Conecto Email
REMOTE · API.CONECTO.CHAT
Inboxes on your business's own subdomain that send, receive and keep threads. Pay per action.
Available components
Last scanned (2 hours ago)
Scores higher than 44% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Communication
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (email_release_inbox). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability60
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 5473 tokens (~144/item across 38 items; 38 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage83
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 49% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 39 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
- Stability: unverified → 0.03 ▲ functional
- 2 Nov 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.conecto.chat/mcp/email
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.conecto.chat | CN=WR3,O=Google Trust Services,C=US | 6 Oct 2026 | 4 Jan 2027 | RSA 2048 | SHA256-RSA | e65363629d99e1e21050aed0a4a3b3ce |
| SANs: api.conecto.chat | ||||||
| CN=WR3,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a91568d63abc22861684aa4b5a |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.conecto.chat. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| chat. | present | 33026 | 8 | Verified |
| conecto.chat. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | same-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.conecto.chat/mcp/email | Verified | 200 | |
| http (plaintext) | http://api.conecto.chat/mcp/email | HTTPS enforced | 302 | https://api.conecto.chat/mcp/email |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
account_add_approval_rule Hold a tool for approval ~394
Make a tool wait for a person: every call of it, those whose argument is over a number (like invoices_create_credit_note when amount is over 500), or those whose argument is one of some values (like connect_call when method is POST, PUT, PATCH or DELETE). A held call answers approval_required with an approval_id and asks the approver; when they approve, call again with the same arguments, once (a call no person answers for adds the approval: header X-Conecto-Approval, or _meta.approvalId over MCP). The approver is an email, a saved channel, or a team (its managers, or everyone in it); each approver gets a link of their own, and the person whose call it is never approves it. With two_people_over, calls whose argument is over it need two people. Bills like Xero's bill approval: purchasing_create_bill with argument total holds bills over an amount, tax included; a rule on purchasing_pay_bill also holds batches with such a payment. Removing a rule is the owner's, on their account page, when the account has an owner email. $0.001. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| approver_channel | string | – | A saved notify channel. |
| approver_email | string | – | – |
| approver_team | string | – | A team (account_list_teams). |
| approvers | string | – | Who in approver_team approves. |
| argument | string | – | An argument of the tool (or total, for purchasing_create_bill). |
| over | number | – | Calls with argument over this are held. |
| tool | string | yes | – |
| two_people_over | number | – | Calls whose argument is over this need two people; higher than over. |
| values | array | – | Calls with argument equal to one of these (any case) are held. |
No output schema declared.
No examples provided.
account_assign_team Give something to a team ~166
Move a form, a meeting type, a job, an inbox, a phone number, a newsletter, the website chat, a rental, a pipeline, a table or a website to a team. What happens through it is charged to that team from now on (a form's responses, a number's calls, an inbox's tickets), and its rental moves with it. Something a bot makes already belongs to the bot's team. Only a key of the company-wide team without limits moves things between teams. $0.001. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | Its id, slug, name, address or number; not needed for the chat. |
| kind | string | yes | – |
| team | string | yes | – |
No output schema declared.
No examples provided.
account_audit_log Read the audit log ~129
The account's admin and security actions, newest first: keys made and revoked, limits and auto-reload, the owner's sign-ins, connectors, exports, vault reads and writes, credentials set and everything deleted. Ordinary work is in the call log (account_list_calls). verify: true also checks the hash chain, which breaks where an entry was changed or removed. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Only actions starting with this, like "key." or "tool.vault_". |
| limit | integer | – | – |
| since | string | – | – |
| verify | boolean | – | – |
No output schema declared.
No examples provided.
account_balance Check balance ~71
The account balance, how much of it is credit bought (AI visibility and the phone run only on that) and how much free and bonus credit, what running calls are holding, this key's daily budget, the auto-reload state, and how much of this month's free reads and downloads is used. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_dashboard_link Get a link to an area at a glance ~148
A one-time link to a page showing one area as it is when the page opens, for when the person you work for asks to see it themselves: a recruiter looks at the applicants, a bookkeeper at what is due. Do the work and answer with the area's own tools first; a link never replaces that. When an answer would be a long list they would rather look through, offer a link and make it once they say yes. The page is made from the area's own reads as this key, so it shows only what this key may see. It opens once and keeps for an hour; an unopened link ends after 7 days. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| area | string | yes | – |
No output schema declared.
