Simafri Suite
REMOTE · SUITE-MCP.SIMAFRI.COM
Professional email, calendar, contacts and files on your own domain.
Available components
Last scanned (1 hour ago)
Scores higher than 68% of remote servers
Reachable. Last reached 25 Oct 2026.
Category Communication
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security92
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 14263 tokens (~209/item across 68 items; 68 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 15 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_email" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 69 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Unverified: 1 category
A category scored 0 because we could not verify it: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Oct 26 +38
- Transport: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Authorization: Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- First check of Destructive annotations: 0 functional
- First check of Tool coverage: 100 functional
- 12 Oct 26 37
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Probed https://suite-mcp.simafri.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=suite-mcp.simafri.com | CN=WE1,O=Google Trust Services,C=US | 6 Sept 2026 | 5 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | b6dff817eb6405ac13efd11cc860f8f5 |
| SANs: suite-mcp.simafri.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of suite-mcp.simafri.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| simafri.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="augees-mcp", resource_metadata="https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp", scope="mcp"
Bearer realm="augees-mcp", resource_metadata="https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp", scope="mcp" Protected resource metadata
| Document | https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://suite-mcp.simafri.com/mcp |
| Authorisation server | https://suite.simafri.com |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://suite-mcp.simafri.com/mcp | Verified | 200 | |
| http (plaintext) | http://suite-mcp.simafri.com/mcp | HTTPS enforced | 301 | https://suite-mcp.simafri.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_mailbox_alias Add another name to a mailbox ~180
Points another address at a mailbox: mail sent to it lands in that box, threads there and counts against the storage of the account. An alias has no password, no seat and no storage of its own, and the number one box may carry is limited; list_mailboxes gives the limit and what is already used.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias. |
| alias | string | yes | The other address to point at this box, for example "webmaster@sonentreprise.com". It must be free and on a domain of the account: an address already used by the platform, or one on the domain of ano… |
No output schema declared.
No examples provided.
add_mailbox_holder Put someone on a mailbox ~149
Puts a person of the account on a mailbox, which is what lets them read it. This is how a company takes back the correspondence of someone who has left; it is recorded, and the box shows it to whoever is on it. A box may be held by several people.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias. |
| person | string | yes | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
No output schema declared.
No examples provided.
add_note Leave an internal note on a thread ~305
Leaves a note on a thread for the people who work it: shown on the thread screen beside the messages, marked as internal, and in "notes" of get_conversation. It never reaches the correspondent: it is not sent, not quoted in a reply and not part of the mail. It is where the context goes when you hand a thread to a colleague, what you found, what was agreed, why you stopped. It does not change the status of the thread nor its place in the list. It is signed with the name of the person this connection acts for, when it acts for one. Up to 10000 characters. To leave the same note on several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | The text of the note, plain text, up to 10000 characters. |
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
No output schema declared.
No examples provided.
add_queue_operator Put someone on a helpdesk queue ~167
Names a person of the account on a helpdesk queue, which is what lets them work it: they see the threads that arrived on that address, and none of the others. This is how a shared queue is split between colleagues, one department to each. Somebody whose rank already opens every queue is refused rather than given a grant that changes nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| person | string | yes | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
| queue | string | yes | The address of the helpdesk queue, for example "contact@sonentreprise.com": call list_sender_addresses to find it. A mailbox is not a queue: it is one person's correspondence and it is handed over wi… |
No output schema declared.
No examples provided.
add_team_member Put someone in a team ~110
Puts a person of the account in a team, whatever their rank. It opens no queue: they see the threads handed to the team only on the queues they already work, which add_queue_operator decides. A deactivated account is refused.
| Name | Type | Req | Description |
|---|---|---|---|
| person | string | yes | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
| team | string | yes | The slug of the team, as list_teams gives it. |
No output schema declared.
