shipmail-mcp 0.6.4 → 0.6.6

package/dist/index.js

@@ -4,6 +4,106 @@
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { ShipMailClient as ShipMailClient2 } from "shipmail";
 
+// src/config.ts
+import { readFileSync } from "fs";
+import { env } from "process";
+var DEFAULT_BASE_URL = "https://shipmail.to/api/v1";
+var HELP_TEXT = `shipmail-mcp
+
+Usage:
+  shipmail-mcp
+
+Environment:
+  SHIPMAIL_API_KEY      Required ShipMail API key (or use SHIPMAIL_API_KEY_FILE).
+  SHIPMAIL_API_KEY_FILE Optional path to a file containing the API key. Takes precedence over
+                        SHIPMAIL_API_KEY when set; reduces env-trace leak surface for hosts that
+                        log environment variables.
+  SHIPMAIL_BASE_URL     Optional API base URL. Must be https. Defaults to ${DEFAULT_BASE_URL}.
+  SHIPMAIL_ORGANIZATION_ID
+                        Optional delegated child organization ID for infrastructure tools.
+  SHIPMAIL_ALLOW_INSECURE_BASE_URL=1
+                        Permit non-https or non-shipmail.to base URL (development only).
+
+ShipMail discovers tools from the API key's live permissions at startup. Change scopes, resources,
+recipient rules, and send budgets in ShipMail Settings.`;
+var API_KEY_HELP = "SHIPMAIL_API_KEY (or SHIPMAIL_API_KEY_FILE) is required. Create an API key in ShipMail, then run `SHIPMAIL_API_KEY=sm_live_... shipmail-mcp`.";
+function readApiKey() {
+  const filePath = env["SHIPMAIL_API_KEY_FILE"];
+  if (filePath !== void 0 && filePath.length > 0) {
+    let raw;
+    try {
+      raw = readFileSync(filePath, "utf8");
+    } catch (error) {
+      throw new Error(
+        `Failed to read SHIPMAIL_API_KEY_FILE at ${filePath}: ${error instanceof Error ? error.message : String(error)}`,
+        { cause: error }
+      );
+    }
+    const trimmed = raw.trim();
+    if (trimmed.length === 0) {
+      throw new Error(`SHIPMAIL_API_KEY_FILE at ${filePath} is empty.`);
+    }
+    return trimmed;
+  }
+  const direct = env["SHIPMAIL_API_KEY"];
+  if (!direct) throw new Error(API_KEY_HELP);
+  return direct;
+}
+var ALLOWED_BASE_URL_HOSTS = ["shipmail.to", "api.shipmail.to"];
+function validateBaseUrl(rawValue, allowInsecure) {
+  let parsed;
+  try {
+    parsed = new URL(rawValue);
+  } catch {
+    throw new Error(`SHIPMAIL_BASE_URL is not a valid URL: ${rawValue}`);
+  }
+  if (allowInsecure) return parsed.toString().replace(/\/+$/, "");
+  if (parsed.protocol !== "https:") {
+    throw new Error(
+      "SHIPMAIL_BASE_URL must use https. Set SHIPMAIL_ALLOW_INSECURE_BASE_URL=1 for development."
+    );
+  }
+  const host = parsed.hostname.toLowerCase();
+  const isAllowedHost = ALLOWED_BASE_URL_HOSTS.some(
+    (allowed) => host === allowed || host.endsWith(`.${allowed}`)
+  );
+  if (!isAllowedHost) {
+    throw new Error(
+      `SHIPMAIL_BASE_URL host "${host}" is not allowed. Set SHIPMAIL_ALLOW_INSECURE_BASE_URL=1 for development.`
+    );
+  }
+  return parsed.toString().replace(/\/+$/, "");
+}
+function readConfig(argv = process.argv.slice(2)) {
+  if (argv.includes("--tools")) {
+    throw new Error(
+      "--tools was removed. ShipMail MCP tools now follow the API key permissions configured in ShipMail Settings."
+    );
+  }
+  const unknownArgs = argv.filter((arg) => arg !== "--help" && arg !== "-h");
+  if (unknownArgs.length > 0) {
+    throw new Error(`Unknown argument: ${unknownArgs[0]}`);
+  }
+  const rawBaseUrl = env["SHIPMAIL_BASE_URL"];
+  const allowInsecure = env["SHIPMAIL_ALLOW_INSECURE_BASE_URL"] === "1";
+  const baseUrl = rawBaseUrl !== void 0 && rawBaseUrl.length > 0 ? validateBaseUrl(rawBaseUrl, allowInsecure) : void 0;
+  return {
+    apiKey: readApiKey(),
+    baseUrl,
+    organizationId: env["SHIPMAIL_ORGANIZATION_ID"] || void 0
+  };
+}
+
+// src/server.ts
+import { McpServer as McpServer5 } from "@modelcontextprotocol/server";
+import { ShipMailClient } from "shipmail";
+
+// src/cross-organization-tools.ts
+import { performance } from "perf_hooks";
+import "@modelcontextprotocol/server";
+import { ShipMailError as ShipMailError2 } from "shipmail";
+import { z as z2 } from "zod/v4";
+
 // src/capabilities.ts
 import { API_KEY_SCOPES, apiKeyScopesGrant } from "shipmail/api-key-scopes";
 var MCP_CAPABILITY_VERSION = "1.0.0";
@@ -499,106 +599,6 @@ function getMcpCapability(toolName) {
   return MCP_CAPABILITIES.find((capability) => capability.toolName === toolName);
 }
 
