_partner_mailbox_credential_grants`, `shipmail_consume_partner_mailbox_credential_grant`, `shipmail_get_partner_usage`                                                                                                                                                                                                                                                                                                                          |
 
 Message send and reply tools accept optional `client_reference`, scalar `metadata`,
 `source_rfc_message_id`, and validated safe `headers`. `shipmail_list_messages` accepts either a
@@ -199,6 +200,12 @@ Message send and reply tools accept optional `client_reference`, scalar `metadat
 
 With an `sm_test_...` API key, send and reply tools accept `sandbox_outcome` and the sandbox inbound tool creates fake inbound mail. The API keeps test storage and events isolated and never delivers sandbox mail to real recipients.
 
+App-password creation, revocation, and partner grant consumption are destructive/high-risk tools.
+Creation and grant consumption return a live secret once; revocation disconnects that client
+immediately. Partner grant consumption requires the exact `partner:mailbox_credentials:issue`
+scope and an operator-approved one-time grant. App-password creation and grant consumption do not
+accept idempotency keys.
+
 To restrict the surface, pass `--tools` (overrides `SHIPMAIL_MCP_TOOLS`):
 
 ```json
@@ -240,20 +247,24 @@ Pre-built prompts the agent can use as guided workflows:
 
 ## Configuration
 
-| Variable                           | Required                         | Description                                                                                                                                                 |
-| ---------------------------------- | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `SHIPMAIL_API_KEY`                 | Yes (or `SHIPMAIL_API_KEY_FILE`) | Shipmail API key (`sm_live_...`).                                                                                                                           |
-| `SHIPMAIL_API_KEY_FILE`            | No                               | Path to a file containing the API key. Takes precedence over `SHIPMAIL_API_KEY`. Reduces env-trace leak surface (Docker secrets, systemd `LoadCredential`). |
-| `SHIPMAIL_BASE_URL`                | No                               | Override the API base URL. Must be https on a `shipmail.to` host. Defaults to `https://shipmail.to/api/v1`.                                                 |
-| `SHIPMAIL_MCP_TOOLS`               | No                               | Comma-separated tool allowlist. The `--tools` flag overrides this.                                                                                          |
-| `SHIPMAIL_ALLOW_INSECURE_BASE_URL` | No                               | Set to `1` to permit a non-https or non-`shipmail.to` base URL. Local development only.                                                                     |
-| `SHIPMAIL_MCP_DEBUG`               | No                               | Set to `1` to include `request_id` and `status` in stderr tool-call logs.                                                                                   |
+| Variable                   | Required                         | Description                                                                                                                                                 |
+| -------------------------- | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `SHIPMAIL_API_KEY`         | Yes (or `SHIPMAIL_API_KEY_FILE`) | Shipmail API key (`sm_live_...`).                                                                                                                           |
+| `SHIPMAIL_API_KEY_FILE`    | No                               | Path to a file containing the API key. Takes precedence over `SHIPMAIL_API_KEY`. Reduces env-trace leak surface (Docker secrets, systemd `LoadCredential`). |
+| `SHIPMAIL_BASE_URL`        | No                               | Override the API base URL. Must be https on a `shipmail.to` host. Defaults to `https://shipmail.to/api/v1`.                                                 |
+| `SHIPMAIL_ORGANIZATION_ID` | No                               | Delegated child organization for an approved infrastructure-only MCP session.                                                                               |
+
+In a delegated partner session, call `shipmail_create_mailbox` with `generate_password: true`.
+Shipmail generates the primary credential and never returns it to the partner.
+| `SHIPMAIL_MCP_TOOLS` | No | Comma-separated tool allowlist. The `--tools` flag overrides this. |
+| `SHIPMAIL_ALLOW_INSECURE_BASE_URL` | No | Set to `1` to permit a non-https or non-`shipmail.to` base URL. Local development only. |
+| `SHIPMAIL_MCP_DEBUG` | No | Set to `1` to include `request_id` and `status` in stderr tool-call logs. |
 
 ## Security
 
 - **Tool namespacing**: All tools are prefixed with `shipmail_` to avoid collisions with peer MCP servers in the same host.