No examples provided.
approve_draft Approve a draft and send it ~260
Sends a draft to the contact, with the text as given in "body" when you edited it. The draft keeps the original wording and the sent message keeps what actually left, so the two stay comparable afterwards.
| Name | Type | Req | Description |
|---|---|---|---|
| attachments | array | – | Files to send along, up to 10 and 7 MiB in total. Each one is named EITHER by "upload_id", a file already pushed to a slot from create_attachment_upload, OR inline by "filename" and "content_base64".… |
| body | string | – | The text to send instead of the one Iris wrote. Left out, the draft goes out as it stands. |
| draft_id | string | yes | The id of the draft, as list_drafts gives it. |
| status | string | – | Where the thread stands once the answer is out. Left out, "answered". "in_progress" for an answer that only holds the contact while someone keeps working on the case (an acknowledgement, a request pa… |
No output schema declared.
No examples provided.
assign_conversation Say who is handling a thread ~398
Puts a colleague's name on a thread of a helpdesk queue: what says, to everyone working that queue, that this one is being dealt with and by whom. It hands over the WORK and not the access, so the thread stays readable by the whole team and nobody loses sight of it. Somebody who does not work that queue is refused rather than named on a thread they cannot open, and so is a deactivated account: put them on the queue first with add_queue_operator. Threads of a mailbox are refused too, a box being held rather than assigned. Name "team" instead of "person" to hand it to a team (list_teams names them): every member who works the queue sees it as theirs to take until one of them does, and a team none of whose members works the queue is refused. unassign_conversation gives the thread back to the queue. To hand several threads to the same colleague or team, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
| person | string | – | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
| team | string | – | The slug of a team of the account, as list_teams gives it, in place of "person". |
No output schema declared.
No examples provided.
cancel_scheduled_send Cancel a scheduled message ~100
Calls a scheduled message back before it leaves. Nothing is sent and nothing is lost: it becomes an unsent draft again, with its recipients, text and files, whose draft_id the answer gives (delete_compose_draft throws it away). Refused once the message is already leaving.
| Name | Type | Req | Description |
|---|---|---|---|
| scheduled_send_id | string | yes | The id of the scheduled message, as send_email, reply_to_conversation or list_scheduled_sends gives it. |
No output schema declared.
No examples provided.
create_attachment_upload Open an upload for a file to send ~214
Opens an address to send a file to, so that a message can attach it without carrying it. Answers with an upload_id and an upload_url: PUT the bytes to that address in one request (no key, nothing to sign, for example `curl -T report.pdf "<upload_url>"`), then pass {"upload_id": "..."} in the "attachments" of send_email, reply_to_conversation, forward_conversation or approve_draft. This is the way to attach a real document: the inline base64 form asks you to write the whole file out yourself, which a PDF of a few pages overruns. One file per upload, good for one PUT, and it keeps for a day.
| Name | Type | Req | Description |
|---|---|---|---|
| content_type | string | – | The media type, for example "application/pdf". Left out, it is read from the bytes when they arrive. |
| filename | string | yes | The name the recipient will see, extension included. It is fixed here: the message that attaches the file does not rename it. |
No output schema declared.
No examples provided.
create_contact Open a contact fiche ~176
Opens a fiche for someone before any exchange has happened. An address the account already holds returns that contact as it stands, so calling it twice keeps one fiche.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Their postal address. |
| company_name | string | – | The company they write for. |
| contact_title | string | – | Their role there, for example "Directrice generale". |
| string | yes | Their email address, which identifies the fiche. | |
| language | string | – | The language to write to them in, as a code such as "fr", "en" or "mg". |
| name | string | – | The name of the person. |
| phone | string | – | Their phone number, as they gave it. |
| project_type | string | – | What they came for. |
| sector | string | – | The sector they work in. |
No output schema declared.
No examples provided.
create_folder Make a folder in a mailbox ~168
Makes a folder in a mailbox, at the top or under another folder, to file threads in. Every holder of the box sees it, in the webmail and in their mail client. A name holds no "/", "*" nor "%", is unique among its neighbours, and at the top is none of the six every mailbox has.
