STACK CHECK DOCS PRICING GET STARTED

// MCP SERVER RECORD

Mcp Mailtrap

Unverified

NPMmcp-mailtrap

FRisk gradecritical blast radius

Catalogue entry updated 10 days ago

Auth postureNot probedno remote endpoint probed yet

Tools8614 Destructive · 1 Execute · 30 Write · 41 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 14Execute 1Write 30Read 41

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.

Tools 86

clean-sandbox-inboxDestructiveHigh delete-api-tokenDestructiveHigh delete-contactDestructiveHigh delete-contact-fieldDestructiveHigh delete-contact-listDestructiveHigh

View all 86 tools

delete-sandbox-inboxDestructiveHigh delete-sandbox-messageDestructiveHigh delete-sandbox-projectDestructiveHigh delete-sending-domainDestructiveHigh delete-suppressionDestructiveHigh delete-templateDestructiveHigh delete-webhookDestructiveHigh remove-account-accessDestructiveHigh reset-api-tokenDestructiveHigh send-emailExecuteHigh batch-send-bulk-emailWriteHigh batch-send-transactional-emailWriteMedium bulk-update-permissionsWriteHigh create-api-tokenWriteHigh create-contactWriteMedium create-contact-eventWriteMedium create-contact-exportWriteMedium create-contact-fieldWriteMedium create-contact-importWriteHigh create-contact-listWriteMedium create-sandbox-inboxWriteMedium create-sandbox-projectWriteMedium create-sending-domainWriteMedium create-sub-accountWriteHigh create-templateWriteMedium create-webhookWriteMedium enable-sandbox-email-addressWriteMedium mark-sandbox-as-readWriteLow reset-sandbox-credentialsWriteMedium reset-sandbox-email-addressWriteMedium send-sandbox-emailWriteMedium send-sending-domain-setup-instructionsWriteLow update-contactWriteMedium update-contact-fieldWriteMedium update-contact-listWriteMedium update-sandbox-inboxWriteMedium update-sandbox-messageWriteLow update-sandbox-projectWriteMedium update-templateWriteMedium update-webhookWriteMedium forward-sandbox-messageReadLow get-api-tokenReadLow get-billing-usageReadLow get-contactReadLow get-contact-exportReadLow get-contact-fieldReadLow get-contact-importReadLow get-contact-listReadLow get-email-log-messageReadLow get-permission-resourcesReadLow get-sandbox-attachmentReadLow get-sandbox-inboxReadLow get-sandbox-message-emlReadLow get-sandbox-message-headersReadLow get-sandbox-message-htmlReadLow get-sandbox-message-html-analysisReadLow get-sandbox-message-html-sourceReadLow get-sandbox-message-rawReadLow get-sandbox-message-spam-scoreReadLow get-sandbox-message-textReadLow get-sandbox-messagesReadLow get-sandbox-projectReadLow get-sending-domainReadLow get-sending-statsReadLow get-templateReadLow get-webhookReadLow list-account-accessesReadMedium list-accountsReadLow list-api-tokensReadLow list-contact-fieldsReadLow list-contact-listsReadLow list-email-logsReadLow list-sandbox-attachmentsReadLow list-sandbox-projectsReadLow list-sandboxesReadLow list-sending-domainsReadLow list-sub-accountsReadLow list-suppressionsReadLow list-templatesReadLow list-webhooksReadLow show-sandbox-email-messageReadLow

Change history

No changes recorded since first scan. Watched servers surface a diff within the hour.

Recommended policy

clean-sandbox-inboxdeny

send-emailrequire approval

batch-send-bulk-emailrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →

// RUNNING THIS SERVER

DIRECT INSTALL npx -y mcp-mailtrap

Installed this way, nothing enforces the recommended policy above — calls run exactly as the agent makes them.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →