← MCP Registry Integrity Report
com.directmailamerica/mcp
Verdict: CRITICAL findings present. Endpoint https://directmailamerica.com/api/mcp. Tools now: 71 (71 ever seen). Changes recorded: 71. Findings: 8 high, 1 critical. Last probe: OK at 2026-10-24T00:17 UTC. JSON
Current tools
approve_email_letter · archive_email_letterhead · check_email_box · convert_postcard_image · create_credit_checkout · delete_address · delete_cover_sheet · delete_email_letter_rule · delete_email_letters · delete_email_postcard · delete_email_postcard_rule · download_email_letter · download_email_letterhead · download_email_letters · download_job_document · edit_email_letter · enable_email_to_postcard · generate_email_postcard_artwork · generate_postcard_artwork · get_billing_history · get_connection_status · get_credits · get_email_letter · get_email_letter_polling · get_email_postcard · get_email_postcard_quote · get_email_to_letter · get_email_to_postcard · get_job_details · get_letter_status · get_payment_status · get_pricing · get_product_catalog · get_product_quote · get_webhook_settings · get_workspace_settings · hold_email_postcard_review · list_addresses · list_cover_sheets · list_email_letterheads · list_email_letters · list_email_postcards · list_jobs · prepare_email_letter · preview_email_letter · preview_email_letterhead · preview_email_postcard · preview_letter · preview_product_quote · purchase_credits · quote_email_postcard · quote_product · reapply_email_letter · reject_email_letter · render_cover_sheet · request_email_box · revise_email_postcard_quote · save_address · save_cover_sheet · save_email_letter_rule · save_email_letterhead · save_email_postcard_rule · send_letter · send_product_quote · start_account_login · test_webhook · update_email_letter_polling · update_email_letter_settings · update_webhook_settings · update_workspace_settings · validate_address
Findings (24)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-24 | get_connection_status | secret_material_reference | high | opes and each tool permission. Never returns credentials. Browser sign-in alone does not connect MCP. |
| 2026-10-24 | send_product_quote | secret_material_reference | high | stcard quotes require a production workspace credential and the usual OAuth read/write/send permissions. |
| 2026-10-24 | start_account_login | secret_material_reference | high | art authentication, create an account, issue credentials, change permissions, or send mail. Website sign-in is separate |
| 2026-10-24 | preview_email_letterhead | cross_tool_reference | high | references sibling tool 'preview_email_letter' |
| 2026-10-24 | download_email_letterhead | cross_tool_reference | high | references sibling tool 'download_email_letter' |
| 2026-10-24 | download_email_letters | cross_tool_reference | high | references sibling tool 'download_email_letter' |
| 2026-10-24 | request_email_box | secret_material_reference | high | ace. Returns activation state, never mailbox credentials. No email or letter is sent by this tool. |
| 2026-10-24 | check_email_box | secret_material_reference | high | updated workspace and demo state; no mailbox credentials. |
| 2026-10-24 | get_email_letter | cross_tool_reference | high | references sibling tool 'download_email_letter' |
| 2026-10-24 | download_email_letter | secret_material_reference | high | e owning workspace. No public URL or mailbox password is exposed; clients can decode and save the resource. |
| 2026-10-24 | prepare_email_letter | cross_tool_reference | high | references sibling tool 'approve_email_letter' |
| 2026-10-24 | get_email_letter_polling | cross_tool_reference | high | references sibling tool 'get_email_letter' |
| 2026-10-24 | enable_email_to_postcard | exfiltration_pattern | critical | address enters its separate queue, including BCC delivery; no subject prefix is required. Does not change letter |
| 2026-10-24 | enable_email_to_postcard | secret_material_reference | high | nding postcardAddress. Never returns mailbox credentials. Every email delivered to the postcard address enters its separ |
| 2026-10-24 | get_email_postcard | cross_tool_reference | high | references sibling tool 'preview_email_postcard' |
| 2026-10-24 | quote_email_postcard | cross_tool_reference | high | references sibling tool 'send_product_quote' |
| 2026-10-24 | get_email_postcard_quote | cross_tool_reference | high | references sibling tool 'get_email_postcard' |
| 2026-10-24 | save_email_postcard_rule | cross_tool_reference | high | references sibling tool 'get_email_postcard' |
| 2026-10-24 | delete_email_postcard_rule | cross_tool_reference | high | references sibling tool 'delete_email_postcard' |
| 2026-10-24 | generate_email_postcard_artwork | cross_tool_reference | high | references sibling tool 'preview_email_postcard' |