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | yes | The address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders. |
| name | string | yes | The name of the folder, 200 characters at most. |
| parent_id | string | – | The folder it goes under, by its id from list_folders. Left out, it goes at the top. |
No output schema declared.
No examples provided.
create_knowledge Add a knowledge doc ~177
Adds a doc to the playbook Iris reads, scoped to the brands and addresses you give it. Use it to record a price list, an argument that works or a rule to follow, once, where every future draft will find it.
| Name | Type | Req | Description |
|---|---|---|---|
| addresses | array | – | The inbound addresses this doc applies to, from list_sender_addresses. An empty list applies it to every address of the brands above. |
| brands | array | – | The brand slugs this doc applies to, from list_brands. An empty list applies it to the whole account. |
| content | string | yes | The doc itself, in Markdown. This is the text Iris reads before drafting. |
| sort_order | integer | – | Where the doc sits in the reading order, lowest first. |
| title | string | yes | The title of the doc, unique in the account. |
No output schema declared.
No examples provided.
create_team Create a team ~75
Opens a team by its name; its slug comes from the name and never changes, even when the team is renamed. A name too close to one the account already has is refused. Put people in it with add_team_member.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The name the team is shown under, 1 to 80 characters. |
No output schema declared.
No examples provided.
delete_compose_draft Discard a message never sent ~62
Throws away a message that was started and will not be sent. Nothing was ever delivered, so nothing is lost but the text itself.
| Name | Type | Req | Description |
|---|---|---|---|
| draft_id | string | yes | The id of the unsent message, as list_compose_drafts gives it. |
No output schema declared.
No examples provided.
delete_conversation Delete a conversation for good ~150
Deletes a thread and everything it holds: every message, the drafts written on it, and the files that came with them, down to the bytes they were stored as. This is FINAL and there is no trash to fish it back out of, so it is not the gesture for tidying an inbox: file_conversation with "trash" is, and it keeps the thread readable and restorable. Use this only when the record itself must not remain, and when the person asking knows that is what they are asking for. The contact fiche stays, and so does the rest of the correspondence with them.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | string | yes | The id of the conversation, as list_conversations gives it. |
No output schema declared.
No examples provided.
delete_folder Delete a folder ~71
Deletes a folder a person made and the folders under it. Their threads go to the Trash, where they stay readable and restorable for 30 days; nothing is deleted for good. The answer says how many went there.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The folder, by its id from list_folders. |
No output schema declared.
No examples provided.
delete_knowledge Remove a knowledge doc ~90
Takes a doc out of the playbook, with every version it ever had. This is FINAL and there is no trash: Iris stops reading it from the next draft on. A doc that is merely out of date is better rewritten with update_knowledge, which keeps the previous version dated in its history.
| Name | Type | Req | Description |
|---|---|---|---|
| doc_id | string | yes | The id of the doc, as list_knowledge gives it. |
No output schema declared.
No examples provided.
delete_team Delete a team ~62
Deletes a team. The threads handed to it go back to their queue with nobody's name on them; the threads one of its members took stay on that member's name.
| Name | Type | Req | Description |
|---|---|---|---|
| team | string | yes | The slug of the team, as list_teams gives it. |
No output schema declared.
No examples provided.
