Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Simafri Suite

REMOTE · SUITE-MCP.SIMAFRI.COM

Professional email, calendar, contacts and files on your own domain.

+38 this week 75 Trust /100

Last scanned (1 hour ago)

Scores higher than 68% of remote servers

Reachable. Last reached 25 Oct 2026.

Category Communication

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security92
Transport & Reachability100
Schema Quality & AI Usability65
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 14263 tokens (~209/item across 68 items; 68 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 15 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_email" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 69 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass

Unverified: 1 category

A category scored 0 because we could not verify it: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 25 Oct 26 +38
    • Transport: unverified → pass ▲ security
    • Injection markers: unverified → pass ▲ security
    • First check of Judged manipulation: pass security
    • Authorization: Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. security
    • MCP protocol: unverified → pass ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • First check of Schema quality: fail functional
    • First check of Schema quality: excellent functional
    • First check of Schema quality: fail functional
    • First check of Destructive annotations: 0 functional
    • First check of Tool coverage: 100 functional
  • 12 Oct 26 37

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 25 Oct 2026 · Probed https://suite-mcp.simafri.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=suite-mcp.simafri.com CN=WE1,O=Google Trust Services,C=US 6 Sept 2026 5 Dec 2026 ECDSA 256 ECDSA-SHA256 b6dff817eb6405ac13efd11cc860f8f5
SANs: suite-mcp.simafri.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of suite-mcp.simafri.com. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
simafri.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="augees-mcp", resource_metadata="https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp", scope="mcp"

Bearer realm="augees-mcp", resource_metadata="https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp", scope="mcp"

Protected resource metadata

Document https://suite-mcp.simafri.com/.well-known/oauth-protected-resource/mcp
Retrieved Yes
Resource https://suite-mcp.simafri.com/mcp
Authorisation server https://suite.simafri.com

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://suite-mcp.simafri.com/mcp Verified 200
http (plaintext) http://suite-mcp.simafri.com/mcp HTTPS enforced 301 https://suite-mcp.simafri.com/mcp
MCP tools · 68 exposed · ~12,599 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_mailbox_alias ~180

Points another address at a mailbox: mail sent to it lands in that box, threads there and counts against the storage of the account. An alias has no password, no seat and no storage of its own, and the number one box may carry is limited; list_mailboxes gives the limit and what is already used.

NameTypeReqDescription
addressstringyesThe address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias.
aliasstringyesThe other address to point at this box, for example "webmaster@sonentreprise.com". It must be free and on a domain of the account: an address already used by the platform, or one on the domain of ano…

No output schema declared.

No examples provided.

add_mailbox_holder ~149

Puts a person of the account on a mailbox, which is what lets them read it. This is how a company takes back the correspondence of someone who has left; it is recorded, and the box shows it to whoever is on it. A box may be held by several people.

NameTypeReqDescription
addressstringyesThe address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias.
personstringyesThe email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.

No output schema declared.

No examples provided.

add_note ~305

Leaves a note on a thread for the people who work it: shown on the thread screen beside the messages, marked as internal, and in "notes" of get_conversation. It never reaches the correspondent: it is not sent, not quoted in a reply and not part of the mail. It is where the context goes when you hand a thread to a colleague, what you found, what was agreed, why you stopped. It does not change the status of the thread nor its place in the list. It is signed with the name of the person this connection acts for, when it acts for one. Up to 10000 characters. To leave the same note on several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
bodystringyesThe text of the note, plain text, up to 10000 characters.
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.

No output schema declared.

No examples provided.

add_queue_operator ~167

Names a person of the account on a helpdesk queue, which is what lets them work it: they see the threads that arrived on that address, and none of the others. This is how a shared queue is split between colleagues, one department to each. Somebody whose rank already opens every queue is refused rather than given a grant that changes nothing.

NameTypeReqDescription
personstringyesThe email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.
queuestringyesThe address of the helpdesk queue, for example "contact@sonentreprise.com": call list_sender_addresses to find it. A mailbox is not a queue: it is one person's correspondence and it is handed over wi…

No output schema declared.

No examples provided.

add_team_member ~110

Puts a person of the account in a team, whatever their rank. It opens no queue: they see the threads handed to the team only on the queues they already work, which add_queue_operator decides. A deactivated account is refused.

NameTypeReqDescription
personstringyesThe email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.
teamstringyesThe slug of the team, as list_teams gives it.

No output schema declared.

No examples provided.

approve_draft ~260

Sends a draft to the contact, with the text as given in "body" when you edited it. The draft keeps the original wording and the sent message keeps what actually left, so the two stay comparable afterwards.

