Skip to content
anlyon.devby Anlyon

SalesBlink Cold Email

io.github.open-salesblink/cold-email-salesblinkopen-salesblinkstreamable-httpv1.2.0Scanned

Cold email sequences, leads, templates, senders, inbox, and analytics via the SalesBlink API.

88 tools: 26 can delete or cancel things, 19 change things and 43 only read.

Tools: 26 delete, 0 irreversible, 19 write, 43 read.
  • Reads private data · 24
  • Reads text others write · 27
  • Can send data out · 3
  • 2 findings

Anlyon alternative

45 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

88 tools

Deletes or cancels 26Claude Code: deny
  • add_contactsAdd Contacts to a List - Add multiple contacts to an existing list.No findings

    Why it is in this group

    • The name "add_contacts" says "add": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Add Contacts to a List - Add multiple contacts to an existing list. Contacts must come from an evidenced import or consent source that the account holder already has (e.g. their own opt-in list, CRM export, or inbound leads) — do not assemble addresses from model knowledge or web scraping. All contact field names use snake_case (e.g. first_name, last_name, email, phone, company_name, job_title, lead_score). Custom snake_case fields are added to the list's columns. The `starred` boolean is a contact setting and is not added as a list column. Contact archiving is handled by archive_contact.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • add_userAdd a User - Invite a new user to your accountReads text others writeNo findings

    Why it is in this group

    • The name "add_user" says "add": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Add a User - Invite a new user to your account

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • archive_contactArchive or Unarchive a Contact - Archive leads/contacts to remove from active campaignsNo findings

    Why it is in this group

    • The name "archive_contact" says "archive": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Archive or Unarchive a Contact - Archive leads/contacts to remove from active campaigns

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • archive_listArchive or Unarchive a List - Archive lists to remove them from active viewsNo findings

    Why it is in this group

    • The name "archive_list" says "archive": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Archive or Unarchive a List - Archive lists to remove them from active views

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • archive_sequenceArchive or Unarchive a Sequence - Archive sequences to pause and hide themNo findings

    Why it is in this group

    • The name "archive_sequence" says "archive": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Archive or Unarchive a Sequence - Archive sequences to pause and hide them

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • archive_templateArchive or Unarchive a Template - Archive email templatesNo findings

    Why it is in this group

    • The name "archive_template" says "archive": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Archive or Unarchive a Template - Archive email templates

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • create_inbox_placement_testCreate Inbox Placement Test - Test email deliverability across providersReads text others writeNo findings

    Why it is in this group

    • The name "create_inbox_placement_test" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Create Inbox Placement Test - Test email deliverability across providers

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • delete_api_keyDelete API Key - Revoke an API key.No findings

    Why it is in this group

    • The name "delete_api_key" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete API Key - Revoke an API key. Requires explicit user confirmation, since revoking a key immediately breaks any live integration using it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • delete_blocklist_entryDelete Blocklist Entry by ID - Remove a single blocklist entry by its ID.No findings

    Why it is in this group

    • The name "delete_blocklist_entry" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete Blocklist Entry by ID - Remove a single blocklist entry by its ID. Requires explicit user confirmation, since the removed address becomes eligible for outreach again.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • delete_inbox_placement_testDelete Inbox Placement Test - Remove a deliverability test.No findings

    Why it is in this group

    • The name "delete_inbox_placement_test" says "delete": a word for removing or ending something.
    • The description says "cannot be undone".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete Inbox Placement Test - Remove a deliverability test. Requires explicit user confirmation, since deletion cannot be undone.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • forward_inbox_messageForward Inbox Message - Forward an email to another recipient.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Forward Inbox Message - Forward an email to another recipient. Attachments are not supported on this connector — to send files, attach them via the SalesBlink web app.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • move_leadMove Lead to Another List - Move a lead from one list to anotherNo findings

    Why it is in this group

    • The name "move_lead" says "move": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Move Lead to Another List - Move a lead from one list to another

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • remove_contactRemove a Contact from a List - Remove a single contact from a list by emailNo findings

    Why it is in this group

    • The name "remove_contact" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a Contact from a List - Remove a single contact from a list by email

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • remove_from_blocklistRemove from Blocklist - Remove a single email/domain from the blocklist.No findings

