
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@dragapp/mcp-server
Advanced tools
Shared inbox for Gmail teams: run support from Claude, ChatGPT, or Cursor. 47 tools, read and write.
An MCP server for DragApp — AI-powered email & WhatsApp for teams. Read and reply to emails, send WhatsApp messages, search threads, manage boards, and more from Claude, ChatGPT, Cursor, or any MCP-compatible AI tool.
Add this URL as a custom connector:
https://app.dragapp.com/mcp
When you connect, a Drag page opens and asks for your API key once (DragApp → Settings → Integrations). The key is verified and handed to your client as its access token; the service stores nothing, and the connect flow never puts your key in a URL. Works in any client that supports remote MCP connectors (OAuth 2.1 + PKCE, dynamic client registration). Nothing to install.
Go to DragApp → Settings → Integrations → copy your API key.
Claude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"dragapp": {
"command": "npx",
"args": ["-y", "@dragapp/mcp-server"],
"env": {
"DRAG_API_KEY": "your-api-key"
}
}
}
}
Cursor — add to .cursor/mcp.json:
{
"mcpServers": {
"dragapp": {
"command": "npx",
"args": ["-y", "@dragapp/mcp-server"],
"env": {
"DRAG_API_KEY": "your-api-key"
}
}
}
}
Works with any MCP-compatible client — ChatGPT, Windsurf, Claude Code, etc.
Ask your AI assistant:
list_threads · get_thread · reply_to_thread · send_new_email · search_threads · filter_threads · move_thread · move_threads_bulk
list_boards · get_board · list_columns · list_board_members · list_teams
list_cards_in_column · get_card · create_card · update_card · move_card · archive_card
list_labels · add_label_to_thread · remove_label_from_thread · toggle_labels
search_contacts · get_contact_conversations · create_contact
list_articles · get_article · create_article · update_article · search_knowledge
get_response_times · get_avg_response_time · get_daily_activity · get_closed_activity
list_automations · toggle_automation · toggle_ai_drafts
send_whatsapp_message · send_whatsapp_template · list_whatsapp_templates · get_whatsapp_conversation
add_comment · get_comment
list_tags · add_tag_to_card
create_task
47 tools across 12 categories.
git clone https://github.com/nick-timms/drag-mcp-server.git
cd drag-mcp-server
npm install
cp .env.example .env # add your API key
npm run build
npm start
This is a public repository. Before committing, install the pre-commit hook so gitleaks scans your staged changes for secrets (keys, JWTs, tokens):
pip install pre-commit # one-time, if you don't have it
pre-commit install # installs the git hook in this repo
Run it manually against everything at any time:
pre-commit run --all-files
The hook uses .gitleaks.toml. The same scan runs in CI on every
push and pull request (.github/workflows/secret-scan.yml), and npm publish runs a
tarball guard (scripts/check-tarball.mjs) that blocks the release if the built
package contains any known-sensitive term.
MIT
FAQs
Shared inbox for Gmail teams: run support from Claude, ChatGPT, or Cursor. 47 tools, read and write.
The npm package @dragapp/mcp-server receives a total of 74 weekly downloads. As such, @dragapp/mcp-server popularity was classified as not popular.
We found that @dragapp/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.