No examples provided.
account_data_locations See where the data is ~113
Where each area's data is stored and processed: the company that runs each place, the country or region, and what it holds. Every area keeps its records in the database and runs on Conecto's servers; some also use a service named here (email, phone, PDFs, search). For the business's records of processing and its transfer assessments (GDPR Art. 30 and 44). Free.
| Name | Type | Req | Description |
|---|---|---|---|
| areas | array | – | Areas to show, like ["email", "phone"]; all when left out. |
No output schema declared.
No examples provided.
account_emit_event Send an event of your own ~197
Send an event you name, custom.<name> (custom.lead_qualified, custom.order_shipped), to every channel subscribed to it (notify_subscribe with "custom.*" or its name: Slack, Teams, a webhook to Zapier, Make, n8n or the business's own systems) and to account_events, where another team's bot can pick it up. data is any JSON object (up to 10 KB); sent_by is added with this bot's name and team. $0.005 for each channel it goes to; free when no channel is subscribed. Costs $0.005 per channel it goes to; nothing if none are found.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| kind | string | yes | custom. and a name of lowercase letters, digits, dots, dashes and _. |
| link | string | – | – |
| text | string | – | – |
| title | string | yes | – |
No output schema declared.
No examples provided.
account_erase_person Erase a person's data ~278
Erases one person across every area when they ask (GDPR Art. 17), once you know it is them (they wrote from that address, or confirmed it). Their CRM contact, chat visitor, past meetings and calls are anonymised, so deals stay without them, and a meeting they were only a guest at drops them; their chats, CRM history, form and routing form answers, job applications with the CV, newsletter subscriptions and events are deleted, and the call log's contents that name them are cleared. Kept, each with its reason in the result: accounting records, employment records, signed documents, the audit log, the account's own settings, upcoming meetings, and emails and tickets (outreach emails and replies too) unless correspondence is true. Their address goes on the suppression lists, so it is never mailed again: outreach campaigns stop for them at once. Can't be undone; the owner is emailed. A key of a team other than the company-wide one gets owner_required: pass the request to the owner. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| correspondence | boolean | – | Also delete their emails and tickets, when no law requires keeping them. |
| string | – | The person's email address. | |
| phone | string | – | Their phone number in international format, like +1 503 555 0145. |
No output schema declared.
No examples provided.
account_events Read recent events ~113
What happened in this account that someone outside the bot did, oldest first: applications, bookings, form responses, signatures, replies, emails received, goals reached on the website; and the custom events bots sent with account_emit_event. Kept 30 days. Poll with after = the last event_id you saw. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| after | integer | – | Only events after this event_id. |
| kinds | array | – | Event names or areas ("hiring.*"); all when left out. |
| limit | integer | – | – |
No output schema declared.
No examples provided.
account_export_all Export everything ~176
Everything this account holds, in ZIP files of up to 24 MB saved to its file store: every record of every area as JSON Lines, and the stored files themselves, with a README saying what is where. Credentials are left out. Runs in the background: poll the call with account_get_call; the result has a download link for each part. The parts open only for this key and for the owner's and admins' own keys that neither only read nor only draft. A key of a team other than the company-wide one gets owner_required. Free (EU Data Act). One at a time, three a day; the owner is emailed when an export is made. Free. Runs in the background: the reply has a call_id; poll it with the account_get_call tool or GET /v1/calls/<id>.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_export_person Export a person's data ~170
Everything account_find_person finds about one person in one ZIP in the file store: their records as JSON Lines (credentials left out) and the files those records point to, like a CV. Give the person the download link when they ask for a copy of their data (GDPR Art. 15 and 20), once you know it is them. The ZIP opens only for this key and for the owner's and admins' own keys that neither only read nor only draft. A key of a team other than the company-wide one gets owner_required: pass the request to the owner. Free; 20 a day. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | The person's email address. | |
| phone | string | – | Their phone number in international format, like +1 503 555 0145. |
No output schema declared.
No examples provided.
account_find_person Find a person's data ~148
Every record this account holds about one person, by their email address or phone number, across every area: CRM, chats, emails, tickets, forms, bookings, calls, applications, invoices, orders, newsletters, HR and the call log, with their chats and CRM history. For a person who asks what the business keeps about them (GDPR Art. 15). Shows each kind with its count and ids; account_export_person gives them a copy, account_erase_person erases what may go. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | The person's email address. | |
| phone | string | – | Their phone number in international format, like +1 503 555 0145. |
No output schema declared.
