
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@agentisend/mcp-server
Advanced tools
AgentiSend is a transactional email API for AI agents: send through verified domains, with a budget each sender cannot exceed and a kill switch a person can flip. The hosted MCP server at https://api.agentisend.com/mcp exposes 81 tools (43 on tools/list;
AgentiSend's MCP server, over stdio — for clients that launch a command and talk over pipes rather than speaking HTTP MCP.
{
"mcpServers": {
"agentisend": {
"command": "npx",
"args": ["-y", "@agentisend/mcp-server"],
"env": { "AGENTISEND_API_KEY": "as_..." }
}
}
}
| Variable | Required | Meaning |
|---|---|---|
AGENTISEND_API_KEY | yes | Your API key. Read from the environment only — never passed as an argument, because process arguments are visible to every other process on the machine. |
AGENTISEND_MCP_URL | no | Defaults to https://api.agentisend.com/mcp. |
It is a proxy, not a second implementation: every tool, resource and prompt is
forwarded to the hosted server with your key, so what you get here is exactly
what an HTTP client gets — the same catalogue, the same budget, the same stops,
and refusals with their fix field intact.
--help prints the config above. --version prints the version. Both work
without a key.
FAQs
AgentiSend is a transactional email API for AI agents: send through verified domains, with a budget each sender cannot exceed and a kill switch a person can flip. The hosted MCP server at https://api.agentisend.com/mcp exposes 81 tools (43 on tools/list;
The npm package @agentisend/mcp-server receives a total of 247 weekly downloads. As such, @agentisend/mcp-server popularity was classified as not popular.
We found that @agentisend/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.