# `com.outreach2day/mcp` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.outreach2day/mcp
- JSON: https://anlyon.dev/api/v1/servers/com.outreach2day/mcp
- Version: 1.0.0 (active)
- Publisher: com.outreach2day (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:00:09.674Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Outreach2day
Cold email infrastructure: domains, mailboxes, warm-up and campaigns. Never charges a card.
```

Scanned 2026-10-21T18:53:17.612Z over streamable-http.

**24 tools: 3 can delete or cancel things, 12 change things and 9 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 3 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 12 | ask |
| Only reads | read | 9 | allow |

## Exfil surface

256 private-data -> untrusted-input -> outbound paths in this server alone. Denying 2 outbound tools breaks every one: `mcp__outreach2day__export_mailboxes_to_sequencer`, `mcp__outreach2day__quote_order`.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__outreach2day__get_account_status` `mcp__outreach2day__get_order` `mcp__outreach2day__get_pricing` `mcp__outreach2day__get_warmup_status` `mcp__outreach2day__list_domains` `mcp__outreach2day__list_mailboxes` `mcp__outreach2day__list_replies` `mcp__outreach2day__list_sequencers` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__outreach2day__check_domains` `mcp__outreach2day__create_checkout` `mcp__outreach2day__export_mailboxes_to_sequencer` `mcp__outreach2day__get_account_status` `mcp__outreach2day__get_campaign_stats` `mcp__outreach2day__get_order` `mcp__outreach2day__get_pricing` `mcp__outreach2day__get_warmup_status` `mcp__outreach2day__launch_campaign` `mcp__outreach2day__list_domains` `mcp__outreach2day__list_mailboxes` `mcp__outreach2day__list_replies` `mcp__outreach2day__list_sequencers` `mcp__outreach2day__quote_order` `mcp__outreach2day__start_warmup` `mcp__outreach2day__suggest_domains` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__outreach2day__export_mailboxes_to_sequencer` `mcp__outreach2day__quote_order` |

| Private data | Untrusted input | Outbound |
| --- | --- | --- |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__check_domains` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__check_domains` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__create_checkout` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__create_checkout` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_account_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_account_status` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_campaign_stats` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_campaign_stats` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_order` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_order` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_pricing` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_pricing` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_warmup_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__get_warmup_status` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__launch_campaign` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__launch_campaign` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_domains` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_domains` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_mailboxes` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_mailboxes` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_replies` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_replies` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_sequencers` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__list_sequencers` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__quote_order` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__quote_order` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__start_warmup` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__start_warmup` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__suggest_domains` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_account_status` | `mcp__outreach2day__suggest_domains` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__check_domains` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__check_domains` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__create_checkout` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__create_checkout` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__export_mailboxes_to_sequencer` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__export_mailboxes_to_sequencer` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_account_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_account_status` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_campaign_stats` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_campaign_stats` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_order` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_order` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_pricing` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_pricing` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_warmup_status` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__get_warmup_status` | `mcp__outreach2day__quote_order` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__launch_campaign` | `mcp__outreach2day__export_mailboxes_to_sequencer` |
| `mcp__outreach2day__get_order` | `mcp__outreach2day__launch_campaign` | `mcp__outreach2day__quote_order` |

And 206 more: every combination of one tool from each row of the table above.

## Findings

- **warn** Annotations that disagree with the tool in `check_copy` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "check_copy" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "check_copy" says "copy": a word for a change.
```

- **info** The word "credentials" in `list_mailboxes` ([credentials-mention](https://anlyon.dev/methodology#credentials-mention))

```untrusted-server-text
The description mentions "credentials".

description: "...ss, sender name, status). Never returns credentials."
```

- **info** The word "credentials" in `export_mailboxes_to_sequencer` ([credentials-mention](https://anlyon.dev/methodology#credentials-mention))

```untrusted-server-text
The description mentions "credentials".

description: "Send mailboxes' login credentials (SMTP/IMAP) to the user's third-party s..."
```

- **info** The word "credentials" in `export_mailboxes_to_sequencer` ([credentials-mention](https://anlyon.dev/methodology#credentials-mention))

```untrusted-server-text
The input schema at properties.confirm.description mentions "credentials".

inputSchema.properties.confirm.description: "...rue, after the user agreed to share the credentials with this sequencer."
```


## Deletes or cancels (3)

Removes, cancels or revokes something. Claude Code: deny.

### `export_mailboxes_to_sequencer`

- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The description's first verb is "send": it sends or publishes something to other people.
- Findings: info credentials-mention, info credentials-mention

Description, as the server wrote it:

```untrusted-server-text
Send mailboxes' login credentials (SMTP/IMAP) to the user's third-party sequencer account (Instantly or Smartlead, from list_sequencers) so it can send from them. Omit mailboxes to export all eligible ones. Requires confirm=true after the user explicitly agrees. Large exports answer status pending and finish on the server; list_sequencers shows the counts.
```

### `launch_campaign`

- The description's first verb is "start": a word for a change.
- The server marks it destructive (destructiveHint: true).
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Start sending a campaign to its contacts. Refused unless preflight is green and every attached mailbox is ready to send. Requires confirm=true after the user explicitly agrees.
```

### `upsert_campaign_step`

- The name "upsert_campaign_step" says "upsert": a word for a change.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
Add an email step to a campaign sequence, or update one (by step_id, or by order when a step with that order exists). delay_days is the wait after this step before the next one.
```

## Changes things (12)

Creates or changes something that can be changed back. Claude Code: ask.

### `attach_campaign_mailboxes`

- The name "attach_campaign_mailboxes" says "attach": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Attach mailboxes to a campaign for sending. Only mailboxes that are ready to send (warm-up started 14+ days ago) are accepted.
```

### `check_copy`

- The name "check_copy" says "copy": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Check an email subject and body for spam trigger words before sending.
```

### `check_domains`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Check whether domain names are available to register (up to 50 domains per call).
```

### `connect_own_domains`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Connect domains the user already owns (free): returns the nameservers the user must set at their registrar. Calling again with the same domains is safe.
```

### `create_campaign`

- The name "create_campaign" says "create": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Create a campaign as a draft. Nothing is sent until launch_campaign.
```

### `create_checkout`

- The name "create_checkout" says "create": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Turn a quote the user explicitly confirmed into a Stripe payment page. Charges nothing: the user pays on the page. Requires confirm=true and the quote's due_now_cents.
```

### `import_campaign_contacts`

- The name "import_campaign_contacts" says "import": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Import contacts into a campaign from CSV text (header row with an email column; other columns become variables; up to 10000 rows). Pass import_id alone to check a previous import.
```

### `pause_campaign`

- The description's first verb is "stop": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Stop a campaign from sending. Safe to call again.
```

### `preflight_campaign`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Check whether a campaign can launch: sequence, contacts, attached mailboxes and their warm-up. Returns blocking checks with hints.
```

### `quote_order`

- Nothing in its name or description says what it does, so it is counted as a write.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The input takes a destination (input.registrant.phone): what the tool writes goes there.

Description, as the server wrote it:

```untrusted-server-text
Price new domains and mailboxes server-side. Creates a 15-minute quote; registers and charges nothing. Show human_summary to the user exactly before create_checkout. Ordering domains needs registrant with every one of: first_name, last_name, real_address, city, state_province, postal_code, country, phone, organization_name, job_title (email_address optional); collect them from the user upfront.
```

### `start_warmup`

- The name "start_warmup" says "start": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Start warm-up for mailboxes. Retrying with the same mailboxes the same day does not start a second operation.
```

### `suggest_domains`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Suggest available sending domains that look like the company's website (brand + one fitting word, e.g. acmehq.com, acme-partners.com), already checked for availability. Use this instead of inventing names.
```

## Only reads (9)

Looks things up and changes nothing. Claude Code: allow.

### `get_account_status`

- The name "get_account_status" says "get": a word for reading.
- Tag private-data: The description's first sentence says "mailbox": it reads mail.
- Tag untrusted-input: The description's first sentence says "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
What the workspace has (subscription, domains and mailboxes by state, warm-up, open orders, campaigns) and next_action: the one thing to do next. Start here.
```

### `get_campaign_stats`

- The name "get_campaign_stats" says "get": a word for reading.
- Tag untrusted-input: The description's first sentence says "reply": it reads comments, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Sending and engagement stats for one campaign (sent, replies, bounces).
```

### `get_order`

- The name "get_order" says "get": a word for reading.
- Tag private-data: The description's first sentence says "status" and "mailbox": it reads mail.
- Tag untrusted-input: The description's first sentence says "status" and "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Status of an order (payment, per-domain and per-mailbox setup, warm-up estimate) by order_id; without order_id, lists the workspace's recent orders.
```

### `get_pricing`

- The name "get_pricing" says "get": a word for reading.
- Tag private-data: The description's first sentence says "mailbox": it reads mail.
- Tag untrusted-input: The description's first sentence says "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Current prices: mailbox monthly price and minimum, domain prices by TLD, card processing fee rule, worked examples.
```

### `get_warmup_status`

- The name "get_warmup_status" says "get": a word for reading.
- Tag private-data: The description's first sentence says "mailbox": it reads mail. The input names a mailbox (input.mailboxes), and the tool reads: it reads mail.
- Tag untrusted-input: The description's first sentence says "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Warm-up progress per mailbox (state, days warming, ready flag, ready date, inbox rate) and a workspace summary. Mailboxes can send campaigns once ready.
```