NameTypeReqDescription
attachmentsarray–Files to send along, up to 10 and 7 MiB in total. Each one is named EITHER by "upload_id", a file already pushed to a slot from create_attachment_upload, OR inline by "filename" and "content_base64".…
bodystring–The text to send instead of the one Iris wrote. Left out, the draft goes out as it stands.
draft_idstringyesThe id of the draft, as list_drafts gives it.
statusstring–Where the thread stands once the answer is out. Left out, "answered". "in_progress" for an answer that only holds the contact while someone keeps working on the case (an acknowledgement, a request pa…

No output schema declared.

No examples provided.

assign_conversation ~398

Puts a colleague's name on a thread of a helpdesk queue: what says, to everyone working that queue, that this one is being dealt with and by whom. It hands over the WORK and not the access, so the thread stays readable by the whole team and nobody loses sight of it. Somebody who does not work that queue is refused rather than named on a thread they cannot open, and so is a deactivated account: put them on the queue first with add_queue_operator. Threads of a mailbox are refused too, a box being held rather than assigned. Name "team" instead of "person" to hand it to a team (list_teams names them): every member who works the queue sees it as theirs to take until one of them does, and a team none of whose members works the queue is refused. unassign_conversation gives the thread back to the queue. To hand several threads to the same colleague or team, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.
personstring–The email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.
teamstring–The slug of a team of the account, as list_teams gives it, in place of "person".

No output schema declared.

No examples provided.

cancel_scheduled_send ~100

Calls a scheduled message back before it leaves. Nothing is sent and nothing is lost: it becomes an unsent draft again, with its recipients, text and files, whose draft_id the answer gives (delete_compose_draft throws it away). Refused once the message is already leaving.

NameTypeReqDescription
scheduled_send_idstringyesThe id of the scheduled message, as send_email, reply_to_conversation or list_scheduled_sends gives it.

No output schema declared.

No examples provided.

create_attachment_upload ~214

Opens an address to send a file to, so that a message can attach it without carrying it. Answers with an upload_id and an upload_url: PUT the bytes to that address in one request (no key, nothing to sign, for example `curl -T report.pdf "<upload_url>"`), then pass {"upload_id": "..."} in the "attachments" of send_email, reply_to_conversation, forward_conversation or approve_draft. This is the way to attach a real document: the inline base64 form asks you to write the whole file out yourself, which a PDF of a few pages overruns. One file per upload, good for one PUT, and it keeps for a day.

NameTypeReqDescription
content_typestring–The media type, for example "application/pdf". Left out, it is read from the bytes when they arrive.
filenamestringyesThe name the recipient will see, extension included. It is fixed here: the message that attaches the file does not rename it.

No output schema declared.

No examples provided.

create_contact ~176

Opens a fiche for someone before any exchange has happened. An address the account already holds returns that contact as it stands, so calling it twice keeps one fiche.

NameTypeReqDescription
addressstring–Their postal address.
company_namestring–The company they write for.
contact_titlestring–Their role there, for example "Directrice generale".
emailstringyesTheir email address, which identifies the fiche.
languagestring–The language to write to them in, as a code such as "fr", "en" or "mg".
namestring–The name of the person.
phonestring–Their phone number, as they gave it.
project_typestring–What they came for.
sectorstring–The sector they work in.

No output schema declared.

No examples provided.

create_folder ~168

Makes a folder in a mailbox, at the top or under another folder, to file threads in. Every holder of the box sees it, in the webmail and in their mail client. A name holds no "/", "*" nor "%", is unique among its neighbours, and at the top is none of the six every mailbox has.

NameTypeReqDescription
boxstringyesThe address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders.
namestringyesThe name of the folder, 200 characters at most.
parent_idstring–The folder it goes under, by its id from list_folders. Left out, it goes at the top.

No output schema declared.

No examples provided.

create_knowledge ~177

Adds a doc to the playbook Iris reads, scoped to the brands and addresses you give it. Use it to record a price list, an argument that works or a rule to follow, once, where every future draft will find it.

NameTypeReqDescription
addressesarray–The inbound addresses this doc applies to, from list_sender_addresses. An empty list applies it to every address of the brands above.
brandsarray–The brand slugs this doc applies to, from list_brands. An empty list applies it to the whole account.
contentstringyesThe doc itself, in Markdown. This is the text Iris reads before drafting.
sort_orderinteger–Where the doc sits in the reading order, lowest first.
titlestringyesThe title of the doc, unique in the account.

No output schema declared.

