
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@sendkuy/mcp
Advanced tools
MCP server for SendKuy: let AI assistants and agents send WhatsApp, SMS and email, verify OTP codes and run campaigns.
Give AI assistants and agents a way to reach people: send WhatsApp, SMS and email, verify OTP codes and run campaigns through your SendKuy account.
Use it while you build an integration ("send a test OTP to my number", "why is my webhook failing?"), or as the notification step of an agent that runs on its own: an on-call alert, a daily revenue summary, an order update per customer.
Full guide with scenarios: docs.sendkuy.com/mcp
Create an API key at app.sendkuy.com/user/api. Give it account:read plus the scopes of the tools you want, and nothing more. The server lists only the tools your key can use, so a key with read scopes never sees a tool that sends.
Claude Code:
claude mcp add --transport stdio --env SENDKUY_API_KEY=sk_live_YOUR_API_KEY sendkuy -- npx -y @sendkuy/mcp
Cursor (.cursor/mcp.json), Windsurf and Claude Desktop:
{
"mcpServers": {
"sendkuy": {
"command": "npx",
"args": ["-y", "@sendkuy/mcp"],
"env": { "SENDKUY_API_KEY": "sk_live_YOUR_API_KEY" }
}
}
}
VS Code (.vscode/mcp.json):
{
"inputs": [
{
"type": "promptString",
"id": "sendkuy-key",
"description": "SendKuy API key",
"password": true
}
],
"servers": {
"sendkuy": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@sendkuy/mcp"],
"env": { "SENDKUY_API_KEY": "${input:sendkuy-key}" }
}
}
}
Claude Desktop can also install sendkuy-mcp.mcpb from the latest release with one click.
| Tool | What it does | Scopes |
|---|---|---|
sendkuy_get_account | Plan, credits per channel, usage this period, the key's scopes | account:read |
sendkuy_send_message | One body to 1–100 recipients, contacts or a group, on one channel | messages:write |
sendkuy_send_batch | Up to 500 messages with different content, answered row by row | messages:write |
sendkuy_get_messages | Status of up to 20 messages by id | messages:read |
sendkuy_list_messages | Recent messages by channel, status and time | messages:read |
sendkuy_cancel_message | Cancel a message not sent yet | messages:write |
sendkuy_send_verification | Send an OTP code | verifications:write |
sendkuy_check_verification | Check the code a user typed | verifications:write |
sendkuy_check_whatsapp_numbers | Which numbers are on WhatsApp | numbers:read |
sendkuy_find_contacts | A contact by phone or external_id | contacts:read |
sendkuy_list_templates | Saved message templates | templates:read |
sendkuy_list_groups | Contact groups and their size | groups:read |
sendkuy_list_campaigns | Campaigns prepared in the dashboard | campaigns:read |
sendkuy_start_campaign | Start a campaign | campaigns:write |
sendkuy_get_campaign | Progress and delivery stats | campaigns:read |
sendkuy_control_campaign | Pause, resume or cancel | campaigns:write |
sendkuy_list_webhook_deliveries | Webhooks and their latest delivery attempts | webhooks:read |
Tools that send really send and spend credit. They take an optional dedupe_key: an agent that repeats a step with the same key gets the first answer back instead of sending twice.
grp_ id with dedupe_key set to the incident id.sendkuy_send_batch call, a different body per manager.sendkuy_list_messages, then sendkuy_list_webhook_deliveries.| Variable | |
|---|---|
SENDKUY_API_KEY | Your API key. Without it the server still starts and lists its tools, and every call answers with an error until you set it. |
SENDKUY_BASE_URL | Only for a proxy or a mock server in tests. Defaults to https://app.sendkuy.com/api/v1. |
MIT
FAQs
MCP server for SendKuy: let AI assistants and agents send WhatsApp, SMS and email, verify OTP codes and run campaigns.
The npm package @sendkuy/mcp receives a total of 0 weekly downloads. As such, @sendkuy/mcp popularity was classified as not popular.
We found that @sendkuy/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.