 - **Structured outputs**: Successful tools return both text fallback content and structured MCP `structuredContent`.
-- **Idempotency**: Mutating tools accept an optional `idempotency_key`. When omitted, the server generates a fresh key per tool call. Supply your own key if a specific request must stay idempotent across MCP retries.
+- **Idempotency**: Mutating tools accept an optional `idempotency_key`. When omitted, the server generates a fresh key per tool call. Supply your own key if a specific request must stay idempotent across MCP retries. Mailbox app-password creation and partner grant consumption are excluded because their one-time plaintext secrets must never be cached.
 - **Input sanitization**: Email content, addresses, and error text are stripped of ASCII control characters, DEL, and Unicode directional or BiDi markers (U+061C, U+200E/F, U+202A-E, U+2066-9). Long strings are truncated.
 - **Error redaction**: 5xx and unexpected Shipmail errors are redacted to a generic message; the original `request_id` is preserved for support. Generic `Error` thrown values (network errors, deserialization) are redacted to "Internal MCP error" before reaching the LLM. Detail lands on stderr.
 - **Circuit breaker**: Each session enforces per-tool rate limits and a hard total-call ceiling as a runaway-agent guard. These are not abuse controls. Real abuse limits live at the API per API key. Restart the server to reset.

package/dist/index.js

@@ -18,6 +18,8 @@ Environment:
                         SHIPMAIL_API_KEY when set; reduces env-trace leak surface for hosts that
                         log environment variables.
   SHIPMAIL_BASE_URL     Optional API base URL. Must be https. Defaults to ${DEFAULT_BASE_URL}.
+  SHIPMAIL_ORGANIZATION_ID
+                        Optional delegated child organization ID for infrastructure tools.
   SHIPMAIL_MCP_TOOLS    Optional comma-separated tool allowlist. --tools overrides this.
   SHIPMAIL_ALLOW_INSECURE_BASE_URL=1
                         Permit non-https or non-shipmail.to base URL (development only).`;
@@ -95,6 +97,7 @@ function readConfig(argv = process.argv.slice(2)) {
   return {
     apiKey,
     baseUrl,
+    organizationId: env["SHIPMAIL_ORGANIZATION_ID"] || void 0,
     selectedTools: parseToolsArg(argv) ?? parseToolsList(env["SHIPMAIL_MCP_TOOLS"])
   };
 }
@@ -110,6 +113,7 @@ import { z as z2 } from "zod/v4";
 
 // src/schemas.ts
 import {
+  CONFERENCING_PROVIDER_IDS,
   DOMAIN_STATUSES,
   MESSAGE_SOURCES,
   MESSAGE_STATUSES,
@@ -434,6 +438,39 @@ var mailboxExportSchema = z.object({
   started_at: z.string().nullable(),
   completed_at: z.string().nullable()
 });
+var mailboxAppPasswordSchema = z.object({
+  object: z.literal("mailbox_app_password"),
+  id: z.string(),
+  mailbox_id: z.string(),
+  name: z.string(),
+  state: z.enum(["pending_create", "active", "pending_revoke", "revoked", "failed"]),
+  purpose: z.enum(["operator_client", "partner_embedded_webmail"]),
+  expires_at: z.string().nullable(),
+  allowed_cidrs: z.array(z.string()),
+  last_used_at: z.string().nullable(),
+  created_at: z.string(),
+  revoked_at: z.string().nullable()
+});
+var createdMailboxAppPasswordSchema = mailboxAppPasswordSchema.extend({
+  secret: z.string()
+});
+var partnerMailboxCredentialSchema = createdMailboxAppPasswordSchema.extend({
+  operator_notified: z.boolean()
+});
+var partnerMailboxCredentialGrantSchema = z.object({
+  object: z.literal("partner_mailbox_credential_grant"),
+  id: z.string(),
+  partner_organization_id: z.string(),
+  organization_id: z.string(),
+  organization_name: z.string(),
+  external_reference: z.string(),
+  operator_email: z.string(),
+  mailbox_id: z.string(),
+  mailbox_address: z.string(),
+  disclosure_version: z.string(),
+  expires_at: z.string(),
+  consented_at: z.string()
+});