    Why it is in this group

    • The name "remove_from_blocklist" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove from Blocklist - Remove a single email/domain from the blocklist. Only one entry per call, and requires explicit user confirmation, since the removed address becomes eligible for outreach again.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • send_replySend a Reply - Send a reply to a specific message thread.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "send_reply" says "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "send_reply" says "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send a Reply - Send a reply to a specific message thread. Attachments are not supported on this connector — to send files, attach them via the SalesBlink web app.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • unsubscribe_lead_from_sequenceUnsubscribe Lead from Sequence - Unsubscribe a lead from a specific sequenceNo findings

    Why it is in this group

    • The name "unsubscribe_lead_from_sequence" says "unsubscribe": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Unsubscribe Lead from Sequence - Unsubscribe a lead from a specific sequence

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • unsubscribe_lead_globallyUnsubscribe Lead Globally - Unsubscribe a lead from all sequencesNo findings

    Why it is in this group

    • The name "unsubscribe_lead_globally" says "unsubscribe": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Unsubscribe Lead Globally - Unsubscribe a lead from all sequences

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_leadUpdate a Lead - Update lead/contact properties including custom fields.No findings

    Why it is in this group

    • The name "update_lead" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update a Lead - Update lead/contact properties including custom fields. All field names use snake_case (e.g. first_name, company_name, lead_score). The `starred` boolean is a contact setting and is not added as a list column. Contact archiving is handled by archive_contact.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_listUpdate a List - Update list properties.No findings

    Why it is in this group

    • The name "update_list" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update a List - Update list properties. Archiving is handled by archive_list.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_mail_stateUpdate Mail State - Mark emails as read/unread or update outcomeCan send data outNo findings

    Why it is in this group

    • The name "update_mail_state" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • outboundThe name "update_mail_state" says "update" and "mail": it writes something other people read.
    Description, as the server wrote it
    Update Mail State - Mark emails as read/unread or update outcome

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_senderUpdate Sender - Update email sender settings (warmup, inbox, signature, tracking domain, etc.)Reads text others writeNo findings

    Why it is in this group

    • The name "update_sender" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Update Sender - Update email sender settings (warmup, inbox, signature, tracking domain, etc.)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • update_sequenceUpdate Sequence Properties and State.Reads text others writeNo findings

    Why it is in this group

    • The name "update_sequence" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Update Sequence Properties and State. Archiving is handled by archive_sequence. Recipients must be the account holder's own contactable audience and suppression/blocklist is always enforced. Changing launch settings to start sending emails must only happen after explicit user confirmation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • update_sequence_statusUpdate Sequence Status - Start, pause, stop, or archive a sequence.Reads text others writeNo findings

    Why it is in this group

    • The name "update_sequence_status" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Update Sequence Status - Start, pause, stop, or archive a sequence. Setting status to ACTIVE starts sending emails to recipients and requires explicit user confirmation from the account holder.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • update_templateUpdate a Template - Update an existing email template.No findings

    Why it is in this group

    • The name "update_template" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update a Template - Update an existing email template. Attachments are not supported on this connector — to send files, attach them via the SalesBlink web app.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_userUpdate a User - Update user propertiesNo findings

    Why it is in this group

    • The name "update_user" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update a User - Update user properties

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • update_workspaceUpdate Workspace - Update workspace name (owner only)No findings

    Why it is in this group

    • The name "update_workspace" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update Workspace - Update workspace name (owner only)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
Changes things 19Claude Code: ask
  • add_to_blocklistAdd to Blocklist - Add emails and/or domains to the blocklistNo findings

    Why it is in this group

    • The name "add_to_blocklist" says "add": a word for a change.
    Description, as the server wrote it
    Add to Blocklist - Add emails and/or domains to the blocklist

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • check_blocklistCheck Blocklist - Check whether an email is blockedNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check Blocklist - Check whether an email is blocked

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • clone_sequenceClone a Sequence - Create a copy of an existing sequenceNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clone a Sequence - Create a copy of an existing sequence

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • create_folderCreate a Folder - Create a new folder for organizing items.No findings

    Why it is in this group

    • The name "create_folder" says "create": a word for a change.
    Description, as the server wrote it
    Create a Folder - Create a new folder for organizing items. The type field is supported only for email-sender folders; general folders for lists, templates, and sequences do not use it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • create_listCreate a List - Create a new contact list.No findings