-// src/config.ts
-import { readFileSync } from "fs";
-import { env } from "process";
-var DEFAULT_BASE_URL = "https://shipmail.to/api/v1";
-var HELP_TEXT = `shipmail-mcp
-
-Usage:
-  shipmail-mcp
-
-Environment:
-  SHIPMAIL_API_KEY      Required ShipMail API key (or use SHIPMAIL_API_KEY_FILE).
-  SHIPMAIL_API_KEY_FILE Optional path to a file containing the API key. Takes precedence over
-                        SHIPMAIL_API_KEY when set; reduces env-trace leak surface for hosts that
-                        log environment variables.
-  SHIPMAIL_BASE_URL     Optional API base URL. Must be https. Defaults to ${DEFAULT_BASE_URL}.
-  SHIPMAIL_ORGANIZATION_ID
-                        Optional delegated child organization ID for infrastructure tools.
-  SHIPMAIL_ALLOW_INSECURE_BASE_URL=1
-                        Permit non-https or non-shipmail.to base URL (development only).
-
-ShipMail discovers tools from the API key's live permissions at startup. Change scopes, resources,
-recipient rules, and send budgets in ShipMail Settings.`;
-var API_KEY_HELP = "SHIPMAIL_API_KEY (or SHIPMAIL_API_KEY_FILE) is required. Create an API key in ShipMail, then run `SHIPMAIL_API_KEY=sm_live_... shipmail-mcp`.";
-function readApiKey() {
-  const filePath = env["SHIPMAIL_API_KEY_FILE"];
-  if (filePath !== void 0 && filePath.length > 0) {
-    let raw;
-    try {
-      raw = readFileSync(filePath, "utf8");
-    } catch (error) {
-      throw new Error(
-        `Failed to read SHIPMAIL_API_KEY_FILE at ${filePath}: ${error instanceof Error ? error.message : String(error)}`,
-        { cause: error }
-      );
-    }
-    const trimmed = raw.trim();
-    if (trimmed.length === 0) {
-      throw new Error(`SHIPMAIL_API_KEY_FILE at ${filePath} is empty.`);
-    }
-    return trimmed;
-  }
-  const direct = env["SHIPMAIL_API_KEY"];
-  if (!direct) throw new Error(API_KEY_HELP);
-  return direct;
-}
-var ALLOWED_BASE_URL_HOSTS = ["shipmail.to", "api.shipmail.to"];
-function validateBaseUrl(rawValue, allowInsecure) {
-  let parsed;
-  try {
-    parsed = new URL(rawValue);
-  } catch {
-    throw new Error(`SHIPMAIL_BASE_URL is not a valid URL: ${rawValue}`);
-  }
-  if (allowInsecure) return parsed.toString().replace(/\/+$/, "");
-  if (parsed.protocol !== "https:") {
-    throw new Error(
-      "SHIPMAIL_BASE_URL must use https. Set SHIPMAIL_ALLOW_INSECURE_BASE_URL=1 for development."
-    );
-  }
-  const host = parsed.hostname.toLowerCase();
-  const isAllowedHost = ALLOWED_BASE_URL_HOSTS.some(
-    (allowed) => host === allowed || host.endsWith(`.${allowed}`)
-  );
-  if (!isAllowedHost) {
-    throw new Error(
-      `SHIPMAIL_BASE_URL host "${host}" is not allowed. Set SHIPMAIL_ALLOW_INSECURE_BASE_URL=1 for development.`
-    );
-  }
-  return parsed.toString().replace(/\/+$/, "");
-}
-function readConfig(argv = process.argv.slice(2)) {
-  if (argv.includes("--tools")) {
-    throw new Error(
-      "--tools was removed. ShipMail MCP tools now follow the API key permissions configured in ShipMail Settings."
-    );
-  }
-  const unknownArgs = argv.filter((arg) => arg !== "--help" && arg !== "-h");
-  if (unknownArgs.length > 0) {
-    throw new Error(`Unknown argument: ${unknownArgs[0]}`);
-  }
-  const rawBaseUrl = env["SHIPMAIL_BASE_URL"];
-  const allowInsecure = env["SHIPMAIL_ALLOW_INSECURE_BASE_URL"] === "1";
-  const baseUrl = rawBaseUrl !== void 0 && rawBaseUrl.length > 0 ? validateBaseUrl(rawBaseUrl, allowInsecure) : void 0;
-  return {
-    apiKey: readApiKey(),
-    baseUrl,
-    organizationId: env["SHIPMAIL_ORGANIZATION_ID"] || void 0
-  };
-}
-
-// src/server.ts
-import { McpServer as McpServer5 } from "@modelcontextprotocol/server";
-import { ShipMailClient } from "shipmail";
-
-// src/cross-organization-tools.ts
-import { performance } from "perf_hooks";
-import "@modelcontextprotocol/server";
-import { ShipMailError as ShipMailError2 } from "shipmail";
-import { z as z2 } from "zod/v4";
-
 // src/result.ts
 import { ShipMailError, ValidationError } from "shipmail";
 
