Skip to content

com.commsharbor/commsharbor

by commsharbor.com · remote · no sign-in to list tools · v1.0.1 · published by com.commsharbor

Domain email and webmail: set up domains, mailboxes and aliases, and check DNS verification.

Deletes · 4Changes · 18
CompareRegistry entry

34 tools: 4 can delete or cancel things, 18 change things and 12 only read.

Scanned Oct 21, 2026

22 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http commsharbor https://commsharbor.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn18 info
  • Warncommsharbor_logout

    The server marks "commsharbor_logout" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The description's first verb is "revoke": a word for removing or ending something.

    What this check looks for
  • Warncommsharbor_organization_get

    The server marks "commsharbor_organization_get" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true}; The name "commsharbor_organization_get" says "get": a word for reading.

    What this check looks for
  • Warncommsharbor_email_google_resolve

    The server marks "commsharbor_email_google_resolve" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The name "commsharbor_email_google_resolve" says "resolve": a word for reading.

    What this check looks for
  • Warncommsharbor_email_google_disconnect

    The server marks "commsharbor_email_google_disconnect" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The description's first verb is "remove": a word for removing or ending something.

    What this check looks for
  • Infocommsharbor_email_workspace

    The description mentions "credential".

    Matched text

    description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

    What this check looks for
  • Infocommsharbor_email_trial_activate

    The description mentions "credential".

    Matched text

    description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

    What this check looks for
Show 16 more findings

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

34 tools

Deletes or cancels 4Claude Code: deny
  • commsharbor_email_alias_updateChange the alias destinations within this organization.1 finding

    Why it is in this group

    • The name "commsharbor_email_alias_update" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Change the alias destinations within this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email alias update
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
  • commsharbor_email_google_disconnectRemove this product's saved Google connection and pending consent.1 finding

    Why it is in this group

    • The description's first verb is "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "commsharbor_email_google_disconnect" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The description's first verb is "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove this product's saved Google connection and pending consent. Existing email and service resources remain intact. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.

    Annotations the server declares

    • title: Commsharbor email google disconnect
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_mailbox_updateChange mailbox name or quota within the plan.1 finding

    Why it is in this group

    • The name "commsharbor_email_mailbox_update" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Change mailbox name or quota within the plan. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email mailbox update
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
  • commsharbor_logoutRevoke the current session.1 finding

    Why it is in this group

    • The description's first verb is "revoke": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "commsharbor_logout" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The description's first verb is "revoke": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Revoke the current session. Bootstrap/CSRF must belong to this browser and session. Other product sessions remain active.

    Annotations the server declares

    • title: Commsharbor logout
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
Changes things 18Claude Code: ask
  • commsharbor_email_alias_createCreate an alias to existing mailboxes in this organization.1 finding

    Why it is in this group

    • The name "commsharbor_email_alias_create" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Create an alias to existing mailboxes in this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email alias create
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_alias_resumeRestore a suspended alias without changing its destinations.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Restore a suspended alias without changing its destinations. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email alias resume
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_alias_suspendSuspend an alias without deleting its configuration.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Suspend an alias without deleting its configuration. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email alias suspend
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_domain_assistanceRequest assisted DNS setup.1 finding

    Why it is in this group

    • The description's first verb is "request": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...oes not change DNS or expose a provider credential. No guest access. Members can read. Own..."

      What this check looks for
    Description, as the server wrote it
    Request assisted DNS setup. The durable request waits for operator activation. It does not change DNS or expose a provider credential. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email domain assistance
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_domain_createRegister a domain and its ownership challenge.1 finding

    Why it is in this group

    • The name "commsharbor_email_domain_create" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Register a domain and its ownership challenge. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email domain create
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_domain_products_addRead or associate PageAudit and HookPulse with a domain in this organization.No findings

    Why it is in this group

    • The name "commsharbor_email_domain_products_add" says "add": a word for a change.
    Description, as the server wrote it
    Read or associate PageAudit and HookPulse with a domain in this organization. Native product access must be enabled. The private email backend confirms domain ownership in this organization. Selected native products must already be enabled. Association is idempotent.

    Annotations the server declares

    • title: Commsharbor email domain products add
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_domain_verifyQueue a check of ownership, DNS and certificates.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Queue a check of ownership, DNS and certificates. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email domain verify
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_google_connectStart five-minute Google consent with PKCE.No findings

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    Description, as the server wrote it
    Start five-minute Google consent with PKCE. Return an authorization URL. Signing in does not grant this access. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.

    Annotations the server declares

    • title: Commsharbor email google connect
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_google_resolveResolve website addresses for up to 20 selected Analytics properties.1 finding

    Why it is in this group

    • The name "commsharbor_email_google_resolve" says "resolve": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "commsharbor_email_google_resolve" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}; The name "commsharbor_email_google_resolve" says "resolve": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Resolve website addresses for up to 20 selected Analytics properties. Search Console does not use this route. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.

