Skip to content
anlyon.devby Anlyon

Sakari MCP by usefulapi

io.usefulapi/sakariusefulapi.iostreamable-httpv1.0.0Scanned

Manage Sakari SMS contacts, conversations, templates and campaigns, and send texts.

23 tools: 4 can delete or cancel things, 1 do something that can't be undone, 1 change things and 17 only read.

Tools: 4 delete, 1 irreversible, 1 write, 17 read.
  • Reads private data · 12
  • Reads text others write · 23
  • Can send data out · 2
  • 2 findings

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

23 tools

Deletes or cancels 4Claude Code: deny
  • sakari_close_conversationWRITE: mark a conversation closed in the Sakari inbox (a new inbound message reopens it).Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_close_conversation" says "close": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: mark a conversation closed in the Sakari inbox (a new inbound message reopens it). PUT /v1/accounts/{accountId}/conversations/{conversationId}/close.

    Annotations the server declares

    • title: Close conversation
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • sakari_create_contactWRITE: create a contact.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_create_contact" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a contact. If a contact with the same mobile number exists, merge_strategy decides what happens (append, core or remove, per Sakari). A contact is not opted in to messages by this call. POST /v1/accounts/{accountId}/contacts.

    Annotations the server declares

    • title: Create contact
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • sakari_send_messageWRITE: SEND REAL TEXT MESSAGES that cost account balance and cannot be recalled.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "sakari_send_message" says "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "sakari_send_message" says "send": it sends or publishes something to other people.
    Description, as the server wrote it
    WRITE: SEND REAL TEXT MESSAGES that cost account balance and cannot be recalled. Recipients: phone numbers (international format), existing contact ids, or conversation ids (max 100 in total). Only text people who opted in; Sakari enforces TCPA/CTIA rules and the sender is responsible. Confirm the recipients and the text with the user first. Placeholders like {{firstName}} are filled per contact. POST /v1/accounts/{accountId}/messages.

    Annotations the server declares

    • title: Send text message
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • sakari_update_contactWRITE: change a contact's name, email or mobile.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_update_contact" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: change a contact's name, email or mobile. Sakari's update replaces the contact, so this reads the current contact first and sends it back whole (lists, opt-in, blocked, attributes) with only your changes applied. PUT /v1/accounts/{accountId}/contacts/{contactId}.

    Annotations the server declares

    • title: Update contact
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • sakari_list_callsCall history (voice) with direction, status, duration and contact; filter by contact, conversation, direction, status or date range.Reads private dataReads text others writeCan send data out1 finding

    Why it is in this group

    • The name "sakari_list_calls" says "list": a word for reading.
    • The description's first verb is "call": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "call" and "conversation": it reads messages, which other people can write.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "sakari_list_calls" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "sakari_list_calls" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Call history (voice) with direction, status, duration and contact; filter by contact, conversation, direction, status or date range. GET /v1/accounts/{accountId}/calls.

    Annotations the server declares

    • title: List calls
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Changes things 1Claude Code: ask
  • sakari_create_templateWRITE: create a reusable SMS template (does not send anything).Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_create_template" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a reusable SMS template (does not send anything). POST /v1/accounts/{accountId}/templates.

    Annotations the server declares

    • title: Create template
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 17Show 17 read-only tools
  • sakari_get_accountThe Sakari account these credentials belong to: name, plan, balance, default country, business info and options.Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "sakari_get_account" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "credential": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "The Sakari account these credentials belong to: name, plan, balance, default..."

      What this check looks for
    Description, as the server wrote it
    The Sakari account these credentials belong to: name, plan, balance, default country, business info and options. API credentials are never returned. GET /v1/accounts/{accountId}.

    Annotations the server declares

    • title: Get account
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_balancePrepaid balance, default country, remaining segments and the price per segment.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_balance" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Prepaid balance, default country, remaining segments and the price per segment. GET /v1/accounts/{accountId}/balance.

    Annotations the server declares

    • title: Get account balance
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_callOne call history record by id.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_call" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One call history record by id. GET /v1/accounts/{accountId}/calls/{callId}.

    Annotations the server declares

    • title: Get call
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_campaignOne campaign by id.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_campaign" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One campaign by id. GET /v1/accounts/{accountId}/campaigns/{campaignId}.