    Why it is in this group

    • The name "create_list" says "create": a word for a change.
    Description, as the server wrote it
    Create a List - Create a new contact list. Contacts added to lists must originate from an evidenced import or consent source that the account holder already has (e.g. their own opt-in list, CRM export, or inbound leads) — not addresses assembled by the model. The response includes a `fields` array — the list's columns in snake_case (e.g. first_name, email).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • create_sequenceCreate a Sequence - Create a new email sequence/campaign.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "create_sequence" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.bcc): what the tool writes goes there.
    Description, as the server wrote it
    Create a Sequence - Create a new email sequence/campaign. Recipients must be the account holder's own contactable audience (e.g. their own opt-in or otherwise consented contacts) — never addresses assembled by the model — and suppression/blocklist is always enforced. Sequences are created paused by default; launching (resuming) sends emails to recipients and must only happen after explicit user confirmation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • create_templateCreate a Template - Create a new email template.No findings

    Why it is in this group

    • The name "create_template" says "create": a word for a change.
    Description, as the server wrote it
    Create a Template - Create a new email template. Attachments are not supported on this connector — to send files, attach them via the SalesBlink web app.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • create_workspaceCreate Workspace - Create a new workspace (owner only)No findings

    Why it is in this group

    • The name "create_workspace" says "create": a word for a change.
    Description, as the server wrote it
    Create Workspace - Create a new workspace (owner only)

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • export_sequence_leadsExport Sequence Leads - Export sequence leads as CSVNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Export Sequence Leads - Export sequence leads as CSV

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • initialize_google_oauthInitialize Google OAuth - Return the Google authorization URL for connecting a Gmail or Google Workspace sender.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Initialize Google OAuth - Return the Google authorization URL for connecting a Gmail or Google Workspace sender.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • initialize_outlook_oauthInitialize Outlook OAuth - Return the Microsoft authorization URL for connecting an Outlook sender.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Initialize Outlook OAuth - Return the Microsoft authorization URL for connecting an Outlook sender.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • pause_inbox_placement_testPause Inbox Placement Test - Pause an active deliverability testNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pause Inbox Placement Test - Pause an active deliverability test

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • reconnect_senderReconnect Sender - Reconnect a failed senderNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Reconnect Sender - Reconnect a failed sender

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • select_workspaceSelect Workspace - Set the SalesBlink workspace used by subsequent actions in this session.No findings

    Why it is in this group

    • The name "select_workspace" says "select": a word for a change.
    Description, as the server wrote it
    Select Workspace - Set the SalesBlink workspace used by subsequent actions in this session. When omitted, the account's default workspace is used.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • signupSignup for SalesBlink - Returns a magic sign-up link where a new user can create an account.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Signup for SalesBlink - Returns a magic sign-up link where a new user can create an account.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • verify_accountVerify Current Account - Return information about the currently selected SalesBlink workspace account.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify Current Account - Return information about the currently selected SalesBlink workspace account.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
Only reads 43Show 43 read-only tools
  • fetch_multiple_sender_messagesBulk Fetch Sender Messages - Retrieve sent emails and received replies across multiple senders (max 50 messages, use skip for pagination)Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "fetch_multiple_sender_messages" says "fetch": a word for reading.

    What it can reach

    • private-dataThe name "fetch_multiple_sender_messages" says "fetch" and "message": it reads messages.
    • private-dataThe description's first sentence says "message": it reads messages.
    • untrusted-inputThe name "fetch_multiple_sender_messages" says "fetch" and "message": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
    Description, as the server wrote it
    Bulk Fetch Sender Messages - Retrieve sent emails and received replies across multiple senders (max 50 messages, use skip for pagination)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • fetch_sender_messagesFetch Sender Messages - Retrieve sent emails and received replies for a sender (max 50 messages, use skip for pagination)Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "fetch_sender_messages" says "fetch": a word for reading.

