← Back to search
@e2a/mcp-server
MCP server for e2a — email for AI agents
npm
D
57.3 / 100
Versions
0.4.0latestMay 26, 2026
0.3.4May 25, 2026
0.3.3May 25, 2026
0.3.2May 22, 2026
0.3.1May 22, 2026
+ show 3 moreshow less
0.3.0May 21, 2026
0.1.1May 18, 2026
0.1.0May 18, 2026
0.4.0latestfirst seen Jul 21, 2026
0.3.2first seen Jun 5, 2026
Tools 0
No tools indexed yet.
Permissions 0
No permissions indexed yet.
Scan Findings 294
medium
Tool 'list_suppressions' claims destructive but name implies read-only operation
high
Tool 'delete_suppression' claims readOnly but name implies destructive operation
info
Tool 'list_agent_suppressions' annotations are consistent
info
Tool 'create_agent_suppression' annotations are consistent
info
Tool 'delete_agent_suppression' annotations are consistent
info
Tool 'list_webhooks' annotations are consistent
info
Tool 'get_webhook' annotations are consistent
info
Tool 'create_webhook' annotations are consistent
info
Tool 'update_webhook' annotations are consistent
high
Tool 'delete_webhook' claims readOnly but name implies destructive operation
info
Tool 'rotate_webhook_secret' annotations are consistent
info
Tool 'test_webhook' annotations are consistent
info
Tool 'list_webhook_deliveries' annotations are consistent
info
Tool 'get_agent_metrics' annotations are consistent
info
Tool 'get_account_metrics' annotations are consistent
info
Tool 'list_events' annotations are consistent
info
Tool 'get_event' annotations are consistent
info
Tool 'redeliver_event' annotations are consistent
info
Tool 'list_agents' annotations are consistent
info
Tool 'get_agent' annotations are consistent
info
Tool 'whoami' annotations are consistent
medium
Tool 'create_agent' claims readOnly but name implies write operation
medium
Tool 'update_agent' claims readOnly but name implies write operation
info
Tool 'get_protection' annotations are consistent
info
Tool 'update_protection' annotations are consistent
info
Tool 'restore_agent' annotations are consistent
info
Tool 'delete_agent' annotations are consistent
info
Tool 'list_contacts' annotations are consistent
info
Tool 'get_contact' annotations are consistent
info
Tool 'create_contact' annotations are consistent
info
Tool 'update_contact' annotations are consistent
info
Tool 'delete_contact' annotations are consistent
info
Tool 'import_contacts' annotations are consistent
high
Tool 'delete_contact_import' claims readOnly but name implies destructive operation
info
Tool 'list_outreach_contacts' annotations are consistent
info
Tool 'get_outreach_contact' annotations are consistent
info
Tool 'set_outreach_contact' annotations are consistent
info
Tool 'delete_outreach_contact' annotations are consistent
info
Tool 'send_message' annotations are consistent
info
Tool 'reply_to_message' annotations are consistent
info
Tool 'forward_message' annotations are consistent
medium
Tool 'update_message_labels' claims readOnly but name implies write operation
info
Tool 'list_conversations' annotations are consistent
info
Tool 'get_conversation' annotations are consistent
info
Tool 'list_messages' annotations are consistent
info
Tool 'restore_message' annotations are consistent
info
Tool 'delete_message' annotations are consistent
info
Tool 'get_message' annotations are consistent
info
Tool 'get_message_lifecycle' annotations are consistent
info
Tool 'get_attachment' annotations are consistent
info
Tool 'list_api_keys' annotations are consistent
info
Tool 'create_api_key' annotations are consistent
info
Tool 'delete_api_key' annotations are consistent
info
Tool 'list_reviews' annotations are consistent
info
Tool 'get_review' annotations are consistent
info
Tool 'approve_review' annotations are consistent
info
Tool 'reject_review' annotations are consistent
info
Tool 'send_email' annotations are consistent
info
Tool 'get_attachment_data' annotations are consistent
info
Tool 'list_pending_messages' annotations are consistent
info
Tool 'get_pending_message' annotations are consistent
info
Tool 'approve_pending_message' annotations are consistent
info
Tool 'approve_message' annotations are consistent
info
Tool 'list_templates' annotations are consistent
info
Tool 'get_template' annotations are consistent
info
Tool 'create_template' annotations are consistent
medium
Tool 'update_template' claims readOnly but name implies write operation
high
Tool 'delete_template' claims readOnly but name implies destructive operation
info
Tool 'validate_template' annotations are consistent
info
Tool 'list_starter_templates' annotations are consistent
info
Tool 'get_starter_template' annotations are consistent
info
Tool 'list_domains' annotations are consistent
info
Tool 'register_domain' annotations are consistent
info
Tool 'get_domain' annotations are consistent
info
Tool 'verify_domain' annotations are consistent
info
Tool 'delete_domain' annotations are consistent
low
Tool 'list_messages' has no annotations
low
Tool 'get_message' has no annotations
low
Tool 'get_conversation' has no annotations
low
Tool 'submit_feedback' has no annotations
low
Tool 'feedback_status' has no annotations