No examples provided.
account_get_brand See the business's look ~29
The name, logo, colour and footer line the business's emails and published pages carry. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_get_call Get a call ~50
One call by id: its status (queued, running, succeeded, failed), cost and result. Use it to poll a background call until it finishes. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| call_id | string | yes | – |
No output schema declared.
No examples provided.
account_get_limits Read the limits ~61
The limits a business can ask Conecto to raise (calls a minute, new email addresses a day, phone numbers and more): each one's standard and current value and the most that can be asked for, and the business's requests with their answers. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_list_approval_rules List approval rules ~29
The tools that wait for a person's approval, with their thresholds and approvers. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_list_calls List calls ~52
Recent calls on this account, newest first, optionally only failed or succeeded ones, or one area's. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| area | string | – | – |
| limit | integer | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
account_list_email_templates See what the business's emails say ~69
Every email Conecto sends to the business's customers (bookings, applications, interviews, tests, signatures, invoices and quotes, newsletter sign-ups), with when it goes out and its subject, headline and opening words as they are now, and the {variables} each can use. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_list_teams List teams ~82
The account's teams, the company-wide one first: each with its areas, whether it only reads, its budget (hard or soft, and its period) and alert line, this period's spend, its ERP code, whether it is paused, its keys, and its people with who manages it. A person's own assistant works within their teams. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
account_owner_link Get a sign-in link for the owner ~100
A link that signs the business owner into their Conecto page, with no password: the balance, adding credit, auto-reload, limits, what the bots did, people, rentals and keys. page opens it where the owner is needed, like people for a role only the owner gives, or settings for joining by email domain. It works once, within 30 minutes; hand it to the owner. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| page | string | – | – |
No output schema declared.
No examples provided.
account_pause_team Pause a team ~69
Stops every key of a team at once, this one too if it is the team's: their calls are refused until the owner starts the team again on their account page. For a bot that misbehaves or a team that spends too fast. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| team | string | yes | – |
No output schema declared.
No examples provided.
account_refund_topup Refund a top-up ~97
Refund a top-up paid in the last 24 hours that none of has been used yet: its credit, with the first top-up's bonus, leaves the balance, and the card gets the credit back with its tax. The service fee is kept. Without topup_id, the newest top-up (GET /v1/topups lists them with their ids). Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| topup_id | integer | – | – |
No output schema declared.
No examples provided.
account_request_limit Ask for a higher limit ~198
Ask Conecto to raise one of the business's limits: which one (or other, saying which), the number it needs, and why, in 40 to 2,000 characters. Conecto reviews it and approves (maybe with less) or declines; the answer comes as the account.limit_request_answered event and by email to the owner, who is also told now. For an account that has topped up; one request per limit at a time, five in 30 days. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | integer | yes | The number the business needs, in the limit's unit (5000 calls a minute). |
| limit | string | yes | The limit, as account_get_limits names it, or other. |
| other | string | – | With limit other: which limit, like "rows in one table". |
| reason | string | yes | What the business does that needs it, and why the current limit is too low. |
No output schema declared.
No examples provided.
account_save_team Create or change a team ~561
A department, location or project group of the account, like Support, Finance or the Hamburg shop. Its keys (POST /v1/keys with "team") can only work in its areas, only read when read_only is on, and spend against its budget (monthly_budget_usd per budget_period: a month, a fiscal quarter or year, or a project total): a hard budget refuses the call that would pass it, a soft one only warns. At alert_percent you get the event account.budget_alert and the owner an email, once a period. erp_code is the team's cost center in the company's ERP, for statements. drafts_only makes every write of its keys wait for one of its managers (or the owner), for a new bot that should only draft. mailboxes are the Microsoft 365 or Google mailboxes its keys may act as. You may make a team and narrow one; widening its areas, letting it write, ending drafts only, switching a hard budget to soft, and raising or removing a budget are the owner's, on their account page, when the account has an owner email. The company-wide team holds every key no other team does and is never limited to areas. $0.001. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| alert_percent | integer | – | – |
| areas | array|null | – | The areas its keys may work in (account tools always); null for every area. |
| budget | string | – | hard refuses calls past the budget; soft only warns. |
| budget_ends_on | string|null | – | The last day of a project budget, like 2026-12-31. |
| budget_period | string | – | What the budget is for: a month, a quarter or a year of the account's fiscal calendar, or a project total until budget_ends_on. |
| drafts_only | boolean | – | Every write of its keys waits for a person, and they get links that act for whoever opens them as "[redacted]". |
| erp_code | string|null | – | – |
| mailboxes | array|null | – | The Microsoft 365 or Google mailboxes its keys may act as; null for every mailbox the connection lists. |
| monthly_budget_usd | number|null | – | null counts the spend without a cap. |
| name | string | yes | – |
| new_name | string | – | Renames the team; its keys, spend and budget stay with it. |
| read_only | boolean | – | Its keys only read, and get links that act for whoever opens them as "[redacted]". |
| sees_sensitive | boolean | – | false hides suppliers' bank details and HR notes and contracts from its keys; only the owner turns it on. |
No output schema declared.