@@ -1211,6 +1211,31 @@ var inboxBodyValueSchema = z.object({
   value: z.string(),
   is_encoding_problem: z.boolean()
 });
+var emailAuthVerdictSchema = z.enum([
+  "pass",
+  "fail",
+  "softfail",
+  "neutral",
+  "none",
+  "temperror",
+  "permerror",
+  "policy",
+  "unknown"
+]);
+var emailAuthenticationResultsSchema = z.object({
+  spf: emailAuthVerdictSchema,
+  dkim: emailAuthVerdictSchema,
+  dmarc: emailAuthVerdictSchema,
+  spam: z.object({
+    isSpam: z.boolean().nullable(),
+    scoreMilli: z.number().int().nullable()
+  }),
+  raw: z.object({
+    authenticationResults: z.string().nullable(),
+    receivedSpf: z.string().nullable(),
+    spamStatus: z.string().nullable()
+  })
+});
 var inboxMessageSchema = z.object({
   object: z.literal("inbox_message"),
   id: z.string(),
@@ -1225,7 +1250,8 @@ var inboxMessageSchema = z.object({
   received_at: z.string(),
   preview: z.string(),
   has_attachment: z.boolean(),
-  size: z.number()
+  size: z.number(),
+  authentication_results: emailAuthenticationResultsSchema.nullable()
 });
 var inboxFullMessageSchema = inboxMessageSchema.omit({ object: true }).extend({
   object: z.literal("inbox_message_full"),
@@ -3829,7 +3855,8 @@ function toInboxMessageSummary(message) {
     received_at: message.received_at,
     preview: message.preview,
     has_attachment: message.has_attachment,
-    size: message.size
+    size: message.size,
+    authentication_results: message.authentication_results
   };
 }
 function toInboxMessageSummaries(messages) {
@@ -7141,7 +7168,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
 }
 
 // src/version.ts
-var VERSION = "0.6.4";
+var VERSION = "0.6.6";
 
 // src/server.ts
 var INSTRUCTIONS = `ShipMail MCP exposes the business email and calendar tools authorized by the connection's current ShipMail permissions.
@@ -7208,6 +7235,47 @@ function createShipMailMcpServer(config, allowedTools, organizationGrants = [])
   return server;
 }
 
+// src/startup.ts
+function writeStderrWarning(message) {
+  process.stderr.write(`${message}
+`);
+}
+function errorMessage(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.replace(/\s+/g, " ").trim() || "Unknown error";
+}
+async function resolveAllowedTools(client, writeWarning = writeStderrWarning) {
+  let capabilities;
+  try {
+    capabilities = await client.capabilities.get();
+  } catch (error) {
+    writeWarning(
+      `Could not fetch ShipMail capabilities (${errorMessage(error)}). The tool list is unverified and calls may fail.`
+    );
+    return new Set(MCP_TOOL_NAMES);
+  }
+  const serverMajor = capabilities.capability_version.split(".")[0];
+  const supportedMajor = MCP_CAPABILITY_VERSION.split(".")[0];
+  if (!serverMajor || serverMajor !== supportedMajor) {
+    throw new Error(
+      `ShipMail capability version ${capabilities.capability_version} is incompatible with this shipmail-mcp version. Upgrade shipmail-mcp before reconnecting.`
+    );
+  }
+  const localTools = new Set(MCP_TOOL_NAMES);
+  const allowedTools = new Set(
+    capabilities.allowed_mcp_tools.filter((toolName) => localTools.has(toolName))
+  );
+  const missingTools = capabilities.allowed_mcp_tools.filter(
+    (toolName) => !localTools.has(toolName)
+  );
+  if (missingTools.length > 0) {
+    writeWarning(
+      `ShipMail allows tools not implemented by this shipmail-mcp version: ${missingTools.join(", ")}. Upgrade to use them.`
+    );
+  }
+  return allowedTools;
+}
+
 // src/index.ts
 function installShutdownHandlers(server) {
   let shuttingDown = false;
@@ -7239,27 +7307,7 @@ async function main() {
       "X-ShipMail-Client-Version": VERSION
     }
   });
-  const capabilities = await client.capabilities.get();
-  const serverMajor = capabilities.capability_version.split(".")[0];
-  const supportedMajor = MCP_CAPABILITY_VERSION.split(".")[0];
-  if (!serverMajor || serverMajor !== supportedMajor) {
-    throw new Error(
-      `ShipMail capability version ${capabilities.capability_version} is incompatible with this shipmail-mcp version. Upgrade shipmail-mcp before reconnecting.`
-    );
-  }
-  const localTools = new Set(MCP_TOOL_NAMES);
-  const allowedTools = new Set(
-    capabilities.allowed_mcp_tools.filter((toolName) => localTools.has(toolName))
-  );
-  const missingTools = capabilities.allowed_mcp_tools.filter(
-    (toolName) => !localTools.has(toolName)
-  );
-  if (missingTools.length > 0) {
-    process.stderr.write(
-      `ShipMail allows tools not implemented by this shipmail-mcp version: ${missingTools.join(", ")}. Upgrade to use them.
-`
-    );
-  }
+  const allowedTools = await resolveAllowedTools(client);
   const server = serveStdio(() => createShipMailMcpServer(config, allowedTools), {
     legacy: "reject"
   });

