Mailgun MCP Server

Findings (20)

• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.26.0: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.2: 2 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fast-uri@3.1.0: 12 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  hono@4.12.14: 26 known vulnerabilities

  GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-69xw-7hcm-h432 +21 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  ip-address@10.1.0: 6 known vulnerabilities

  GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  js-yaml@4.1.1: 4 known vulnerabilities

  GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  nanoid@3.3.11: 3 known vulnerabilities

  GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  postcss@8.5.12: 2 known vulnerabilities

  GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.0.6: 7 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.3.6: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.14: 2 known vulnerabilities

  GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@4.1.3: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.15.1: 4 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  vitest@4.1.3: 1 known vulnerability

  GHSA-82fw-gwwq-j7x9

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  husky

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  MAILGUN_API_HOSTNAME

Network activity

Tools exposed (74)

• post-v3-domain-messages

  Send an email

• get-v3-domains-domain-messages-storage_key

  Retrieve a stored email

• post-v3-domains-domain-messages-storage_key

  Resend an email

• get-v4-domains

  Get domains

• get-v4-domains-name

  Get domain details

• put-v4-domains-name-verify

  Verify Domain

• get-v3-domains-name-sending_queues

  Get messages queue status

• get-v3-domains-name-tracking

  Get tracking settings

• put-v3-domains-name-tracking-click

  Update click tracking settings

• put-v3-domains-name-tracking-open

  Update open tracking settings

• put-v3-domains-name-tracking-unsubscribe

  Update unsubscribe tracking settings

• get-v3-domains-domain-webhooks

  Get domain webhooks

• post-v3-domains-domain-webhooks

  Create a domain webhook

• get-v3-domains-domain-webhooks-webhook

  Get domain webhooks by type

• put-v3-domains-domain-webhooks-webhook

  Update domain webhook

• get-v5-accounts-subaccounts-ip_pools-all

  List DIPPs delegated to subaccounts

• get-v3-ips

  List account IPs

• get-v3-ips-ip

  Get details about account IP

• get-v3-ips-ip-domains

  Get all domains of an account where a specific IP is assigned

• get-v3-ip_pools

  List dedicated IP pools of the account

• get-v3-ip_pools-pool_id

  Get DIPP details

• get-v3-ip_pools-pool_id-domains

  Get domains linked to DIPP

• get-v3-domain-tags

  List all tags

• get-v3-domain-tag

  Get a tag

• get-v3-domain-tag-stats-aggregates

  Get aggregate stat types by tag

• get-v3-domain-tag-stats

  Get stats by tag

• get-v3-domains-domain-tag-devices

  List of supported devices

• get-v3-domains-domain-tag-providers

  List of supported providers

• get-v3-domains-domain-tag-countries

  List of supported country codes

• get-v3-domains-domain-limits-tag

  Get tag limits

• get-v3-stats-total

  Totals for entire account

• get-v3-domain-stats-total

  Totals for entire domain

• get-v3-stats-total-domains

  Totals for account domains for a single time resolution

• get-v3-stats-filter

  Filtered/grouped totals for entire account

• get-v3-domain-aggregates-providers

  Aggregate counts by ESP

• get-v3-domain-aggregates-devices

  Aggregate counts by devices triggering events

• get-v3-domain-aggregates-countries

  Aggregate counts by country

• post-v1-analytics-metrics

  Query account metrics

• post-v1-analytics-usage-metrics

  Query account usage metrics

• post-v1-analytics-logs

  List logs

• get-v3-domain-bounces-address

  Lookup bounce record

• get-v3-domain-bounces

  List all bounces

• get-v3-domain-unsubscribes-address

  Lookup unsubscribe record

• get-v3-domain-unsubscribes

  List all unsubscribes

• get-v3-domain-complaints-address

  Lookup complaint record

• get-v3-domain-complaints

  List all complaints

• get-v3-domain-whitelists-value

  Lookup allowlist record

• get-v3-domain-whitelists

  List allowlist records for domain

• get-v3-routes

  Get all routes

• get-v3-routes-id

  Get a route

• put-v3-routes-id

  Update a route

• get-v3-lists

  Get mailing lists

• post-v3-lists

  Create a mailing list

• get-v3-lists-list_address

  Get a mailing list by address

• put-v3-lists-list_address

  Update a mailing list

• get-v3-lists-list_address-members

  Get mailing lists members

• post-v3-lists-list_address-members

  Create a mailing list member

• get-v3-lists-list_address-members-member_address

  Get a member

• put-v3-lists-list_address-members-member_address

  Update a mailing list member

• get-v3-domain-templates

  Get templates

• post-v3-domain-templates

  Create a template

• get-v3-domain-templates-template

  Get template

• put-v3-domain-templates-template

  Update template

• get-v3-domain-templates-template-versions

  Get all template versions

• post-v3-domain-templates-template-versions

  Create a template version

• get-v3-domain-templates-template-versions-version

  Get a version

• put-v3-domain-templates-template-versions-version

  Update a version

• get-v1-bounce-classification-stats

  List statistics, ordered by total bounces

• post-v2-bounce-classification-metrics

  List statistic v2

• get-v5-accounts-limit-custom-monthly

  Get current custom sending limit

• validate_email

  Validate Address V4

• get_inbox_placement_result

  Get Result Details

• get_preview_result

  Get Test Results

• get_metrics_summary

  Retrieve a structured summary of key sending metrics (counts and computed rates) for a domain and time window. Returns raw counts, decimal rates, and data-gap reporting. Use as a data primitive for delivery-health questions.