No examples provided.
account_search Search everything ~116
One search over what this account holds: what its files say (PDFs, Word, Excel, PowerPoint, text), table rows, help center articles, CRM contacts, companies and deals, emails, tickets, quotes and invoices, book entries, stock items and project tasks. Every word must appear (any case); titles rank first, then the newest. Each result says which tool opens it. Narrow it with areas. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| areas | array | – | – |
| limit | integer | – | – |
| query | string | yes | – |
No output schema declared.
No examples provided.
account_set_brand Set the business's look ~177
The business's name as the sender, its logo (a PNG, JPEG, WebP or GIF from the file store), its colour and a footer line (an address, a legal line), on every email to its customers (bookings, applications, tests, signatures, invoices, newsletters, replies) and on its published pages (forms, booking, careers, newsletters, status, views). Only what you pass changes; an empty string clears it. Mail from Conecto to you keeps Conecto's look. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| colour | string | – | Hex, like #1a73e8; empty for none. |
| footer | string | – | – |
| logo_file_id | string | – | – |
| remove_logo | boolean | – | – |
| sender_name | string | – | – |
No output schema declared.
No examples provided.
account_set_email_template Rewrite one of the business's emails ~139
Change an email's subject, headline or opening words in the business's own voice, with {variables} from account_list_email_templates (like {name} or {when}). The facts under them (times, places, amounts, links and buttons) stay as they are. Only what you pass changes; an empty string brings back the original words. Plain text; a blank line starts a new paragraph. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Like booking_booked or invoice_sent. | |
| headline | string | – | – |
| opening | string | – | – |
| subject | string | – | – |
No output schema declared.
No examples provided.
account_set_owner_email Name the business's owner ~72
When the account was made without the owner's email: send that person a link to confirm they own it. Once they confirm, the owner gets the account's warnings and approval requests, and only the owner raises limits. Nothing changes until they open the link. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | – |
No output schema declared.
No examples provided.
email_create_inbox Create an inbox ~302
A new email address for the business on its own subdomain, e.g. support@acme.useconecto.com. It can send and receive at once. With open_tickets=true it is a support inbox: every new email to it opens a help desk ticket (see ticket_connect_inbox). With save_attachments=true, attachments of mail it receives go to the file store (email-in, e.g. invoices@ for supplier bills). Rented at $1.00 a month, renewed from the balance; the first month is this call. Costs $1.00 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| display_name | string | – | Shown as the sender name. |
| local_part | string | yes | The part before the @, e.g. "support" or "sales". |
| open_tickets | boolean | – | New mail opens a help desk ticket; ticket replies go out from here. |
| save_attachments | boolean | – | Email-in: save each attachment of mail received here to the file store, linked to its email (files.added tells you, with its text). The store's space counts; when it is full an attachment is skipped… |
No output schema declared.
No examples provided.
email_get_message Read a message ~33
One message in full: text, HTML and attachment names. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| message_id | string | yes | – |
No output schema declared.
No examples provided.
email_get_thread Read a thread ~31
Every message in the same conversation, oldest first. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| message_id | string | yes | – |
No output schema declared.
No examples provided.
email_list_inboxes List inboxes ~38
This account's inboxes, whether each opens help desk tickets or saves attachments to the file store, and when each renews. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
email_list_messages List messages ~119
Messages in this account's inboxes, newest first: received, sent or both, optionally for one inbox, one sender or since a time. Free. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | – | – |
| from | string | – | – |
| inbox | string | – | – |
| label | string | – | Only threads with this label. |
| limit | integer | – | – |
| query | string | – | – |
| since | string | – | ISO 8601 |
| state | string | – | Only messages whose thread is in this state (email_update_thread). |
No output schema declared.