file_conversation File a thread in a folder ~733
Files a thread where you say: "archive" puts it away, out of the Inbox and kept for good; "trash" throws it away, where it stays readable and can be brought back; "inbox" brings it back from wherever it was; or "folder_id" files it in a folder a person made (list_folders gives them), which becomes its home. One thread sits in one place, so filing it somewhere takes it out of where it was; a reply brings a thread back to the Inbox without taking it out of its folder. This is the gesture for tidying a mailbox, and "trash" is what "delete this thread" almost always means: nothing is lost for 30 days, after which the Trash deletes it for good, and delete_conversation is the other, immediate and final thing. It does not file spam: report_spam is that gesture, because filing as spam also blocks the sender. A thread of a helpdesk queue has the Trash as its one folder: "trash" throws it away (a spam, a phishing attempt, a prospecting mail nobody answers) and "inbox" brings it back to the view its status belongs to; "archive" is refused there, closing a case being how a queue puts it away. Filing never changes where a thread STANDS: a notice thrown in the Trash is still "open", among what is left to do. Give "status" (and "deal_stage") to settle that in the same gesture, as set_conversation_status would: "trash" with "closed" tidies away what nobody answers, "archive" with "answered" or "closed" puts away an exchange that is over. The status is recorded first, so a status refused leaves the thread where it was, and a thread that then cannot be filed answers that its status was recorded and why it stayed put. To file several threads in the same place, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of re…
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
| deal_stage | string | – | Where the thread stands in the pipeline, in your own vocabulary, up to 128 characters. An empty string clears it. |
| folder | string | – | Where the thread goes: "archive" to put it away, "trash" to throw it away restorably, "inbox" to bring it back. "spam" is not one of them: call report_spam, which blocks the sender too. Leave it out… |
| folder_id | string | – | A folder a person made in the thread's box, by its id from list_folders, instead of "folder". |
| status | string | – | Where the thread stands: "open" for one nobody has taken, "customer_reply" when the contact has written back, "answered" once we replied, "delivery_failed" when our reply bounced, "in_progress" while… |
No output schema declared.
No examples provided.
forward_conversation Forward a message ~178
Passes the last message of a thread on to someone else: they receive the text quoted under its own header, with the files it carried attached again. Their answer opens a thread of its own, so forwarding to the account support address is how a message reaches the support queue, in that direction only.
| Name | Type | Req | Description |
|---|---|---|---|
| bcc | – | – | Who else receives it without the others being told. A blind copy is kept on the sending alone: the thread records the visible recipients only. |
| cc | – | – | Who else receives it, in copy. Everyone on the mail sees these. |
| conversation_id | string | yes | The id of the conversation, as list_conversations gives it. |
| note | string | – | What to say above the quoted message, in your own words. Left out, only the quotation goes. |
| to | – | yes | Who receives the message. |
No output schema declared.
No examples provided.
get_attachment Read an attachment ~575
Reads a file attached to a message and gives back its CONTENT. Text comes back as text, whatever the sender labelled it: a CSV, an XML, a JSON, a Markdown or a log read as text even when they arrive as application/octet-stream. An image comes back as the image itself, a PDF comes back as the text it holds, which is how an invoice, a quote or a contract is read, and a .gz or a .zip is opened to give the text it holds, which is how a DMARC report is read. An office document comes back as its text, which is how a product sheet, a price list or a deck is read: a .docx as its paragraphs and tables in order (headings marked with #, list items with - or their number, tables as Markdown tables), a .xlsx as its cells sheet by sheet, tab-separated, one line per row, dates shown as dates, and a .pptx slide by slide; its pictures follow as images when, with the text, they fit in 1048576 bytes decompressed, and are otherwise listed in "document.images" with their name and size. Its macros are never run. A PDF with no text layer, a scan for instance, says so in "note" and gives the address instead: its pages hold pictures rather than words. What stays binary comes back as its media type, its size and the address to fetch it whole, and says in "note" that its content is not restituable. Above 1048576 bytes (16777216 for an office document), and for an archive holding another archive or for an archive or an office document holding more than 1048576 bytes once decompressed, the answer carries that address rather than the content. Every answer also carries "download_url", and shows it in its last block: the original FILE, byte for byte, under its own name and media type, to GET with no key and nothing to sign, once, within 15 minutes (for example `curl -o fiche.docx "<download_url>"`). That is the way to turn what you were shown into a file you have: save the photos of a document for a site, hand a PDF to another tool, or fetch a file too large to come back inline. Call get_attachme…
| Name | Type | Req | Description |
|---|---|---|---|
| attachment_id | string | yes | The id of the attachment, as get_conversation gives it on the message that carries it. |
| conversation_id | string | yes | The id of the conversation, as list_conversations gives it. |
No output schema declared.
