Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ai.bobwork/emailwarmup

REMOTE · APP-EMAILWARMUP.BOBWORK.AI

Warm up mailboxes, check the ready-for-outbound gate, run cold email and get checkout links.

72 Trust /100

Last scanned (19 minutes ago)

Scores higher than 58% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Marketing and SEO

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security77
Transport & Reachability100
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2989 tokens (~64/item across 46 items; 46 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
  • Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage86
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 58% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 +1
    • Tool “update_mailbox” rewrote its description, which is the text the model reads security
    • Stability: unverified → 0.03 ▲ functional
    • New tool “set_warm_style” functional
    • “update_mailbox” added an optional parameter “signature” cosmetic
  • 2 Nov 26 70

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://app-emailwarmup.bobwork.ai/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=bobwork.ai CN=WE1,O=Google Trust Services,C=US 22 Oct 2026 20 Jan 2027 ECDSA 256 ECDSA-SHA256 7b69aef29e9ee31e13a08ef167989daf
SANs: bobwork.ai, *.bobwork.ai
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of app-emailwarmup.bobwork.ai. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 1814, 3799 8, 8 Verified
bobwork.ai. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result Challenged, unverified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="bobwork-email-warmup", resource_metadata="https://emailwarmup.bobwork.ai/.well-known/mcp/server-card.json"

Bearer realm="bobwork-email-warmup", resource_metadata="https://emailwarmup.bobwork.ai/.well-known/mcp/server-card.json"
Header Value
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()

Protected resource metadata

Document https://emailwarmup.bobwork.ai/.well-known/mcp/server-card.json
Retrieved Yes
Problem metadata_incomplete

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://app-emailwarmup.bobwork.ai/mcp Verified 200
http (plaintext) http://app-emailwarmup.bobwork.ai/mcp Inconclusive 405
MCP tools · 46 exposed · ~2,751 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_contacts ~67

Add up to 1,000 contacts to a campaign. Each needs email; other fields (first_name, company…) fill the placeholders. Duplicates and unsubscribed addresses are skipped.

NameTypeReqDescription
campaign_idstringyesCampaign id from list_campaigns
contactsarrayyes–

No output schema declared.

No examples provided.

add_dns_record ~104

Add a DNS record to a domain you bought here. name = subdomain ('' for the domain itself). Types A, AAAA, CNAME, ALIAS, MX, TXT, CAA, SRV.

NameTypeReqDescription
contentstringyes–
domainstringyesDomain, e.g. yourdomain.com
namestring––
priointeger––
ttlinteger––
typestringyes–

No output schema declared.

No examples provided.

add_hosted_mailboxes ~56

Add mailboxes to a domain you bought here ($3 per mailbox per month). Returns a Stripe checkout link.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com
mailboxesarrayyes–

No output schema declared.

No examples provided.

buy_domains ~59

Buy domains with up to 3 mailboxes each. Returns a Stripe checkout link for the person to pay; setup starts once paid. Needs accept_sending_rules true.

NameTypeReqDescription
accept_sending_rulesbooleanyes–
domainsarrayyes–

No output schema declared.

No examples provided.

check_dkim ~57

Find a domain's DKIM key: tries the selector you give, selectors seen in real mail, then 45 common ones.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com
selectorstring––

No output schema declared.

No examples provided.

check_dmarc ~36

Look up a domain's DMARC record and policy.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com

No output schema declared.

No examples provided.

check_spf ~32

Look up a domain's SPF record.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com

No output schema declared.

No examples provided.

connect_imap_mailbox ~218

Connect any mailbox with IMAP + SMTP. The login is tested before it is saved. Use an app password when two-factor sign-in is on. Give a preset (see list_providers) or the hosts. Warm-up starts the same day.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com
hoststring–IMAP host (if no preset)
namestring–Display name on sent mail
passwordstringyesMailbox password or app password
portinteger––
presetstring–e.g. gmail-imap, yahoo, icloud, zoho, lark, aws-ses, sendgrid, mailgun, other
smtp_hoststring––
smtp_passwordstring––
smtp_portinteger––
smtp_userstring–Relay platforms only (SES/SendGrid/Mailgun)
userstring–Login if not the email

No output schema declared.

No examples provided.

connect_zoho_mailbox ~132

Connect a Zoho Mail mailbox through the Zoho API (works on Zoho's free plan). Needs a Self Client id, secret and a generated code from api-console.zoho.com.

NameTypeReqDescription
client_idstringyes–
client_secretstringyes–
codestringyesSelf Client code (valid 10 minutes)
dcstring–Zoho data centre: com, eu, in, com.au, jp, ca
emailstringyesMailbox address, e.g. sales@yourdomain.com
namestring––

No output schema declared.