 var mailboxFolderSchema = z.object({
   object: z.literal("mailbox_folder"),
   id: z.string(),
@@ -809,6 +846,26 @@ var domainOutputSchema = z.object({ domain: domainSchema });
 var domainDnsRecordsOutputSchema = z.object({ dns_records: domainDnsRecordSetSchema });
 var mailboxOutputSchema = z.object({ mailbox: mailboxSchema });
 var mailboxExportOutputSchema = z.object({ export: mailboxExportSchema });
+var mailboxAppPasswordOutputSchema = z.object({
+  app_password: mailboxAppPasswordSchema
+});
+var createdMailboxAppPasswordOutputSchema = z.object({
+  app_password: createdMailboxAppPasswordSchema
+});
+var mailboxAppPasswordsOutputSchema = z.object({
+  app_passwords: z.object({
+    object: z.literal("list"),
+    data: z.array(mailboxAppPasswordSchema)
+  })
+});
+var partnerMailboxCredentialOutputSchema = z.object({
+  credential: partnerMailboxCredentialSchema
+});
+var partnerMailboxCredentialGrantsOutputSchema = z.object({
+  grants: z.object({
+    data: z.array(partnerMailboxCredentialGrantSchema)
+  })
+});
 var mailboxFolderOutputSchema = z.object({ folder: mailboxFolderSchema });
 var mailboxFoldersOutputSchema = z.object({ folders: mailboxFoldersSchema });
 var mailboxIdentitiesOutputSchema = z.object({ identities: mailboxIdentitiesSchema });
@@ -971,15 +1028,38 @@ var createMailboxInputSchema = z.object({
   password: z.string().min(8).max(128).refine((value) => /[a-z]/.test(value), "Password must include a lowercase letter.").refine((value) => /[A-Z]/.test(value), "Password must include an uppercase letter.").refine((value) => /[0-9]/.test(value), "Password must include a number.").refine(
     (value) => !COMMON_MAILBOX_PASSWORDS.has(value.toLowerCase()),
     "This password is too common. Choose something stronger."
-  ),
+  ).optional(),
+  generate_password: z.literal(true).optional(),
   display_name: recipientNameSchema.max(128).optional(),
   idempotency_key: idempotencyKeySchema
+}).superRefine((value, ctx) => {
+  if (Boolean(value.password) === Boolean(value.generate_password)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["password"],
+      message: "Provide password or set generate_password to true, but not both."
+    });
+  }
 });
 var updateMailboxInputSchema = z.object({
   id: idSchema,
   display_name: recipientNameSchema.max(200).nullable().describe("New display name, or null to clear."),
   idempotency_key: idempotencyKeySchema
 });
+var appPasswordCidrInputSchema = z.union([
+  z.cidrv4("Must be a valid IPv4 CIDR range."),
+  z.cidrv6("Must be a valid IPv6 CIDR range.")
+]);
+var createMailboxAppPasswordInputSchema = z.object({
+  id: idSchema.describe("Mailbox ID."),
+  name: noControlString(100, "name").trim().min(1),
+  expires_at: z.iso.datetime().optional(),
+  allowed_cidrs: z.array(appPasswordCidrInputSchema).max(20).optional()
+});
+var revokeMailboxAppPasswordInputSchema = z.object({
+  id: idSchema.describe("Mailbox ID."),
+  app_password_id: idSchema.describe("App password ID.")
+});
 var createMailboxFolderInputSchema = z.object({
   id: idSchema,
   name: folderNameSchema.describe("Custom folder name to create."),
@@ -1776,6 +1856,7 @@ var bookingPageSchema = z.object({
   buffer_minutes: z.number(),
   minimum_notice_minutes: z.number(),
   max_advance_days: z.number(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullable(),
   active: z.boolean(),
   created_at: z.string(),
   updated_at: z.string()
@@ -1892,6 +1973,9 @@ var createBookingPageInputSchema = z.object({
   buffer_minutes: z.number().int().min(0).max(240).optional(),
   minimum_notice_minutes: z.number().int().min(0).optional(),
   max_advance_days: z.number().int().min(1).max(365).optional(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullish().describe(
+    "Opt-in meeting provider. It must already be connected to the page's mailbox. Null means no meeting link."
