Skip to content
anlyon.devby Anlyon

Sarbacane MCP by usefulapi

io.usefulapi/sarbacaneusefulapi.iostreamable-httpv1.1.0Scanned

Read Sarbacane campaigns, stats, lists and blacklists; manage contacts and draft email campaigns.

19 tools: 4 can delete or cancel things, 1 do something that can't be undone, 2 change things and 12 only read.

Tools: 4 delete, 1 irreversible, 2 write, 12 read.
  • Reads private data · 7
  • Reads text others write · 19
  • Can send data out · 3
  • No findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

19 tools

Deletes or cancels 4Claude Code: deny
  • sarbacane_import_campaign_templateWRITE: load a saved template's content into an email campaign, replacing its content.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_import_campaign_template" says "import": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: load a saved template's content into an email campaign, replacing its content. POST /v1/campaigns/{campaignId}/content.

    Annotations the server declares

    • title: Import a template into a campaign
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • sarbacane_set_campaign_contentWRITE: set the HTML (and optional plain-text) content of an email campaign's send, replacing what was there.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_set_campaign_content" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: set the HTML (and optional plain-text) content of an email campaign's send, replacing what was there. Without send_id the campaign's only send is used (an A/B test campaign has several: pass one). POST /v1/campaigns/{campaignId}/send/{sendId}/content.

    Annotations the server declares

    • title: Set a draft campaign's content
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • sarbacane_set_campaign_listWRITE: import a contact list's contacts as the recipients of a campaign.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_set_campaign_list" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: import a contact list's contacts as the recipients of a campaign. It does not send the campaign. POST /v1/campaigns/{campaignId}/list.

    Annotations the server declares

    • title: Attach a contact list to a campaign
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • sarbacane_upsert_contactWRITE: add a contact to a list, or update it when the same email/phone pair already exists (custom field values are overwritten).Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_upsert_contact" says "upsert": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: add a contact to a list, or update it when the same email/phone pair already exists (custom field values are overwritten). POST /v1/lists/{listId}/contacts/upsert.

    Annotations the server declares

    • title: Add or update a contact
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • sarbacane_add_unsubscriberWRITE: record an email and/or phone as unsubscribed in a blacklist, so campaigns using that blacklist skip it.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "sarbacane_add_unsubscriber" says "add": a word for a change.
    • The description says "Cannot be undone".

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    WRITE: record an email and/or phone as unsubscribed in a blacklist, so campaigns using that blacklist skip it. Cannot be undone with these tools. POST /v1/blacklists/{blacklistId}/unsubscribers.

    Annotations the server declares

    • title: Add an unsubscribed contact
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Changes things 2Claude Code: ask
  • sarbacane_create_contactWRITE: add a contact to a contact list.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "sarbacane_create_contact" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    WRITE: add a contact to a contact list. Give an email, a phone number or both, and optional custom field values. Adds a new record; use sarbacane_upsert_contact to update an existing contact. POST /v1/lists/{listId}/contacts.

    Annotations the server declares

    • title: Add a contact to a list
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sarbacane_create_email_campaignWRITE: create a new email campaign as a DRAFT.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "sarbacane_create_email_campaign" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "sarbacane_create_email_campaign" says "create" and "email": it writes something other people read.
    Description, as the server wrote it
    WRITE: create a new email campaign as a DRAFT. It is never sent by these tools: add content (sarbacane_set_campaign_content or sarbacane_import_campaign_template) and a contact list (sarbacane_set_campaign_list), then send it from Sarbacane. POST /v1/campaigns/email.

    Annotations the server declares

    • title: Create an email campaign (draft)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 12Show 12 read-only tools
  • sarbacane_get_campaignOne campaign: state, kind, blacklists, send ids, sent date.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_get_campaign" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One campaign: state, kind, blacklists, send ids, sent date. The send id is needed to see content. GET /v1/campaigns/{campaignId}.

    Annotations the server declares

    • title: Get campaign details
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_get_campaign_reportStatistics of a campaign per send: delivered count, opens, openers, clicks, clickers, unsubscribers, devices and operating systems.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_get_campaign_report" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Statistics of a campaign per send: delivered count, opens, openers, clicks, clickers, unsubscribers, devices and operating systems. GET /v1/reports/{campaignId}.

    Annotations the server declares

    • title: Get campaign statistics
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_get_creditsThe account's remaining credits per type (email campaigns, SMS, eye tracking, Sendkit emails) with expiry date and subscription type.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_get_credits" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The account's remaining credits per type (email campaigns, SMS, eye tracking, Sendkit emails) with expiry date and subscription type. GET /v1/credits.

    Annotations the server declares

    • title: Get remaining credits
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_blacklist_entriesEntries of a blacklist by kind: bounces (invalid addresses), unsubscribers or complaints (personal data: email, phone).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_blacklist_entries" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Entries of a blacklist by kind: bounces (invalid addresses), unsubscribers or complaints (personal data: email, phone). Filter by email, phone or modification date. GET /v1/blacklists/{blacklistId}/{bounces|unsubscribers|complaints}.

    Annotations the server declares

    • title: List blacklist entries
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_blacklistsAll blacklists (suppression lists) of the account, with their ids.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_blacklists" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    All blacklists (suppression lists) of the account, with their ids. GET /v1/blacklists.

    Annotations the server declares

    • title: List blacklists
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_campaign_recipientsRecipients attached to a campaign (personal data: email, phone).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_campaign_recipients" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Recipients attached to a campaign (personal data: email, phone). GET /v1/campaigns/{campaignId}/recipients.