    Annotations the server declares

    • title: Get campaign
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_contactOne contact by id: name, mobile (with validity and line type), email, lists, attributes, opt-in and blocked state.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_contact" says "get": a word for reading.

    What it can reach

    • private-dataThe name "sakari_get_contact" says "get" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    One contact by id: name, mobile (with validity and line type), email, lists, attributes, opt-in and blocked state. GET /v1/accounts/{accountId}/contacts/{contactId}.

    Annotations the server declares

    • title: Get contact
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_conversationOne conversation by id.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_conversation" says "get": a word for reading.

    What it can reach

    • private-dataThe name "sakari_get_conversation" says "get" and "conversation": it reads messages.
    • private-dataThe description's first sentence says "conversation": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "sakari_get_conversation" says "get" and "conversation": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "conversation": it reads messages, which other people can write.
    Description, as the server wrote it
    One conversation by id. Use sakari_list_messages with conversation_id for its messages. GET /v1/accounts/{accountId}/conversations/{conversationId}.

    Annotations the server declares

    • title: Get conversation
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_messageOne message by id: text, direction, status, segments, price, error.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_message" says "get": a word for reading.

    What it can reach

    • private-dataThe name "sakari_get_message" says "get" and "message": it reads messages.
    • private-dataThe description's first sentence says "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "sakari_get_message" says "get" and "message": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
    Description, as the server wrote it
    One message by id: text, direction, status, segments, price, error. GET /v1/accounts/{accountId}/messages/{messageId}.

    Annotations the server declares

    • title: Get message
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_get_templateOne message template by id.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_get_template" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
    Description, as the server wrote it
    One message template by id. GET /v1/accounts/{accountId}/templates/{templateId}.

    Annotations the server declares

    • title: Get template
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_autorespondersAutoresponders (automatic replies) configured on the account.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_autoresponders" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "reply": it reads comments, which other people can write.
    Description, as the server wrote it
    Autoresponders (automatic replies) configured on the account. GET /v1/accounts/{accountId}/autoresponders.

    Annotations the server declares

    • title: List autoresponders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_campaignsList message campaigns with schedule, template, status and reporting.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_campaigns" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
    Description, as the server wrote it
    List message campaigns with schedule, template, status and reporting. GET /v1/accounts/{accountId}/campaigns.

    Annotations the server declares

    • title: List campaigns
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_contactsList or search contacts (partial matches on name, mobile or email; filter by tag).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_contacts" says "list": a word for reading.

    What it can reach

    • private-dataThe name "sakari_list_contacts" says "list" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    List or search contacts (partial matches on name, mobile or email; filter by tag). GET /v1/accounts/{accountId}/contacts.

    Annotations the server declares

    • title: List contacts
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_conversationsList conversations (the inbox): contact, last message, unread count, open or closed.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_conversations" says "list": a word for reading.

    What it can reach

    • private-dataThe name "sakari_list_conversations" says "list" and "conversation": it reads messages.
    • private-dataThe description's first sentence says "list" and "conversation": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "sakari_list_conversations" says "list" and "conversation": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "list" and "conversation": it reads messages, which other people can write.
    Description, as the server wrote it
    List conversations (the inbox): contact, last message, unread count, open or closed. GET /v1/accounts/{accountId}/conversations.

    Annotations the server declares

    • title: List conversations
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_formsLead capture forms with active state, impressions and conversions.Reads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_forms" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Lead capture forms with active state, impressions and conversions. GET /v1/accounts/{accountId}/forms.

    Annotations the server declares

    • title: List lead forms
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_messagesList messages (sent and received) with status, segments, price and timestamps; filter by contact or conversation.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_messages" says "list": a word for reading.

    What it can reach

    • private-dataThe name "sakari_list_messages" says "list" and "message": it reads messages.
    • private-dataThe description's first sentence says "list" and "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "sakari_list_messages" says "list" and "message": it reads messages, which other people can write.
    • untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
    Description, as the server wrote it
    List messages (sent and received) with status, segments, price and timestamps; filter by contact or conversation. GET /v1/accounts/{accountId}/messages.

    Annotations the server declares

    • title: List messages
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_templatesList reusable message templates.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_templates" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
    Description, as the server wrote it
    List reusable message templates. GET /v1/accounts/{accountId}/templates.