+  ),
   active: z.boolean().optional(),
   idempotency_key: idempotencyKeySchema
 });
@@ -1909,9 +1993,101 @@ var updateBookingPageInputSchema = z.object({
   buffer_minutes: z.number().int().min(0).max(240).optional(),
   minimum_notice_minutes: z.number().int().min(0).optional(),
   max_advance_days: z.number().int().min(1).max(365).optional(),
+  conferencing_provider: z.enum(CONFERENCING_PROVIDER_IDS).nullish().describe(
+    "Opt-in meeting provider. It must already be connected to the page's mailbox. Set null to stop creating meeting links."
+  ),
   active: z.boolean().optional(),
   idempotency_key: idempotencyKeySchema
 });
+var partnerOrganizationSchema = z.object({
+  object: z.literal("partner_organization"),
+  id: z.string(),
+  organization_id: z.string(),
+  name: z.string(),
+  external_reference: z.string(),
+  owner_email: z.string(),
+  owner_user_id: z.string().nullable(),
+  status: z.enum(["pending_owner", "active", "suspended", "offboarding", "disconnected"]),
+  data_classification: z.enum(["internal_test", "customer"]),
+  mailbox_limit: z.number().int(),
+  delegated_permissions: z.array(z.string()),
+  owner_accepted_at: z.string().nullable(),
+  activated_at: z.string().nullable(),
+  suspended_at: z.string().nullable(),
+  disconnected_at: z.string().nullable(),
+  created_at: z.string(),
+  updated_at: z.string()
+});
+var partnerOrganizationOutputSchema = z.object({
+  organization: partnerOrganizationSchema
+});
+var createdPartnerOrganizationSchema = partnerOrganizationSchema.extend({
+  ownership_invitation: z.object({
+    object: z.literal("partner_ownership_invitation"),
+    owner_email: z.string(),
+    email_sent: z.boolean(),
+    expires_at: z.string()
+  }).nullable()
+});
+var createdPartnerOrganizationOutputSchema = z.object({
+  organization: createdPartnerOrganizationSchema
+});
+var partnerOrganizationsOutputSchema = z.object({
+  data: z.array(partnerOrganizationSchema)
+});
+var partnerInvitationOutputSchema = z.object({
+  invitation: z.object({
+    object: z.literal("partner_ownership_invitation"),
+    owner_email: z.string(),
+    email_sent: z.boolean(),
+    expires_at: z.string()
+  })
+});
+var partnerUsageOutputSchema = z.object({
+  usage: z.object({
+    object: z.literal("partner_usage"),
+    period_start: z.string(),
+    period_end: z.string(),
+    closed_through: z.string().nullable(),
+    active_children: z.number().int(),
+    active_mailboxes: z.number().int(),
+    child_active_seconds: z.number().int(),
+    mailbox_active_seconds: z.number().int(),
+    child_subtotal: z.number().int(),
+    mailbox_subtotal: z.number().int(),
+    minimum_shortfall: z.number().int(),
+    projected_total: z.number().int(),
+    currency: z.string()
+  })
+});
+var createPartnerOrganizationInputSchema = z.object({
+  name: noControlString(120, "name").min(1),
+  external_reference: noControlString(200, "external reference").min(1),
+  owner_email: emailSchema,
+  mailbox_limit: z.number().int().min(1).max(50).default(3),
+  data_classification: z.enum(["internal_test", "customer"]).default("customer"),
+  idempotency_key: idempotencyKeySchema
+});
+var partnerOrganizationByIdInputSchema = z.object({
+  id: idSchema.describe("Partner organization relationship ID.")
