
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@sendinel/mcp-server
Advanced tools
AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.
Sendinel's published MCP server package for local stdio clients such as Claude Desktop, Claude Code, Cursor, and Codex CLI.
AI-controlled email operations control plane for campaigns, contacts, segments, templates, analytics, deliverability, and multi-provider sending across the Sendinel portfolio.
email, marketing, crm, automation, analyticsai.sendinel/mcp-serverhttps://sendinel.ai/mcp@sendinel/mcp-serverhttps://github.com/kmdesle/sendinel-ai/tree/main/packages/mcp-serverSendinel currently exposes 34 tool groups and 302 tools (gateway mode adds 3 meta-tools). These counts are checked against the tool registry in CI, so this table matches what ships.
| Group | Count | Purpose |
|---|---|---|
ab-testing | 4 | A/B test creation, listing, significance checks, winner promotion |
advisor | 6 | Campaign advisor: recommendations, benchmarks, subject/content/send-time guidance |
ai-work | 9 | AI work items, recommended segments, context events, agent proposals |
analytics | 17 | Stats, portfolio analytics, domain health, engagement, deliverability, revenue analytics |
approvals | 2 | Poll and list risk-tiered action approvals |
automations | 7 | Automation triggers, previews, and response-gated escalation ladders |
brand_kit | 5 | Brand Core text import, media library upload/URL ingest, asset-context reads |
campaigns | 30 | Full campaign lifecycle: create, edit, approve, launch, enroll, schedule, sequence templates |
cloud-import | 6 | Cloud storage import |
compound | 4 | Higher-level campaign/template/site setup and delivery diagnosis workflows |
connector | 6 | BYOD connector status, table discovery, schema/view setup, mapping, resync |
contacts | 37 | Subscriber CRUD, saved views, tags, email log, suppression, merge, timeline |
content | 14 | Content blocks, gated asset links, blog ingest and auto-publish, sources |
data | 19 | Platform connectors, imports, API keys, migration jobs, notifications, tenant export |
data-proposals | 3 | Data-derived campaign proposal generation, listing, approval |
delivery-ops | 23 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates |
drafts | 6 | Draft create/approve/reject and draft-to-campaign promotion |
forms | 3 | Form creation, listing, stats |
gdpr | 4 | Contact data deletion and GDPR log |
landing-pages | 5 | Landing page CRUD |
lists | 7 | Static contact lists and membership management |
newsletters | 12 | Newsletter publications, issues, subscribers, scheduling, sending, stats |
org | 20 | Team members, plan usage/limits, audit log, model registry, white-label, provider switching |
segments | 6 | Audience builder: create, edit, natural-language generation, preview |
short-links | 3 | Short links, click stats, QR codes |
signatures | 4 | Sending signature blocks |
sites | 5 | Site, sender, and brand voice management |
skills | 2 | Operator skills catalog |
sms | 7 | SMS send, log, consent, inbound |
social-posts | 6 | Social post creation, adaptation, scheduling state, archive/delete |
surveys | 5 | Survey creation, listing, status, results |
templates | 7 | Email template CRUD, version restore, migration translation |
warmup | 4 | IP/domain warmup schedule control |
webhooks | 4 | Webhook subscription management |
npx -y @sendinel/mcp-server@latest
The package also exposes the legacy bin alias:
npx -y sendinel-mcp
SENDINEL_API_KEYOptional server-side env when you run the package outside the main Sendinel app environment:
SUPABASE_URL or NEXT_PUBLIC_SUPABASE_URLSUPABASE_SERVICE_ROLE_KEYMCP_TRANSPORT (stdio by default, http for HTTP/SSE mode)MCP_SERVER_PORT (HTTP mode only)Stdio mode fails closed if SENDINEL_API_KEY is missing or invalid.
{
"mcpServers": {
"sendinel": {
"command": "npx",
"args": ["-y", "@sendinel/mcp-server@latest"],
"env": {
"SENDINEL_API_KEY": "snk_your_api_key"
}
}
}
}
[mcp_servers.sendinel]
command = "npx"
args = ["-y", "@sendinel/mcp-server@latest"]
[mcp_servers.sendinel.env]
SENDINEL_API_KEY = "snk_your_api_key"
Or add it automatically:
codex mcp add sendinel --env SENDINEL_API_KEY=snk_your_api_key -- npx "-y" "@sendinel/mcp-server@latest"
stdio by defaulthttp when MCP_TRANSPORT=httpThis package is intended to be published publicly to npm and listed in MCP directories:
@sendinel/mcp-servernpx -y @sendinel/mcp-server@latestserver.json../../smithery.yamlFAQs
AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.
We found that @sendinel/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.