shipmail-mcp 0.9.1 → 0.9.3

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "displayName": "Shipmail",
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/dist/capabilities.d.ts

@@ -143,7 +143,7 @@ declare const MCP_PERMISSION_GROUPS: readonly [{
     readonly scopes: readonly ["suppressions:read", "suppressions:write"];
     readonly persistent: false;
 }];
-declare const CAPABILITY_ROWS: readonly [readonly ["shipmail_status", "getStatus", "public"], readonly ["shipmail_list_automations", "listAutomations", "automations:read"], readonly ["shipmail_create_automation", "createAutomation", "automations:write"], readonly ["shipmail_get_automation", "getAutomation", "automations:read"], readonly ["shipmail_update_automation", "updateAutomation", "automations:write"], readonly ["shipmail_run_automation", "runAutomation", "automations:write"], readonly ["shipmail_create_domain", "createDomain", "domains:write"], readonly ["shipmail_list_domains", "listDomains", "domains:read"], readonly ["shipmail_get_domain", "getDomain", "domains:read"], readonly ["shipmail_get_domain_dns_records", "getDomainDnsRecords", "domains:read"], readonly ["shipmail_update_domain", "updateDomain", "domains:write"], readonly ["shipmail_delete_domain", "deleteDomain", "domains:write"], readonly ["shipmail_verify_domain", "verifyDomain", "domains:write"], readonly ["shipmail_search_domains", "searchDomains", "domains:read"], readonly ["shipmail_create_mailbox", "createMailbox", "mailboxes:write"], readonly ["shipmail_list_mailboxes", "listMailboxes", "mailboxes:read"], readonly ["shipmail_get_mailbox", "getMailbox", "mailboxes:read"], readonly ["shipmail_list_mailbox_app_passwords", "listMailboxAppPasswords", "mailbox_credentials:read"], readonly ["shipmail_create_mailbox_app_password", "createMailboxAppPassword", "mailbox_credentials:write"], readonly ["shipmail_revoke_mailbox_app_password", "revokeMailboxAppPassword", "mailbox_credentials:write"], readonly ["shipmail_suspend_mailbox", "suspendMailbox", "mailboxes:write"], readonly ["shipmail_resume_mailbox", "resumeMailbox", "mailboxes:write"], readonly ["shipmail_create_mailbox_export", "createMailboxExport", "mailboxes:export"], readonly ["shipmail_get_mailbox_export", "getMailboxExport", "mailboxes:export"], readonly ["shipmail_update_mailbox", "updateMailbox", "mailboxes:write"], readonly ["shipmail_delete_mailbox", "deleteMailbox", "mailboxes:write"], readonly ["shipmail_list_mailbox_folders", "listMailboxFolders", "mailboxes:read"], readonly ["shipmail_create_mailbox_folder", "createMailboxFolder", "messages:write"], readonly ["shipmail_update_mailbox_folder", "updateMailboxFolder", "messages:write"], readonly ["shipmail_delete_mailbox_folder", "deleteMailboxFolder", "messages:write"], readonly ["shipmail_list_mailbox_rules", "getMailboxRules", "mailbox_rules:read"], readonly ["shipmail_get_mailbox_rule", "getMailboxRules", "mailbox_rules:read"], readonly ["shipmail_create_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_update_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_delete_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_list_mailbox_identities", "listMailboxIdentities", "mailboxes:read"], readonly ["shipmail_list_mailbox_inbox_messages", "listMailboxInboxMessages", "messages:read"], readonly ["shipmail_get_mailbox_inbox_message", "getMailboxInboxMessage", "messages:read"], readonly ["shipmail_read_mailbox_inbox_attachment", "downloadMailboxInboxAttachment", "messages:read"], readonly ["shipmail_list_mailbox_inbox_threads", "listMailboxInboxThreads", "messages:read"], readonly ["shipmail_get_mailbox_inbox_thread", "getMailboxInboxThread", "messages:read"], readonly ["shipmail_update_inbox_thread_attention", "updateMailboxInboxThreadAttention", "messages:write"], readonly ["shipmail_create_draft", "createMailboxInboxDraft", "drafts:compose"], readonly ["shipmail_create_inbox_reply_draft", "createMailboxInboxReplyDraft", "drafts:write"], readonly ["shipmail_send_inbox_reply_draft", "sendMailboxInboxReplyDraft", "messages:send"], readonly ["shipmail_reply_to_inbox_message", "replyToMailboxInboxMessage", "messages:send"], readonly ["shipmail_reply_to_inbox_thread", "replyToMailboxInboxThread", "messages:send"], readonly ["shipmail_update_inbox_message", "updateMailboxInboxMessage", "messages:write"], readonly ["shipmail_move_inbox_message", "moveMailboxInboxMessage", "messages:write"], readonly ["shipmail_delete_inbox_message", "deleteMailboxInboxMessage", "messages:write"], readonly ["shipmail_list_mailbox_forwarding", "listMailboxForwarding", "mailbox_forwarding:read"], readonly ["shipmail_create_mailbox_forwarding", "createMailboxForwarding", "mailbox_forwarding:write"], readonly ["shipmail_delete_mailbox_forwarding", "deleteMailboxForwarding", "mailbox_forwarding:write"], readonly ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailboxes:write"], readonly ["shipmail_set_auto_reply", "updateAutoReply", "mailboxes:write"], readonly ["shipmail_get_mailbox_delivery_routing", "getMailboxDeliveryRouting", "mailboxes:read"], readonly ["shipmail_update_mailbox_delivery_routing", "updateMailboxDeliveryRouting", "mailboxes:write"], readonly ["shipmail_create_mailbox_import", "createMailboxImport", "mailboxes:write"], readonly ["shipmail_list_mailbox_imports", "listMailboxImports", "mailboxes:read"], readonly ["shipmail_get_mailbox_import", "getMailboxImport", "mailboxes:read"], readonly ["shipmail_cancel_mailbox_import", "cancelMailboxImport", "mailboxes:write"], readonly ["shipmail_resume_mailbox_import", "resumeMailboxImport", "mailboxes:write"], readonly ["shipmail_restore_mailbox_import", "restoreMailboxImport", "mailboxes:write"], readonly ["shipmail_undo_mailbox_import", "undoMailboxImport", "mailboxes:write"], readonly ["shipmail_inject_sandbox_inbound", "injectSandboxInbound", "messages:write"], readonly ["shipmail_list_messages", "listMessages", "messages:read"], readonly ["shipmail_list_message_analytics", "listMessageAnalytics", "messages:read"], readonly ["shipmail_compose_message_with_file", "prepareStagedAttachmentUpload", "messages:send"], readonly ["shipmail_prepare_staged_attachment_upload", "prepareStagedAttachmentUpload", "messages:send"], readonly ["shipmail_send_message", "sendMessage", "messages:send"], readonly ["shipmail_list_scheduled_messages", "listScheduledMessages", "messages:read"], readonly ["shipmail_get_scheduled_message", "getScheduledMessage", "messages:read"], readonly ["shipmail_update_scheduled_message", "updateScheduledMessage", "messages:send"], readonly ["shipmail_cancel_scheduled_message", "cancelScheduledMessage", "messages:send"], readonly ["shipmail_get_message", "getMessage", "messages:read"], readonly ["shipmail_reply_to_message", "replyToMessage", "messages:send"], readonly ["shipmail_list_threads", "listThreads", "threads:read"], readonly ["shipmail_get_thread", "getThread", "threads:read"], readonly ["shipmail_reply_to_thread", "replyToThread", "messages:send"], readonly ["shipmail_create_reply_scan", "createReplyScan", "messages:write"], readonly ["shipmail_get_reply_scan", "getReplyScan", "messages:read"], readonly ["shipmail_list_reply_scan_results", "listReplyScanResults", "messages:read"], readonly ["shipmail_list_members", "listMembers", "members:read"], readonly ["shipmail_get_member", "getMember", "members:read"], readonly ["shipmail_create_webhook", "createWebhook", "webhooks:write"], readonly ["shipmail_list_webhooks", "listWebhooks", "webhooks:read"], readonly ["shipmail_get_webhook", "getWebhook", "webhooks:read"], readonly ["shipmail_update_webhook", "updateWebhook", "webhooks:write"], readonly ["shipmail_delete_webhook", "deleteWebhook", "webhooks:write"], readonly ["shipmail_rotate_webhook_secret", "rotateWebhookSecret", "webhooks:write"], readonly ["shipmail_test_webhook", "testWebhook", "webhooks:write"], readonly ["shipmail_list_webhook_deliveries", "listWebhookDeliveries", "webhooks:read"], readonly ["shipmail_get_webhook_delivery", "getWebhookDelivery", "webhooks:read"], readonly ["shipmail_replay_webhook_delivery", "replayWebhookDelivery", "webhooks:write"], readonly ["shipmail_list_suppressions", "listSuppressions", "suppressions:read"], readonly ["shipmail_remove_suppression", "removeSuppression", "suppressions:write"], readonly ["shipmail_create_audience", "createAudience", "audiences:write"], readonly ["shipmail_list_audiences", "listAudiences", "audiences:read"], readonly ["shipmail_get_audience", "getAudience", "audiences:read"], readonly ["shipmail_update_audience", "updateAudience", "audiences:write"], readonly ["shipmail_delete_audience", "deleteAudience", "audiences:write"], readonly ["shipmail_get_audience_feed", "getAudienceFeed", "audiences:read"], readonly ["shipmail_update_audience_feed", "updateAudienceFeed", "audiences:write"], readonly ["shipmail_rotate_audience_feed", "rotateAudienceFeedToken", "audiences:write"], readonly ["shipmail_revoke_audience_feed", "revokeAudienceFeedToken", "audiences:write"], readonly ["shipmail_add_subscriber", "addSubscriber", "audiences:write"], readonly ["shipmail_add_subscribers_batch", "addSubscribersBatch", "audiences:write"], readonly ["shipmail_list_subscribers", "listSubscribers", "audiences:read"], readonly ["shipmail_get_subscriber", "getSubscriber", "audiences:read"], readonly ["shipmail_get_subscriber_by_email", "getSubscriberByEmail", "audiences:read"], readonly ["shipmail_update_subscriber", "updateSubscriber", "audiences:write"], readonly ["shipmail_unsubscribe_subscriber", "unsubscribeSubscriber", "audiences:write"], readonly ["shipmail_resubscribe_subscriber", "resubscribeSubscriber", "audiences:write"], readonly ["shipmail_remove_subscriber", "removeSubscriber", "audiences:write"], readonly ["shipmail_list_newsletter_domains", "listNewsletterDomains", "newsletters:read"], readonly ["shipmail_list_newsletter_sender_identities", "listNewsletterSenderIdentities", "newsletters:read"], readonly ["shipmail_create_newsletter", "createNewsletter", "newsletters:write"], readonly ["shipmail_create_newsletter_from_changelog", "createNewsletterFromChangelog", "newsletters:write"], readonly ["shipmail_list_newsletters", "listNewsletters", "newsletters:read"], readonly ["shipmail_get_newsletter", "getNewsletter", "newsletters:read"], readonly ["shipmail_update_newsletter", "updateNewsletter", "newsletters:write"], readonly ["shipmail_list_newsletter_assets", "listNewsletterAssets", "newsletters:read"], readonly ["shipmail_upload_newsletter_asset_with_file", "prepareNewsletterAssetUpload", "newsletters:write"], readonly ["shipmail_prepare_newsletter_asset_upload", "prepareNewsletterAssetUpload", "newsletters:write"], readonly ["shipmail_register_newsletter_asset", "uploadNewsletterAsset", "newsletters:write"], readonly ["shipmail_preview_newsletter", "previewNewsletter", "newsletters:read"], readonly ["shipmail_run_newsletter_preflight", "runNewsletterPreflight", "newsletters:write"], readonly ["shipmail_send_newsletter_test", "sendNewsletterTest", "newsletters:write"], readonly ["shipmail_schedule_newsletter", "scheduleNewsletter", "newsletters:write"], readonly ["shipmail_cancel_newsletter", "cancelNewsletter", "newsletters:write"], readonly ["shipmail_resume_newsletter", "resumeNewsletter", "newsletters:write"], readonly ["shipmail_list_calendar_events", "listCalendarEvents", "calendar:read"], readonly ["shipmail_create_calendar_event", "createCalendarEvent", "calendar:write"], readonly ["shipmail_get_calendar_event", "getCalendarEvent", "calendar:read"], readonly ["shipmail_update_calendar_event", "updateCalendarEvent", "calendar:write"], readonly ["shipmail_delete_calendar_event", "deleteCalendarEvent", "calendar:write"], readonly ["shipmail_get_calendar_availability", "getCalendarAvailability", "calendar:read"], readonly ["shipmail_list_booking_pages", "listBookingPages", "booking_pages:read"], readonly ["shipmail_create_booking_page", "createBookingPage", "booking_pages:write"], readonly ["shipmail_get_booking_page", "getBookingPage", "booking_pages:read"], readonly ["shipmail_update_booking_page", "updateBookingPage", "booking_pages:write"], readonly ["shipmail_delete_booking_page", "deleteBookingPage", "booking_pages:write"]];
+declare const CAPABILITY_ROWS: readonly [readonly ["shipmail_status", "getStatus", "public"], readonly ["shipmail_get_organization_access", "getOrganizationAccess", "public"], readonly ["shipmail_list_automations", "listAutomations", "automations:read"], readonly ["shipmail_create_automation", "createAutomation", "automations:write"], readonly ["shipmail_get_automation", "getAutomation", "automations:read"], readonly ["shipmail_update_automation", "updateAutomation", "automations:write"], readonly ["shipmail_run_automation", "runAutomation", "automations:write"], readonly ["shipmail_create_domain", "createDomain", "domains:write"], readonly ["shipmail_list_domains", "listDomains", "domains:read"], readonly ["shipmail_get_domain", "getDomain", "domains:read"], readonly ["shipmail_get_domain_dns_records", "getDomainDnsRecords", "domains:read"], readonly ["shipmail_update_domain", "updateDomain", "domains:write"], readonly ["shipmail_delete_domain", "deleteDomain", "domains:write"], readonly ["shipmail_verify_domain", "verifyDomain", "domains:write"], readonly ["shipmail_search_domains", "searchDomains", "domains:read"], readonly ["shipmail_create_mailbox", "createMailbox", "mailboxes:write"], readonly ["shipmail_list_mailboxes", "listMailboxes", "mailboxes:read"], readonly ["shipmail_get_mailbox", "getMailbox", "mailboxes:read"], readonly ["shipmail_list_mailbox_app_passwords", "listMailboxAppPasswords", "mailbox_credentials:read"], readonly ["shipmail_create_mailbox_app_password", "createMailboxAppPassword", "mailbox_credentials:write"], readonly ["shipmail_revoke_mailbox_app_password", "revokeMailboxAppPassword", "mailbox_credentials:write"], readonly ["shipmail_suspend_mailbox", "suspendMailbox", "mailboxes:write"], readonly ["shipmail_resume_mailbox", "resumeMailbox", "mailboxes:write"], readonly ["shipmail_create_mailbox_export", "createMailboxExport", "mailboxes:export"], readonly ["shipmail_get_mailbox_export", "getMailboxExport", "mailboxes:export"], readonly ["shipmail_update_mailbox", "updateMailbox", "mailboxes:write"], readonly ["shipmail_delete_mailbox", "deleteMailbox", "mailboxes:write"], readonly ["shipmail_list_mailbox_folders", "listMailboxFolders", "mailboxes:read"], readonly ["shipmail_create_mailbox_folder", "createMailboxFolder", "messages:write"], readonly ["shipmail_update_mailbox_folder", "updateMailboxFolder", "messages:write"], readonly ["shipmail_delete_mailbox_folder", "deleteMailboxFolder", "messages:write"], readonly ["shipmail_list_mailbox_rules", "getMailboxRules", "mailbox_rules:read"], readonly ["shipmail_get_mailbox_rule", "getMailboxRules", "mailbox_rules:read"], readonly ["shipmail_create_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_update_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_delete_mailbox_rule", "updateMailboxRules", "mailbox_rules:write"], readonly ["shipmail_list_mailbox_identities", "listMailboxIdentities", "mailboxes:read"], readonly ["shipmail_list_mailbox_inbox_messages", "listMailboxInboxMessages", "messages:read"], readonly ["shipmail_get_mailbox_inbox_message", "getMailboxInboxMessage", "messages:read"], readonly ["shipmail_read_mailbox_inbox_attachment", "downloadMailboxInboxAttachment", "messages:read"], readonly ["shipmail_list_mailbox_inbox_threads", "listMailboxInboxThreads", "messages:read"], readonly ["shipmail_get_mailbox_inbox_thread", "getMailboxInboxThread", "messages:read"], readonly ["shipmail_update_inbox_thread_attention", "updateMailboxInboxThreadAttention", "messages:write"], readonly ["shipmail_create_draft", "createMailboxInboxDraft", "drafts:compose"], readonly ["shipmail_create_inbox_reply_draft", "createMailboxInboxReplyDraft", "drafts:write"], readonly ["shipmail_send_inbox_reply_draft", "sendMailboxInboxReplyDraft", "messages:send"], readonly ["shipmail_reply_to_inbox_message", "replyToMailboxInboxMessage", "messages:send"], readonly ["shipmail_reply_to_inbox_thread", "replyToMailboxInboxThread", "messages:send"], readonly ["shipmail_update_inbox_message", "updateMailboxInboxMessage", "messages:write"], readonly ["shipmail_move_inbox_message", "moveMailboxInboxMessage", "messages:write"], readonly ["shipmail_delete_inbox_message", "deleteMailboxInboxMessage", "messages:write"], readonly ["shipmail_list_mailbox_forwarding", "listMailboxForwarding", "mailbox_forwarding:read"], readonly ["shipmail_create_mailbox_forwarding", "createMailboxForwarding", "mailbox_forwarding:write"], readonly ["shipmail_delete_mailbox_forwarding", "deleteMailboxForwarding", "mailbox_forwarding:write"], readonly ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailbox_credentials:write"], readonly ["shipmail_set_auto_reply", "updateAutoReply", "mailboxes:write"], readonly ["shipmail_get_mailbox_delivery_routing", "getMailboxDeliveryRouting", "mailboxes:read"], readonly ["shipmail_update_mailbox_delivery_routing", "updateMailboxDeliveryRouting", "mailboxes:write"], readonly ["shipmail_create_mailbox_import", "createMailboxImport", "mailboxes:write"], readonly ["shipmail_list_mailbox_imports", "listMailboxImports", "mailboxes:read"], readonly ["shipmail_get_mailbox_import", "getMailboxImport", "mailboxes:read"], readonly ["shipmail_cancel_mailbox_import", "cancelMailboxImport", "mailboxes:write"], readonly ["shipmail_resume_mailbox_import", "resumeMailboxImport", "mailboxes:write"], readonly ["shipmail_restore_mailbox_import", "restoreMailboxImport", "mailboxes:write"], readonly ["shipmail_undo_mailbox_import", "undoMailboxImport", "mailboxes:write"], readonly ["shipmail_inject_sandbox_inbound", "injectSandboxInbound", "messages:write"], readonly ["shipmail_list_messages", "listMessages", "messages:read"], readonly ["shipmail_list_message_analytics", "listMessageAnalytics", "messages:read"], readonly ["shipmail_compose_message_with_file", "prepareStagedAttachmentUpload", "messages:send"], readonly ["shipmail_prepare_staged_attachment_upload", "prepareStagedAttachmentUpload", "messages:send"], readonly ["shipmail_send_message", "sendMessage", "messages:send"], readonly ["shipmail_list_scheduled_messages", "listScheduledMessages", "messages:read"], readonly ["shipmail_get_scheduled_message", "getScheduledMessage", "messages:read"], readonly ["shipmail_update_scheduled_message", "updateScheduledMessage", "messages:send"], readonly ["shipmail_cancel_scheduled_message", "cancelScheduledMessage", "messages:send"], readonly ["shipmail_get_message", "getMessage", "messages:read"], readonly ["shipmail_reply_to_message", "replyToMessage", "messages:send"], readonly ["shipmail_list_threads", "listThreads", "threads:read"], readonly ["shipmail_get_thread", "getThread", "threads:read"], readonly ["shipmail_reply_to_thread", "replyToThread", "messages:send"], readonly ["shipmail_create_reply_scan", "createReplyScan", "messages:write"], readonly ["shipmail_get_reply_scan", "getReplyScan", "messages:read"], readonly ["shipmail_list_reply_scan_results", "listReplyScanResults", "messages:read"], readonly ["shipmail_list_members", "listMembers", "members:read"], readonly ["shipmail_get_member", "getMember", "members:read"], readonly ["shipmail_create_webhook", "createWebhook", "webhooks:write"], readonly ["shipmail_list_webhooks", "listWebhooks", "webhooks:read"], readonly ["shipmail_get_webhook", "getWebhook", "webhooks:read"], readonly ["shipmail_update_webhook", "updateWebhook", "webhooks:write"], readonly ["shipmail_delete_webhook", "deleteWebhook", "webhooks:write"], readonly ["shipmail_rotate_webhook_secret", "rotateWebhookSecret", "webhooks:write"], readonly ["shipmail_test_webhook", "testWebhook", "webhooks:write"], readonly ["shipmail_list_webhook_deliveries", "listWebhookDeliveries", "webhooks:read"], readonly ["shipmail_get_webhook_delivery", "getWebhookDelivery", "webhooks:read"], readonly ["shipmail_replay_webhook_delivery", "replayWebhookDelivery", "webhooks:write"], readonly ["shipmail_list_suppressions", "listSuppressions", "suppressions:read"], readonly ["shipmail_remove_suppression", "removeSuppression", "suppressions:write"], readonly ["shipmail_create_audience", "createAudience", "audiences:write"], readonly ["shipmail_list_audiences", "listAudiences", "audiences:read"], readonly ["shipmail_get_audience", "getAudience", "audiences:read"], readonly ["shipmail_update_audience", "updateAudience", "audiences:write"], readonly ["shipmail_delete_audience", "deleteAudience", "audiences:write"], readonly ["shipmail_get_audience_feed", "getAudienceFeed", "audiences:read"], readonly ["shipmail_update_audience_feed", "updateAudienceFeed", "audiences:write"], readonly ["shipmail_rotate_audience_feed", "rotateAudienceFeedToken", "audiences:write"], readonly ["shipmail_revoke_audience_feed", "revokeAudienceFeedToken", "audiences:write"], readonly ["shipmail_add_subscriber", "addSubscriber", "audiences:write"], readonly ["shipmail_add_subscribers_batch", "addSubscribersBatch", "audiences:write"], readonly ["shipmail_list_subscribers", "listSubscribers", "audiences:read"], readonly ["shipmail_get_subscriber", "getSubscriber", "audiences:read"], readonly ["shipmail_get_subscriber_by_email", "getSubscriberByEmail", "audiences:read"], readonly ["shipmail_update_subscriber", "updateSubscriber", "audiences:write"], readonly ["shipmail_unsubscribe_subscriber", "unsubscribeSubscriber", "audiences:write"], readonly ["shipmail_resubscribe_subscriber", "resubscribeSubscriber", "audiences:write"], readonly ["shipmail_remove_subscriber", "removeSubscriber", "audiences:write"], readonly ["shipmail_list_newsletter_domains", "listNewsletterDomains", "newsletters:read"], readonly ["shipmail_list_newsletter_sender_identities", "listNewsletterSenderIdentities", "newsletters:read"], readonly ["shipmail_create_newsletter", "createNewsletter", "newsletters:write"], readonly ["shipmail_create_newsletter_from_changelog", "createNewsletterFromChangelog", "newsletters:write"], readonly ["shipmail_list_newsletters", "listNewsletters", "newsletters:read"], readonly ["shipmail_get_newsletter", "getNewsletter", "newsletters:read"], readonly ["shipmail_update_newsletter", "updateNewsletter", "newsletters:write"], readonly ["shipmail_list_newsletter_assets", "listNewsletterAssets", "newsletters:read"], readonly ["shipmail_upload_newsletter_asset_with_file", "prepareNewsletterAssetUpload", "newsletters:write"], readonly ["shipmail_prepare_newsletter_asset_upload", "prepareNewsletterAssetUpload", "newsletters:write"], readonly ["shipmail_register_newsletter_asset", "uploadNewsletterAsset", "newsletters:write"], readonly ["shipmail_preview_newsletter", "previewNewsletter", "newsletters:read"], readonly ["shipmail_run_newsletter_preflight", "runNewsletterPreflight", "newsletters:write"], readonly ["shipmail_send_newsletter_test", "sendNewsletterTest", "newsletters:write"], readonly ["shipmail_schedule_newsletter", "scheduleNewsletter", "newsletters:write"], readonly ["shipmail_cancel_newsletter", "cancelNewsletter", "newsletters:write"], readonly ["shipmail_resume_newsletter", "resumeNewsletter", "newsletters:write"], readonly ["shipmail_list_calendar_events", "listCalendarEvents", "calendar:read"], readonly ["shipmail_create_calendar_event", "createCalendarEvent", "calendar:write"], readonly ["shipmail_get_calendar_event", "getCalendarEvent", "calendar:read"], readonly ["shipmail_update_calendar_event", "updateCalendarEvent", "calendar:write"], readonly ["shipmail_delete_calendar_event", "deleteCalendarEvent", "calendar:write"], readonly ["shipmail_get_calendar_availability", "getCalendarAvailability", "calendar:read"], readonly ["shipmail_list_booking_pages", "listBookingPages", "booking_pages:read"], readonly ["shipmail_create_booking_page", "createBookingPage", "booking_pages:write"], readonly ["shipmail_get_booking_page", "getBookingPage", "booking_pages:read"], readonly ["shipmail_update_booking_page", "updateBookingPage", "booking_pages:write"], readonly ["shipmail_delete_booking_page", "deleteBookingPage", "booking_pages:write"]];
 type McpToolName = (typeof CAPABILITY_ROWS)[number][0];
 type McpCapability = {
     readonly toolName: McpToolName;