+});
+var updatePartnerOrganizationInputSchema = partnerOrganizationByIdInputSchema.extend({
+  name: noControlString(120, "name").min(1).optional(),
+  mailbox_limit: z.number().int().min(1).max(50).optional(),
+  idempotency_key: idempotencyKeySchema
+}).refine((value) => value.name !== void 0 || value.mailbox_limit !== void 0, {
+  message: "Provide name or mailbox_limit."
+});
+var resendPartnerInvitationInputSchema = partnerOrganizationByIdInputSchema.extend({
+  owner_email: emailSchema.optional(),
+  idempotency_key: idempotencyKeySchema
+});
+var consumePartnerMailboxCredentialGrantInputSchema = z.object({
+  grant_id: idSchema.describe("Single-use mailbox credential grant ID."),
+  name: noControlString(100, "name").trim().min(1).optional(),
+  expires_at: z.iso.datetime().optional(),
+  allowed_cidrs: z.array(appPasswordCidrInputSchema).max(20).optional()
+});
 
 // src/prompts.ts
 var MAILBOX_LOCAL_REGEX = /^[a-zA-Z0-9]([a-zA-Z0-9._-]{0,62}[a-zA-Z0-9])?$/;
@@ -2357,6 +2533,8 @@ var SESSION_LIMITS = {
   shipmail_create_domain: 10,
   shipmail_create_mailbox: 20,
   shipmail_create_mailbox_export: 5,
+  shipmail_create_mailbox_app_password: 10,
+  shipmail_revoke_mailbox_app_password: 20,
   shipmail_create_mailbox_import: 5,
   shipmail_cancel_mailbox_import: 10,
   shipmail_undo_mailbox_import: 10,
@@ -2404,7 +2582,14 @@ var SESSION_LIMITS = {
   shipmail_delete_calendar_event: 50,
   shipmail_create_booking_page: 20,
   shipmail_update_booking_page: 20,
-  shipmail_delete_booking_page: 10
+  shipmail_delete_booking_page: 10,
+  shipmail_create_partner_organization: 20,
+  shipmail_update_partner_organization: 50,
+  shipmail_resend_partner_ownership_invitation: 20,
+  shipmail_suspend_partner_organization: 20,
+  shipmail_resume_partner_organization: 20,
+  shipmail_offboard_partner_organization: 10,
+  shipmail_consume_partner_mailbox_credential_grant: 20
 };
 var SESSION_TOTAL_LIMIT = 500;
 var DEBUG_ENABLED = process.env["SHIPMAIL_MCP_DEBUG"] === "1";
@@ -2696,6 +2881,72 @@ function registerTools(server, client, selectedTools) {
       }))
     );
   });
+  registerIfAllowed("shipmail_list_mailbox_app_passwords", () => {
+    server.registerTool(
+      "shipmail_list_mailbox_app_passwords",
+      {
+        title: "List Mailbox App Passwords",
+        description: "List app-password metadata for one mailbox. Secret values are never returned by this read operation.",
+        inputSchema: getByIdInputSchema,
+        outputSchema: mailboxAppPasswordsOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async ({ id }) => runTool(
+        "shipmail_list_mailbox_app_passwords",
+        mailboxAppPasswordsOutputSchema,
+        async () => ({ app_passwords: await client.mailboxes.listAppPasswords(id) })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_create_mailbox_app_password", () => {
+    server.registerTool(
+      "shipmail_create_mailbox_app_password",
+      {
+        title: "Create Mailbox App Password",
+        description: "Create a revocable mailbox credential for an email client. The secret is returned exactly once in this tool result, so only call after explicit operator approval and store it securely.",
+        inputSchema: createMailboxAppPasswordInputSchema,
+        outputSchema: createdMailboxAppPasswordOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: true,
+          idempotentHint: false,
+          openWorldHint: false
+        }
+      },
+      async (args) => runTool(
+        "shipmail_create_mailbox_app_password",
+        createdMailboxAppPasswordOutputSchema,
+        async () => ({
+          app_password: await client.mailboxes.createAppPassword(args.id, {
+            name: args.name,
+            ...args.expires_at ? { expires_at: args.expires_at } : {},
+            ...args.allowed_cidrs ? { allowed_cidrs: args.allowed_cidrs } : {}
+          })
+        })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_revoke_mailbox_app_password", () => {
+    server.registerTool(
+      "shipmail_revoke_mailbox_app_password",
+      {
+        title: "Revoke Mailbox App Password",
+        description: "Permanently revoke one mailbox app password. The associated client will lose access immediately.",
