Skip to content

Card Mailer

by onmax.me · remote · no sign-in to list tools · v1.0.0 · published by me.onmax

Print and mail 5x7 holiday and thank-you photo cards to a US address list. $2.49/card incl. postage.

Deletes · 2Changes · 3
CompareRegistry entry

6 tools: 2 can delete or cancel things, 3 change things and 1 only read.

Scanned Oct 22, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http card-mailer https://cards.onmax.me/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Deletes or cancels 2Claude Code: deny
  • design_cardUse this to create or edit the printed 5x7 postcard: a greeting on the front over or under the photo, and a message and sign-off on the back.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use this to create or edit the printed 5x7 postcard: a greeting on the front over or under the photo, and a message and sign-off on the back. Pass the photo the user attached as photo, or a public https image URL as photo_url; the image is downloaded and stored on cards.onmax.me. Without a photo the front is the greeting on a solid color. Pass design_id to edit a design: given fields replace the old values and omitted fields keep them. Use the message the user wrote or approved, up to 500 characters. Places the user's photo and text in a print template; does not generate images.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
    • idempotentHint: false
  • fix_addressUse this to correct or remove one recipient in a list from import_address_list, by row number.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Use this to correct or remove one recipient in a list from import_address_list, by row number. Given fields replace the stored values and omitted fields keep theirs; if the row's problem says it could not be read, pass name, line1, city, state and zip together. Re-checks the address with USPS data. remove: true takes the recipient out of the mailing. Rows in a list that belongs to a paid order cannot be changed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
    • idempotentHint: true
Changes things 3Claude Code: ask
  • create_mailingUse this when the user has seen the card and the quote and says they want to order.Reads text others writeNo findings

    Why it is in this group

    • The name "create_mailing" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use this when the user has seen the card and the quote and says they want to order. Creates an unpaid order for the ready recipients in list_id with design_id and returns a link to cards.onmax.me, where the user reviews the recipients and pays. Nothing is printed, mailed or charged until the user pays on that page. Recipients that still need fixing are left out. Each call creates a separate order link, so call it once per order. Optional sender is printed as the US return address.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: false
  • import_address_listUse this when the user wants to mail printed cards to people at US postal addresses and gives the addresses as pasted text, a CSV, or an .xlsx spreadsheet.No findings

    Why it is in this group

    • The name "import_address_list" says "import": a word for a change.
    Description, as the server wrote it
    Use this when the user wants to mail printed cards to people at US postal addresses and gives the addresses as pasted text, a CSV, or an .xlsx spreadsheet. Reads names and addresses, checks each against USPS data, and saves them as a recipient list. Returns a list_id, how many rows are ready, and the problem for each row that needs fixing. Up to 300 recipients; pass list_id to append rows to an existing list. US addresses only. Not for e-cards or email, addresses outside the US, or advertising mail to purchased or rented lists.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: false
  • quote_mailingUse this when the user asks what mailing a card to an imported list costs or when it will arrive.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks what mailing a card to an imported list costs or when it will arrive. Returns the price per card (First-Class postage included), the total for the ready recipients, the send date and the expected arrival window. If the cards must arrive by a date, pass arrive_by; the result gives the latest safe send date and whether that date can be met. Does not create an order or charge anything.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
Only reads 1Claude Code: allow
  • get_mailing_statusUse this when the user asks whether a Card Mailer order was paid, printed, mailed or delivered.No findings

    Why it is in this group

    • The name "get_mailing_status" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks whether a Card Mailer order was paid, printed, mailed or delivered. Takes the mailing_id returned by create_mailing (also the last part of the order link). Returns the status, send date, expected arrival and per-recipient counts. Does not change the order or track other USPS mail.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http card-mailer https://cards.onmax.me/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__card-mailer__get_mailing_status"
    ],
    "ask": [
      "mcp__card-mailer__import_address_list",
      "mcp__card-mailer__quote_mailing",
      "mcp__card-mailer__create_mailing"
    ],
    "deny": [
      "mcp__card-mailer__fix_address",
      "mcp__card-mailer__design_card"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as card-mailer. Review it before you use it.

Capability tags behind 2 rules
  • mcp__card-mailer__design_card untrusted-input
  • mcp__card-mailer__create_mailing untrusted-input