package/dist/capabilities.js

@@ -187,6 +187,7 @@ var MCP_PERMISSION_GROUPS = [
 ];
 var CAPABILITY_ROWS = [
   ["shipmail_status", "getStatus", "public"],
+  ["shipmail_get_organization_access", "getOrganizationAccess", "public"],
   ["shipmail_list_automations", "listAutomations", "automations:read"],
   ["shipmail_create_automation", "createAutomation", "automations:write"],
   ["shipmail_get_automation", "getAutomation", "automations:read"],
@@ -239,7 +240,7 @@ var CAPABILITY_ROWS = [
   ["shipmail_list_mailbox_forwarding", "listMailboxForwarding", "mailbox_forwarding:read"],
   ["shipmail_create_mailbox_forwarding", "createMailboxForwarding", "mailbox_forwarding:write"],
   ["shipmail_delete_mailbox_forwarding", "deleteMailboxForwarding", "mailbox_forwarding:write"],
-  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailboxes:write"],
+  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailbox_credentials:write"],
   ["shipmail_set_auto_reply", "updateAutoReply", "mailboxes:write"],
   ["shipmail_get_mailbox_delivery_routing", "getMailboxDeliveryRouting", "mailboxes:read"],
   ["shipmail_update_mailbox_delivery_routing", "updateMailboxDeliveryRouting", "mailboxes:write"],