    What it can reach

    • private-dataThe name "fetch_sender_messages" says "fetch" and "message": it reads messages.
    • private-dataThe description's first sentence says "fetch" and "message": it reads messages.
    • untrusted-inputThe name "fetch_sender_messages" says "fetch" and "message": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "fetch" and "message": it reads messages, which other people can write.
    Description, as the server wrote it
    Fetch Sender Messages - Retrieve sent emails and received replies for a sender (max 50 messages, use skip for pagination)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_foldersGet All Folders - Retrieve all folders.Reads private dataNo findings

    Why it is in this group

    • The name "get_all_folders" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_all_folders" says "get" and "folder": it reads files.
    • private-dataThe description's first sentence says "get" and "folder": it reads files.
    Description, as the server wrote it
    Get All Folders - Retrieve all folders. The type filter supports 'all', 'general', and 'email-sender'. General folders (created without a type) hold lists, templates, and sequences; email-sender folders hold email senders only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_listsGet All Lists - Retrieve all contact lists with optional filtering.Reads private dataNo findings

    Why it is in this group

    • The name "get_all_lists" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "contact": it reads contacts.
    • private-dataThe input names a folder (input.folder), and the tool reads: it reads files.
    Description, as the server wrote it
    Get All Lists - Retrieve all contact lists with optional filtering. Note: boolean filters (starred/archived) are unreliable. Supported filters: folder, search, sortBy, sortType, integration. Each list includes a `fields` array — the list's columns in snake_case (e.g. first_name, email, lead_score).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_sendersGet All Email Senders - Retrieve all email sender accounts (flat list, not grouped by folder)Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_all_senders" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • private-dataThe input names a folder (input.folder), and the tool reads: it reads files.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get All Email Senders - Retrieve all email sender accounts (flat list, not grouped by folder)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_sequencesGet All Sequences - Retrieve all sequences with optional filtering.Reads private dataNo findings

    Why it is in this group

    • The name "get_all_sequences" says "get": a word for reading.

    What it can reach

    • private-dataThe input names a folder (input.folder), and the tool reads: it reads files.
    Description, as the server wrote it
    Get All Sequences - Retrieve all sequences with optional filtering. Note: boolean filters (starred/archived) and owned_by are unreliable. Supported filters: search, status, folder, sortBy, sortType, sendAll.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_templatesGet All Templates - Retrieve all email templates with optional filtering.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_all_templates" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • private-dataThe input names a folder (input.folder), and the tool reads: it reads files.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get All Templates - Retrieve all email templates with optional filtering. Note: boolean filters (starred/archived) are unreliable. Supported filters: folder, type, taskType, search, sortBy, sortType.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_usersGet All Users - Retrieve all users in the account.No findings

    Why it is in this group

    • The name "get_all_users" says "get": a word for reading.
    Description, as the server wrote it
    Get All Users - Retrieve all users in the account. Note: pagination and filtering parameters are accepted for compatibility but currently have no effect — the endpoint returns every user in the account with no pagination or filtering.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_all_workspacesGet All Workspaces - Retrieve all accessible workspaces (owner only)No findings

    Why it is in this group

    • The name "get_all_workspaces" says "get": a word for reading.
    Description, as the server wrote it
    Get All Workspaces - Retrieve all accessible workspaces (owner only)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_analytics_dailyGet Daily Analytics - Day-wise overall statsNo findings

    Why it is in this group

    • The name "get_analytics_daily" says "get": a word for reading.
    Description, as the server wrote it
    Get Daily Analytics - Day-wise overall stats

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_analytics_lead_statsGet Lead-level Analytics - Lead-level statsNo findings

    Why it is in this group

    • The name "get_analytics_lead_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get Lead-level Analytics - Lead-level stats

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_analytics_mailbox_statsGet Mailbox Analytics - Overall mailbox statsReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_analytics_mailbox_stats" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_analytics_mailbox_stats" says "get" and "mailbox": it reads mail.
    • private-dataThe description's first sentence says "get" and "mailbox": it reads mail.
    • untrusted-inputThe name "get_analytics_mailbox_stats" says "get" and "mailbox": it reads inbound email, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "mailbox": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Mailbox Analytics - Overall mailbox stats

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_analytics_overallGet Overall Analytics - Overall stats across all sequencesNo findings

    Why it is in this group

    • The name "get_analytics_overall" says "get": a word for reading.
    Description, as the server wrote it
    Get Overall Analytics - Overall stats across all sequences

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_api_key_page_linkGet API Key Page Link - Returns a magic login link to the API keys page where the user can create a new API key.No findings

    Why it is in this group

    • The name "get_api_key_page_link" says "get": a word for reading.
    Description, as the server wrote it
    Get API Key Page Link - Returns a magic login link to the API keys page where the user can create a new API key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_api_keysGet API Keys - Retrieve all API keys for the account.No findings