package/dist/server.js

@@ -1114,6 +1114,31 @@ var inboxBodyValueSchema = z.object({
   value: z.string(),
   is_encoding_problem: z.boolean()
 });
+var emailAuthVerdictSchema = z.enum([
+  "pass",
+  "fail",
+  "softfail",
+  "neutral",
+  "none",
+  "temperror",
+  "permerror",
+  "policy",
+  "unknown"
+]);
+var emailAuthenticationResultsSchema = z.object({
+  spf: emailAuthVerdictSchema,
+  dkim: emailAuthVerdictSchema,
+  dmarc: emailAuthVerdictSchema,
+  spam: z.object({
+    isSpam: z.boolean().nullable(),
+    scoreMilli: z.number().int().nullable()
+  }),
+  raw: z.object({
+    authenticationResults: z.string().nullable(),
+    receivedSpf: z.string().nullable(),
+    spamStatus: z.string().nullable()
+  })
+});
 var inboxMessageSchema = z.object({
   object: z.literal("inbox_message"),
   id: z.string(),
@@ -1128,7 +1153,8 @@ var inboxMessageSchema = z.object({
   received_at: z.string(),
   preview: z.string(),
   has_attachment: z.boolean(),
-  size: z.number()
+  size: z.number(),
+  authentication_results: emailAuthenticationResultsSchema.nullable()
 });
 var inboxFullMessageSchema = inboxMessageSchema.omit({ object: true }).extend({
   object: z.literal("inbox_message_full"),
@@ -3732,7 +3758,8 @@ function toInboxMessageSummary(message) {
     received_at: message.received_at,
     preview: message.preview,
     has_attachment: message.has_attachment,
-    size: message.size
+    size: message.size,
+    authentication_results: message.authentication_results
   };
 }
 function toInboxMessageSummaries(messages) {
@@ -7044,7 +7071,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
 }
 
 // src/version.ts
-var VERSION = "0.6.4";
+var VERSION = "0.6.6";
 
 // src/server.ts
 var INSTRUCTIONS = `ShipMail MCP exposes the business email and calendar tools authorized by the connection's current ShipMail permissions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail-mcp",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "mcpName": "io.github.shipmail-to/shipmail-mcp",
   "description": "Official Model Context Protocol (MCP) server for Shipmail, a business email provider with REST API, webhooks, and custom-domain inboxes for AI agents.",
   "type": "module",
@@ -59,7 +59,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.0.0",
-    "shipmail": "0.4.10",
+    "shipmail": "0.4.12",
     "zod": "4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -6,7 +6,7 @@
     "url": "https://github.com/shipmail-to/shipmail-mcp",
     "source": "github"
   },
-  "version": "0.6.4",
+  "version": "0.6.6",
   "websiteUrl": "https://shipmail.to/docs/mcp",
   "remotes": [
     {
@@ -27,7 +27,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "shipmail-mcp",
-      "version": "0.6.4",
+      "version": "0.6.6",
       "transport": {
         "type": "stdio"
       },

package/smithery.yaml

@@ -1,6 +1,6 @@
 # Smithery configuration file: https://smithery.ai/docs/build/project-config/smithery-yaml
 name: shipmail-mcp
-version: 0.6.4
+version: 0.6.6
 description: Official Shipmail MCP server for AI-agent custom-domain business email inboxes with REST API and webhooks.
 author: ShipMail
 repository: https://github.com/shipmail-to/shipmail-mcp