SendGrid Secure MCP Server

io.github.Choppaaahh/sendgrid-mcp-secure

Repository Registry

What is the SendGrid Secure MCP server?

Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.

How to install SendGrid Secure

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

SENDGRID_API_KEY
required
secret
SendGrid API key (use a restricted key with Mail Send scope only)
SENDGRID_MCP_MODE
dry-run (default) or live
SENDGRID_MCP_RECIPIENT_ALLOWLIST
Comma-separated recipient addresses/domains allowed to receive mail
SENDGRID_MCP_WRITES_PER_HOUR
Hourly cap on write operations (sends)
SENDGRID_MCP_MAX_RECIPIENTS
Max recipients per send
SENDGRID_MCP_AUDIT_LOG
Path to the append-only audit log
SENDGRID_MCP_ALLOW_BCC
BCC stays disabled unless explicitly enabled

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "sendgrid-mcp-secure": {
      "command": "uvx",
      "args": [
        "sendgrid-mcp-secure"
      ],
      "env": {
        "SENDGRID_API_KEY": "<YOUR_SENDGRID_API_KEY>",
        "SENDGRID_MCP_MODE": "<YOUR_SENDGRID_MCP_MODE>",
        "SENDGRID_MCP_RECIPIENT_ALLOWLIST": "<YOUR_SENDGRID_MCP_RECIPIENT_ALLOWLIST>",
        "SENDGRID_MCP_WRITES_PER_HOUR": "<YOUR_SENDGRID_MCP_WRITES_PER_HOUR>",
        "SENDGRID_MCP_MAX_RECIPIENTS": "<YOUR_SENDGRID_MCP_MAX_RECIPIENTS>",
        "SENDGRID_MCP_AUDIT_LOG": "<YOUR_SENDGRID_MCP_AUDIT_LOG>",
        "SENDGRID_MCP_ALLOW_BCC": "<YOUR_SENDGRID_MCP_ALLOW_BCC>"
      }
    }
  }
}