
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
truelist-mcp
Advanced tools
MCP server for Truelist email validation — use with Claude, Cursor, and VS Code
MCP (Model Context Protocol) server for Truelist email validation. Lets AI assistants like Claude, Cursor, and VS Code Copilot validate email addresses for deliverability.
This package exposes Truelist's email validation API as MCP tools. Once configured, your AI assistant can:
Start free — 100 validations + 10 enhanced credits, no credit card required. Get your API key → Works with the free plan.
npm install -g truelist-mcp
Or run directly with npx:
npx truelist-mcp
You need a Truelist API key. Get one at truelist.io.
Add to your claude_desktop_config.json:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"truelist": {
"command": "npx",
"args": ["truelist-mcp"],
"env": {
"TRUELIST_API_KEY": "your-api-key"
}
}
}
}
Add to your .claude/settings.json or run:
claude mcp add truelist -- npx truelist-mcp
Then set the environment variable:
export TRUELIST_API_KEY=your-api-key
Add to your Cursor MCP settings (.cursor/mcp.json in your project or global settings):
{
"mcpServers": {
"truelist": {
"command": "npx",
"args": ["truelist-mcp"],
"env": {
"TRUELIST_API_KEY": "your-api-key"
}
}
}
}
Add to your VS Code settings (.vscode/mcp.json in your project):
{
"servers": {
"truelist": {
"command": "npx",
"args": ["truelist-mcp"],
"env": {
"TRUELIST_API_KEY": "your-api-key"
}
}
}
}
Validate a single email address for deliverability.
Input:
{
"email": "user@example.com"
}
Output:
{
"email": "user@example.com",
"state": "ok",
"sub_state": "email_ok",
"suggestion": null,
"domain": "example.com",
"canonical": "user@example.com",
"mx_record": "mx.example.com",
"first_name": "Jane",
"last_name": "Doe",
"verified_at": "2026-02-21T12:00:00Z",
"is_valid": true,
"is_deliverable": true
}
States:
| State | Meaning |
|---|---|
ok | Email is deliverable |
email_invalid | Email is not deliverable |
risky | Email may be deliverable but has risk factors |
accept_all | Domain accepts all addresses; deliverability uncertain |
unknown | Could not determine deliverability |
Sub-states:
| Sub-state | Meaning |
|---|---|
email_ok | No issues found |
accept_all | Domain accepts all addresses |
is_disposable | Temporary/disposable email |
is_role | Role-based address (info@, support@, etc.) |
failed_mx_check | Domain has no mail server |
failed_smtp_check | SMTP verification failed |
failed_spam_trap | Known spam trap address |
failed_no_mailbox | Mailbox does not exist |
failed_greylisted | Server temporarily rejected |
failed_syntax_check | Invalid email syntax |
unknown | Could not determine sub-state |
Validate multiple email addresses in a single batch (max 50).
Input:
{
"emails": [
"user@example.com",
"test@invalid.example",
"hello@gmail.com"
]
}
Output:
[
{
"email": "user@example.com",
"state": "ok",
"sub_state": "email_ok",
"is_valid": true
},
{
"email": "test@invalid.example",
"state": "email_invalid",
"sub_state": "failed_mx_check",
"is_valid": false
},
{
"email": "hello@gmail.com",
"state": "ok",
"sub_state": "email_ok",
"is_valid": true
}
]
Check your Truelist account info including name, email, plan, and admin status.
Input: none
Output:
{
"email": "you@company.com",
"name": "Your Name",
"uuid": "a3828d19-...",
"timeZone": "America/New_York",
"isAdminRole": true,
"paymentPlan": "pro"
}
| Variable | Required | Description |
|---|---|---|
TRUELIST_API_KEY | Yes | Your Truelist API key from truelist.io |
The server requires a TRUELIST_API_KEY environment variable. Make sure it's set in your MCP configuration's env block or exported in your shell.
npx truelist-mcp runs without errors when TRUELIST_API_KEY is setVerify your API key is correct and active at truelist.io.
Truelist enforces rate limits on the API. If you hit rate limits, the SDK will automatically retry with exponential backoff. For batch validation, emails are validated concurrently so large batches may trigger rate limits.
Sign up for a free Truelist account to get your API key. The free plan includes 100 validations and 10 enhanced credits — no credit card required.
MIT
FAQs
MCP server for Truelist email validation — use with Claude, Cursor, and VS Code
We found that truelist-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.