No examples provided.
get_contact Read a contact fiche ~47
Reads one contact whole: their fiche, the addresses they write from and where each field came from.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | string | yes | The id of the contact, as list_contacts gives it. |
No output schema declared.
No examples provided.
get_conversation Read a conversation ~452
Reads one thread whole: every message in order with its direction, its language and its attachments, the contact fiche, the mailbox the thread arrived through, the draft awaiting review when there is one, and in "notes" what the team left on the thread for each other, oldest first, with who wrote each one. Notes are never part of "messages" and were never sent to anyone. A message the mailbox sent carries "delivery" when the mail system tracked it: per recipient (Bcc included), "state" is "delivered" (accepted by the recipient's server, which says nothing of the inbox or of reading), "deferred" (retried by itself for five days), "bounced", "returned" (accepted, then a non-delivery report came back) or "expired", with the server's own "remote_reply" and a "reason" in plain words. When the thread was filed as it arrived, "filed_reason" says why: "spam_filter" for the filter's verdict, "blocked_sender" for a sender the account had reported, and "spoofed_own_domain" for a mail showing one of the account's own domains whose DMARC check failed, which lands in Spam in a mailbox (mark_not_spam takes it back out) and, on a helpdesk queue, in the Trash with its ticket closed (file_conversation with "inbox" brings it back, open). Read this before writing an answer. To read several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 20 ids to do the same to every one of them in a single call. |
No output schema declared.
No examples provided.
get_customer_card Read what the account knows about a ticket's customer ~202
Reads the customer card of a helpdesk ticket: what the account's own system (its client area, CRM or ERP) knows about the correspondent, asked live by their address, such as their account, their services and when they renew, and what they owe. "status" says "found" with the card, "not_found" when that system does not know them, "unavailable" when it did not answer (ask again later, it says nothing about the customer), "unverified" when it was not asked because the latest message names its correspondent through a Reply-To that nothing authenticates (nothing proves that person wrote, so do not discuss their account by email), and "none" when the account has no such system connected or the thread is somebody's mailbox. Read it before answering a customer about their account, a renewal or an invoice.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | string | yes | The id of the conversation, as list_conversations gives it. |
No output schema declared.
No examples provided.
get_settings Read the account settings ~120
Reads the settings of the account, starting with whether an incoming message has Iris draft an answer on its own. "own_domain_spoofs" says what the account does with a mail that shows one of its own domains and fails DMARC: "filed" when such a mail goes to Spam (to the Trash, closed, on a helpdesk queue) as it arrives, and "exempt_senders" for the addresses of the account that keep arriving normally although they fail. It is read here, and the support team changes it on request.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
invite_person Invite someone to the account ~330
Opens an access for a colleague without a password: an invitation goes to send_to, and whoever opens it chooses the password from its link, which opens for seven days and once. The link is never shown here, you included, and the record names where it went. send_to is the person themselves at an address they already read, or the box of whoever sets up the team's access. A mailbox of this platform is accepted only when an active person already signs in to it; one nobody can open yet, such as the new login itself, is refused, and so is a support queue. Called again for somebody who has not answered yet, it sends a new invitation and the previous link stops opening; somebody who already chose a password is refused, as they change it themselves. Only on an account that is not held at the shop, and never above manager.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | The address the person will sign in with, for example their new mailbox "zoe@sonentreprise.com". | |
| locale | string | – | The language of the invitation and of their screens. |
| name | string | – | Their name, as the team will read it. Required for somebody new. |
| role | string | – | Operator by default: they see the queues and boxes they are given. A manager sees every queue and runs the settings. |
| send_to | string | yes | Where the invitation goes: an address the person already reads, or the box of whoever sets up the team's access, for example "it@sonentreprise.com". A box of this platform nobody signs in to yet is r… |
No output schema declared.