    Why it is in this group

    • The name "get_api_keys" says "get": a word for reading.
    Description, as the server wrote it
    Get API Keys - Retrieve all API keys for the account. For security, returned keys are masked (only the first and last 3 characters are shown, e.g. 'abc...xyz') — full key values are never exposed by this tool. To view or copy a full key, the account holder must use the API-key management page in the SalesBlink app (see get_api_key_page_link/get_api_key_refresh_link for a login link).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_blocklistGet Blocklist - List blocked emails and domainsReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_blocklist" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Blocklist - List blocked emails and domains

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_clicks_activityGet Clicks Activity - Get list of link clicksNo findings

    Why it is in this group

    • The name "get_clicks_activity" says "get": a word for reading.
    Description, as the server wrote it
    Get Clicks Activity - Get list of link clicks

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_custom_domainsGet Custom Domains - Retrieve custom tracking domains for the workspace (including unverified domains with DNS setup instructions and status tags)No findings

    Why it is in this group

    • The name "get_custom_domains" says "get": a word for reading.
    Description, as the server wrote it
    Get Custom Domains - Retrieve custom tracking domains for the workspace (including unverified domains with DNS setup instructions and status tags)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_inbox_placement_testsGet Inbox Placement Tests - Retrieve all deliverability testsReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_inbox_placement_tests" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_inbox_placement_tests" says "get" and "inbox": it reads mail.
    • private-dataThe description's first sentence says "get" and "inbox": it reads mail.
    • untrusted-inputThe name "get_inbox_placement_tests" says "get" and "inbox": it reads inbound email, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "inbox": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Inbox Placement Tests - Retrieve all deliverability tests

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_inbox_threadsGet Inbox Threads - Retrieve inbox threads with optional filtering.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_inbox_threads" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_inbox_threads" says "get" and "inbox": it reads mail.
    • private-dataThe description's first sentence says "get" and "inbox": it reads mail.
    • untrusted-inputThe name "get_inbox_threads" says "get" and "inbox": it reads inbound email, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "inbox": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Inbox Threads - Retrieve inbox threads with optional filtering. Note: only type, sequence, search, date, sender, limit, and skip are applied by the API.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_lead_activity_by_emailGet Lead Activity by Email - Retrieve activity for a lead using an email address instead of a lead ID.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_lead_activity_by_email" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_lead_activity_by_email" says "get" and "email": it reads mail.
    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe name "get_lead_activity_by_email" says "get" and "email": it reads inbound email, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Lead Activity by Email - Retrieve activity for a lead using an email address instead of a lead ID.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_lead_activity_by_idGet Lead Activity by ID - Activity of a lead via lead IDNo findings

    Why it is in this group

    • The name "get_lead_activity_by_id" says "get": a word for reading.
    Description, as the server wrote it
    Get Lead Activity by ID - Activity of a lead via lead ID

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_lead_messagesGet Lead Message History - Message history for a lead in a sequenceReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_lead_messages" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_lead_messages" says "get" and "message": it reads messages.
    • private-dataThe description's first sentence says "get" and "message": it reads messages.
    • untrusted-inputThe name "get_lead_messages" says "get" and "message": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "message": it reads messages, which other people can write.
    Description, as the server wrote it
    Get Lead Message History - Message history for a lead in a sequence

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_leadsGet Leads in a List - Retrieve all leads/contacts in a specific list.Reads private dataNo findings

    Why it is in this group

    • The name "get_leads" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "contact": it reads contacts.
    Description, as the server wrote it
    Get Leads in a List - Retrieve all leads/contacts in a specific list. Supported filters: search, archived, sort, sequence, status.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_listGet a Specific List - Retrieve details of a specific contact list.Reads private dataNo findings

    Why it is in this group

    • The name "get_list" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "contact": it reads contacts.
    Description, as the server wrote it
    Get a Specific List - Retrieve details of a specific contact list. The response includes a `fields` array — the list's columns in snake_case (e.g. first_name, email, lead_score).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_opens_activityGet Opens Activity - Get list of email opensReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_opens_activity" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Opens Activity - Get list of email opens

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_replies_activityGet Replies Activity - Get list of email repliesReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_replies_activity" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe name "get_replies_activity" says "get" and "reply": it reads comments, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "reply": it reads comments, which other people can write.
    Description, as the server wrote it
    Get Replies Activity - Get list of email replies

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_reportsGet Reports - Retrieve activity reports with date filteringNo findings