No examples provided.

create_team ~75

Opens a team by its name; its slug comes from the name and never changes, even when the team is renamed. A name too close to one the account already has is refused. Put people in it with add_team_member.

NameTypeReqDescription
namestringyesThe name the team is shown under, 1 to 80 characters.

No output schema declared.

No examples provided.

delete_compose_draft ~62

Throws away a message that was started and will not be sent. Nothing was ever delivered, so nothing is lost but the text itself.

NameTypeReqDescription
draft_idstringyesThe id of the unsent message, as list_compose_drafts gives it.

No output schema declared.

No examples provided.

delete_conversation ~150

Deletes a thread and everything it holds: every message, the drafts written on it, and the files that came with them, down to the bytes they were stored as. This is FINAL and there is no trash to fish it back out of, so it is not the gesture for tidying an inbox: file_conversation with "trash" is, and it keeps the thread readable and restorable. Use this only when the record itself must not remain, and when the person asking knows that is what they are asking for. The contact fiche stays, and so does the rest of the correspondence with them.

NameTypeReqDescription
conversation_idstringyesThe id of the conversation, as list_conversations gives it.

No output schema declared.

No examples provided.

delete_folder ~71

Deletes a folder a person made and the folders under it. Their threads go to the Trash, where they stay readable and restorable for 30 days; nothing is deleted for good. The answer says how many went there.

NameTypeReqDescription
folder_idstringyesThe folder, by its id from list_folders.

No output schema declared.

No examples provided.

delete_knowledge ~90

Takes a doc out of the playbook, with every version it ever had. This is FINAL and there is no trash: Iris stops reading it from the next draft on. A doc that is merely out of date is better rewritten with update_knowledge, which keeps the previous version dated in its history.

NameTypeReqDescription
doc_idstringyesThe id of the doc, as list_knowledge gives it.

No output schema declared.

No examples provided.

delete_team ~62

Deletes a team. The threads handed to it go back to their queue with nobody's name on them; the threads one of its members took stay on that member's name.

NameTypeReqDescription
teamstringyesThe slug of the team, as list_teams gives it.

No output schema declared.

No examples provided.

file_conversation ~733

Files a thread where you say: "archive" puts it away, out of the Inbox and kept for good; "trash" throws it away, where it stays readable and can be brought back; "inbox" brings it back from wherever it was; or "folder_id" files it in a folder a person made (list_folders gives them), which becomes its home. One thread sits in one place, so filing it somewhere takes it out of where it was; a reply brings a thread back to the Inbox without taking it out of its folder. This is the gesture for tidying a mailbox, and "trash" is what "delete this thread" almost always means: nothing is lost for 30 days, after which the Trash deletes it for good, and delete_conversation is the other, immediate and final thing. It does not file spam: report_spam is that gesture, because filing as spam also blocks the sender. A thread of a helpdesk queue has the Trash as its one folder: "trash" throws it away (a spam, a phishing attempt, a prospecting mail nobody answers) and "inbox" brings it back to the view its status belongs to; "archive" is refused there, closing a case being how a queue puts it away. Filing never changes where a thread STANDS: a notice thrown in the Trash is still "open", among what is left to do. Give "status" (and "deal_stage") to settle that in the same gesture, as set_conversation_status would: "trash" with "closed" tidies away what nobody answers, "archive" with "answered" or "closed" puts away an exchange that is over. The status is recorded first, so a status refused leaves the thread where it was, and a thread that then cannot be filed answers that its status was recorded and why it stayed put. To file several threads in the same place, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of re…

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.
deal_stagestring–Where the thread stands in the pipeline, in your own vocabulary, up to 128 characters. An empty string clears it.
folderstring–Where the thread goes: "archive" to put it away, "trash" to throw it away restorably, "inbox" to bring it back. "spam" is not one of them: call report_spam, which blocks the sender too. Leave it out…
folder_idstring–A folder a person made in the thread's box, by its id from list_folders, instead of "folder".
statusstring–Where the thread stands: "open" for one nobody has taken, "customer_reply" when the contact has written back, "answered" once we replied, "delivery_failed" when our reply bounced, "in_progress" while…

No output schema declared.

No examples provided.

forward_conversation ~178

Passes the last message of a thread on to someone else: they receive the text quoted under its own header, with the files it carried attached again. Their answer opens a thread of its own, so forwarding to the account support address is how a message reaches the support queue, in that direction only.

