
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@dragapp/mcp-server
Advanced tools
AI-powered email & WhatsApp management for teams — manage your Gmail shared inbox from Claude, Cursor, ChatGPT, and other AI tools. 47 tools across 12 categories.
An MCP server for DragApp — AI-powered email & WhatsApp for teams. Read and reply to emails, send WhatsApp messages, search threads, manage boards, and more from Claude, ChatGPT, Cursor, or any MCP-compatible AI tool.
Go to DragApp → Settings → Integrations → copy your API key.
Claude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"dragapp": {
"command": "npx",
"args": ["-y", "@dragapp/mcp-server"],
"env": {
"DRAG_API_KEY": "your-api-key"
}
}
}
}
Cursor — add to .cursor/mcp.json:
{
"mcpServers": {
"dragapp": {
"command": "npx",
"args": ["-y", "@dragapp/mcp-server"],
"env": {
"DRAG_API_KEY": "your-api-key"
}
}
}
}
Works with any MCP-compatible client — ChatGPT, Windsurf, Claude Code, etc.
Ask your AI assistant:
list_threads · get_thread · reply_to_thread · send_new_email · search_threads · filter_threads · move_thread · move_threads_bulk
list_boards · get_board · list_columns · list_board_members · list_teams
list_cards_in_column · get_card · create_card · update_card · move_card · archive_card
list_labels · add_label_to_thread · remove_label_from_thread · toggle_labels
search_contacts · get_contact_conversations · create_contact
list_articles · get_article · create_article · update_article · search_knowledge
get_response_times · get_avg_response_time · get_daily_activity · get_closed_activity
list_automations · toggle_automation · toggle_ai_drafts
send_whatsapp_message · send_whatsapp_template · list_whatsapp_templates · get_whatsapp_conversation
add_comment · get_comment
list_tags · add_tag_to_card
create_task
47 tools across 12 categories.
git clone https://github.com/nick-timms/drag-mcp-server.git
cd drag-mcp-server
npm install
cp .env.example .env # add your API key
npm run build
npm start
This is a public repository. Before committing, install the pre-commit hook so gitleaks scans your staged changes for secrets (keys, JWTs, tokens) and for internal names that must not appear here:
pip install pre-commit # one-time, if you don't have it
pre-commit install # installs the git hook in this repo
Run it manually against everything at any time:
pre-commit run --all-files
The hook uses .gitleaks.toml. The same scan runs in CI on every
push and pull request (.github/workflows/secret-scan.yml), and npm publish is
blocked by a tarball guard (scripts/check-tarball.mjs) if the built package
contains any internal name.
MIT
FAQs
Shared inbox for Gmail teams: run support from Claude, ChatGPT, or Cursor. 47 tools, read and write.
The npm package @dragapp/mcp-server receives a total of 80 weekly downloads. As such, @dragapp/mcp-server popularity was classified as not popular.
We found that @dragapp/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.