package/dist/index.js

@@ -267,6 +267,7 @@ var MCP_PERMISSION_GROUPS = [
 ];
 var CAPABILITY_ROWS = [
   ["shipmail_status", "getStatus", "public"],
+  ["shipmail_get_organization_access", "getOrganizationAccess", "public"],
   ["shipmail_list_automations", "listAutomations", "automations:read"],
   ["shipmail_create_automation", "createAutomation", "automations:write"],
   ["shipmail_get_automation", "getAutomation", "automations:read"],
@@ -319,7 +320,7 @@ var CAPABILITY_ROWS = [
   ["shipmail_list_mailbox_forwarding", "listMailboxForwarding", "mailbox_forwarding:read"],
   ["shipmail_create_mailbox_forwarding", "createMailboxForwarding", "mailbox_forwarding:write"],
   ["shipmail_delete_mailbox_forwarding", "deleteMailboxForwarding", "mailbox_forwarding:write"],
-  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailboxes:write"],
+  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailbox_credentials:write"],
   ["shipmail_set_auto_reply", "updateAutoReply", "mailboxes:write"],
   ["shipmail_get_mailbox_delivery_routing", "getMailboxDeliveryRouting", "mailboxes:read"],
   ["shipmail_update_mailbox_delivery_routing", "updateMailboxDeliveryRouting", "mailboxes:write"],
@@ -754,12 +755,29 @@ function formatShipmailError(error) {
   if (error instanceof ReconciliationRequiredError && error.messageId) {
     parts.push(`message_id=${sanitizeString(error.messageId, 200)}`);
   }
+  const actionUrl = isSafeMessage ? safeActionUrl(error.actionUrl) : null;
+  if (actionUrl) {
+    if (error.reason) parts.push(`reason=${sanitizeString(error.reason, 64)}`);
+    parts.push(`action_url=${actionUrl}`);
+    parts.push("Send action_url to the organization owner; do not pay or choose a plan yourself.");
+  }
   if (isSafeMessage && error instanceof ValidationError && error.details?.length) {
     const fields = error.details.map((detail) => sanitizeString(detail.field, 100)).filter((field) => field.length > 0).slice(0, 25).join(", ");
     if (fields.length > 0) parts.push(`fields=${fields}`);
   }
   return parts.join(" | ");
 }
+function safeActionUrl(value) {
+  if (!value) return null;
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+  return sanitizeString(parsed.href, 500);
+}
 function safeMarkerStrip(message) {
   for (const marker of SAFE_MARKERS) {
     if (message.startsWith(marker)) {
@@ -968,7 +986,8 @@ var SYSTEM_FOLDER_NAMES = [
 ];
 var MAILBOX_RULE_MATCH_MODES = ["all", "any"];
 var MAILBOX_RULE_SYSTEM_TARGET_ROLES = ["inbox", "archive", "junk", "trash"];
-var MEMBER_ROLES = ["owner", "super_admin", "admin", "member"];
+var MEMBER_ROLES = ["owner", "admin", "member"];
+var MEMBER_MAILBOX_ACCESS_SCOPES = ["all", "selected"];
 var JMAP_KEYWORDS = ["$flagged", "$seen", "$draft", "$answered", "$forwarded"];
 var NEWSLETTER_STATUSES = [
   "draft",
@@ -1080,6 +1099,19 @@ var statusSchema = z.object({
   time: z.string(),
   request_id: z.string()
 });
+var organizationAccessSchema = z.object({
+  object: z.literal("organization_access"),
+  organization: z.object({ id: z.string(), name: z.string() }),
+  plan: z.enum(["free", "solo", "pro", "team", "scale"]),
+  has_access: z.boolean(),
+  trial: z.object({
+    active: z.boolean(),
+    ends_at: z.string().nullable(),
+    eligible: z.boolean()
+  }),
+  mailboxes: z.object({ limit: z.number().int(), used: z.number().int() }),
+  newsletters_allowed: z.boolean()
+});
 var registrationSchema = z.object({
   expires_at: z.string(),
   auto_renew: z.boolean(),
@@ -1556,6 +1588,7 @@ var mailboxForwardingSchema = z.object({
   mailbox_id: z.string(),
   destination: emailSchema,
   sender: emailSchema.nullable(),
+  recipient: emailSchema.nullable(),
   status: z.enum(["pending", "active"]),
   verification_sent_at: z.string().nullable(),
   verified_at: z.string().nullable(),
@@ -1767,12 +1800,22 @@ var webhookSchema = z.object({
   created_at: z.string(),
   updated_at: z.string()
 });
+var memberMailboxAccessSchema = z.object({
+  scope: z.enum(MEMBER_MAILBOX_ACCESS_SCOPES),
+  mailbox_ids: z.array(z.string()).describe(
+    'Mailbox IDs visible to this API credential. Empty when scope is "all"; for "selected", the list can be partial when the credential reaches only some granted mailboxes.'
+  )
+}).refine((access) => access.scope !== "all" || access.mailbox_ids.length === 0, {
+  message: 'mailbox_ids must be empty when scope is "all".',
+  path: ["mailbox_ids"]
+});
 var memberSchema = z.object({
   object: z.literal("member"),
   id: z.string(),
   email: z.string(),
   name: z.string(),
   role: z.enum(MEMBER_ROLES),
+  mailbox_access: memberMailboxAccessSchema,
   created_at: z.string()
 });
 var webhookWithSecretSchema = webhookSchema.extend({
@@ -1812,6 +1855,7 @@ var statusOutputSchema = z.object({
   // organization_id on other tools.
   organizations: z.array(z.object({ id: z.string(), name: z.string() })).optional()
 });
+var organizationAccessOutputSchema = z.object({ access: organizationAccessSchema });
 var domainOutputSchema = z.object({ domain: domainSchema });
 var domainDnsRecordsOutputSchema = z.object({ dns_records: domainDnsRecordSetSchema });
 var mailboxOutputSchema = z.object({ mailbox: mailboxSchema });
@@ -2167,6 +2211,7 @@ var createMailboxForwardingInputSchema = z.object({
   id: idSchema,
   destination: emailSchema,
   sender: emailSchema.nullable().optional(),
+  recipient: emailSchema.nullable().optional(),
   idempotency_key: idempotencyKeySchema
 });
 var deleteMailboxForwardingInputSchema = z.object({
@@ -2813,6 +2858,13 @@ var newsletterSchema = z.object({
   styling_mode: z.enum(NEWSLETTER_STYLING_MODES).describe(
     "styled applies Shipmail's email theme. plain sends your HTML without injected styles, width, or centering, so the reader's email client styles it."
   ),
+  track_engagement: z.boolean().describe("Whether this issue tracks opens and clicks."),
+  opened_count: z.number().int().nullable().describe(
+    "Unique recipients with at least one counted open, excluding Apple Mail Privacy Protection preloads. Null when track_engagement is false."
+  ),
+  clicked_count: z.number().int().nullable().describe(
+    "Unique recipients who clicked at least one tracked link, excluding link scanners. Null when track_engagement is false."
+  ),
   preflight_status: z.enum(NEWSLETTER_PREFLIGHT_STATUSES),
   preflight_results: z.record(z.string(), z.unknown()),
   send_window_hours: z.number().int(),
@@ -3086,6 +3138,9 @@ var newsletterDraftFieldsInputSchema = {
   ),
   styling_mode: z.enum(NEWSLETTER_STYLING_MODES).optional().describe(
     "styled applies Shipmail's email theme. plain sends your HTML without injected styles, width, or centering, so the reader's email client styles it."
+  ),
+  track_engagement: z.boolean().optional().describe(
+    "Track opens and clicks for this issue. Off by default; omit on update to keep the current value. Fails with validation_error when open and click tracking is not available. Changes only while the newsletter is an editable draft or a future scheduled newsletter."
   )
 };
 var createNewsletterInputSchema = z.object({
@@ -3156,9 +3211,10 @@ var updateNewsletterInputSchema = z.object({
   archive_visibility: newsletterDraftFieldsInputSchema.archive_visibility,
   feed_entry_url: newsletterDraftFieldsInputSchema.feed_entry_url,
   styling_mode: newsletterDraftFieldsInputSchema.styling_mode,
+  track_engagement: newsletterDraftFieldsInputSchema.track_engagement,
   idempotency_key: idempotencyKeySchema
 }).refine(
-  (value) => value.audience_id !== void 0 || value.sender_identity_id !== void 0 || value.name !== void 0 || value.subject !== void 0 || value.preview_text !== void 0 || value.body_html !== void 0 || value.body_text !== void 0 || value.blocks !== void 0 || value.send_window_hours !== void 0 || value.archive_visibility !== void 0 || value.feed_entry_url !== void 0 || value.styling_mode !== void 0,
+  (value) => value.audience_id !== void 0 || value.sender_identity_id !== void 0 || value.name !== void 0 || value.subject !== void 0 || value.preview_text !== void 0 || value.body_html !== void 0 || value.body_text !== void 0 || value.blocks !== void 0 || value.send_window_hours !== void 0 || value.archive_visibility !== void 0 || value.feed_entry_url !== void 0 || value.styling_mode !== void 0 || value.track_engagement !== void 0,
   {
     message: "Provide at least one newsletter field to update."
   }
@@ -3300,6 +3356,7 @@ var calendarInvitationLanguageSchema = z.enum(CALENDAR_INVITATION_LANGUAGES).des
 var calendarEventSchema = z.object({
   object: z.literal("calendar_event"),
   id: z.string(),
+  revision: z.string(),
   mailbox: z.string(),
   calendar_id: z.string().nullable(),
   uid: z.string().nullable(),
@@ -3325,6 +3382,14 @@ var calendarEventSchema = z.object({
   created_at: z.string().nullable(),
   updated_at: z.string().nullable()
 });
+var calendarInvitationOutcomeSchema = z.object({
+  recipient: z.string(),
+  status: z.enum(["sent", "failed", "unknown"])
+});
+var calendarEventMutationSchema = calendarEventSchema.extend({
+  invitation_outcomes: z.array(calendarInvitationOutcomeSchema),
+  invitation_failures: z.array(z.string())
+});
 var calendarAvailabilitySlotSchema = z.object({
   start: z.string(),
   end: z.string()
@@ -3551,6 +3616,7 @@ var bookingPageSchema = z.object({
   updated_at: z.string()
 });
 var calendarEventOutputSchema = z.object({ event: calendarEventSchema });
+var calendarEventMutationOutputSchema = z.object({ event: calendarEventMutationSchema });
 var calendarEventsOutputSchema = z.object({
   data: z.array(calendarEventSchema),
   pagination: paginationSchema
@@ -3578,6 +3644,8 @@ var attendeeInputSchema = z.object({
   name: noControlString(255, "attendee name").optional()
 });
 var mailboxAddressInputSchema = emailSchema.describe("The mailbox (calendar owner) address.");
+var calendarOperationKeySchema = z.string().min(16).max(200).regex(/^[A-Za-z0-9._:-]+$/).describe("Stable retry key for this exact calendar mutation payload.");
+var calendarRevisionSchema = z.string().regex(/^[a-f0-9]{64}$/).describe("Revision originally read before updating the event.");
 var listCalendarEventsInputSchema = paginationInputSchema.extend({
   mailbox: mailboxAddressInputSchema,
   from: utcInstantSchema.describe("Start of the time range (UTC instant)."),
@@ -3595,6 +3663,8 @@ var deleteCalendarEventInputSchema = z.object({
 });
 var createCalendarEventInputSchema = z.object({
   mailbox: mailboxAddressInputSchema,
+  operation_key: calendarOperationKeySchema.optional(),
+  send_invitations: z.boolean().default(true).describe("Send invitations to attendees (default true)."),
   calendar_id: calendarIdInputSchema.optional().describe("Target calendar. Defaults to the default calendar."),
   title: noControlString(1024, "title").min(1),
   invitation_language: calendarInvitationLanguageSchema.optional(),
@@ -3617,6 +3687,9 @@ var createCalendarEventInputSchema = z.object({
 var updateCalendarEventInputSchema = z.object({
   id: calendarEventIdInputSchema.describe("Calendar event ID."),
   mailbox: mailboxAddressInputSchema,
+  operation_key: calendarOperationKeySchema.optional(),
+  expected_revision: calendarRevisionSchema.optional(),
+  send_guest_updates: z.boolean().default(true).describe("Send scheduling updates to attendees (default true)."),
   title: noControlString(1024, "title").min(1).optional(),
   invitation_language: calendarInvitationLanguageSchema.optional(),
   description: noControlString(32768, "description").nullish(),
@@ -4188,6 +4261,10 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       var bridge = window.openai;
       var input = bridge && bridge.toolInput ? bridge.toolInput : {};
       var selectedFile = input.file || null;
+      // Once the send tool has been called, its outcome can be ambiguous to
+      // the card (for example, the host can lose the response after accepting
+      // the request). Keep this exact payload until it resolves.
+      var pendingSend = null;
       var submit = document.getElementById("submit");
       var change = document.getElementById("change");
       var status = document.getElementById("status");
@@ -4209,7 +4286,9 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       }
       function setBusy(busy) {
         submit.disabled = busy;
-        change.disabled = busy;
+        // A different file would turn an uncertain, already-accepted request
+        // into a new one. It stays unavailable until this request resolves.
+        change.disabled = busy || Boolean(pendingSend);
       }
       function readUrl(value) {
         if (typeof value === "string") return value;
@@ -4243,8 +4322,12 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       if (bridge && typeof bridge.selectFiles === "function") {
         change.hidden = false;
         change.addEventListener("click", async function () {
+          if (pendingSend) return;
           try {
             var files = await bridge.selectFiles();
+            // The picker may have opened before a send crossed its boundary.
+            // Do not let its late result replace the retained request.
+            if (pendingSend) return;
             if (files && files[0]) {
               selectedFile = files[0];
               text("file", fileName(selectedFile));
@@ -4268,6 +4351,15 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
 