+        inputSchema: revokeMailboxAppPasswordInputSchema,
+        outputSchema: acknowledgmentOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: true,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
+      async ({ id, app_password_id }) => runTool("shipmail_revoke_mailbox_app_password", acknowledgmentOutputSchema, async () => {
+        await client.mailboxes.revokeAppPassword(id, app_password_id);
+        return { result: { ok: true, id: app_password_id } };
+      })
+    );
+  });
   registerIfAllowed("shipmail_suspend_mailbox", () => {
     server.registerTool(
       "shipmail_suspend_mailbox",
@@ -2751,9 +3002,24 @@ function registerTools(server, client, selectedTools) {
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_create_mailbox", mailboxOutputSchema, async () => ({
-        mailbox: await client.mailboxes.create(stripIdempotencyKey(args), mutationOptions(args))
-      }))
+      async (args) => runTool("shipmail_create_mailbox", mailboxOutputSchema, async () => {
+        const base = {
+          domain_id: args.domain_id,
+          address: args.address,
+          ...args.display_name === void 0 ? {} : { display_name: args.display_name }
+        };
+        let params;
+        if (args.generate_password === true) {
+          params = { ...base, generate_password: true };
+        } else if (args.password !== void 0) {
+          params = { ...base, password: args.password };
+        } else {
+          throw new Error("Mailbox password validation failed.");
+        }
+        return {
+          mailbox: await client.mailboxes.create(params, mutationOptions(args))
+        };
+      })
     );
   });
   registerIfAllowed("shipmail_create_mailbox_export", () => {
@@ -4493,7 +4759,7 @@ function registerTools(server, client, selectedTools) {
       "shipmail_create_booking_page",
       {
         title: "Create Booking Page",
-        description: "Create a booking page exposing one mailbox's availability. availability_days is 0=Sunday..6=Saturday.",
+        description: "Create a booking page exposing one mailbox's availability. availability_days is 0=Sunday..6=Saturday. conferencing_provider is opt-in and must already be connected to the mailbox.",
         inputSchema: createBookingPageInputSchema,
         outputSchema: bookingPageOutputSchema,
         annotations: {
@@ -4516,7 +4782,7 @@ function registerTools(server, client, selectedTools) {
       "shipmail_update_booking_page",
       {
         title: "Update Booking Page",
-        description: "Update a booking page. All fields optional; provide at least one.",
+        description: "Update a booking page. All fields optional; provide at least one. Set conferencing_provider to null to stop creating meeting links.",
         inputSchema: updateBookingPageInputSchema,
         outputSchema: bookingPageOutputSchema,
         annotations: {
@@ -4555,6 +4821,204 @@ function registerTools(server, client, selectedTools) {
       })
     );
   });
+  registerIfAllowed("shipmail_list_partner_organizations", () => {
+    server.registerTool(
+      "shipmail_list_partner_organizations",
+      {
+        title: "List Partner Organizations",
+        description: "List operator-owned organizations connected to the partner account.",
+        outputSchema: partnerOrganizationsOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool(
+        "shipmail_list_partner_organizations",
+        partnerOrganizationsOutputSchema,
+        () => client.partner.listOrganizations()
+      )
+    );
+  });
+  registerIfAllowed("shipmail_create_partner_organization", () => {
+    server.registerTool(
+      "shipmail_create_partner_organization",
+      {
+        title: "Create Partner Organization",
+        description: "Create an operator organization and email its ownership invitation. No domain or mailbox is created.",
+        inputSchema: createPartnerOrganizationInputSchema,
+        outputSchema: createdPartnerOrganizationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
+      async (args) => runTool(
+        "shipmail_create_partner_organization",
+        createdPartnerOrganizationOutputSchema,
+        async () => ({
+          organization: await client.partner.createOrganization(