    Annotations the server declares

    • title: List templates
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sakari_list_webhooksActive webhook subscriptions (message event notifications).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sakari_list_webhooks" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "message": it reads messages.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
    Description, as the server wrote it
    Active webhook subscriptions (message event notifications). GET /v1/accounts/{accountId}/webhooks.

    Annotations the server declares

    • title: List webhooks
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

552 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 outbound tools breaks every one.

Reads private data12
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write23
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__sakari__sakari_list_calls",
      "mcp__sakari__sakari_send_message"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • Warnsakari_list_calls

    The server marks "sakari_list_calls" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "sakari_list_calls" says "list": a word for reading.

    What this check looks for
  • Infosakari_get_account

    The description mentions "credentials".

    Matched text

    description: "The Sakari account these credentials belong to: name, plan, balance, default..."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sakari https://sakari.usefulapi.io/mcp
claude mcp add --transport http sakari https://sakari.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sakari__sakari_get_account",
      "mcp__sakari__sakari_get_balance",
      "mcp__sakari__sakari_list_contacts",
      "mcp__sakari__sakari_get_contact",
      "mcp__sakari__sakari_list_messages",
      "mcp__sakari__sakari_get_message",
      "mcp__sakari__sakari_list_conversations",
      "mcp__sakari__sakari_get_conversation",
      "mcp__sakari__sakari_list_templates",
      "mcp__sakari__sakari_get_template",
      "mcp__sakari__sakari_list_campaigns",
      "mcp__sakari__sakari_get_campaign",
      "mcp__sakari__sakari_get_call",
      "mcp__sakari__sakari_list_links",
      "mcp__sakari__sakari_list_forms",
      "mcp__sakari__sakari_list_webhooks",
      "mcp__sakari__sakari_list_autoresponders"
    ],
    "ask": [
      "mcp__sakari__sakari_create_template",
      "mcp__sakari__sakari_list_calls"
    ],
    "deny": [
      "mcp__sakari__sakari_create_contact",
      "mcp__sakari__sakari_update_contact",
      "mcp__sakari__sakari_send_message",
      "mcp__sakari__sakari_close_conversation"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sakari. Review it before you use it.

Capability tags behind 23 rules
  • mcp__sakari__sakari_get_account private-data, untrusted-input
  • mcp__sakari__sakari_get_balance untrusted-input
  • mcp__sakari__sakari_list_contacts private-data, untrusted-input
  • mcp__sakari__sakari_get_contact private-data, untrusted-input
  • mcp__sakari__sakari_create_contact untrusted-input
  • mcp__sakari__sakari_update_contact untrusted-input
  • mcp__sakari__sakari_list_messages private-data, untrusted-input
  • mcp__sakari__sakari_get_message private-data, untrusted-input
  • mcp__sakari__sakari_send_message untrusted-input, outbound
  • mcp__sakari__sakari_list_conversations private-data, untrusted-input
  • mcp__sakari__sakari_get_conversation private-data, untrusted-input
  • mcp__sakari__sakari_close_conversation untrusted-input
  • mcp__sakari__sakari_list_templates private-data, untrusted-input
  • mcp__sakari__sakari_get_template private-data, untrusted-input
  • mcp__sakari__sakari_create_template untrusted-input
  • mcp__sakari__sakari_list_campaigns private-data, untrusted-input
  • mcp__sakari__sakari_get_campaign untrusted-input
  • mcp__sakari__sakari_list_calls private-data, untrusted-input, outbound
  • mcp__sakari__sakari_get_call untrusted-input
  • mcp__sakari__sakari_list_links untrusted-input
  • mcp__sakari__sakari_list_forms untrusted-input
  • mcp__sakari__sakari_list_webhooks private-data, untrusted-input
  • mcp__sakari__sakari_list_autoresponders untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/sakari/verify?hash=596cb0cf71a9508190da8165819cbd66646b24453ace7d4ff2c1e3a11de1b5e9" | jq -e '.changed == false'

Pinned hash 596cb0cf71a9, from Oct 25, 2026, 12:20 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/sakari/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/sakari
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/sakari.svg)](https://anlyon.dev/servers/io.usefulapi/sakari)

Source: MCP Registry · repository. Synced Oct 25, 2026, 12:18 UTC.