com.politicalcomms/api

NPM · @POLITICAL-COMMS/MCP · SCANNED AUG 3

Compliant political SMS/MMS from MCP clients: projects, contacts, analytics, billing.

Available components

66 66 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 2 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability81

AI-judged instruction clarity (excellent).Pass
Tool/resource definitions use about 1363 tokens (~90/item across 15 items; 15 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @political-comms/mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add com-politicalcomms-api -- npx -y @political-comms/mcp

# add to Codex CLI

codex mcp add com-politicalcomms-api -- npx -y @political-comms/mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-politicalcomms-api": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@political-comms/mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add com-politicalcomms-api --command npx --arg -y --arg @political-comms/mcp

# ~/.hermes/config.yaml

mcp_servers:
  com-politicalcomms-api:
    command: "npx"
    args: ["-y", "@political-comms/mcp"]

// mcp.json

{
  "mcpServers": {
    "com-politicalcomms-api": {
      "command": "npx",
      "args": [
        "-y",
        "@political-comms/mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +25
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Licence: MIT functional
2 Aug 26 +20
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
1 Aug 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 28

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@political-comms/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 95 packages

95 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 15 exposed · ~1,225 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

archive_project ~55

Archive a completed project so it no longer appears in default project listings. Only projects in completed status can be archived; other statuses are rejected with INVALID_STATE_TRANSITION.

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	ID of the project to archive

No output schema declared.

No examples provided.

copy_project ~71

Copy an existing project into a new draft. The copy keeps the message, phone numbers, and settings but drops contact lists, schedule, and stats, and gets a versioned name (X becomes X_v2). Copying never sends messages.

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	ID of the project to copy

No output schema declared.

No examples provided.

create_project ~334

Create a new messaging project (a draft send). Requires the owning organization, a name, protocol (sms or mms), sending phone number IDs, contact list IDs, and the message text. For channel=10dlc also pass brand_id and campaign_id; for channel=toll-free pass toll_free_verification_id. Creating a project does not send messages by itself.

Input Output Examples

Name	Type	Req	Description
brand_id	string	—	Required when channel=10dlc
campaign_id	string	—	Required when channel=10dlc
channel	string	—	Messaging channel. Defaults to 10dlc.
confirm	boolean	yes	Must be true to run this write operation. Set it only after the user has explicitly confirmed.
contact_list_ids	array	yes	Contact list IDs to send to
link_tracking_destination_url	string	—	Destination URL for tracked links
link_tracking_domain_id	string	—	Tracking domain ID
link_tracking_enabled	boolean	—	Enable link tracking
link_tracking_param_field	string	—	Contact field appended as a redirect query param on tracking links
media_ids	array	—	Media file IDs for MMS
message_text	string	yes	The message body to send
name	string	yes	Project name
organization_id	string	yes	Owning organization ID
phone_number_ids	array	yes	Sending phone number IDs (1-49)
protocol	string	yes	Message protocol
suppression_list_ids	array	—	Contact list IDs to suppress
toll_free_verification_id	string	—	Required when channel=toll-free

No output schema declared.

No examples provided.

get_contact_list ~35

Get one contact list by ID, including import progress and list analysis results when available.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Resource ID

No output schema declared.

No examples provided.

get_hierarchy ~43

Get the full organization hierarchy tree visible to the API key, including nested child organizations and their brands.

Input Output Examples

Name	Type	Req	Description
organization_id	string	—	Filter to a specific descendant organization

No output schema declared.

No examples provided.

get_ledger_usage ~77

Get billing usage totals and per-category breakdown from the ledger for a date range, optionally filtered to a descendant organization.

Input Output Examples

Name	Type	Req	Description
end_date	string	yes	End date in YYYY-MM-DD format
organization_id	string	—	Filter to a specific descendant organization
start_date	string	yes	Start date in YYYY-MM-DD format

No output schema declared.

No examples provided.

get_message_stats ~105

Get aggregate message stats (totals and daily breakdown) for a date range, optionally filtered by organization, brand, or campaign.

Input Output Examples

Name	Type	Req	Description
brand_id	string	—	Filter to a specific brand
campaign_id	string	—	Filter to a specific campaign
end_date	string	yes	End date in YYYY-MM-DD format
organization_id	string	—	Filter to a specific descendant organization
start_date	string	yes	Start date in YYYY-MM-DD format

No output schema declared.

No examples provided.

get_project ~47

Get one project by ID with its full configuration: status, channel, message text, phone numbers, contact lists, link tracking settings, and schedule.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Resource ID

No output schema declared.

No examples provided.

get_project_stats ~48

Get delivery and engagement stats for one project: sent, delivered, undeliverable, replies, opt outs, clicks, and the derived rates.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Resource ID

No output schema declared.

No examples provided.

list_contact_lists ~55

List contact lists with their contact counts and import status. Optionally filter by organization or brand.

Input Output Examples

Name	Type	Req	Description
brand_id	string	—	Filter to a specific brand
organization_id	string	—	Filter to a specific descendant organization

No output schema declared.

No examples provided.

list_organizations ~32

List all organizations visible to the API key, including their status and parent organization. Also useful as a credential check.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_projects ~80

List messaging projects (a project is one composed send: message text, sending numbers, and contact lists). Optionally filter by organization, brand, or campaign.

Input Output Examples

Name	Type	Req	Description
brand_id	string	—	Filter to a specific brand
campaign_id	string	—	Filter to a specific campaign
organization_id	string	—	Filter to a specific descendant organization

No output schema declared.

No examples provided.

schedule_project ~114

Schedule a project to send to its full contact lists at a specific date and time. This commits a real bulk send to every contact on the lists once the scheduled time arrives.

Input Output Examples

Name	Type	Req	Description
confirm	boolean	yes	Must be true to run this write operation. Set it only after the user has explicitly confirmed.
id	string	yes	Resource ID
scheduled_at	string	yes	ISO 8601 date-time at which to send
scheduled_timezone	string	yes	IANA timezone name, for example America/New_York

No output schema declared.

No examples provided.

test_project ~85

Send real test messages for a project to up to 50 explicit phone numbers. This delivers actual SMS or MMS to those recipients and incurs cost.

Input Output Examples

Name	Type	Req	Description
confirm	boolean	yes	Must be true to run this write operation. Set it only after the user has explicitly confirmed.
id	string	yes	Resource ID
phones	array	yes	Recipient phone numbers for the test send

No output schema declared.

No examples provided.

unschedule_project ~44

Remove the schedule from a project so it will not send. Safe to call repeatedly; the project returns to an unscheduled state.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Resource ID

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

31 Jul 3 Aug