No examples provided.
list_blocked_senders List the blocked senders ~75
Lists the addresses whose mail this account files straight into Spam, most recently blocked first, with the day each was blocked. A block is what report_spam leaves behind, so this is where a rule the account is living under becomes visible again: a sender blocked from a thread long since deleted appears here and nowhere else.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_brands List brands ~28
Lists the brands of the account, its subdivisions, each with the slug the other tools take.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_compose_drafts List the messages started and not sent ~78
Lists the messages begun on the account addresses and never sent, last written first, with their recipients, subject, text and files. These are unsent texts, not the answers Iris wrote for review, which list_drafts holds.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Narrows to the messages started on one address, from list_sender_addresses. |
No output schema declared.
No examples provided.
list_contacts Search the contact book ~78
Lists the contacts of the account with their fiche, most recently seen first, and searches them by name, company or address.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many to return, from 1 to 200. Defaults to 200. |
| q | string | – | What to search for, matched against the name, the company and the addresses. |
No output schema declared.
No examples provided.
list_conversations List conversations ~803
Lists threads, most recently updated first, with the contact, the subject of the mail and the one the team gave the thread ("team_subject", null until rename_conversation gives one), the ticket number of a helpdesk case (what the client quotes, null on somebody's mailbox), the status, where the thread stands in the pipeline, who is handling it, whether a draft is waiting for review, the folder each sits in and whether you have read it. Each thread also says since when its contact has been waiting for our answer ("waiting_since", their oldest message still unanswered, null when nobody waits), and when the last reply came and from which side ("last_reply_at", "last_reply_by"): the two figures a helpdesk queue is watched by, to tell which tickets drag. Name a "box" to read ONE mailbox exactly as its screen shows it: its Inbox by default, another folder on demand, and "unread" for the bold rows alone. Without a "box" it lists the whole account by pipeline status instead, which is a different question: a thread sitting unread in a mailbox has a status like any other, so a list by status is not the list of what is waiting to be read.
| Name | Type | Req | Description |
|---|---|---|---|
| assignee | string | – | Narrows to the threads one person is handling, by the email address they sign in with, which list_people gives. The word "none" answers with what nobody has taken yet, which is the queue waiting to b… |
| before | string | – | Only the threads updated before this instant, as an ISO 8601 timestamp such as "2026-08-31T09:00:00Z". This is how you read past the first page: take the "updated_at" of the last thread the answer ga… |
| box | string | – | The address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders. |
| brand | string | – | The slug of a brand, to narrow to that subdivision of the account: call list_brands to find it. |
| channel | string | – | The channel the thread runs on. Email is the usual one; "portal" carries the messages written from a client space. |
| external_ref | string | – | Narrows to the threads of one contact identified by the reference a consumer app gave them, for example "epovest:account:42". |
| folder | string | – | Which folder of the box to list: one of inbox, sent, drafts, spam, trash, archive, or the id of a folder a person made (list_folders gives them). Defaults to the Inbox, like opening the mailbox does.… |
| limit | integer | – | How many threads to bring back, 1 to 200. Defaults to 100. |
| status | string | – | Where the thread stands: "open" for one nobody has taken, "customer_reply" when the contact has written back, "answered" once we replied, "delivery_failed" when our reply bounced, "in_progress" while… |
| team | string | – | Narrows to the threads handed to one team, by its slug (list_teams gives it), taken by one of its members or not. Narrows the account list, so it does not go with "box". |
| unread | boolean | – | Only the threads you have not read: the bold rows of the screen, and the same count its Inbox shows. Needs "box". A key that acts for no person has no read state and is told so rather than answered w… |
No output schema declared.
No examples provided.
list_drafts List drafts ~87
Lists the answers Iris has written, with the thread each belongs to, the contact it goes to and the text as it stands. Filter on "pending_review" for the review queue.
| Name | Type | Req | Description |
|---|---|---|---|
| status | string | – | Which drafts to list: "pending_review" for those awaiting a decision, "sent" for those that went out, "rejected" for those that were turned down. |
No output schema declared.
