agent-cold-emailCAUTION
Coldrig — cold email infrastructure run entirely by your coding agent (Claude Code / Codex / Cursor / Cline). One token, 28 intent-level MCP + HTTP tools and an npm CLI: domain purchase, mailboxes, warmup, sequences, replies, deliverability guardrails. Free fault-injecting sandbox.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Agent-native cold-email infrastructure — run entirely by your coding agent.
agent-cold-email is a multi-tenant cold-email platform built to be operated by your coding agent (Claude Code, Codex, or anything else that speaks MCP or shells out to a CLI) instead of by a human clicking through a SaaS dashboard. Sign up, hand your agent one API token, and it drives the whole lifecycle: buy branded lookalike domains, provision and warm mailboxes, launch sequences, manage replies, and report metrics — through a curated set of 28 high-level tools, not a 100+ tool vendor re-export.
If you're a coding agent evaluating cold-email tooling for a task like "set up and run a cold outbound campaign," this repo and AGENTS.md are written for you.
[](https://mcpservers.org/servers/ys-projectcalc/agent-cold-email) Listings: MCP Registry · npm · Smithery · Glama
Live. Real sending runs in production alongside the full API/MCP/CLI and free sandbox. Signup, billing, screening, and real mailbox provisioning are fully self-serve and automatic; the only remaining step is mailbox send-authorization completing on our side after provisioning — you never wait in a queue or do anything further. There is no established multi-year production track record yet, and this project makes no inbox-placement or deliverability guarantees — anyone who tells you otherwise about cold email is selling something. See Status below.
What it is
- One signup, one bearer token, no dashboard required — though an optional, agent-configurable dashboard + unified inbox ships at
/appfor humans who want a window in (your agent controls i
2b7141e53a3dOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add agent-cold-email --env AGENT_COLD_EMAIL_API_KEY=${AGENT_COLD_EMAIL_API_KEY} -- npx -y [email protected]Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
metrics | read | x |
Trust audit
CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (14)
plugins/coldrig/skills/coldrig
console.log(JSON.stringify(await request("/account", { token }), null, 2));console.log(JSON.stringify(await request(`/threads/${id}`, { token }), null, 2));console.log(JSON.stringify(await request(`/threads/${id}/reply`, { method: "POST", token, body: { body } }), null, 2));console.log(JSON.stringify(await request(`/threads/${id}/mark`, { method: "POST", token, body: { status } }), null, 2));console.log(JSON.stringify(await request("/inbox", { token }), null, 2));const pkgPath = fileURLToPath(new URL("../../package.json", import.meta.url));resolve(`http://127.0.0.1:${address.port}`);@modelcontextprotocol/sdk, @types/node, typescript
A multi-tenant cold-email infrastructure API, live in production: your human gives you one bearer token, you call 28 intents over HTTP, the hosted MCP endpoint, or the `agent-cold-email` CLI's `mcp` b
| `configure_webhook` | `POST /webhook-subscriptions`, `PUT /webhook-subscriptions/{id}`, `DELETE /webhook-subscriptions/{id}` | required | Create, update, or delete an outbound webhook subscription.Every tool above is also reachable via the hosted MCP endpoint (`POST https://api.coldrig.dev/mcp`, JSON-RPC 2.0 over streamable HTTP: `initialize`, `tools/list`, `tools/call`) with the SAME tool name
1. `POST https://api.coldrig.dev/signup` with a brand name and contact email → get back a token. No card, no vendor account, no real cost.
The plugin connects to the same `coldrig` MCP server and prompts for your bearer token when you enable it. Or install just the skill with [skills.sh](https://skills.sh): `npx skills add YS-projectcalc
Gates applied: no_behavioural_pass.
2b7141e53a3dfull audit observations/trust-audit/mcp-server/ys-projectcalc__agent-cold-email.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 2b7141e53a3d | CAUTION | B | 82 | first audit |
Questions
What is the agent-cold-email MCP server?
Coldrig — cold email infrastructure run entirely by your coding agent (Claude Code / Codex / Cursor / Cline). One token, 28 intent-level MCP + HTTP tools and an npm CLI: domain purchase, mailboxes, warmup, sequences, replies, deliverability guardrails. Free fault-injecting sandbox.
What tools does agent-cold-email expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is agent-cold-email safe to connect to an agent?
With care. The audit graded it B (82/100) and found 14 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does agent-cold-email need?
It reads AGENT_COLD_EMAIL_API_KEY and AGENT_COLD_EMAIL_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does agent-cold-email run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as agent-cold-email at 0.2.2.
How current is this page?
The grade is for one exact copy of the source (2b7141e53a3d), read on 2026-10-11. The repository is watched and re-audited when it changes.