| 2026-10-24 | get_workspace_settings | secret_material_reference | high | for account security, member invitations and API-key management. Never returns credentials or webhook signing secrets |
| 2026-10-24 | preview_product_quote | cross_tool_reference | high | references sibling tool 'send_product_quote' |
| 2026-10-24 | list_cover_sheets | cross_tool_reference | high | references sibling tool 'save_cover_sheet' |
| 2026-10-24 | save_cover_sheet | cross_tool_reference | high | references sibling tool 'list_cover_sheets' |
Change history (71)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-24 00:17 | get_connection_status | added | high |
| 2026-10-24 00:17 | get_product_catalog | added | info |
| 2026-10-24 00:17 | quote_product | added | info |
| 2026-10-24 00:17 | send_product_quote | added | high |
| 2026-10-24 00:17 | send_letter | added | info |
| 2026-10-24 00:17 | get_letter_status | added | info |
| 2026-10-24 00:17 | list_jobs | added | info |
| 2026-10-24 00:17 | get_pricing | added | info |
| 2026-10-24 00:17 | get_credits | added | info |
| 2026-10-24 00:17 | purchase_credits | added | info |
| 2026-10-24 00:17 | create_credit_checkout | added | info |
| 2026-10-24 00:17 | get_payment_status | added | info |
| 2026-10-24 00:17 | start_account_login | added | high |
| 2026-10-24 00:17 | list_email_letterheads | added | info |
| 2026-10-24 00:17 | save_email_letterhead | added | info |
| 2026-10-24 00:17 | archive_email_letterhead | added | info |
| 2026-10-24 00:17 | preview_email_letterhead | added | high |
| 2026-10-24 00:17 | download_email_letterhead | added | high |
| 2026-10-24 00:17 | download_email_letters | added | high |
| 2026-10-24 00:17 | delete_email_letters | added | info |
| 2026-10-24 00:17 | preview_email_letter | added | info |
| 2026-10-24 00:17 | get_email_to_letter | added | info |
| 2026-10-24 00:17 | request_email_box | added | high |
| 2026-10-24 00:17 | check_email_box | added | high |
| 2026-10-24 00:17 | update_email_letter_settings | added | info |
| 2026-10-24 00:17 | save_email_letter_rule | added | info |
| 2026-10-24 00:17 | delete_email_letter_rule | added | info |
| 2026-10-24 00:17 | list_email_letters | added | info |
| 2026-10-24 00:17 | get_email_letter | added | high |
| 2026-10-24 00:17 | download_email_letter | added | high |
| 2026-10-24 00:17 | edit_email_letter | added | info |
| 2026-10-24 00:17 | prepare_email_letter | added | high |
| 2026-10-24 00:17 | reapply_email_letter | added | info |
| 2026-10-24 00:17 | approve_email_letter | added | info |
| 2026-10-24 00:17 | reject_email_letter | added | info |
| 2026-10-24 00:17 | get_email_letter_polling | added | high |
| 2026-10-24 00:17 | update_email_letter_polling | added | info |
| 2026-10-24 00:17 | hold_email_postcard_review | added | info |
| 2026-10-24 00:17 | delete_email_postcard | added | info |
| 2026-10-24 00:17 | get_email_to_postcard | added | info |
| 2026-10-24 00:17 | enable_email_to_postcard | added | critical |
| 2026-10-24 00:17 | list_email_postcards | added | info |
| 2026-10-24 00:17 | get_email_postcard | added | high |
| 2026-10-24 00:17 | preview_email_postcard | added | info |
| 2026-10-24 00:17 | quote_email_postcard | added | high |
| 2026-10-24 00:17 | get_email_postcard_quote | added | high |
| 2026-10-24 00:17 | revise_email_postcard_quote | added | info |
| 2026-10-24 00:17 | save_email_postcard_rule | added | high |
| 2026-10-24 00:17 | delete_email_postcard_rule | added | high |
| 2026-10-24 00:17 | generate_email_postcard_artwork | added | high |
| 2026-10-24 00:17 | list_addresses | added | info |
| 2026-10-24 00:17 | validate_address | added | info |
| 2026-10-24 00:17 | save_address | added | info |
| 2026-10-24 00:17 | delete_address | added | info |
| 2026-10-24 00:17 | get_workspace_settings | added | high |
| 2026-10-24 00:17 | update_workspace_settings | added | info |
| 2026-10-24 00:17 | get_billing_history | added | info |
| 2026-10-24 00:17 | get_job_details | added | info |
| 2026-10-24 00:17 | download_job_document | added | info |
| 2026-10-24 00:17 | get_product_quote | added | info |
| 2026-10-24 00:17 | preview_product_quote | added | high |
| 2026-10-24 00:17 | list_cover_sheets | added | high |
| 2026-10-24 00:17 | save_cover_sheet | added | high |
| 2026-10-24 00:17 | delete_cover_sheet | added | info |
| 2026-10-24 00:17 | render_cover_sheet | added | info |
| 2026-10-24 00:17 | convert_postcard_image | added | info |
| 2026-10-24 00:17 | generate_postcard_artwork | added | info |
| 2026-10-24 00:17 | preview_letter | added | info |
| 2026-10-24 00:17 | get_webhook_settings | added | info |
| 2026-10-24 00:17 | update_webhook_settings | added | info |
| 2026-10-24 00:17 | test_webhook | added | info |
Probe history
10-24 00:17 OK (71)
Run or depend on com.directmailamerica/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).