No examples provided.

create_billing_checkout ~85

Get a Stripe Checkout url for extra mailboxes beyond the free limit (monthly, or yearly = 10 months' price for 12). The USER opens it and pays; you cannot. Then poll get_billing_status. Returns already:true when the account is subscribed. Prices come back in the result (prices).

NameTypeReqDescription
yearlyboolean–Bill yearly instead of monthly

No output schema declared.

No examples provided.

create_campaign ~91

Create a draft Outbound campaign (nothing is sent). Emails can use {first_name}, {company} and any contact field. Any connected mailbox can send; one that is still warming shows a warning first.

NameTypeReqDescription
daily_limitinteger–Per mailbox per day
emailsarrayyes1-4 emails in order
mailboxesarray––
namestringyes–

No output schema declared.

No examples provided.

create_credits_checkout ~70

Get a Stripe Checkout url to top up prepaid credits for Outbound sending and AI drafts (one-off $5, $10, $25 or $100; credits never expire). The USER opens it and pays; you cannot. Then poll get_billing_status.

NameTypeReqDescription
usdintegeryes–

No output schema declared.

No examples provided.

create_workspace ~42

Create a client workspace, e.g. the client's company name (max 100 per account).

NameTypeReqDescription
namestringyesClient name, up to 60 characters

No output schema declared.

No examples provided.

delete_dns_record ~61

Delete a DNS record by id (from list_dns_records). Deleting MX, SPF, DKIM or DMARC stops the mailboxes working.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com
record_idstringyes–

No output schema declared.

No examples provided.

delete_workspace ~56

Delete a client workspace. Its mailboxes are NOT deleted: they move back to My mailboxes and keep warming. The client's report link stops working.

NameTypeReqDescription
workspace_idstringyesWorkspace id (ws_…) from list_workspaces

No output schema declared.

No examples provided.

domain_health ~26

SPF, DKIM selector, DMARC policy and MX for every domain you have connected.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_account ~47

Your account: email, credit balance, free mailbox allowance (10, or 20 for accounts created before 27 October 2026, plus referral bonus), paid extras and your referral link.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_billing_status ~56

Payment status after you gave the user a checkout link: credit balance, whether the extra-mailbox subscription is active, mailboxes vs the free limit, and checkouts still waiting for payment. Confirms a paid checkout straight away.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_campaign ~36

One campaign: its emails, mailboxes, stats and time left.

NameTypeReqDescription
campaign_idstringyesCampaign id from list_campaigns

No output schema declared.

No examples provided.

get_credits ~25

Prepaid credit balance, prices and recent charges (Outbound emails, AI drafts).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_mailbox ~37

One mailbox's warm-up status and health.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

get_workspace_report ~71

The public read-only report link for one client workspace (mailbox health, spam rate, SPF/DKIM/DMARC). The client opens it without a login; it shows no prices and nothing about other clients.

NameTypeReqDescription
workspace_idstringyesWorkspace id (ws_…) from list_workspaces

No output schema declared.

No examples provided.

google_connect_link ~58

Get a link the user opens to connect Gmail / Google Workspace with Google sign-in (one click, any device). The mailbox appears in list_mailboxes a few minutes after they allow it.

NameTypeReqDescription
renewboolean–Make a fresh link

No output schema declared.

No examples provided.

hosted_mailbox_login ~44

Password, IMAP and SMTP settings for one of your hosted mailboxes.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

list_bought_domains ~34

Domains bought in the domain shop, their hosted mailboxes, renewal date and price, plus IMAP/SMTP settings.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_campaign_contacts ~39

Contacts in a campaign and where each is in the sequence (first 200).

NameTypeReqDescription
campaign_idstringyesCampaign id from list_campaigns

No output schema declared.

No examples provided.

list_campaigns ~18

Your Outbound campaigns with status and stats.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_dns_records ~33

DNS records on a domain you bought here.

NameTypeReqDescription
domainstringyesDomain, e.g. yourdomain.com

No output schema declared.

No examples provided.

list_mailboxes ~42

Every connected mailbox with warm-up day, status, 7-day spam rate, today's and last 7 days' numbers, and whether it is ready for outbound.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_providers ~53

IMAP/SMTP presets (Gmail app password, Yahoo, iCloud, Zoho, Lark, SES, SendGrid, Mailgun…) with hosts and ports, plus the Google and Zoho API routes.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_workspaces ~55

Client workspaces (agencies): each client's mailboxes are kept separate under one login and one bill. Returns id, name and mailbox count. Each mailbox in list_mailboxes has a workspace id (null = My mailboxes).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

mailbox_activity ~50

The last 100 warm-up events for a mailbox (sent, received, replied, rescued from spam, errors).