No examples provided.
list_folders List the folders of a mailbox ~134
Lists the folders the people of a mailbox made in it, beside the six every mailbox has (inbox, sent, drafts, spam, trash, archive), each with its id, its name, its full path ("Clients/LCS") and its parent. The ids are what list_conversations, search_conversations and file_conversation take, and what update_folder and delete_folder act on.
| Name | Type | Req | Description |
|---|---|---|---|
| box | string | yes | The address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders. |
No output schema declared.
No examples provided.
list_knowledge List the knowledge docs ~47
Lists the playbook docs of the account with their full content: this is the material Iris reads before drafting, and the place to look when an answer needs to say what the house does.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_mailboxes List the mailboxes of the account ~65
Lists the mailboxes of the account: each one with the people who hold it, the other names that deliver into it and the storage its plan entitles the account to, which every box of it shares. It says who is on a box, never what is in one.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_people List the people of the account ~107
Lists everyone on the account: how they sign in, the rank they hold, and how far they see into the mail. An owner and a manager work every helpdesk queue, which is said as works_every_queue; anyone else works the queues named on them and nothing else. It says who works where, never what any of it holds. A rank is not written from here: for a client of Simafri Suite it is held at the shop and restated at every sign-in.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_scheduled_sends List the messages scheduled to leave later ~120
Lists the messages given a "send_at" that have not left yet, soonest first: when each leaves (in the zone of the person you act for), from which address, to whom, the subject and text, and the thread an answer goes into. A message that has left is no longer here but in its thread. One that could not leave stays, with state "failed" and the reason, until it is cancelled.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Narrows to the messages leaving from one address, from list_sender_addresses. |
No output schema declared.
No examples provided.
list_sender_addresses List the addresses you can send from ~57
Lists the inbound addresses of the account, each with the block that closes what is written from it and, for a mailbox, the other names that deliver into it. Sending from any of these is what brings the answer back into the mailbox.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_suppressed_recipients List the addresses the account can no longer write to ~100
Lists the addresses that pressed "this is spam" on this account's mail, with the day and the label their provider gave it. The account writes to none of them, and it does so SILENTLY: a message to one of these addresses is stopped before it leaves, with no bounce and nothing in the thread to see. So this is the list to read when a mail seems to have gone nowhere and nothing said why.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_teams List the teams of the account ~82
Lists the teams of the account, the administrative team or the technical one for instance, each with its slug (what assign_conversation and the other team tools take) and who is in it. A team is a way of handing a thread to several people at once; it opens no queue, so a member only ever sees the threads of the queues they work.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
mark_not_spam Take a thread out of spam ~200
Puts a thread the filter or someone else filed as spam back into the Inbox of its mailbox, and unblocks its sender. A thread that is not in Spam is left where it is, and nothing is unblocked. To take several threads out of Spam, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
No output schema declared.
No examples provided.
mark_read Mark a thread read ~222
Clears the bold on a thread for YOU, exactly as opening it on screen does: a colleague reading the same shared mailbox keeps their own. Reading a thread with get_conversation does not do this by itself, on purpose: fetching a mail is not the same as having read it. A message arriving after this call turns the thread bold again. To clear the bold on several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
No output schema declared.
No examples provided.
mark_unread Put a thread back to unread ~184
Puts a thread back among the bold rows, for you alone: what you want to come back to. A colleague sees no change. To put several threads back among the bold rows, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | – | yes | The id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call. |
No output schema declared.