         setBusy(true);
         try {
+          if (pendingSend) {
+            setStatus(input.scheduled_at ? "Checking the scheduled message..." : "Checking the message send...");
+            var retried = await bridge.callTool("shipmail_send_message", pendingSend);
+            if (hasToolError(retried)) throw new Error("send_failed");
+            setStatus(input.scheduled_at ? "Message scheduled." : "Message sent.", "success");
+            submit.hidden = true;
+            change.hidden = true;
+            return;
+          }
           setStatus("Downloading the selected file...");
           var fileId = selectedFile.file_id || selectedFile.fileId;
           var downloadUrl = selectedFile.download_url || selectedFile.downloadUrl || null;
@@ -4325,13 +4417,22 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
             idempotency_key: "mcp_app_" + crypto.randomUUID().replace(/-/g, "")
           });
           delete sendInput.file;
-          var sent = await bridge.callTool("shipmail_send_message", sendInput);
+          pendingSend = sendInput;
+          submit.textContent = input.scheduled_at ? "Check scheduled result" : "Check send result";
+          var sent = await bridge.callTool("shipmail_send_message", pendingSend);
           if (hasToolError(sent)) throw new Error("send_failed");
           setStatus(input.scheduled_at ? "Message scheduled." : "Message sent.", "success");
           submit.hidden = true;
           change.hidden = true;
         } catch (error) {
-          setStatus("The attachment could not be sent. No automatic retry was made.", "error");
+          setStatus(
+            pendingSend
+              ? input.scheduled_at
+                ? "The scheduling result is unknown. Check Scheduled Messages before retrying; retry uses the same request."
+                : "The send result is unknown. Check Sent before retrying; retry uses the same request."
+              : "The attachment could not be prepared for sending.",
+            "error"
+          );
         } finally {
           setBusy(false);
         }
@@ -5313,6 +5414,20 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       }))
     );
   });
+  registerIfAllowed("shipmail_get_organization_access", () => {
+    server.registerTool(
+      "shipmail_get_organization_access",
+      {
+        title: "Get Organization Access",
+        description: "Check whether the organization can create mailboxes now: plan, has_access, trial state and end, trial eligibility, mailbox limit and usage, and whether newsletters are allowed. Poll it after the owner opens the billing link: access appears once Shipmail has recorded the payment. Never choose or pay for a plan yourself.",
+        outputSchema: organizationAccessOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool("shipmail_get_organization_access", organizationAccessOutputSchema, async () => ({
+        access: await client.organization.access()
+      }))
+    );
+  });
   registerIfAllowed("shipmail_list_domains", () => {
     server.registerTool(
       "shipmail_list_domains",
@@ -5350,7 +5465,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_get_domain_dns_records",
       {
         title: "Get Domain DNS Records",
-        description: "Return all six DNS records required by Shipmail and live observed values for propagation diagnostics. This does not update domain state.",
+        description: "Return the DNS records Shipmail requires for this domain and live observed values for propagation diagnostics. A connected domain needs four: MX, SPF, DKIM and DMARC. A domain bought through Shipmail also lists two mail-subdomain records, which Shipmail adds itself. This does not update domain state.",
         inputSchema: getByIdInputSchema,
         outputSchema: domainDnsRecordsOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: true }
@@ -6530,7 +6645,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_mailbox_forwarding",
       {
         title: "Add Mailbox Forwarding",
-        description: "Send a confirmation email to a forwarding destination. Delivery begins after recipient confirmation, keeps a local copy, and excludes spam.",
+        description: "Send a confirmation email to a forwarding destination. Optionally filter by exact From address, delivery recipient, or both. Delivery begins after confirmation, keeps a local copy, and excludes spam.",
         inputSchema: createMailboxForwardingInputSchema,
         outputSchema: mailboxForwardingOutputSchema,
         annotations: {
@@ -6543,7 +6658,11 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       async (args) => runTool("shipmail_create_mailbox_forwarding", mailboxForwardingOutputSchema, async () => ({
         forwarding: await client.mailboxes.createForwarding(
           args.id,
-          { destination: args.destination, sender: args.sender ?? null },
+          {
+            destination: args.destination,
+            sender: args.sender ?? null,
+            recipient: args.recipient ?? null
+          },
           mutationOptions(args)
         )
       }))
@@ -7081,7 +7200,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_list_members",
       {
         title: "List Members",
-        description: "List organization members.",
+        description: "List organization members and their mailbox access. Selected mailbox IDs are limited to mailboxes visible to this API credential and may be partial.",
         inputSchema: listMembersInputSchema,
         outputSchema: membersOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: false }
@@ -7098,7 +7217,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_get_member",
       {
         title: "Get Member",
-        description: "Fetch an organization member by ID.",
+        description: "Fetch an organization member and their mailbox access by ID. Selected mailbox IDs are limited to mailboxes visible to this API credential and may be partial.",
         inputSchema: getByIdInputSchema,
         outputSchema: memberOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: false }
@@ -7580,7 +7699,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_newsletter",
       {
         title: "Create Newsletter",
-        description: "Create a newsletter draft for an audience and sender identity. Shipmail renders blocks to email-safe HTML and text. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering.",
+        description: "Create a newsletter draft for an audience and sender identity. Shipmail renders blocks to email-safe HTML and text. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering. track_engagement turns on open and click tracking for this issue; it is off by default.",
         inputSchema: createNewsletterInputSchema,
         outputSchema: newsletterOutputSchema,
         annotations: {
@@ -7626,7 +7745,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_update_newsletter",
       {
         title: "Update Newsletter",
-        description: "Update an editable newsletter draft or future scheduled newsletter. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. body_text alone updates the plain-text override when blocks exist. Sending and sent newsletters cannot be edited. Concurrent saves return conflict (409). styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering.",
+        description: "Update an editable newsletter draft or future scheduled newsletter. Changing message content, presentation, or audience returns a scheduled newsletter to draft and clears scheduled_at; inspect the returned status, send a new test, and schedule again. Name, feed link, and send-window changes can keep the schedule. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. body_text alone updates the plain-text override when blocks exist. Sending and sent newsletters cannot be edited. Concurrent saves return conflict (409). styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering. track_engagement turns open and click tracking on or off for this issue.",
         inputSchema: updateNewsletterInputSchema,
         outputSchema: newsletterOutputSchema,
         annotations: {
@@ -7653,7 +7772,8 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
               ...rest.send_window_hours !== void 0 ? { send_window_hours: rest.send_window_hours } : {},
               ...rest.archive_visibility !== void 0 ? { archive_visibility: rest.archive_visibility } : {},
               ...rest.feed_entry_url !== void 0 ? { feed_entry_url: rest.feed_entry_url } : {},
-              ...rest.styling_mode !== void 0 ? { styling_mode: rest.styling_mode } : {}
+              ...rest.styling_mode !== void 0 ? { styling_mode: rest.styling_mode } : {},
+              ...rest.track_engagement !== void 0 ? { track_engagement: rest.track_engagement } : {}
             },
             mutationOptions(args)
           )
@@ -8183,9 +8303,9 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_calendar_event",
       {
         title: "Create Calendar Event",
-        description: "Create a calendar event on a mailbox's calendar. start is a local date-time; its zone is given by timezone.",
+        description: "Create a calendar event on a mailbox's calendar. start is a local date-time; its zone is given by timezone. Reuse operation_key only when retrying the exact same payload.",
         inputSchema: createCalendarEventInputSchema,
-        outputSchema: calendarEventOutputSchema,
+        outputSchema: calendarEventMutationOutputSchema,
         annotations: {
           readOnlyHint: false,
           destructiveHint: false,
@@ -8193,7 +8313,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_create_calendar_event", calendarEventOutputSchema, async () => ({
+      async (args) => runTool("shipmail_create_calendar_event", calendarEventMutationOutputSchema, async () => ({
         event: await client.calendar.events.create(
           stripIdempotencyKey(args),
           mutationOptions(args)
@@ -8206,9 +8326,9 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_update_calendar_event",
       {
         title: "Update Calendar Event",
-        description: "Update a calendar event. Omitted fields are unchanged; send null to clear description, timezone, location, video_url, recurrence, or reminders.",
+        description: "Update a calendar event. Omitted fields are unchanged; send null to clear description, timezone, location, video_url, recurrence, or reminders. Use expected_revision from a prior read and reuse operation_key only for an exact-payload retry.",
         inputSchema: updateCalendarEventInputSchema,
-        outputSchema: calendarEventOutputSchema,
+        outputSchema: calendarEventMutationOutputSchema,
         annotations: {
           readOnlyHint: false,
           destructiveHint: false,
@@ -8216,7 +8336,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_update_calendar_event", calendarEventOutputSchema, async () => {
+      async (args) => runTool("shipmail_update_calendar_event", calendarEventMutationOutputSchema, async () => {
         const { id, idempotency_key: _key, ...params } = args;
         return { event: await client.calendar.events.update(id, params, mutationOptions(args)) };
       })
@@ -8468,7 +8588,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
 }
 