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 171 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: mcp@1.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: langchain@1 (GHSA-gr75-jv2w-4656)
medium
Vulnerable dependency: langchain@1 (PYSEC-2026-2192)
medium
Vulnerable dependency: langchain-anthropic@1 (GHSA-gr75-jv2w-4656)
medium
Vulnerable dependency: langchain-anthropic@1 (PYSEC-2026-2556)
medium
Vulnerable dependency: mcp@1 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1 (PYSEC-2026-3483)
medium
Vulnerable dependency: pydantic@2.12,<3 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.12,<3 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.12,<3 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.12,<3 (PYSEC-2026-1812)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-2xpw-w6gg-jr37)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-34jh-p97f-mpxf)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-38jv-5279-wg99)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-g4mx-q9vg-27p4)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-gm62-xv2j-4w53)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-pq67-6m6q-mj2v)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-qccp-gfcp-xxvc)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-v845-jxx5-vc9f)
medium
Vulnerable dependency: urllib3@1.25 (GHSA-wqvq-5m8c-6g24)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2020-148)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2021-108)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2023-192)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2023-212)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-141)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-1994)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-1995)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-1996)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-1998)
medium
Vulnerable dependency: urllib3@1.25 (PYSEC-2026-1999)
medium
Vulnerable dependency: python-dotenv@1.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0 (PYSEC-2026-2270)
medium
Vulnerable dependency: golang.org/x/crypto@0.57.0 (GO-2026-5932)
medium
Vulnerable dependency: github.com/gorilla/websocket@1.5.0 (GHSA-w67g-5rqw-f597)
medium
Vulnerable dependency: github.com/gorilla/websocket@1.5.0 (GO-2026-6278)
medium
Vulnerable dependency: go.opentelemetry.io/otel@1.43.0 (GO-2026-5158)
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.43.0 (GHSA-8wmf-6v46-5gfg)
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.43.0 (GHSA-8wmf-6v46-5gfg)
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/zipkin@1.21.0 (GHSA-8wmf-6v46-5gfg)
medium
Vulnerable dependency: go.opentelemetry.io/otel/sdk@1.43.0 (GHSA-8wmf-6v46-5gfg)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-2v4p-qf9q-27wj)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-hrxh-6v49-42gf)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-qc2q-p7wx-3px3)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-vp52-pcj8-j9qc)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6061)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6348)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6441)
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6443)
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/sdks/python/tests/test_contract.py:894
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/sdks/typescript/test/v1/contract.test.ts:476
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/sdks/typescript/test/v1/contract.test.ts:480
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/sdks/typescript/test/v1/contract.test.ts:606
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/sdks/typescript/test/v1/contract.test.ts:799
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/cli/src/commands/listen.ts:339
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/policy_test.go:17
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/keyring_test.go:31
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/keyring_test.go:32
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/keyring_test.go:33
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/policy_integration_test.go:582
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/sendingpolicy/schema_integration_test.go:819
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/config_test.go:48
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/config_test.go:76
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/config_test.go:152
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/config_test.go:262
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/config_test.go:1158
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/config/delegated_test.go:51
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/testutil/testdb/db_test.go:78
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/internal/testutil/testdb/db.go:373
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/tests/e2e-prod/suites/20-attachments.test.ts:157
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/tests/e2e-prod/suites/27-mcp-agents-messages.test.ts:394
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/mcp/tests/tools.test.ts:1714