    Why it is in this group

    • The name "get_reports" says "get": a word for reading.
    Description, as the server wrote it
    Get Reports - Retrieve activity reports with date filtering

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sender_healthGet Sender Health - Get sender health and reputation scoreNo findings

    Why it is in this group

    • The name "get_sender_health" says "get": a word for reading.
    Description, as the server wrote it
    Get Sender Health - Get sender health and reputation score

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sender_warmup_statsGet Sender Warmup Stats - Date-wise warmup stats (sent, sent_replies, received, received_replies, spam_to_inbox) plus per-ESP breakdown (esp_info: google/outlook/others with totalC…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_sender_warmup_stats" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "inbox": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "reply": it reads comments, which other people can write.
    Description, as the server wrote it
    Get Sender Warmup Stats - Date-wise warmup stats (sent, sent_replies, received, received_replies, spam_to_inbox) plus per-ESP breakdown (esp_info: google/outlook/others with totalCount and spam_to_inbox)

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sent_activityGet Sent Activity - Get list of sent emailsReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_sent_activity" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Sent Activity - Get list of sent emails

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sequenceGet a Specific Sequence - Retrieve details of a specific sequenceNo findings

    Why it is in this group

    • The name "get_sequence" says "get": a word for reading.
    Description, as the server wrote it
    Get a Specific Sequence - Retrieve details of a specific sequence

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sequence_leadsGet Sequence Leads - List leads in a sequence.No findings

    Why it is in this group

    • The name "get_sequence_leads" says "get": a word for reading.
    Description, as the server wrote it
    Get Sequence Leads - List leads in a sequence. Supported filters: status. not_contacted/contacted are evaluated on the lead's first-outreach task (first email not yet sent / sent); opened/clicked/replied/bounced/unsubscribed match engagement recorded on any step of the sequence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sequence_statsGet Sequence Stats - Retrieve statistics for a specific sequenceNo findings

    Why it is in this group

    • The name "get_sequence_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get Sequence Stats - Retrieve statistics for a specific sequence

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_signaturesGet Email Signatures - Retrieve all email signaturesReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_signatures" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get Email Signatures - Retrieve all email signatures

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_templateGet a Specific Template - Retrieve details of a specific email template.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_template" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "get" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Get a Specific Template - Retrieve details of a specific email template. Template tests are included when includeTests is true.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_thread_messagesGet Thread Messages - Retrieve all messages in a specific threadReads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_thread_messages" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_thread_messages" says "get" and "thread": it reads messages.
    • private-dataThe description's first sentence says "get" and "thread": it reads messages.
    • untrusted-inputThe name "get_thread_messages" says "get" and "thread": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "get" and "thread": it reads messages, which other people can write.
    Description, as the server wrote it
    Get Thread Messages - Retrieve all messages in a specific thread

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_userGet a Specific User - Retrieve a specific user by ID from the account user list.No findings

    Why it is in this group

    • The name "get_user" says "get": a word for reading.
    Description, as the server wrote it
    Get a Specific User - Retrieve a specific user by ID from the account user list. The public API only exposes GET /users, so the tool fetches the full list and returns the matching user.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_my_workspacesList My Workspaces - Return every SalesBlink workspace available to the authenticated user, including its ID, name, and role.No findings

    Why it is in this group

    • The name "list_my_workspaces" says "list": a word for reading.
    Description, as the server wrote it
    List My Workspaces - Return every SalesBlink workspace available to the authenticated user, including its ID, name, and role.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

1944 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data24
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write27
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__cold-email-salesblink__create_sequence",
      "mcp__cold-email-salesblink__send_reply",
      "mcp__cold-email-salesblink__update_mail_state"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnget_add_card_login_link

    The server marks "get_add_card_login_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_add_card_login_link" says "get": a word for reading.