    Annotations the server declares

    • title: Commsharbor email google resolve
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_mailbox_createCreate a mailbox within the current allowance.1 finding

    Why it is in this group

    • The name "commsharbor_email_mailbox_create" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Create a mailbox within the current allowance. Trial mailboxes share 1 GB and cannot send email. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email mailbox create
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_mailbox_passwordSet the mailbox password.1 finding

    Why it is in this group

    • The description's first verb is "set": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Set the mailbox password. It is encrypted for the executor and is never returned. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email mailbox password
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_mailbox_resumeRestore suspended mailbox access.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Restore suspended mailbox access. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email mailbox resume
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_mailbox_suspendSuspend access while preserving mailbox data.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Suspend access while preserving mailbox data. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email mailbox suspend
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_security_checkCheck whether someone can send email as a domain: SPF, DKIM in common selectors, DMARC, MX, MTA-STS and BIMI, with a 0-100 score and the fixes, most severe first.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check whether someone can send email as a domain: SPF, DKIM in common selectors, DMARC, MX, MTA-STS and BIMI, with a 0-100 score and the fixes, most severe first. Public DNS only. Free, no account. The same domain is served from memory for 10 minutes. A network can run 30 new checks per day. DKIM is looked up in common selectors only; `dkim_not_found` does not prove that no key exists. `incomplete: true` means a DNS answer failed and the score can be lower than the real one; `unread` names those parts, and a failed query never becomes a missing finding.

    Annotations the server declares

    • title: Commsharbor email security check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_service_requestRequest an included service with activation on demand.1 finding

    Why it is in this group

    • The name "commsharbor_email_service_request" says "request": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Request an included service with activation on demand. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email service request
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_email_trial_activateStart the free receive-only Trial for 7 days, once per organization: 1 GB shared storage, unlimited mailboxes and no outgoing SMTP or external filter forwarding.1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Start the free receive-only Trial for 7 days, once per organization: 1 GB shared storage, unlimited mailboxes and no outgoing SMTP or external filter forwarding. Requires a new workspace and operator-proved native quota. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email trial activate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • commsharbor_organization_getOpen an organization by id: name, your role and the CommsHarbor plan.1 finding

    Why it is in this group

    • The name "commsharbor_organization_get" says "get": a word for reading.
    • The description's first verb is "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "commsharbor_organization_get" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true}; The name "commsharbor_organization_get" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Open an organization by id: name, your role and the CommsHarbor plan. This is how a workspace is opened. Name and role come from the shared account (null with an organization API key, which carries neither); the plan is the organization's global entitlement in CommsHarbor.

    Annotations the server declares

    • title: Commsharbor organization get
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_platform_contextConfirm the caller's platform role.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Confirm the caller's platform role. Tenant ownership grants nothing here: platform access is a separate, explicit grant.

    Annotations the server declares

    • title: Commsharbor platform context
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
Only reads 12Claude Code: allow
  • commsharbor_auditList tenant audit events.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List tenant audit events. Audit records are never rewritten and never carry recipient PII.

    Annotations the server declares

    • title: Commsharbor audit
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_brazil_email_reportRead the monthly Brazil email security report: how many domains of city halls, state and federal government, banks and listed companies reject fake email (DMARC p=reject) and how t…No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the monthly Brazil email security report: how many domains of city halls, state and federal government, banks and listed companies reject fake email (DMARC p=reject) and how they end SPF. Totals only, public DNS. Free, no account. Public DNS only, read once a month. The sample is built from Brazil's open company registry (Receita Federal, the email of each active head office) and the CVM register of listed companies. Only totals: no domain is listed. A share is `count / (com_mx - dmarc.nao_lido)`; domains without MX are left out. Only the DMARC policy classifies; SPF is counted but does not change the class. `percent` rounds each group to 100 by the largest remainder, the same rule as the page.

    Annotations the server declares

    • title: Commsharbor brazil email report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_contextResolve the active organization identity.No findings

    Why it is in this group

    • The description's first verb is "resolve": a word for reading.
    Description, as the server wrote it
    Resolve the active organization identity. Read this before a write when you are not certain which tenant is active. Guessing is how data lands in the wrong organization. An organization API key answers `kind: api_key` with its scopes.

    Annotations the server declares

    • title: Commsharbor context
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_domain_getRead domain setup, DNS records and observed readiness.1 finding

    Why it is in this group

    • The name "commsharbor_email_domain_get" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Read domain setup, DNS records and observed readiness. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email domain get
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_domain_products_listRead or associate PageAudit and HookPulse with a domain in this organization.No findings

    Why it is in this group

    • The name "commsharbor_email_domain_products_list" says "list": a word for reading.
    Description, as the server wrote it
    Read or associate PageAudit and HookPulse with a domain in this organization. Native product access must be enabled. The private email backend confirms domain ownership in this organization. Selected native products must already be enabled. Association is idempotent.

