Atlas / MCP servers / resend / Send Email

Send EmailCAUTION

Name: Send Email
Author: resend

mcp/resend/send-email

MCP server by resend · Audited 2026-09-30

⚑ Report / re-scan Source ↗

The official MCP server to send emails and interact with Resend

Verdict

CAUTION

Grade

Trust score

89 /100

Exposed tools

107 60r · 33w · 14d

Transport

streamable-http

License

MIT

Stars

575

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/resend-mcp)

Connect your AI agent to the Resend platform. Send and receive emails, manage contacts, broadcasts, domains, and more, directly from any MCP client like Claude, Cursor, or Claude Code.

We offer both a remote MCP server hosted by Resend and a local MCP server (this package).

Remote MCP Server

Resend hosts the MCP server at:

https://mcp.resend.com/mcp

Connect any MCP client that supports remote servers (Streamable HTTP). There's nothing to install and no local process to run, which makes it the best option for web-based clients like Claude and hosted agent platforms.

When you connect, your client opens a browser window to log in to Resend and approve access using OAuth.

Claude Code

claude mcp add --transport http resend https://mcp.resend.com/mcp

Then run /mcp in Claude Code and select resend to complete the OAuth login.

Claude

In Claude (web or desktop), open Settings > Connectors > Add custom connector and enter:

https://mcp.resend.com/mcp

Cursor

Open the command palette and choose "Cursor Settings" > "MCP" > "Add new global MCP server".

{
"mcpServers": {
"resend": {
"url": "https://mcp.resend.com/mcp"
}
}
}

Codex

codex mcp add resend --url https://mcp.resend.com/mcp

Copilot

To use GitHub Copilot in VS Code, add the following to your settings.json:

{
"mcp": {
"servers": {
"resend": {
"type": "http",
"url": "https://mcp.resend.com/mcp"
}
}
}
}

Windsurf

{
"mcpServers": {
"resend": {
"serverUrl": "https://mcp.resend.com/mcp"
}
}
}

Warp

In Warp's Settings, navigate to Agents > MCP servers, and click +Add to add a new server.

{
"resend": {

Read from source at commit 08a3fd1f254fOBSERVED · 2026-09-30

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add resend-mcp -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "resend-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (107)

60 read · 33 write · 14 destructive. Blast radius: 14 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`add-contact-to-segment`	write
`add-suppression`	write
`batch-add-suppressions`	write
`batch-remove-suppressions`	destructive
`cancel-broadcast`	read
`cancel-email`	read
`compose-broadcast`	read
`compose-template`	read
`connect-to-editor`	read
`create-api-key`	write
`create-automation`	write
`create-broadcast`	write
`create-contact`	write
`create-contact-import`	write
`create-contact-property`	write
`create-domain`	write
`create-domain-claim`	write
`create-segment`	write
`create-template`	write
`create-topic`	write
`create-webhook`	write
`disconnect-from-editor`	read
`duplicate-automation`	read
`duplicate-broadcast`	read
`duplicate-template`	read
`get-automation`	read
`get-automation-runs`	read
`get-broadcast`	read
`get-contact`	read
`get-contact-import`	write
`get-contact-property`	read
`get-domain`	read
`get-domain-claim`	read
`get-email`	read
`get-email-metrics`	read
`get-log`	read
`get-received-email`	read
`get-received-email-attachment`	read
`get-segment`	read
`get-sent-email-attachment`	read
`get-suppression`	read
`get-template`	read
`get-tiptap-json-content`	read
`get-topic`	read
`get-usage`	read
`get-webhook`	read
`get-webhook-event`	read
`list-api-keys`	read
`list-broadcast-clicked-links`	read
`list-broadcast-recipients`	read
`list-broadcasts`	read
`list-contact-imports`	read
`list-contact-properties`	read
`list-contact-segments`	read
`list-contact-topics`	read
`list-contacts`	read
`list-domains`	read
`list-emails`	read
`list-logs`	read
`list-oauth-grants`	read
`list-received-email-attachments`	read
`list-received-emails`	read
`list-segments`	read
`list-sent-email-attachments`	read
`list-suppressions`	read
`list-templates`	read
`list-topics`	read
`list-webhook-event-attempts`	read
`list-webhook-events`	read
`list-webhooks`	read
`manage-events`	read
`ping`	read
`publish-template`	write
`remove-api-key`	destructive
`remove-automation`	destructive
`remove-broadcast`	destructive
`remove-contact`	destructive
`remove-contact-from-segment`	destructive
`remove-contact-property`	destructive
`remove-domain`	destructive
`remove-segment`	destructive
`remove-suppression`	destructive
`remove-template`	destructive
`remove-topic`	destructive
`remove-webhook`	destructive
`replay-webhook-event`	read
`revoke-oauth-grant`	destructive
`rotate-webhook-signing-secret`	read
`send-batch-emails`	write
`send-broadcast`	write
`send-email`	write
`send-event`	write
`share-email`	read
`update-api-key`	write
`update-automation`	write
`update-broadcast`	write
`update-contact`	write
`update-contact-property`	write
`update-contact-topics`	write
`update-domain`	write
`update-email`	write
`update-segment`	write
`update-template`	write
`update-topic`	write
`update-webhook`	write
`verify-domain`	read
`verify-domain-claim`	read

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (3 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (12)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

batch-remove-suppressions, remove-api-key, remove-automation, remove-broadcast, remove-contact, remove-contact-from-segment, remove-contact-property, remove-domain, remove-segment, remove-suppression,

Why it matters. 14 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/cli/index.ts:2

import packageJson from '../../package.json' with { type: 'json' };

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/cli/help.test.ts:2

import { HELP_TEXT, printHelp } from '../../src/cli/help.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/cli/parse.test.ts:3

import { parseArgs, parseReplierAddresses } from '../../src/cli/parse.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/cli/resolve.test.ts:2

import { parseArgs } from '../../src/cli/parse.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/cli/resolve.test.ts:3

import { resolveConfig } from '../../src/cli/resolve.js';