    What this check looks for
  • Warnget_remove_card_login_link

    The server marks "get_remove_card_login_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_remove_card_login_link" says "get": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cold-email-salesblink https://mcp.salesblink.io/mcp
claude mcp add --transport http cold-email-salesblink https://mcp.salesblink.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cold-email-salesblink__get_all_lists",
      "mcp__cold-email-salesblink__get_list",
      "mcp__cold-email-salesblink__get_all_templates",
      "mcp__cold-email-salesblink__get_template",
      "mcp__cold-email-salesblink__get_inbox_threads",
      "mcp__cold-email-salesblink__get_thread_messages",
      "mcp__cold-email-salesblink__get_all_sequences",
      "mcp__cold-email-salesblink__get_sequence",
      "mcp__cold-email-salesblink__get_sequence_stats",
      "mcp__cold-email-salesblink__get_all_users",
      "mcp__cold-email-salesblink__get_user",
      "mcp__cold-email-salesblink__get_all_senders",
      "mcp__cold-email-salesblink__get_all_folders",
      "mcp__cold-email-salesblink__get_sent_activity",
      "mcp__cold-email-salesblink__get_opens_activity",
      "mcp__cold-email-salesblink__get_clicks_activity",
      "mcp__cold-email-salesblink__get_replies_activity",
      "mcp__cold-email-salesblink__get_leads",
      "mcp__cold-email-salesblink__get_all_workspaces",
      "mcp__cold-email-salesblink__get_inbox_placement_tests",
      "mcp__cold-email-salesblink__get_reports",
      "mcp__cold-email-salesblink__get_warmup_links",
      "mcp__cold-email-salesblink__get_sender_connect_link",
      "mcp__cold-email-salesblink__get_bulk_senders_upload_link",
      "mcp__cold-email-salesblink__get_custom_domains",
      "mcp__cold-email-salesblink__get_signatures",
      "mcp__cold-email-salesblink__get_api_keys",
      "mcp__cold-email-salesblink__get_api_key_page_link",
      "mcp__cold-email-salesblink__get_api_key_refresh_link",
      "mcp__cold-email-salesblink__get_analytics_overall",
      "mcp__cold-email-salesblink__get_analytics_daily",
      "mcp__cold-email-salesblink__get_analytics_lead_stats",
      "mcp__cold-email-salesblink__get_analytics_mailbox_stats",
      "mcp__cold-email-salesblink__get_sender_health",
      "mcp__cold-email-salesblink__get_sender_warmup_stats",
      "mcp__cold-email-salesblink__fetch_sender_messages",
      "mcp__cold-email-salesblink__fetch_multiple_sender_messages",
      "mcp__cold-email-salesblink__get_sequence_leads",
      "mcp__cold-email-salesblink__get_lead_messages",
      "mcp__cold-email-salesblink__get_lead_activity_by_id",
      "mcp__cold-email-salesblink__get_lead_activity_by_email",
      "mcp__cold-email-salesblink__get_blocklist",
      "mcp__cold-email-salesblink__list_my_workspaces"
    ],
    "ask": [
      "mcp__cold-email-salesblink__signup",
      "mcp__cold-email-salesblink__create_list",
      "mcp__cold-email-salesblink__create_template",
      "mcp__cold-email-salesblink__create_sequence",
      "mcp__cold-email-salesblink__generate_login_link",
      "mcp__cold-email-salesblink__create_workspace",
      "mcp__cold-email-salesblink__clone_sequence",
      "mcp__cold-email-salesblink__pause_inbox_placement_test",
      "mcp__cold-email-salesblink__create_folder",
      "mcp__cold-email-salesblink__initialize_google_oauth",
      "mcp__cold-email-salesblink__initialize_outlook_oauth",
      "mcp__cold-email-salesblink__get_add_card_login_link",
      "mcp__cold-email-salesblink__get_remove_card_login_link",
      "mcp__cold-email-salesblink__reconnect_sender",
      "mcp__cold-email-salesblink__export_sequence_leads",
      "mcp__cold-email-salesblink__add_to_blocklist",
      "mcp__cold-email-salesblink__check_blocklist",
      "mcp__cold-email-salesblink__verify_account",
      "mcp__cold-email-salesblink__select_workspace"
    ],
    "deny": [
      "mcp__cold-email-salesblink__update_list",
      "mcp__cold-email-salesblink__update_template",
      "mcp__cold-email-salesblink__send_reply",
      "mcp__cold-email-salesblink__forward_inbox_message",
      "mcp__cold-email-salesblink__update_mail_state",
      "mcp__cold-email-salesblink__update_sequence",
      "mcp__cold-email-salesblink__add_user",
      "mcp__cold-email-salesblink__update_user",
      "mcp__cold-email-salesblink__add_contacts",
      "mcp__cold-email-salesblink__remove_contact",
      "mcp__cold-email-salesblink__archive_list",
      "mcp__cold-email-salesblink__archive_template",
      "mcp__cold-email-salesblink__archive_sequence",
      "mcp__cold-email-salesblink__archive_contact",
      "mcp__cold-email-salesblink__update_lead",
      "mcp__cold-email-salesblink__move_lead",
      "mcp__cold-email-salesblink__update_workspace",
      "mcp__cold-email-salesblink__create_inbox_placement_test",
      "mcp__cold-email-salesblink__delete_inbox_placement_test",
      "mcp__cold-email-salesblink__delete_api_key",
      "mcp__cold-email-salesblink__update_sender",
      "mcp__cold-email-salesblink__unsubscribe_lead_from_sequence",
      "mcp__cold-email-salesblink__unsubscribe_lead_globally",
      "mcp__cold-email-salesblink__update_sequence_status",
      "mcp__cold-email-salesblink__remove_from_blocklist",
      "mcp__cold-email-salesblink__delete_blocklist_entry"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as cold-email-salesblink. Review it before you use it.