    Annotations the server declares

    • title: Commsharbor email domain products list
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_domain_setupFind an existing domain.1 finding

    Why it is in this group

    • The description's first verb is "find": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Find an existing domain. Return its organization and domain IDs only when this exact caller can open that organization. Otherwise return existing: null. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email domain setup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_google_catalogRead authorized Google metadata.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read authorized Google metadata. This does not prove DNS ownership. Requires the owner's account session; an organization key cannot authorize Google access. Requires an account session in this organization. Reads site metadata only. Google access and refresh tokens remain encrypted on the server.

    Annotations the server declares

    • title: Commsharbor email google catalog
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_job_getRead one durable job in this organization.1 finding

    Why it is in this group

    • The name "commsharbor_email_job_get" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Read one durable job in this organization. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email job get
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_workspaceRead the email workspace.1 finding

    Why it is in this group

    • The description's first verb is "read": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s can manage email. The private service credential stays on the server. Mailbox passwords..."

      What this check looks for
    Description, as the server wrote it
    Read the email workspace. No guest access. Members can read. Owners, admins and organization keys can manage email. The private service credential stays on the server. Mailbox passwords and message content are never returned.

    Annotations the server declares

    • title: Commsharbor email workspace
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_email_workspace_snapshotRead the current email workspace, DNS progress and recent jobs.No findings

    Why it is in this group

    • The name "commsharbor_email_workspace_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Read the current email workspace, DNS progress and recent jobs. The ID must match X-Organization-Id. Membership is checked again for each snapshot and delivered event. Events contain only an opaque change ID. DNS checks run in the private backend, with a 24-hour deadline and a visible resume action after pause.

    Annotations the server declares

    • title: Commsharbor email workspace snapshot
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_healthRead deployment health and build.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read deployment health and build. Smoke tests wait for their own commit to appear here instead of racing edge propagation.

    Annotations the server declares

    • title: Commsharbor health
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
  • commsharbor_meRead the current account profile and platform role.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the current account profile and platform role. `user.id` is the shared-account ID. Organizations are not listed here: they live in the shared account, which does not list them inside products yet — open a workspace by its ID with `GET /api/organizations/{organization_id}`.

    Annotations the server declares

    • title: Commsharbor me
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http commsharbor https://commsharbor.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__commsharbor__commsharbor_health",
      "mcp__commsharbor__commsharbor_me",
      "mcp__commsharbor__commsharbor_context",
      "mcp__commsharbor__commsharbor_audit",
      "mcp__commsharbor__commsharbor_email_google_catalog",
      "mcp__commsharbor__commsharbor_email_domain_products_list",
      "mcp__commsharbor__commsharbor_email_workspace_snapshot",
      "mcp__commsharbor__commsharbor_email_workspace",
      "mcp__commsharbor__commsharbor_email_domain_setup",
      "mcp__commsharbor__commsharbor_email_domain_get",
      "mcp__commsharbor__commsharbor_email_job_get",
      "mcp__commsharbor__commsharbor_brazil_email_report"
    ],
    "ask": [
      "mcp__commsharbor__commsharbor_organization_get",
      "mcp__commsharbor__commsharbor_platform_context",
      "mcp__commsharbor__commsharbor_email_google_connect",
      "mcp__commsharbor__commsharbor_email_google_resolve",
      "mcp__commsharbor__commsharbor_email_domain_products_add",
      "mcp__commsharbor__commsharbor_email_trial_activate",
      "mcp__commsharbor__commsharbor_email_domain_create",
      "mcp__commsharbor__commsharbor_email_domain_verify",
      "mcp__commsharbor__commsharbor_email_domain_assistance",
      "mcp__commsharbor__commsharbor_email_mailbox_create",
      "mcp__commsharbor__commsharbor_email_mailbox_password",
      "mcp__commsharbor__commsharbor_email_mailbox_suspend",
      "mcp__commsharbor__commsharbor_email_mailbox_resume",
      "mcp__commsharbor__commsharbor_email_alias_create",
      "mcp__commsharbor__commsharbor_email_alias_suspend",
      "mcp__commsharbor__commsharbor_email_alias_resume",
      "mcp__commsharbor__commsharbor_email_service_request",
      "mcp__commsharbor__commsharbor_email_security_check"
    ],
    "deny": [
      "mcp__commsharbor__commsharbor_logout",
      "mcp__commsharbor__commsharbor_email_google_disconnect",
      "mcp__commsharbor__commsharbor_email_mailbox_update",
      "mcp__commsharbor__commsharbor_email_alias_update"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as commsharbor. Review it before you use it.