### `list_domains`

- The name "list_domains" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "mailbox": it reads mail.
- Tag untrusted-input: The description's first sentence says "list" and "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List the workspace's sending domains with status, mailbox count and, for connected domains, DNS status and nameservers.
```

### `list_mailboxes`

- The name "list_mailboxes" says "list": a word for reading.
- Tag private-data: The name "list_mailboxes" says "list" and "mailbox": it reads mail. The description's first sentence says "list" and "mailbox": it reads mail.
- Tag untrusted-input: The name "list_mailboxes" says "list" and "mailbox": it reads inbound email, which other people can write. The description's first sentence says "list" and "mailbox": it reads inbound email, which other people can write.
- Findings: info credentials-mention

Description, as the server wrote it:

```untrusted-server-text
List the workspace's mailboxes (address, sender name, status). Never returns credentials.
```

### `list_replies`

- The name "list_replies" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "thread": it reads messages.
- Tag untrusted-input: The name "list_replies" says "list" and "reply": it reads comments, which other people can write. The description's first sentence says "list" and "thread": it reads messages, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List recent threads where a contact replied (subject, sender, short snippet, reply intent). Paginate with cursor.
```

### `list_sequencers`

- The name "list_sequencers" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "mailbox": it reads mail.
- Tag untrusted-input: The description's first sentence says "list" and "mailbox": it reads inbound email, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List the workspace's connected sequencer accounts (Instantly, Smartlead) that mailboxes can be exported to.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `outreach2day`:

```json
{
  "permissions": {
    "allow": [
      "mcp__outreach2day__list_domains",
      "mcp__outreach2day__list_mailboxes",
      "mcp__outreach2day__get_warmup_status",
      "mcp__outreach2day__list_sequencers",
      "mcp__outreach2day__get_campaign_stats",
      "mcp__outreach2day__list_replies",
      "mcp__outreach2day__get_pricing",
      "mcp__outreach2day__get_account_status",
      "mcp__outreach2day__get_order"
    ],
    "ask": [
      "mcp__outreach2day__check_domains",
      "mcp__outreach2day__suggest_domains",
      "mcp__outreach2day__check_copy",
      "mcp__outreach2day__preflight_campaign",
      "mcp__outreach2day__connect_own_domains",
      "mcp__outreach2day__start_warmup",
      "mcp__outreach2day__create_campaign",
      "mcp__outreach2day__import_campaign_contacts",
      "mcp__outreach2day__attach_campaign_mailboxes",
      "mcp__outreach2day__pause_campaign",
      "mcp__outreach2day__quote_order",
      "mcp__outreach2day__create_checkout"
    ],
    "deny": [
      "mcp__outreach2day__upsert_campaign_step",
      "mcp__outreach2day__launch_campaign",
      "mcp__outreach2day__export_mailboxes_to_sequencer"
    ]
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__outreach2day__check_domains`: untrusted-input
- `mcp__outreach2day__suggest_domains`: untrusted-input
- `mcp__outreach2day__list_domains`: private-data, untrusted-input
- `mcp__outreach2day__list_mailboxes`: private-data, untrusted-input
- `mcp__outreach2day__get_warmup_status`: private-data, untrusted-input
- `mcp__outreach2day__list_sequencers`: private-data, untrusted-input
- `mcp__outreach2day__get_campaign_stats`: untrusted-input
- `mcp__outreach2day__list_replies`: private-data, untrusted-input
- `mcp__outreach2day__start_warmup`: untrusted-input
- `mcp__outreach2day__launch_campaign`: untrusted-input
- `mcp__outreach2day__export_mailboxes_to_sequencer`: untrusted-input, outbound
- `mcp__outreach2day__get_pricing`: private-data, untrusted-input
- `mcp__outreach2day__get_account_status`: private-data, untrusted-input
- `mcp__outreach2day__quote_order`: untrusted-input, outbound
- `mcp__outreach2day__create_checkout`: untrusted-input
- `mcp__outreach2day__get_order`: private-data, untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T14:37:50.159Z, unchanged since 2026-10-22T14:37:50.159Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `15` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `https://public.outreach2day.com/.well-known/oauth-protected-resource/mcp` |
| Authorization servers | `https://public.outreach2day.com` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `yes` |
| Client ID metadata documents | `yes` |

- **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 15 tools that change things (3 destructive, 12 write). Whether a call also works without credentials was not tested: tools are never called.

https://public.outreach2day.com/mcp: tools/list returned 24 tools to an anonymous client, including upsert_campaign_step (destructive), launch_campaign (destructive), export_mailboxes_to_sequencer (destructive), check_domains (write), suggest_domains (write) and 10 more
```