temwaySAFE
Temway MCP server
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Let your AI assistant design beautiful emails & layouts — in your Temway workspace.
A Model Context Protocol server that turns Claude, ChatGPT, Cursor and friends into a visual email & layout authoring studio.
[](https://modelcontextprotocol.io) [](./LICENSE) [](https://mcp.temway.com/health)
Getting Started · Clients · Tools · Temway
Temway is a visual builder for emails and layouts. This MCP server exposes your Temway workspace to any MCP-compatible AI client: the model reads your brand tokens, drafts a promo / newsletter / welcome email, previews it, publishes it, and even sends a test — all through natural language. No code, no drag-and-drop, no copy-pasting HTML.
It is a hosted remote MCP server. You point your client at a URL with an API key (or OAuth for web clients) — there is nothing to install, build, or run locally. The server speaks the MCP Streamable HTTP transport.
🔒 No source here? Correct. This is the public onboarding repo for the Temway MCP server. The server is operated by Temway and runs at https://mcp.temway.com/mcp. This repo holds client configuration, tool reference, and connectivity helpers. Report issues / request tools in Issues.How it works
Your AI client (Claude / ChatGPT / Cursor / Desktop) └─ MCP over HTTPS → https://mcp.temway.com/mcp Authorization: Bearer tmw_live_... ← API key (or OAuth token for web connectors) └─ Temway public API → your workspace
The model authenticates per-r
389bc9a1ff3aOBSERVED · 2026-10-14Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add temway-mcp-server -- npx -y [email protected]
{
"mcpServers": {
"temway-mcp-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Trust audit
SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
streamable-http
Gates applied: no_behavioural_pass.
389bc9a1ff3afull audit observations/trust-audit/mcp-server/temway__mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | 389bc9a1ff3a | SAFE | B | 88 | first audit |
Questions
What is the temway MCP server?
Temway MCP server
Is temway safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does temway need?
No credential environment variables were found in its source, so it appears to need none.
How does temway run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as temway-mcp-server at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (389bc9a1ff3a), read on 2026-10-14. The repository is watched and re-audited when it changes.