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

move_mailbox_to_workspace ~73

Put a mailbox in a client workspace. Leave workspace_id out (or empty) to move it back to My mailboxes.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com
workspace_idstring–Workspace id (ws_…) from list_workspaces

No output schema declared.

No examples provided.

pause_campaign ~27

Pause a running campaign.

NameTypeReqDescription
campaign_idstringyesCampaign id from list_campaigns

No output schema declared.

No examples provided.

pause_mailbox ~35

Pause warm-up for a mailbox.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

remove_mailbox ~58

Remove a mailbox and delete its stored login. Irreversible: ask the user first, then pass confirm=true.

NameTypeReqDescription
confirmbooleanyes–
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

rename_workspace ~38

Rename a client workspace.

NameTypeReqDescription
namestringyes–
workspace_idstringyesWorkspace id (ws_…) from list_workspaces

No output schema declared.

No examples provided.

resume_mailbox ~35

Resume warm-up for a mailbox.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

search_domains ~41

Find available lookalike domains for cold email, with first-term and renewal prices.

NameTypeReqDescription
qstringyesBrand or domain, e.g. acme

No output schema declared.

No examples provided.

set_pool_mode ~49

Shared network (default: warm with every mailbox on the service) or private pool (only your own mailboxes write to each other; needs 2+).

NameTypeReqDescription
private_poolbooleanyes–

No output schema declared.

No examples provided.

set_warm_style ~73

Teach warm-up mail how you write: paste up to 4,000 characters of your own sent emails (tone, length, sign-offs). Empty clears it. Used when the AI writes your warm-up conversations.

NameTypeReqDescription
warm_stylestringyesWriting samples, max 4,000 characters; empty clears

No output schema declared.

No examples provided.

start_campaign ~165

Start or resume a campaign. This SENDS real email and uses credits. Confirm with the user first. accept_sending_rules=true means the user agrees to https://emailwarmup.bobwork.ai/terms#outbound-beta (only people who may receive it, honest sender, unsubscribe honoured). If a chosen mailbox is still warming the call fails with warming:true; show the user the message and set accept_warming_risk=true only after they explicitly agree. Without credits it fails with credits_required:true: use create_credits_checkout.

NameTypeReqDescription
accept_sending_rulesboolean––
accept_warming_riskboolean–The user agreed to send from mailboxes that have not finished warm-up
campaign_idstringyesCampaign id from list_campaigns

No output schema declared.

No examples provided.

test_mailbox ~43

Sign in to the mailbox now and report whether the stored login still works.

NameTypeReqDescription
emailstringyesMailbox address, e.g. sales@yourdomain.com

No output schema declared.

No examples provided.

update_campaign ~67

Edit a paused or draft campaign. Fields you leave out keep their value.

NameTypeReqDescription
campaign_idstringyesCampaign id from list_campaigns
daily_limitinteger––
emailsarray––
mailboxesarray––
namestring––

No output schema declared.

No examples provided.

update_mailbox ~121

Change a mailbox's display name, daily warm-up cap (1-100, null = default), time zone (IANA, e.g. Europe/London) or the signature added to its warm-up mail (empty = default: full name and company).

NameTypeReqDescription
daily_capinteger|null––
emailstringyesMailbox address, e.g. sales@yourdomain.com
namestring––
signaturestring–Up to 500 characters; empty resets to the default
timezonestring––

No output schema declared.

No examples provided.

warmup_stats ~36

Totals across your mailboxes: today and last 7 days (sent, received, rescued, replied), active and ready counts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the ai.bobwork/emailwarmup MCP server?

ai.bobwork/emailwarmup is a hosted endpoint at https://app-emailwarmup.bobwork.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · app-emailwarmup.bobwork.ai

# add to Claude Code
claude mcp add --transport http ai-bobwork-emailwarmup 'https://app-emailwarmup.bobwork.ai/mcp'
Common questions

What is the ai.bobwork/emailwarmup MCP server?

ai.bobwork/emailwarmup is an MCP server listed in the public MCP registry as ai.bobwork/emailwarmup. Warm up mailboxes, check the ready-for-outbound gate, run cold email and get checkout links. This page covers its hosted endpoint (https://app-emailwarmup.bobwork.ai/mcp).

Is the ai.bobwork/emailwarmup MCP server safe to use?

ai.bobwork/emailwarmup scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ai.bobwork/emailwarmup MCP server expose?

ai.bobwork/emailwarmup exposes 46 tools: get_account, list_mailboxes, get_mailbox, mailbox_activity, warmup_stats, and 41 more. Their descriptions and schemas cost roughly 2,751 tokens of context every time the server is loaded.

Does the ai.bobwork/emailwarmup MCP server require authentication?

Yes. ai.bobwork/emailwarmup asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the ai.bobwork/emailwarmup MCP server still maintained?

ai.bobwork/emailwarmup is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.