 // src/version.ts
-var VERSION = "0.9.1";
+var VERSION = "0.9.3";
 
 // src/server.ts
 var SHIPMAIL_MCP_INSTRUCTIONS = `Shipmail MCP exposes the business email and calendar tools authorized by the connection's current Shipmail permissions.

package/dist/server.js

@@ -173,6 +173,7 @@ var MCP_PERMISSION_GROUPS = [
 ];
 var CAPABILITY_ROWS = [
   ["shipmail_status", "getStatus", "public"],
+  ["shipmail_get_organization_access", "getOrganizationAccess", "public"],
   ["shipmail_list_automations", "listAutomations", "automations:read"],
   ["shipmail_create_automation", "createAutomation", "automations:write"],
   ["shipmail_get_automation", "getAutomation", "automations:read"],
@@ -225,7 +226,7 @@ var CAPABILITY_ROWS = [
   ["shipmail_list_mailbox_forwarding", "listMailboxForwarding", "mailbox_forwarding:read"],
   ["shipmail_create_mailbox_forwarding", "createMailboxForwarding", "mailbox_forwarding:write"],
   ["shipmail_delete_mailbox_forwarding", "deleteMailboxForwarding", "mailbox_forwarding:write"],
-  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailboxes:write"],
+  ["shipmail_reset_mailbox_password", "resetMailboxPassword", "mailbox_credentials:write"],
   ["shipmail_set_auto_reply", "updateAutoReply", "mailboxes:write"],
   ["shipmail_get_mailbox_delivery_routing", "getMailboxDeliveryRouting", "mailboxes:read"],
   ["shipmail_update_mailbox_delivery_routing", "updateMailboxDeliveryRouting", "mailboxes:write"],
@@ -660,12 +661,29 @@ function formatShipmailError(error) {
   if (error instanceof ReconciliationRequiredError && error.messageId) {
     parts.push(`message_id=${sanitizeString(error.messageId, 200)}`);
   }
+  const actionUrl = isSafeMessage ? safeActionUrl(error.actionUrl) : null;
+  if (actionUrl) {
+    if (error.reason) parts.push(`reason=${sanitizeString(error.reason, 64)}`);
+    parts.push(`action_url=${actionUrl}`);
+    parts.push("Send action_url to the organization owner; do not pay or choose a plan yourself.");
+  }
   if (isSafeMessage && error instanceof ValidationError && error.details?.length) {
     const fields = error.details.map((detail) => sanitizeString(detail.field, 100)).filter((field) => field.length > 0).slice(0, 25).join(", ");
     if (fields.length > 0) parts.push(`fields=${fields}`);
   }
   return parts.join(" | ");
 }
+function safeActionUrl(value) {
+  if (!value) return null;
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+  return sanitizeString(parsed.href, 500);
+}
 function safeMarkerStrip(message) {
   for (const marker of SAFE_MARKERS) {
     if (message.startsWith(marker)) {
@@ -874,7 +892,8 @@ var SYSTEM_FOLDER_NAMES = [
 ];
 var MAILBOX_RULE_MATCH_MODES = ["all", "any"];
 var MAILBOX_RULE_SYSTEM_TARGET_ROLES = ["inbox", "archive", "junk", "trash"];
-var MEMBER_ROLES = ["owner", "super_admin", "admin", "member"];
+var MEMBER_ROLES = ["owner", "admin", "member"];
+var MEMBER_MAILBOX_ACCESS_SCOPES = ["all", "selected"];
 var JMAP_KEYWORDS = ["$flagged", "$seen", "$draft", "$answered", "$forwarded"];
 var NEWSLETTER_STATUSES = [
   "draft",
@@ -986,6 +1005,19 @@ var statusSchema = z.object({
   time: z.string(),
   request_id: z.string()
 });
+var organizationAccessSchema = z.object({
+  object: z.literal("organization_access"),
+  organization: z.object({ id: z.string(), name: z.string() }),
+  plan: z.enum(["free", "solo", "pro", "team", "scale"]),
+  has_access: z.boolean(),
+  trial: z.object({
+    active: z.boolean(),
+    ends_at: z.string().nullable(),
+    eligible: z.boolean()
+  }),
+  mailboxes: z.object({ limit: z.number().int(), used: z.number().int() }),
+  newsletters_allowed: z.boolean()
+});
 var registrationSchema = z.object({
   expires_at: z.string(),
   auto_renew: z.boolean(),
@@ -1462,6 +1494,7 @@ var mailboxForwardingSchema = z.object({
   mailbox_id: z.string(),
   destination: emailSchema,
   sender: emailSchema.nullable(),
+  recipient: emailSchema.nullable(),
   status: z.enum(["pending", "active"]),
   verification_sent_at: z.string().nullable(),
   verified_at: z.string().nullable(),
@@ -1673,12 +1706,22 @@ var webhookSchema = z.object({
   created_at: z.string(),
   updated_at: z.string()
 });
+var memberMailboxAccessSchema = z.object({
+  scope: z.enum(MEMBER_MAILBOX_ACCESS_SCOPES),
+  mailbox_ids: z.array(z.string()).describe(
+    'Mailbox IDs visible to this API credential. Empty when scope is "all"; for "selected", the list can be partial when the credential reaches only some granted mailboxes.'
+  )
+}).refine((access) => access.scope !== "all" || access.mailbox_ids.length === 0, {
+  message: 'mailbox_ids must be empty when scope is "all".',
+  path: ["mailbox_ids"]
+});
 var memberSchema = z.object({
   object: z.literal("member"),
   id: z.string(),
   email: z.string(),
   name: z.string(),
   role: z.enum(MEMBER_ROLES),
+  mailbox_access: memberMailboxAccessSchema,
   created_at: z.string()
 });
 var webhookWithSecretSchema = webhookSchema.extend({
@@ -1718,6 +1761,7 @@ var statusOutputSchema = z.object({
   // organization_id on other tools.
   organizations: z.array(z.object({ id: z.string(), name: z.string() })).optional()
 });
+var organizationAccessOutputSchema = z.object({ access: organizationAccessSchema });
 var domainOutputSchema = z.object({ domain: domainSchema });
 var domainDnsRecordsOutputSchema = z.object({ dns_records: domainDnsRecordSetSchema });
 var mailboxOutputSchema = z.object({ mailbox: mailboxSchema });
@@ -2073,6 +2117,7 @@ var createMailboxForwardingInputSchema = z.object({
   id: idSchema,
   destination: emailSchema,
   sender: emailSchema.nullable().optional(),
+  recipient: emailSchema.nullable().optional(),
   idempotency_key: idempotencyKeySchema
 });
 var deleteMailboxForwardingInputSchema = z.object({
@@ -2719,6 +2764,13 @@ var newsletterSchema = z.object({
   styling_mode: z.enum(NEWSLETTER_STYLING_MODES).describe(
     "styled applies Shipmail's email theme. plain sends your HTML without injected styles, width, or centering, so the reader's email client styles it."
   ),
+  track_engagement: z.boolean().describe("Whether this issue tracks opens and clicks."),
+  opened_count: z.number().int().nullable().describe(
+    "Unique recipients with at least one counted open, excluding Apple Mail Privacy Protection preloads. Null when track_engagement is false."
+  ),
+  clicked_count: z.number().int().nullable().describe(
+    "Unique recipients who clicked at least one tracked link, excluding link scanners. Null when track_engagement is false."
+  ),
   preflight_status: z.enum(NEWSLETTER_PREFLIGHT_STATUSES),
   preflight_results: z.record(z.string(), z.unknown()),
   send_window_hours: z.number().int(),
@@ -2992,6 +3044,9 @@ var newsletterDraftFieldsInputSchema = {
   ),
   styling_mode: z.enum(NEWSLETTER_STYLING_MODES).optional().describe(
     "styled applies Shipmail's email theme. plain sends your HTML without injected styles, width, or centering, so the reader's email client styles it."
+  ),
+  track_engagement: z.boolean().optional().describe(
+    "Track opens and clicks for this issue. Off by default; omit on update to keep the current value. Fails with validation_error when open and click tracking is not available. Changes only while the newsletter is an editable draft or a future scheduled newsletter."
   )
 };
 var createNewsletterInputSchema = z.object({
@@ -3062,9 +3117,10 @@ var updateNewsletterInputSchema = z.object({
   archive_visibility: newsletterDraftFieldsInputSchema.archive_visibility,
   feed_entry_url: newsletterDraftFieldsInputSchema.feed_entry_url,
   styling_mode: newsletterDraftFieldsInputSchema.styling_mode,
+  track_engagement: newsletterDraftFieldsInputSchema.track_engagement,
   idempotency_key: idempotencyKeySchema
 }).refine(
-  (value) => value.audience_id !== void 0 || value.sender_identity_id !== void 0 || value.name !== void 0 || value.subject !== void 0 || value.preview_text !== void 0 || value.body_html !== void 0 || value.body_text !== void 0 || value.blocks !== void 0 || value.send_window_hours !== void 0 || value.archive_visibility !== void 0 || value.feed_entry_url !== void 0 || value.styling_mode !== void 0,
+  (value) => value.audience_id !== void 0 || value.sender_identity_id !== void 0 || value.name !== void 0 || value.subject !== void 0 || value.preview_text !== void 0 || value.body_html !== void 0 || value.body_text !== void 0 || value.blocks !== void 0 || value.send_window_hours !== void 0 || value.archive_visibility !== void 0 || value.feed_entry_url !== void 0 || value.styling_mode !== void 0 || value.track_engagement !== void 0,
   {
     message: "Provide at least one newsletter field to update."
   }
@@ -3206,6 +3262,7 @@ var calendarInvitationLanguageSchema = z.enum(CALENDAR_INVITATION_LANGUAGES).des
 var calendarEventSchema = z.object({
   object: z.literal("calendar_event"),
   id: z.string(),
+  revision: z.string(),
   mailbox: z.string(),
   calendar_id: z.string().nullable(),
   uid: z.string().nullable(),
@@ -3231,6 +3288,14 @@ var calendarEventSchema = z.object({
   created_at: z.string().nullable(),
   updated_at: z.string().nullable()
 });
+var calendarInvitationOutcomeSchema = z.object({
+  recipient: z.string(),
+  status: z.enum(["sent", "failed", "unknown"])
+});
+var calendarEventMutationSchema = calendarEventSchema.extend({
+  invitation_outcomes: z.array(calendarInvitationOutcomeSchema),
+  invitation_failures: z.array(z.string())
+});
 var calendarAvailabilitySlotSchema = z.object({
   start: z.string(),
   end: z.string()
@@ -3457,6 +3522,7 @@ var bookingPageSchema = z.object({
   updated_at: z.string()
 });
 var calendarEventOutputSchema = z.object({ event: calendarEventSchema });
+var calendarEventMutationOutputSchema = z.object({ event: calendarEventMutationSchema });
 var calendarEventsOutputSchema = z.object({
   data: z.array(calendarEventSchema),
   pagination: paginationSchema
@@ -3484,6 +3550,8 @@ var attendeeInputSchema = z.object({
   name: noControlString(255, "attendee name").optional()
 });
 var mailboxAddressInputSchema = emailSchema.describe("The mailbox (calendar owner) address.");
+var calendarOperationKeySchema = z.string().min(16).max(200).regex(/^[A-Za-z0-9._:-]+$/).describe("Stable retry key for this exact calendar mutation payload.");
+var calendarRevisionSchema = z.string().regex(/^[a-f0-9]{64}$/).describe("Revision originally read before updating the event.");
 var listCalendarEventsInputSchema = paginationInputSchema.extend({
   mailbox: mailboxAddressInputSchema,
   from: utcInstantSchema.describe("Start of the time range (UTC instant)."),
@@ -3501,6 +3569,8 @@ var deleteCalendarEventInputSchema = z.object({
 });
 var createCalendarEventInputSchema = z.object({
   mailbox: mailboxAddressInputSchema,
+  operation_key: calendarOperationKeySchema.optional(),
+  send_invitations: z.boolean().default(true).describe("Send invitations to attendees (default true)."),
   calendar_id: calendarIdInputSchema.optional().describe("Target calendar. Defaults to the default calendar."),
   title: noControlString(1024, "title").min(1),
   invitation_language: calendarInvitationLanguageSchema.optional(),
@@ -3523,6 +3593,9 @@ var createCalendarEventInputSchema = z.object({
 var updateCalendarEventInputSchema = z.object({
   id: calendarEventIdInputSchema.describe("Calendar event ID."),
   mailbox: mailboxAddressInputSchema,
+  operation_key: calendarOperationKeySchema.optional(),
+  expected_revision: calendarRevisionSchema.optional(),
+  send_guest_updates: z.boolean().default(true).describe("Send scheduling updates to attendees (default true)."),
   title: noControlString(1024, "title").min(1).optional(),
   invitation_language: calendarInvitationLanguageSchema.optional(),
   description: noControlString(32768, "description").nullish(),
@@ -4094,6 +4167,10 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       var bridge = window.openai;
       var input = bridge && bridge.toolInput ? bridge.toolInput : {};
       var selectedFile = input.file || null;
+      // Once the send tool has been called, its outcome can be ambiguous to
+      // the card (for example, the host can lose the response after accepting
+      // the request). Keep this exact payload until it resolves.
+      var pendingSend = null;
       var submit = document.getElementById("submit");
       var change = document.getElementById("change");
       var status = document.getElementById("status");
@@ -4115,7 +4192,9 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       }
       function setBusy(busy) {
         submit.disabled = busy;
-        change.disabled = busy;
+        // A different file would turn an uncertain, already-accepted request
+        // into a new one. It stays unavailable until this request resolves.
+        change.disabled = busy || Boolean(pendingSend);
       }
       function readUrl(value) {
         if (typeof value === "string") return value;
@@ -4149,8 +4228,12 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
       if (bridge && typeof bridge.selectFiles === "function") {
         change.hidden = false;
         change.addEventListener("click", async function () {
+          if (pendingSend) return;
           try {
             var files = await bridge.selectFiles();
+            // The picker may have opened before a send crossed its boundary.
+            // Do not let its late result replace the retained request.
+            if (pendingSend) return;
             if (files && files[0]) {
               selectedFile = files[0];
               text("file", fileName(selectedFile));
@@ -4174,6 +4257,15 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
 
