
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@keyid/agent-kit
Advanced tools
KeyID MCP for agent email, SMS, OTP/TOTP, inbox triage, persona state, and signup verification.
Remote-first endpoint: https://keyid.ai/mcp
Local stdio fallback: npx -y @keyid/agent-kit
{
"mcpServers": {
"keyid": {
"command": "npx",
"args": ["-y", "@keyid/agent-kit"]
}
}
}
claude mcp add keyid -- npx -y @keyid/agent-kit
{
"mcpServers": {
"keyid": {
"command": "npx",
"args": ["-y", "@keyid/agent-kit"]
}
}
}
https://keyid.ai/mcp
Hosted mode creates a managed install identity for the connector and stores the private key encrypted at rest. Local mode uses the Ed25519 keypair supplied through KEYID_PUBLIC_KEY and KEYID_PRIVATE_KEY, or generates one if they are missing.
| Tool | Description |
|---|---|
provision_identity | Create or reveal the email identity for this MCP session. |
get_identity | Fetch the current KeyID identity, address, phone, and reputation. |
request_phone_number | Assign a phone number to the current KeyID identity. |
| Tool | Description |
|---|---|
list_messages | List email or SMS messages with search and inbox filters. |
wait_for_message | Poll until a matching inbound message arrives. |
get_message | Fetch the full details for a single message. |
send_email | Send an email from the current identity. |
reply_to_message | Reply to a message, optionally as reply-all. |
update_message | Update message flags such as read or starred state. |
| Tool | Description |
|---|---|
list_threads | List conversation threads for the current identity. |
get_thread | Fetch a thread and all of its messages. |
| Tool | Description |
|---|---|
get_verification_codes | Read OTP or verification codes from a message, or from the latest matching message. |
follow_verification_link | Follow a verification link directly or from an extracted message link list. |
| Tool | Description |
|---|---|
list_totp_entries | List registered authenticator/TOTP entries for the identity. |
get_totp_code | Generate the current TOTP code for a stored authenticator entry. |
| Tool | Description |
|---|---|
get_persona | Fetch the synthetic persona used for registrations. |
create_or_update_persona | Create a persona or update the existing one with explicit overrides. |
save_registration | Create or update a registration record for an external service. |
list_registrations | List saved service registrations. |
get_registration | Fetch one registration record by ID. |
| Tool | Description |
|---|---|
list_secrets | List vault keys without exposing secret values. |
get_secret | Retrieve a decrypted vault entry by key. |
put_secret | Create or update a vault entry. |
delete_secret | Delete a vault entry. |
| Tool | Description |
|---|---|
get_auto_reply | Fetch the current auto-reply configuration. |
set_auto_reply | Enable, disable, or edit the auto-reply responder. |
get_forwarding | Fetch the current forwarding address. |
set_forwarding | Set or clear the forwarding address. |
get_signature | Fetch the current email signature. |
set_signature | Set or clear the email signature. |
| Tool | Description |
|---|---|
list_contacts | List saved contacts for the identity. |
upsert_contact | Create a contact by email or update one by contact ID. |
delete_contact | Delete a contact by ID. |
| Tool | Description |
|---|---|
list_webhooks | List webhook subscriptions for the identity. |
create_webhook | Create a webhook subscription. |
get_webhook_deliveries | Inspect recent webhook delivery attempts. |
| Tool | Description |
|---|---|
get_metrics | Fetch usage metrics for the current identity. |
get_reputation | Fetch the current reputation score and factor breakdown. |
| Prompt | Description |
|---|---|
set-up-agent-communications | Provision email, inspect identity, and enable the communication settings the user asks for. |
complete-email-verification | Watch for a verification email, extract the best link or code, and complete the flow carefully. |
fetch-latest-code | Retrieve the newest verification code from email, SMS, or TOTP. |
triage-inbox | List recent messages, highlight urgent items, and suggest the safest next reply action. |
autonomous-signup | Create or update a persona, wait for verification, and record the completed registration. |
reply-conservatively | Reply briefly, avoid inventing commitments, and keep tone factual. |
| Resource | Description |
|---|---|
keyid://identity/current | Current email, phone, and profile state. |
keyid://inbox/unread | Recent unread inbound messages. |
keyid://reputation/current | Current reputation score and factor breakdown. |
keyid://totp/services | Stored TOTP entries. |
keyid://registrations/recent | Recent service registrations. |
keyid://vault/keys | Stored secret keys without their values. |
FAQs
KeyID MCP server for agent email, SMS, OTP/TOTP, and signup verification
The npm package @keyid/agent-kit receives a total of 49 weekly downloads. As such, @keyid/agent-kit popularity was classified as not popular.
We found that @keyid/agent-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.