    Annotations the server declares

    • title: List a campaign's recipients
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_campaignsCampaigns of the account (id, name, kind, created/edited, recipient count).Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_campaigns" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Campaigns of the account (id, name, kind, created/edited, recipient count). Filter by state or a text in the name or subject. GET /v1/campaigns.

    Annotations the server declares

    • title: List campaigns
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_contactsContacts of one list (personal data: email, phone, custom fields).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_contacts" says "list": a word for reading.

    What it can reach

    • private-dataThe name "sarbacane_list_contacts" says "list" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Contacts of one list (personal data: email, phone, custom fields). Filter by email, phone, a text search across fields, or the modification date. GET /v1/lists/{listId}/contacts.

    Annotations the server declares

    • title: List contacts in a list
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_list_fieldsThe custom fields (columns) of a contact list: id, caption and type (STRING, BOOL, INT, DATE).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_list_fields" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The custom fields (columns) of a contact list: id, caption and type (STRING, BOOL, INT, DATE). Field ids are the keys used when writing contacts. GET /v1/lists/{listId}/fields.

    Annotations the server declares

    • title: List a list's custom fields
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_listsAll contact lists of the account, with their ids.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_lists" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    All contact lists of the account, with their ids. Use the ids for contacts, fields and campaigns. GET /v1/lists.

    Annotations the server declares

    • title: List contact lists
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_usersUsers and pending invitations of the Sarbacane account (name, email, role, team).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_users" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Users and pending invitations of the Sarbacane account (name, email, role, team). GET /v1/users.

    Annotations the server declares

    • title: List account users
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sarbacane_list_webhooksWebhook subscriptions of the account: url, display name and subscribed event kinds.Reads text others writeNo findings

    Why it is in this group

    • The name "sarbacane_list_webhooks" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Webhook subscriptions of the account: url, display name and subscribed event kinds. GET /v1/webhooks.

    Annotations the server declares

    • title: List webhooks
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

399 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data7
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write19
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__sarbacane__sarbacane_add_unsubscriber",
      "mcp__sarbacane__sarbacane_create_contact",
      "mcp__sarbacane__sarbacane_create_email_campaign"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sarbacane https://sarbacane.usefulapi.io/mcp
claude mcp add --transport http sarbacane https://sarbacane.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sarbacane__sarbacane_get_credits",
      "mcp__sarbacane__sarbacane_list_users",
      "mcp__sarbacane__sarbacane_list_lists",
      "mcp__sarbacane__sarbacane_list_list_fields",
      "mcp__sarbacane__sarbacane_list_contacts",
      "mcp__sarbacane__sarbacane_list_blacklists",
      "mcp__sarbacane__sarbacane_list_blacklist_entries",
      "mcp__sarbacane__sarbacane_list_campaigns",
      "mcp__sarbacane__sarbacane_get_campaign",
      "mcp__sarbacane__sarbacane_get_campaign_report",
      "mcp__sarbacane__sarbacane_list_campaign_recipients",
      "mcp__sarbacane__sarbacane_list_webhooks"
    ],
    "ask": [
      "mcp__sarbacane__sarbacane_create_contact",
      "mcp__sarbacane__sarbacane_add_unsubscriber",
      "mcp__sarbacane__sarbacane_create_email_campaign"
    ],
    "deny": [
      "mcp__sarbacane__sarbacane_upsert_contact",
      "mcp__sarbacane__sarbacane_set_campaign_content",
      "mcp__sarbacane__sarbacane_import_campaign_template",
      "mcp__sarbacane__sarbacane_set_campaign_list"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sarbacane. Review it before you use it.

Capability tags behind 19 rules
  • mcp__sarbacane__sarbacane_get_credits private-data, untrusted-input
  • mcp__sarbacane__sarbacane_list_users private-data, untrusted-input
  • mcp__sarbacane__sarbacane_list_lists private-data, untrusted-input
  • mcp__sarbacane__sarbacane_list_list_fields private-data, untrusted-input
  • mcp__sarbacane__sarbacane_list_contacts private-data, untrusted-input
  • mcp__sarbacane__sarbacane_create_contact untrusted-input, outbound
  • mcp__sarbacane__sarbacane_upsert_contact untrusted-input
  • mcp__sarbacane__sarbacane_list_blacklists untrusted-input
  • mcp__sarbacane__sarbacane_list_blacklist_entries private-data, untrusted-input
  • mcp__sarbacane__sarbacane_add_unsubscriber untrusted-input, outbound
  • mcp__sarbacane__sarbacane_list_campaigns untrusted-input
  • mcp__sarbacane__sarbacane_get_campaign untrusted-input
  • mcp__sarbacane__sarbacane_get_campaign_report untrusted-input
  • mcp__sarbacane__sarbacane_list_campaign_recipients private-data, untrusted-input
  • mcp__sarbacane__sarbacane_list_webhooks untrusted-input
  • mcp__sarbacane__sarbacane_create_email_campaign untrusted-input, outbound
  • mcp__sarbacane__sarbacane_set_campaign_content untrusted-input
  • mcp__sarbacane__sarbacane_import_campaign_template untrusted-input
  • mcp__sarbacane__sarbacane_set_campaign_list untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/sarbacane/verify?hash=4c28f9b078a7b28792e57751365fffb5b255516e6bd4315813925b2bd8e5a883" | jq -e '.changed == false'

Pinned hash 4c28f9b078a7, from Oct 25, 2026, 20:23 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/sarbacane/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/sarbacane
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/sarbacane.svg)](https://anlyon.dev/servers/io.usefulapi/sarbacane)

Source: MCP Registry · repository. Synced Oct 25, 2026, 21:18 UTC.