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/mcp/src/tools/attachments.ts:44
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/mcp/src/tools/attachments.ts:82
medium
High-entropy string (6.29 bits/char) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/email-evals-runtime.bundle.mjs:27
medium
High-entropy string (6.00 bits/char) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/email-evals-runtime.bundle.mjs:32
medium
High-entropy string (5.70 bits/char) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/email-evals-runtime.bundle.mjs:33
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/email-evals-runtime.bundle.mjs:17
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/email-evals-runtime.bundle.mjs:32
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/e2a-adapter-observe.test.mjs:1056
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/e2a-adapter-observe.test.mjs:1057
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/e2a-adapter-observe.test.mjs:1093
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/e2a-adapter-observe.test.mjs:1100
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/mime.test.mjs:21
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/grade-content.test.mjs:125
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/test/grade-content.test.mjs:140
medium
Buffer.from base64 in tokencanopy-e2a-dfa2718/plugins/e2a/skills/email-evals/runtime/lib/mime.mjs:30
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/scripts/vendor-redoc.mjs:13
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/scripts/vendor-redoc.mjs:16
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/scripts/vendor-redoc.mjs:19
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/scripts/vendor-umami-tracker.mjs:8
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/scripts/vendor-umami-tracker.mjs:10
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/components/UmamiTracker.asset.test.ts:35
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/components/UmamiTracker.asset.test.ts:43
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/components/UmamiTracker.asset.test.ts:47
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/api-docs/Redoc.asset.test.ts:194
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/api-docs/Redoc.asset.test.ts:195
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/api-docs/Redoc.asset.test.ts:203
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/api-docs/Redoc.asset.test.ts:207
medium
Hex string literal (>50 chars) in tokencanopy-e2a-dfa2718/web/src/app/api-docs/Redoc.asset.test.ts:217
info
package.json metadata
info
pyproject.toml metadata
info
Tool: list_suppressions
info
Tool: delete_suppression
info
Tool: list_agent_suppressions
info
Tool: create_agent_suppression
info
Tool: delete_agent_suppression
info
Tool: list_webhooks
info
Tool: get_webhook
info
Tool: create_webhook
info
Tool: update_webhook
info
Tool: delete_webhook
info
Tool: rotate_webhook_secret
info
Tool: test_webhook
info
Tool: list_webhook_deliveries
info
Tool: get_agent_metrics
info
Tool: get_account_metrics
info
Tool: list_events
info
Tool: get_event
info
Tool: redeliver_event
info
Tool: list_agents
info
Tool: get_agent
info
Tool: whoami
info
Tool: create_agent
info
Tool: update_agent
info
Tool: get_protection
info
Tool: update_protection
info
Tool: restore_agent
info
Tool: delete_agent
info
Tool: list_contacts
info
Tool: get_contact
info
Tool: create_contact
info
Tool: update_contact
info
Tool: delete_contact
info
Tool: import_contacts
info
Tool: delete_contact_import
info
Tool: list_outreach_contacts
info
Tool: get_outreach_contact
info
Tool: set_outreach_contact
info
Tool: delete_outreach_contact
info
Tool: send_message
info
Tool: reply_to_message
info
Tool: forward_message
info
Tool: update_message_labels
info
Tool: list_conversations
info
Tool: get_conversation
info
Tool: list_messages
info
Tool: restore_message
info
Tool: delete_message
info
Tool: get_message
info
Tool: get_message_lifecycle
info
Tool: get_attachment
info
Tool: list_api_keys
info
Tool: create_api_key
info
Tool: delete_api_key
info
Tool: list_reviews
info
Tool: get_review
info
Tool: approve_review
info
Tool: reject_review
info
Tool: send_email
info
Tool: get_attachment_data
info
Tool: list_pending_messages
info
Tool: get_pending_message
info
Tool: approve_pending_message
info
Tool: approve_message
info
Tool: list_templates
info
Tool: get_template
info
Tool: create_template
info
Tool: update_template
info
Tool: delete_template
info
Tool: validate_template
info
Tool: list_starter_templates
info
Tool: get_starter_template
info
Tool: list_domains
info
Tool: register_domain
info
Tool: get_domain
info
Tool: verify_domain
info
Tool: delete_domain
info
Tool: submit_feedback
info
Tool: feedback_status
info
Transport: streamable-http
info
Required env vars (139)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
critical
Tool poisoning in 'get_attachment': Directive language: 'you must'
info
SBOM generated: 1430 components
high
Generic API Key Assignment found in tokencanopy-e2a-dfa2718/docs/superpowers/plans/2026-08-08-email-agent-eval-factory-v0.md
medium
No build provenance detected (SLSA L0)