NameTypeReqDescription
bcc––Who else receives it without the others being told. A blind copy is kept on the sending alone: the thread records the visible recipients only.
cc––Who else receives it, in copy. Everyone on the mail sees these.
conversation_idstringyesThe id of the conversation, as list_conversations gives it.
notestring–What to say above the quoted message, in your own words. Left out, only the quotation goes.
to–yesWho receives the message.

No output schema declared.

No examples provided.

get_attachment ~575

Reads a file attached to a message and gives back its CONTENT. Text comes back as text, whatever the sender labelled it: a CSV, an XML, a JSON, a Markdown or a log read as text even when they arrive as application/octet-stream. An image comes back as the image itself, a PDF comes back as the text it holds, which is how an invoice, a quote or a contract is read, and a .gz or a .zip is opened to give the text it holds, which is how a DMARC report is read. An office document comes back as its text, which is how a product sheet, a price list or a deck is read: a .docx as its paragraphs and tables in order (headings marked with #, list items with - or their number, tables as Markdown tables), a .xlsx as its cells sheet by sheet, tab-separated, one line per row, dates shown as dates, and a .pptx slide by slide; its pictures follow as images when, with the text, they fit in 1048576 bytes decompressed, and are otherwise listed in "document.images" with their name and size. Its macros are never run. A PDF with no text layer, a scan for instance, says so in "note" and gives the address instead: its pages hold pictures rather than words. What stays binary comes back as its media type, its size and the address to fetch it whole, and says in "note" that its content is not restituable. Above 1048576 bytes (16777216 for an office document), and for an archive holding another archive or for an archive or an office document holding more than 1048576 bytes once decompressed, the answer carries that address rather than the content. Every answer also carries "download_url", and shows it in its last block: the original FILE, byte for byte, under its own name and media type, to GET with no key and nothing to sign, once, within 15 minutes (for example `curl -o fiche.docx "<download_url>"`). That is the way to turn what you were shown into a file you have: save the photos of a document for a site, hand a PDF to another tool, or fetch a file too large to come back inline. Call get_attachme…

NameTypeReqDescription
attachment_idstringyesThe id of the attachment, as get_conversation gives it on the message that carries it.
conversation_idstringyesThe id of the conversation, as list_conversations gives it.

No output schema declared.

No examples provided.

get_contact ~47

Reads one contact whole: their fiche, the addresses they write from and where each field came from.

NameTypeReqDescription
contact_idstringyesThe id of the contact, as list_contacts gives it.

No output schema declared.

No examples provided.

get_conversation ~452

Reads one thread whole: every message in order with its direction, its language and its attachments, the contact fiche, the mailbox the thread arrived through, the draft awaiting review when there is one, and in "notes" what the team left on the thread for each other, oldest first, with who wrote each one. Notes are never part of "messages" and were never sent to anyone. A message the mailbox sent carries "delivery" when the mail system tracked it: per recipient (Bcc included), "state" is "delivered" (accepted by the recipient's server, which says nothing of the inbox or of reading), "deferred" (retried by itself for five days), "bounced", "returned" (accepted, then a non-delivery report came back) or "expired", with the server's own "remote_reply" and a "reason" in plain words. When the thread was filed as it arrived, "filed_reason" says why: "spam_filter" for the filter's verdict, "blocked_sender" for a sender the account had reported, and "spoofed_own_domain" for a mail showing one of the account's own domains whose DMARC check failed, which lands in Spam in a mailbox (mark_not_spam takes it back out) and, on a helpdesk queue, in the Trash with its ticket closed (file_conversation with "inbox" brings it back, open). Read this before writing an answer. To read several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 20 ids to do the same to every one of them in a single call.

No output schema declared.

No examples provided.

get_customer_card ~202

Reads the customer card of a helpdesk ticket: what the account's own system (its client area, CRM or ERP) knows about the correspondent, asked live by their address, such as their account, their services and when they renew, and what they owe. "status" says "found" with the card, "not_found" when that system does not know them, "unavailable" when it did not answer (ask again later, it says nothing about the customer), "unverified" when it was not asked because the latest message names its correspondent through a Reply-To that nothing authenticates (nothing proves that person wrote, so do not discuss their account by email), and "none" when the account has no such system connected or the thread is somebody's mailbox. Read it before answering a customer about their account, a renewal or an invoice.

NameTypeReqDescription
conversation_idstringyesThe id of the conversation, as list_conversations gives it.

No output schema declared.