Capability tags behind 33 rules
  • mcp__cold-email-salesblink__get_all_lists private-data
  • mcp__cold-email-salesblink__get_list private-data
  • mcp__cold-email-salesblink__get_all_templates private-data, untrusted-input
  • mcp__cold-email-salesblink__get_template private-data, untrusted-input
  • mcp__cold-email-salesblink__get_inbox_threads private-data, untrusted-input
  • mcp__cold-email-salesblink__get_thread_messages private-data, untrusted-input
  • mcp__cold-email-salesblink__send_reply untrusted-input, outbound
  • mcp__cold-email-salesblink__forward_inbox_message untrusted-input
  • mcp__cold-email-salesblink__update_mail_state outbound
  • mcp__cold-email-salesblink__get_all_sequences private-data
  • mcp__cold-email-salesblink__create_sequence untrusted-input, outbound
  • mcp__cold-email-salesblink__update_sequence untrusted-input
  • mcp__cold-email-salesblink__add_user untrusted-input
  • mcp__cold-email-salesblink__get_all_senders private-data, untrusted-input
  • mcp__cold-email-salesblink__get_all_folders private-data
  • mcp__cold-email-salesblink__get_sent_activity private-data, untrusted-input
  • mcp__cold-email-salesblink__get_opens_activity private-data, untrusted-input
  • mcp__cold-email-salesblink__get_replies_activity private-data, untrusted-input
  • mcp__cold-email-salesblink__get_leads private-data
  • mcp__cold-email-salesblink__get_inbox_placement_tests private-data, untrusted-input
  • mcp__cold-email-salesblink__create_inbox_placement_test untrusted-input
  • mcp__cold-email-salesblink__get_sender_connect_link private-data, untrusted-input
  • mcp__cold-email-salesblink__get_bulk_senders_upload_link private-data, untrusted-input
  • mcp__cold-email-salesblink__get_signatures private-data, untrusted-input
  • mcp__cold-email-salesblink__update_sender untrusted-input
  • mcp__cold-email-salesblink__get_analytics_mailbox_stats private-data, untrusted-input
  • mcp__cold-email-salesblink__get_sender_warmup_stats private-data, untrusted-input
  • mcp__cold-email-salesblink__fetch_sender_messages private-data, untrusted-input
  • mcp__cold-email-salesblink__fetch_multiple_sender_messages private-data, untrusted-input
  • mcp__cold-email-salesblink__get_lead_messages private-data, untrusted-input
  • mcp__cold-email-salesblink__update_sequence_status untrusted-input
  • mcp__cold-email-salesblink__get_lead_activity_by_email private-data, untrusted-input
  • mcp__cold-email-salesblink__get_blocklist private-data, untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.open-salesblink/cold-email-salesblink/verify?hash=774b88d8009ea9e4cca25d728b3c27a71badcc72b8dc5c1f293396db199388c8" | jq -e '.changed == false'

Pinned hash 774b88d8009e, from Oct 24, 2026, 09:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.open-salesblink/cold-email-salesblink/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.open-salesblink/cold-email-salesblink
[![anlyon.dev](https://anlyon.dev/badge/io.github.open-salesblink/cold-email-salesblink.svg)](https://anlyon.dev/servers/io.github.open-salesblink/cold-email-salesblink)

Source: MCP Registry · repository. Synced Oct 24, 2026, 09:18 UTC.