
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isnβt whitelisted.
inboxassure-mcp-server
Advanced tools
Comprehensive MCP server for InboxAssure email marketing platform with full API coverage including campaigns, replies, and email account management.
Comprehensive Model Context Protocol (MCP) server for the InboxAssure email marketing platform. This server provides full API coverage with 23 tools for managing campaigns, replies, and email accounts through AI assistants like Claude and Cursor.
iak_
)Clone this repository:
git clone https://github.com/your-org/inboxassure-mcp-server
cd inboxassure-mcp-server
Install dependencies:
npm install
# Using npm script
npm run start:stdio -- --api-key YOUR_INBOXASSURE_API_KEY
# Or directly using node
node src/cli.js --stdio --api-key YOUR_INBOXASSURE_API_KEY
# Default port 3000
npm start -- --api-key YOUR_INBOXASSURE_API_KEY
# Custom port
npm start -- --api-key YOUR_INBOXASSURE_API_KEY --port 3001
The HTTP server provides:
http://localhost:PORT/mcp
(POST requests)http://localhost:PORT/health
(GET requests)get_bison_hello
- Test endpoint to verify API connectivitylist_campaigns
- List all campaigns with filtering and pagination
workspace_id
, optional params
(search, status, page, per_page)create_campaign
- Create a new email marketing campaign
workspace_id
, name
, optional type
get_campaign_details
- Get detailed campaign information
workspace_id
, campaign_id
pause_campaign
- Temporarily pause a running campaign
workspace_id
, campaign_id
resume_campaign
- Resume a paused campaign
workspace_id
, campaign_id
get_campaign_stats
- Get performance metrics for date range
workspace_id
, campaign_id
, start_date
, end_date
get_campaign_leads
- View leads in campaign with status
workspace_id
, campaign_id
, optional params
create_campaign_schedule
- Set up campaign sending schedule (days, times, timezone)
workspace_id
, campaign_id
, start_time
, end_time
, timezone
, day booleansget_schedule_templates
- Get predefined schedule templates for quick setup
workspace_id
create_sequence_steps
- Define email sequence steps for drip campaigns
workspace_id
, campaign_id
, title
, sequence_steps
arrayattach_lead_list
- Import entire lead lists into campaigns
workspace_id
, campaign_id
, lead_list_id
list_replies
- Retrieve email replies with filtering
workspace_id
, optional params
(search, status, folder, etc.)get_reply_details
- Get complete reply details and content
workspace_id
, reply_id
compose_new_email
- Send standalone emails outside campaigns
workspace_id
, sender_email_id
, to_emails
, message
, optional content_type
, cc_emails
, bcc_emails
reply_to_email
- Respond to emails maintaining thread
workspace_id
, reply_id
, sender_email_id
, to_emails
, message
, optional content_type
get_conversation_thread
- Get complete conversation history
workspace_id
, reply_id
list_email_accounts
- List configured email accounts
workspace_id
, optional params
(search, page, per_page)get_email_account_details
- Get account configuration and stats
workspace_id
, email_id
update_email_account
- Modify account settings
workspace_id
, email_id
, optional daily_limit
, name
, email_signature
get_account_campaigns
- See which campaigns use this email account
workspace_id
, email_id
get_account_replies
- View replies received by this email account
workspace_id
, email_id
bulk_update_email_signatures
- Update signatures across multiple accounts
workspace_id
, sender_email_ids
array, email_signature
Total: 23 tools (1 original + 11 campaigns + 5 replies + 6 email accounts)
Add to your Claude MCP configuration:
{
"mcpServers": {
"InboxAssure": {
"command": "node",
"args": [
"/path/to/inboxassure-mcp-server/src/cli.js",
"--api-key=YOUR_INBOXASSURE_API_KEY",
"--stdio"
]
}
}
}
Add to your Cursor MCP settings:
{
"mcpServers": {
"InboxAssure Email Marketing": {
"command": "node",
"args": [
"/full/path/to/src/cli.js",
"--api-key=YOUR_INBOXASSURE_API_KEY",
"--stdio"
]
}
}
}
Once published to NPM:
{
"mcpServers": {
"InboxAssure": {
"command": "npx",
"args": [
"-y",
"inboxassure-mcp-server",
"--api-key=YOUR_INBOXASSURE_API_KEY",
"--stdio"
]
}
}
}
This server follows security best practices:
--api-key
argument# Start with placeholder API key (update in package.json)
npm run dev
npm run dev:stdio
# Linting (placeholder)
npm run lint
Start the server:
node src/cli.js --api-key=YOUR_KEY --stdio
Send test JSON-RPC messages:
{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}
The project includes PM2 ecosystem configuration:
# Deploy to production server
ssh -i ~/.ssh/mcpx root@167.99.230.52 "cd /root/mcpx && git pull && pm2 restart all"
FROM node:18-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY src/ ./src/
EXPOSE 3000
CMD ["node", "src/cli.js"]
The server integrates with the complete InboxAssure API:
https://bison.imnodev.com/api/
X-API-Key
header with InboxAssure API keypage
(default: 1), per_page
(default: 15, max: 100)search
, status
, folder
parametersYYYY-MM-DD
or YYYY-MM-DDTHH:MM:SSZ
)--api-key
is provided in client configurationiak_
The server provides extensive debug logging:
# Check server logs
tail -f /var/log/your-app/mcp-server.log
# Enable verbose debugging
DEBUG=* node src/cli.js --api-key=YOUR_KEY
%APPDATA%\Claude\logs\mcp*.log
~/Library/Logs/Claude/mcp*.log
MIT License - see LICENSE file for details.
For issues and questions:
FAQs
Comprehensive MCP server for InboxAssure email marketing platform with full API coverage including campaigns, replies, and email account management.
The npm package inboxassure-mcp-server receives a total of 3 weekly downloads. As such, inboxassure-mcp-server popularity was classified as not popular.
We found that inboxassure-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isnβt whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.