No examples provided.
email_release_inbox Release an inbox ~38
Stop renting an inbox. Mail sent to it afterwards bounces; its stored messages stay readable. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| inbox | string | yes | – |
No output schema declared.
No examples provided.
email_save_attachments Save an email's attachments ~114
Save the attachments of one received email into the file store, each linked to the email, then read them like any file (files_read_text, documents_read_pdf, files_ocr). Ones saved before are kept, not saved again. Inline pictures (a signature's logo) and mail marked as spam are not saved. $0.001 per file saved; the original email is kept 30 days. Costs $0.001 per file saved; nothing if none are found.
| Name | Type | Req | Description |
|---|---|---|---|
| message_id | string | yes | – |
No output schema declared.
No examples provided.
email_send Send an email ~319
Send from one of this account's inboxes. Give reply_to_message_id to answer a received message in the same thread. attachments: up to 10 files of the file store, 25 MB together. Up to 20 recipients. For support, operations and replies, not cold outreach: at most 20 new addresses a day, never first to an address found with Conecto's lookups. An email to someone who never wrote first is checked before it goes: one that looks like cold outreach isn't sent, and the third within 7 days pauses the account's email. Unless by_person, a last line says the business's AI assistant wrote it. Big files are cheaper as a download link (files_get) in the text. Costs $0.001 per recipient, plus $0.001 per started MB of attachments for each recipient ($0.001 to one person without attachments; at most $0.52 a call); nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| attachments | array | – | File ids from the file store (files_list), up to 10 files and 25 MB together. |
| by_person | boolean | – | true when a person at the business wrote it. Otherwise a last line says the business's AI assistant wrote it (EU AI Act Art. 50). |
| cc | array | – | – |
| html | string | – | – |
| inbox | string | yes | – |
| reply_to_message_id | string | – | – |
| subject | string | – | – |
| text | string | yes | – |
| to | array | yes | – |
No output schema declared.
No examples provided.
email_update_inbox Change an inbox ~261
Change an inbox's sender name, switch email-in on or off (save_attachments saves each attachment of mail received from now on to the file store, linked to its email), or raise or lower what email-in saves in 24 hours (save_files_per_day, save_mb_per_day). $0.001. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| display_name | string | – | – |
| inbox | string | yes | – |
| save_attachments | boolean | – | Email-in: save each attachment of mail received here to the file store, linked to its email (files.added tells you, with its text). The store's space counts; when it is full an attachment is skipped… |
| save_files_per_day | integer | – | Email-in: the most attachments saved in 24 hours. Default 100. |
| save_mb_per_day | integer | – | Email-in: the most MB of attachments saved in 24 hours. Default 250. |
No output schema declared.
No examples provided.
email_update_thread Mark where a thread stands ~119
Mark an email thread open (needs a reply), waiting (on the other side), handled or archived, and set its labels, so you never reread or answer twice what you already dealt with: email_list_messages filters by state and label. A new message from outside opens a thread again. $0.001. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| labels | array | – | Replaces the thread's labels. |
| message_id | string | yes | Any message of the thread. |
| state | string | – | – |
No output schema declared.
No examples provided.
How do I install the Conecto Email MCP server?
Conecto Email is a hosted endpoint at https://api.conecto.chat/mcp/email, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.conecto.chat
claude mcp add --transport http chat-conecto-email 'https://api.conecto.chat/mcp/email'
What is the Conecto Email MCP server?
Conecto Email is an MCP server listed in the public MCP registry as chat.conecto/email. Inboxes on your business's own subdomain that send, receive and keep threads. Pay per action. This page covers its hosted endpoint (https://api.conecto.chat/mcp/email).
Is the Conecto Email MCP server safe to use?
Conecto Email scores 62 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Conecto Email MCP server expose?
Conecto Email exposes 38 tools: email_create_inbox, email_update_inbox, email_list_inboxes, email_release_inbox, email_send, and 33 more. Their descriptions and schemas cost roughly 5,378 tokens of context every time the server is loaded.
Does the Conecto Email MCP server require authentication?
No. We connected to Conecto Email without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Conecto Email MCP server still maintained?
Conecto Email is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.