AgentSend Email

Give your AI agent its own email inbox. Send, receive, and manage email conversations via MCP tools. Set AGENTSEND_API_KEY from agentsend.io — free tier avai...

Security Scan

The skill's requirements and instructions are broadly consistent with an email-provider integration (it needs an AgentSend API key and an npm MCP client), but there are a few minor things to verify before installing (npm package vs referenced repo and the usual privacy/risk around webhooks and autonomous sending).

Purpose & Capability

Name and description (email inbox for an AI agent) match the declared primary credential (AGENTSEND_API_KEY) and the install of an npm MCP client (@agentsend/mcp). No unrelated credentials or binaries are requested.

Instruction Scope

SKILL.md only instructs adding the MCP entry with AGENTSEND_API_KEY and documents email-focused tools (create_inbox, send_email, list_emails, register_webhook, etc.). This stays within the email provider scope. Important: register_webhook intentionally forwards email events to arbitrary user-owned URLs — expected functionality but high-sensitivity (emails and attachments may be delivered to external endpoints).

Install Mechanism

Install uses an npm package (@agentsend/mcp) which is expected for a Node MCP client (moderate risk vs instruction-only). Minor inconsistency: SKILL.md/source references a GitHub repo (github.com/luv005/agentpost) whose name differs from the npm package name; verify the package publisher/source code match before installing.

Credentials

Only one secret is required (AGENTSEND_API_KEY) which is appropriate for a hosted email API. No unrelated environment variables or config paths are requested.

Persistence & Privilege

always:false and normal autonomous invocation are set (agent may call the skill autonomously). This is expected, but because the skill can send emails and register webhooks, autonomous behavior can result in outbound communications or automatic forwarding of inbound content — monitor and apply least-privilege practices.

Scan Findings in Context

[no-regex-findings] expected: The static scanner found nothing because this is an instruction-only skill (SKILL.md) with no code files. That's expected; the runtime risk surface is in the installed npm package and the provided API key.

Assessment

This skill appears to do what it says (give the agent an @agentsend.io inbox) and only needs the AgentSend API key. Before installing: 1) Verify the npm package (@agentsend/mcp) publisher and review its source code or the linked GitHub repo to ensure they match and are trustworthy. 2) Treat AGENTSEND_API_KEY like any secret — rotate/revoke it if you suspect misuse. 3) Be cautious with webhooks: registering a webhook will forward email content (including attachments) to the URL you provide — only use URLs you control and trust. 4) If you allow autonomous agent invocation, monitor outbound emails and set policies/limits (e.g., test on a sandbox inbox) to prevent accidental or malicious message blasts. If you want higher assurance, ask the publisher for a direct link from the npm package to the repo and inspect the package code before granting the API key.

AgentSend — Email for AI Agents

Give your AI agent its own @agentsend.io email address. Send, receive, and manage full email conversations — no OAuth, no human verification flow.

Setup

1. Get a free API key at agentsend.io/auth/signup
2. Add it to your MCP config:

{
  "mcpServers": {
    "agentsend": {
      "command": "npx",
      "args": ["@agentsend/mcp"],
      "env": {
        "AGENTSEND_API_KEY": "your-api-key"
      }
    }
  }
}

The server will not start without a valid AGENTSEND_API_KEY. Signup is free and instant.

Tools

Tool	What it does
create_inbox	Create a new @agentsend.io inbox with an optional prefix and display name
list_inboxes	List all your inboxes with addresses, IDs, and stats
send_email	Send an email (plain text or HTML). Supports CC and thread replies
list_emails	List recent emails in an inbox. Filter by read/unread status
get_email	Fetch the full body, headers, and attachment metadata of any email
list_threads	List conversation threads — replies are auto-grouped by RFC 5322 headers
get_thread	Get every message in a thread in chronological order
register_webhook	Register a URL you own to receive real-time event notifications (HMAC-signed payloads)

Example

User: "Create an inbox and send a hello to [e-mail]"

→ create_inbox({ displayName: "My Agent" })
  Created: [e-mail]

→ send_email({ inboxId: "...", to: ["[e-mail]"],
               subject: "Hello!", bodyText: "Sent by AI." })
  Queued for delivery ✓

Pricing

Plan	Price	Inboxes	Emails/month
Free	$0	3	3,000
Pro	$9/mo	5	5,000 + custom domains
Enterprise	$99/mo	100	100,000

Source code: github.com/luv005/agentpost