         setBusy(true);
         try {
+          if (pendingSend) {
+            setStatus(input.scheduled_at ? "Checking the scheduled message..." : "Checking the message send...");
+            var retried = await bridge.callTool("shipmail_send_message", pendingSend);
+            if (hasToolError(retried)) throw new Error("send_failed");
+            setStatus(input.scheduled_at ? "Message scheduled." : "Message sent.", "success");
+            submit.hidden = true;
+            change.hidden = true;
+            return;
+          }
           setStatus("Downloading the selected file...");
           var fileId = selectedFile.file_id || selectedFile.fileId;
           var downloadUrl = selectedFile.download_url || selectedFile.downloadUrl || null;
@@ -4231,13 +4323,22 @@ var ATTACHMENT_COMPOSER_HTML = String.raw`<!doctype html>
             idempotency_key: "mcp_app_" + crypto.randomUUID().replace(/-/g, "")
           });
           delete sendInput.file;
-          var sent = await bridge.callTool("shipmail_send_message", sendInput);
+          pendingSend = sendInput;
+          submit.textContent = input.scheduled_at ? "Check scheduled result" : "Check send result";
+          var sent = await bridge.callTool("shipmail_send_message", pendingSend);
           if (hasToolError(sent)) throw new Error("send_failed");
           setStatus(input.scheduled_at ? "Message scheduled." : "Message sent.", "success");
           submit.hidden = true;
           change.hidden = true;
         } catch (error) {
-          setStatus("The attachment could not be sent. No automatic retry was made.", "error");
+          setStatus(
+            pendingSend
+              ? input.scheduled_at
+                ? "The scheduling result is unknown. Check Scheduled Messages before retrying; retry uses the same request."
+                : "The send result is unknown. Check Sent before retrying; retry uses the same request."
+              : "The attachment could not be prepared for sending.",
+            "error"
+          );
         } finally {
           setBusy(false);
         }
@@ -5226,6 +5327,20 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       }))
     );
   });
+  registerIfAllowed("shipmail_get_organization_access", () => {
+    server.registerTool(
+      "shipmail_get_organization_access",
+      {
+        title: "Get Organization Access",
+        description: "Check whether the organization can create mailboxes now: plan, has_access, trial state and end, trial eligibility, mailbox limit and usage, and whether newsletters are allowed. Poll it after the owner opens the billing link: access appears once Shipmail has recorded the payment. Never choose or pay for a plan yourself.",
+        outputSchema: organizationAccessOutputSchema,
+        annotations: { readOnlyHint: true, openWorldHint: false }
+      },
+      async () => runTool("shipmail_get_organization_access", organizationAccessOutputSchema, async () => ({
+        access: await client.organization.access()
+      }))
+    );
+  });
   registerIfAllowed("shipmail_list_domains", () => {
     server.registerTool(
       "shipmail_list_domains",
@@ -5263,7 +5378,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_get_domain_dns_records",
       {
         title: "Get Domain DNS Records",
-        description: "Return all six DNS records required by Shipmail and live observed values for propagation diagnostics. This does not update domain state.",
+        description: "Return the DNS records Shipmail requires for this domain and live observed values for propagation diagnostics. A connected domain needs four: MX, SPF, DKIM and DMARC. A domain bought through Shipmail also lists two mail-subdomain records, which Shipmail adds itself. This does not update domain state.",
         inputSchema: getByIdInputSchema,
         outputSchema: domainDnsRecordsOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: true }
@@ -6443,7 +6558,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_mailbox_forwarding",
       {
         title: "Add Mailbox Forwarding",
-        description: "Send a confirmation email to a forwarding destination. Delivery begins after recipient confirmation, keeps a local copy, and excludes spam.",
+        description: "Send a confirmation email to a forwarding destination. Optionally filter by exact From address, delivery recipient, or both. Delivery begins after confirmation, keeps a local copy, and excludes spam.",
         inputSchema: createMailboxForwardingInputSchema,
         outputSchema: mailboxForwardingOutputSchema,
         annotations: {
@@ -6456,7 +6571,11 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       async (args) => runTool("shipmail_create_mailbox_forwarding", mailboxForwardingOutputSchema, async () => ({
         forwarding: await client.mailboxes.createForwarding(
           args.id,
-          { destination: args.destination, sender: args.sender ?? null },
+          {
+            destination: args.destination,
+            sender: args.sender ?? null,
+            recipient: args.recipient ?? null
+          },
           mutationOptions(args)
         )
       }))
@@ -6994,7 +7113,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_list_members",
       {
         title: "List Members",
-        description: "List organization members.",
+        description: "List organization members and their mailbox access. Selected mailbox IDs are limited to mailboxes visible to this API credential and may be partial.",
         inputSchema: listMembersInputSchema,
         outputSchema: membersOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: false }
@@ -7011,7 +7130,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_get_member",
       {
         title: "Get Member",
-        description: "Fetch an organization member by ID.",
+        description: "Fetch an organization member and their mailbox access by ID. Selected mailbox IDs are limited to mailboxes visible to this API credential and may be partial.",
         inputSchema: getByIdInputSchema,
         outputSchema: memberOutputSchema,
         annotations: { readOnlyHint: true, openWorldHint: false }
@@ -7493,7 +7612,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_newsletter",
       {
         title: "Create Newsletter",
-        description: "Create a newsletter draft for an audience and sender identity. Shipmail renders blocks to email-safe HTML and text. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering.",
+        description: "Create a newsletter draft for an audience and sender identity. Shipmail renders blocks to email-safe HTML and text. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering. track_engagement turns on open and click tracking for this issue; it is off by default.",
         inputSchema: createNewsletterInputSchema,
         outputSchema: newsletterOutputSchema,
         annotations: {
@@ -7539,7 +7658,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_update_newsletter",
       {
         title: "Update Newsletter",
-        description: "Update an editable newsletter draft or future scheduled newsletter. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. body_text alone updates the plain-text override when blocks exist. Sending and sent newsletters cannot be edited. Concurrent saves return conflict (409). styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering.",
+        description: "Update an editable newsletter draft or future scheduled newsletter. Changing message content, presentation, or audience returns a scheduled newsletter to draft and clears scheduled_at; inspect the returned status, send a new test, and schedule again. Name, feed link, and send-window changes can keep the schedule. Paragraph, quote, callout, list-item, and column bodies accept text or sanitized inline HTML. body_text alone updates the plain-text override when blocks exist. Sending and sent newsletters cannot be edited. Concurrent saves return conflict (409). styled applies Shipmail's email theme. plain preserves HTML without injected styles, width, or centering. track_engagement turns open and click tracking on or off for this issue.",
         inputSchema: updateNewsletterInputSchema,
         outputSchema: newsletterOutputSchema,
         annotations: {
@@ -7566,7 +7685,8 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
               ...rest.send_window_hours !== void 0 ? { send_window_hours: rest.send_window_hours } : {},
               ...rest.archive_visibility !== void 0 ? { archive_visibility: rest.archive_visibility } : {},
               ...rest.feed_entry_url !== void 0 ? { feed_entry_url: rest.feed_entry_url } : {},
-              ...rest.styling_mode !== void 0 ? { styling_mode: rest.styling_mode } : {}
+              ...rest.styling_mode !== void 0 ? { styling_mode: rest.styling_mode } : {},
+              ...rest.track_engagement !== void 0 ? { track_engagement: rest.track_engagement } : {}
             },
             mutationOptions(args)
           )
@@ -8096,9 +8216,9 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_create_calendar_event",
       {
         title: "Create Calendar Event",
-        description: "Create a calendar event on a mailbox's calendar. start is a local date-time; its zone is given by timezone.",
+        description: "Create a calendar event on a mailbox's calendar. start is a local date-time; its zone is given by timezone. Reuse operation_key only when retrying the exact same payload.",
         inputSchema: createCalendarEventInputSchema,
-        outputSchema: calendarEventOutputSchema,
+        outputSchema: calendarEventMutationOutputSchema,
         annotations: {
           readOnlyHint: false,
           destructiveHint: false,
@@ -8106,7 +8226,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_create_calendar_event", calendarEventOutputSchema, async () => ({
+      async (args) => runTool("shipmail_create_calendar_event", calendarEventMutationOutputSchema, async () => ({
         event: await client.calendar.events.create(
           stripIdempotencyKey(args),
           mutationOptions(args)
@@ -8119,9 +8239,9 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
       "shipmail_update_calendar_event",
       {
         title: "Update Calendar Event",
-        description: "Update a calendar event. Omitted fields are unchanged; send null to clear description, timezone, location, video_url, recurrence, or reminders.",
+        description: "Update a calendar event. Omitted fields are unchanged; send null to clear description, timezone, location, video_url, recurrence, or reminders. Use expected_revision from a prior read and reuse operation_key only for an exact-payload retry.",
         inputSchema: updateCalendarEventInputSchema,
-        outputSchema: calendarEventOutputSchema,
+        outputSchema: calendarEventMutationOutputSchema,
         annotations: {
           readOnlyHint: false,
           destructiveHint: false,
@@ -8129,7 +8249,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
           openWorldHint: false
         }
       },
-      async (args) => runTool("shipmail_update_calendar_event", calendarEventOutputSchema, async () => {
+      async (args) => runTool("shipmail_update_calendar_event", calendarEventMutationOutputSchema, async () => {
         const { id, idempotency_key: _key, ...params } = args;
         return { event: await client.calendar.events.update(id, params, mutationOptions(args)) };
       })
@@ -8381,7 +8501,7 @@ function registerTools(rawServer, client, allowedTools, grantedOrganizations = [
 }
 
 // src/version.ts
-var VERSION = "0.9.1";
+var VERSION = "0.9.3";
 
 // src/server.ts
 var SHIPMAIL_MCP_INSTRUCTIONS = `Shipmail MCP exposes the business email and calendar tools authorized by the connection's current Shipmail permissions.

package/distribution/shipmail/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "displayName": "Shipmail",
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/distribution/shipmail/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/distribution/shipmail/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Modern email for your business. Inboxes, calendars, newsletters, bookings, an AI assistant, and an API for your agents. Everything on your own domain, in one subscription.",
   "author": {
     "name": "Shipmail",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail-mcp",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "mcpName": "io.github.shipmail-to/shipmail-mcp",
   "description": "Official Model Context Protocol (MCP) server for Shipmail, a business email provider with REST API, webhooks, and custom-domain inboxes for AI agents.",
   "type": "module",
@@ -68,7 +68,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.0.0",
-    "shipmail": "0.6.0",
+    "shipmail": "0.6.3",
     "zod": "4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -6,7 +6,7 @@
     "url": "https://github.com/shipmail-to/shipmail-mcp",
     "source": "github"
   },
-  "version": "0.9.1",
+  "version": "0.9.3",
   "websiteUrl": "https://shipmail.to/docs/mcp",
   "remotes": [
     {
@@ -27,7 +27,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "shipmail-mcp",
-      "version": "0.9.1",
+      "version": "0.9.3",
       "transport": {
         "type": "stdio"
       },

package/smithery.yaml

@@ -1,6 +1,6 @@
 # Smithery configuration file: https://smithery.ai/docs/build/project-config/smithery-yaml
 name: shipmail-mcp
-version: 0.9.1
+version: 0.9.3
 description: Official Shipmail MCP server for AI-agent custom-domain business email inboxes with REST API and webhooks.
 author: Shipmail
 repository: https://github.com/shipmail-to/shipmail-mcp