+            stripIdempotencyKey(args),
+            mutationOptions(args)
+          )
+        })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_get_partner_organization", () => {
+    server.registerTool(
+      "shipmail_get_partner_organization",
+      {
+        title: "Get Partner Organization",
+        description: "Get one partner child relationship and its ownership state.",
+        inputSchema: partnerOrganizationByIdInputSchema,
+        outputSchema: partnerOrganizationOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async ({ id }) => runTool("shipmail_get_partner_organization", partnerOrganizationOutputSchema, async () => ({
+        organization: await client.partner.getOrganization(id)
+      }))
+    );
+  });
+  registerIfAllowed("shipmail_update_partner_organization", () => {
+    server.registerTool(
+      "shipmail_update_partner_organization",
+      {
+        title: "Update Partner Organization",
+        description: "Update an operator organization name or mailbox allocation.",
+        inputSchema: updatePartnerOrganizationInputSchema,
+        outputSchema: partnerOrganizationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: false
+        }
+      },
+      async (args) => runTool(
+        "shipmail_update_partner_organization",
+        partnerOrganizationOutputSchema,
+        async () => {
+          const { id, idempotency_key: _key, ...params } = args;
+          return {
+            organization: await client.partner.updateOrganization(
+              id,
+              params,
+              mutationOptions(args)
+            )
+          };
+        }
+      )
+    );
+  });
+  registerIfAllowed("shipmail_resend_partner_ownership_invitation", () => {
+    server.registerTool(
+      "shipmail_resend_partner_ownership_invitation",
+      {
+        title: "Resend Partner Ownership Invitation",
+        description: "Revoke the pending ownership link and email a new single-use link.",
+        inputSchema: resendPartnerInvitationInputSchema,
+        outputSchema: partnerInvitationOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: false,
+          idempotentHint: true,
+          openWorldHint: true
+        }
+      },
+      async (args) => runTool(
+        "shipmail_resend_partner_ownership_invitation",
+        partnerInvitationOutputSchema,
+        async () => ({
+          invitation: await client.partner.resendOwnershipInvitation(
+            args.id,
+            { owner_email: args.owner_email },
+            mutationOptions(args)
+          )
+        })
+      )
+    );
+  });
+  for (const transition of ["suspend", "resume", "offboard"]) {
+    const toolName = `shipmail_${transition}_partner_organization`;
+    registerIfAllowed(toolName, () => {
+      server.registerTool(
+        toolName,
+        {
+          title: `${transition[0]?.toUpperCase() ?? ""}${transition.slice(1)} Partner Organization`,
+          description: transition === "suspend" ? "Suspend outbound sending for one operator organization. Inbound mail and storage continue." : transition === "resume" ? "Resume partner-managed outbound sending for one operator organization." : "Start non-destructive offboarding and immediately remove delegated access.",
+          inputSchema: partnerOrganizationByIdInputSchema,
+          outputSchema: partnerOrganizationOutputSchema,
+          annotations: {
+            readOnlyHint: false,
+            destructiveHint: transition !== "resume",
+            idempotentHint: true,
+            openWorldHint: false
+          }
+        },
+        async ({ id }) => runTool(toolName, partnerOrganizationOutputSchema, async () => ({
+          organization: transition === "suspend" ? await client.partner.suspendOrganization(id) : transition === "resume" ? await client.partner.resumeOrganization(id) : await client.partner.offboardOrganization(id)
+        }))
+      );
+    });
+  }
+  registerIfAllowed("shipmail_consume_partner_mailbox_credential_grant", () => {
+    server.registerTool(
+      "shipmail_consume_partner_mailbox_credential_grant",
+      {
+        title: "Consume Partner Mailbox Credential Grant",