No examples provided.
merge_conversation Merge a ticket into another ~242
Merges a helpdesk ticket into another of the same contact, for the client who wrote again beside their case rather than in it. Everything it held moves to the ticket named by "into": its messages, their files, its notes, its drafts. Its number keeps leading to the merged case, so the client's next reply quoting it lands there. The ticket merged away is gone, a note on the one that stays says so (with your reason, when you give one in "note"), and a draft that was waiting on it is set aside. It cannot be undone. Both must be tickets of a support queue you can open, with the same contact; a mailbox thread is refused.
| Name | Type | Req | Description |
|---|---|---|---|
| conversation_id | string | yes | The id of the conversation, as list_conversations gives it. |
| into | string | yes | The ticket that stays: its ticket number, as list_conversations gives it in "ticket_number", or its conversation id. |
| note | string | – | Optional: why both tickets are one request, for the people who work the case. It goes into the note that records the merge: do not leave a second note with add_note. |
No output schema declared.
No examples provided.
poll_mailboxes Fetch new mail now ~45
Reads the account mailboxes right away instead of waiting for the next scheduled round, and answers with what came in. Call it when you expect a message that has not appeared yet.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
reject_draft Reject a draft ~69
Turns a draft down and sends nothing. The thread stays open for another answer, by Iris or by a person.
| Name | Type | Req | Description |
|---|---|---|---|
| draft_id | string | yes | The id of the draft, as list_drafts gives it. |
| reason | string | – | Why it was turned down, kept with the draft. |
No output schema declared.
No examples provided.
remove_mailbox_alias Remove a name from a mailbox ~105
Stops an address delivering into a box. What already arrived through it stays in the box, and each message still says which name it came in on.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias. |
| alias | string | yes | The name to take away, from list_mailboxes. |
No output schema declared.
No examples provided.
remove_mailbox_holder Take someone off a mailbox ~131
Takes a person off a mailbox: they stop reading it from that moment. Nothing is deleted, and a box left with no holder keeps receiving and keeps everything it holds. Recorded like the other direction.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias. |
| person | string | yes | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
No output schema declared.
No examples provided.
remove_queue_operator Take someone off a helpdesk queue ~142
Takes a person off a helpdesk queue: they stop seeing its threads from that moment. Nothing is deleted, and a queue nobody is named on keeps receiving and is still worked by the owners and the managers of the account.
| Name | Type | Req | Description |
|---|---|---|---|
| person | string | yes | The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them. |
| queue | string | yes | The address of the helpdesk queue, for example "contact@sonentreprise.com": call list_sender_addresses to find it. A mailbox is not a queue: it is one person's correspondence and it is handed over wi… |
No output schema declared.
No examples provided.
remove_suppression Write to a complaining address again ~139
Takes an address off the list above, so this account can write to them again. Weigh it before calling it: the row means a person pressed "this is spam" on mail from this account, and writing to them again is what turns a complaint into a sending reputation the whole platform shares. Call it when there is a reason to believe they want to hear from this account again, said by them, and not merely because a message would not leave. An address holding no suppression answers that there was nothing to lift.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address to write to again, as list_suppressed_recipients gives it. |
No output schema declared.
No examples provided.
How do I install the Simafri Suite MCP server?
Simafri Suite is a hosted endpoint at https://suite-mcp.simafri.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · suite-mcp.simafri.com
claude mcp add --transport http com-simafri-professional-email 'https://suite-mcp.simafri.com/mcp'
What is the Simafri Suite MCP server?
Simafri Suite is an MCP server listed in the public MCP registry as com.simafri/professional-email. Professional email, calendar, contacts and files on your own domain. This page covers its hosted endpoint (https://suite-mcp.simafri.com/mcp).
Is the Simafri Suite MCP server safe to use?
Simafri Suite scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Simafri Suite MCP server expose?
Simafri Suite exposes 68 tools: list_conversations, search_conversations, get_conversation, get_customer_card, get_attachment, and 63 more. Their descriptions and schemas cost roughly 12,599 tokens of context every time the server is loaded.
Does the Simafri Suite MCP server require authentication?
Yes. Simafri Suite asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Simafri Suite MCP server still maintained?
Simafri Suite is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.