
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@sendinel/mcp-server
Advanced tools
AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.
Sendinel's published MCP server package for local stdio clients such as Claude Desktop, Claude Code, Cursor, and Codex CLI.
AI-controlled email operations control plane for campaigns, contacts, segments, templates, analytics, deliverability, and multi-provider sending across the Sendinel portfolio.
email, marketing, crm, automation, analyticsio.github.kmdesle/sendinelhttps://sendinel.ai/mcp@sendinel/mcp-serverhttps://github.com/kmdesle/sendinel-ai/tree/main/packages/mcp-serverSendinel currently exposes 21 tool groups and about 155 tools. The full reference lives in docs/mcp-tools.md.
| Group | Count | Purpose |
|---|---|---|
campaigns | 26 | Full campaign lifecycle |
contacts | 22 | Subscriber CRUD, tags, suppression, merges, timelines |
analytics | 9 | Stats, engagement, deliverability, portfolio reporting |
data | 15 | Export, scoring, hygiene, migrations, import history |
org | 15 | Team members, API keys, platform connections, plan, onboarding |
templates | 7 | Template CRUD, AI brief generation, translation |
sms | 7 | SMS send, consent, inbound, logs |
segments | 6 | Audience builder and preview |
content | 5 | Content blocks, sources, send-time optimization |
ab_testing | 5 | A/B setup and significance checks |
drafts | 4 | Draft create and approval flow |
delivery | 9 | Domain and deliverability operations |
warmup | 4 | Warmup schedule controls |
social | 4 | Social campaigns and scheduling |
forms | 3 | Forms and stats |
webhooks | 4 | Webhook subscription management |
approvals | 3 | Approval workflow and advisor hooks |
automations | 4 | Automation triggers and previews |
sites | 3 | Site and sender management |
gdpr | 2 | Contact deletion and log |
history | 3 | Chat thread history and search |
npx -y @sendinel/mcp-server@latest
The package also exposes the legacy bin alias:
npx -y sendinel-mcp
SENDINEL_API_KEYOptional server-side env when you run the package outside the main Sendinel app environment:
SUPABASE_URL or NEXT_PUBLIC_SUPABASE_URLSUPABASE_SERVICE_ROLE_KEYMCP_TRANSPORT (stdio by default, http for HTTP/SSE mode)MCP_SERVER_PORT (HTTP mode only)Stdio mode fails closed if SENDINEL_API_KEY is missing or invalid.
{
"mcpServers": {
"sendinel": {
"command": "npx",
"args": ["-y", "@sendinel/mcp-server@latest"],
"env": {
"SENDINEL_API_KEY": "snk_your_api_key"
}
}
}
}
[mcp_servers.sendinel]
command = "npx"
args = ["-y", "@sendinel/mcp-server@latest"]
[mcp_servers.sendinel.env]
SENDINEL_API_KEY = "snk_your_api_key"
Or add it automatically:
codex mcp add sendinel --env SENDINEL_API_KEY=snk_your_api_key -- npx "-y" "@sendinel/mcp-server@latest"
stdio by defaulthttp when MCP_TRANSPORT=httpThis package is intended to be published publicly to npm and listed in MCP directories:
@sendinel/mcp-servernpx -y @sendinel/mcp-server@latestserver.json../../smithery.yamlFAQs
AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.
The npm package @sendinel/mcp-server receives a total of 291 weekly downloads. As such, @sendinel/mcp-server popularity was classified as not popular.
We found that @sendinel/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.