+        description: "Consume an operator-approved, single-use grant and issue an embedded-webmail credential. The secret is returned exactly once and the operator is notified. Call only after explicit partner approval.",
+        inputSchema: consumePartnerMailboxCredentialGrantInputSchema,
+        outputSchema: partnerMailboxCredentialOutputSchema,
+        annotations: {
+          readOnlyHint: false,
+          destructiveHint: true,
+          idempotentHint: false,
+          openWorldHint: true
+        }
+      },
+      async (args) => runTool(
+        "shipmail_consume_partner_mailbox_credential_grant",
+        partnerMailboxCredentialOutputSchema,
+        async () => ({
+          credential: await client.partner.consumeMailboxCredentialGrant(args.grant_id, {
+            ...args.name ? { name: args.name } : {},
+            ...args.expires_at ? { expires_at: args.expires_at } : {},
+            ...args.allowed_cidrs ? { allowed_cidrs: args.allowed_cidrs } : {}
+          })
+        })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_list_partner_mailbox_credential_grants", () => {
+    server.registerTool(
+      "shipmail_list_partner_mailbox_credential_grants",
+      {
+        title: "List Partner Mailbox Credential Grants",
+        description: "List active ten-minute mailbox approvals created by operator owners. Grant metadata contains no app-password secret.",
+        outputSchema: partnerMailboxCredentialGrantsOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool(
+        "shipmail_list_partner_mailbox_credential_grants",
+        partnerMailboxCredentialGrantsOutputSchema,
+        async () => ({ grants: await client.partner.listMailboxCredentialGrants() })
+      )
+    );
+  });
+  registerIfAllowed("shipmail_get_partner_usage", () => {
+    server.registerTool(
+      "shipmail_get_partner_usage",
+      {
+        title: "Get Partner Usage",
+        description: "Get consolidated child and mailbox usage for the current UTC month.",
+        outputSchema: partnerUsageOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool("shipmail_get_partner_usage", partnerUsageOutputSchema, async () => ({
+        usage: await client.partner.usage()
+      }))
+    );
+  });
   if (selectedTools) {
     const unknown = [...selectedTools].filter((name) => !knownTools.includes(name));
     if (unknown.length > 0) {
@@ -4565,7 +5029,7 @@ function registerTools(server, client, selectedTools) {
 }
 
 // src/version.ts
-var VERSION = "0.2.9";
+var VERSION = "0.3.0";
 
 // src/server.ts
 var INSTRUCTIONS = `ShipMail MCP exposes business email tools for domains, mailboxes, messages, threads, webhooks, and suppressions.
@@ -4590,6 +5054,7 @@ function createShipMailMcpServer(config) {
   const client = new ShipMailClient({
     apiKey: config.apiKey,
     ...config.baseUrl ? { baseUrl: config.baseUrl } : {},
+    ...config.organizationId ? { organizationId: config.organizationId } : {},
     defaultHeaders
   });
   const server = new McpServer4(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail-mcp",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "mcpName": "io.github.jcoulaud/shipmail-mcp",
   "description": "Official Model Context Protocol (MCP) server for Shipmail, a business email provider with REST API, webhooks, and custom-domain inboxes for AI agents.",
   "type": "module",
@@ -59,7 +59,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
-    "shipmail": "0.1.32",
+    "shipmail": "0.2.0",
     "zod": "4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -6,14 +6,14 @@
     "url": "https://github.com/jcoulaud/shipmail-mcp",
     "source": "github"
   },
-  "version": "0.2.9",
+  "version": "0.3.0",
   "websiteUrl": "https://shipmail.to/docs/mcp",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "shipmail-mcp",
-      "version": "0.2.9",
+      "version": "0.3.0",
       "transport": {
         "type": "stdio"
       },

package/smithery.yaml

@@ -1,6 +1,6 @@
 # Smithery configuration file: https://smithery.ai/docs/build/project-config/smithery-yaml
 name: shipmail-mcp
-version: 0.2.9
+version: 0.3.0
 description: Official Shipmail MCP server for AI-agent custom-domain business email inboxes with REST API and webhooks.
 author: ShipMail
 repository: https://github.com/jcoulaud/shipmail-mcp