No examples provided.

get_settings ~120

Reads the settings of the account, starting with whether an incoming message has Iris draft an answer on its own. "own_domain_spoofs" says what the account does with a mail that shows one of its own domains and fails DMARC: "filed" when such a mail goes to Spam (to the Trash, closed, on a helpdesk queue) as it arrives, and "exempt_senders" for the addresses of the account that keep arriving normally although they fail. It is read here, and the support team changes it on request.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

invite_person ~330

Opens an access for a colleague without a password: an invitation goes to send_to, and whoever opens it chooses the password from its link, which opens for seven days and once. The link is never shown here, you included, and the record names where it went. send_to is the person themselves at an address they already read, or the box of whoever sets up the team's access. A mailbox of this platform is accepted only when an active person already signs in to it; one nobody can open yet, such as the new login itself, is refused, and so is a support queue. Called again for somebody who has not answered yet, it sends a new invitation and the previous link stops opening; somebody who already chose a password is refused, as they change it themselves. Only on an account that is not held at the shop, and never above manager.

NameTypeReqDescription
emailstringyesThe address the person will sign in with, for example their new mailbox "zoe@sonentreprise.com".
localestring–The language of the invitation and of their screens.
namestring–Their name, as the team will read it. Required for somebody new.
rolestring–Operator by default: they see the queues and boxes they are given. A manager sees every queue and runs the settings.
send_tostringyesWhere the invitation goes: an address the person already reads, or the box of whoever sets up the team's access, for example "it@sonentreprise.com". A box of this platform nobody signs in to yet is r…

No output schema declared.

No examples provided.

list_blocked_senders ~75

Lists the addresses whose mail this account files straight into Spam, most recently blocked first, with the day each was blocked. A block is what report_spam leaves behind, so this is where a rule the account is living under becomes visible again: a sender blocked from a thread long since deleted appears here and nowhere else.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_brands ~28

Lists the brands of the account, its subdivisions, each with the slug the other tools take.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_compose_drafts ~78

Lists the messages begun on the account addresses and never sent, last written first, with their recipients, subject, text and files. These are unsent texts, not the answers Iris wrote for review, which list_drafts holds.

NameTypeReqDescription
addressstring–Narrows to the messages started on one address, from list_sender_addresses.

No output schema declared.

No examples provided.

list_contacts ~78

Lists the contacts of the account with their fiche, most recently seen first, and searches them by name, company or address.

NameTypeReqDescription
limitinteger–How many to return, from 1 to 200. Defaults to 200.
qstring–What to search for, matched against the name, the company and the addresses.

No output schema declared.

No examples provided.

list_conversations ~803

Lists threads, most recently updated first, with the contact, the subject of the mail and the one the team gave the thread ("team_subject", null until rename_conversation gives one), the ticket number of a helpdesk case (what the client quotes, null on somebody's mailbox), the status, where the thread stands in the pipeline, who is handling it, whether a draft is waiting for review, the folder each sits in and whether you have read it. Each thread also says since when its contact has been waiting for our answer ("waiting_since", their oldest message still unanswered, null when nobody waits), and when the last reply came and from which side ("last_reply_at", "last_reply_by"): the two figures a helpdesk queue is watched by, to tell which tickets drag. Name a "box" to read ONE mailbox exactly as its screen shows it: its Inbox by default, another folder on demand, and "unread" for the bold rows alone. Without a "box" it lists the whole account by pipeline status instead, which is a different question: a thread sitting unread in a mailbox has a status like any other, so a list by status is not the list of what is waiting to be read.

NameTypeReqDescription
assigneestring–Narrows to the threads one person is handling, by the email address they sign in with, which list_people gives. The word "none" answers with what nobody has taken yet, which is the queue waiting to b…
beforestring–Only the threads updated before this instant, as an ISO 8601 timestamp such as "2026-08-31T09:00:00Z". This is how you read past the first page: take the "updated_at" of the last thread the answer ga…
boxstring–The address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders.
brandstring–The slug of a brand, to narrow to that subdivision of the account: call list_brands to find it.
channelstring–The channel the thread runs on. Email is the usual one; "portal" carries the messages written from a client space.
external_refstring–Narrows to the threads of one contact identified by the reference a consumer app gave them, for example "epovest:account:42".
folderstring–Which folder of the box to list: one of inbox, sent, drafts, spam, trash, archive, or the id of a folder a person made (list_folders gives them). Defaults to the Inbox, like opening the mailbox does.…
limitinteger–How many threads to bring back, 1 to 200. Defaults to 100.
statusstring–Where the thread stands: "open" for one nobody has taken, "customer_reply" when the contact has written back, "answered" once we replied, "delivery_failed" when our reply bounced, "in_progress" while…
teamstring–Narrows to the threads handed to one team, by its slug (list_teams gives it), taken by one of its members or not. Narrows the account list, so it does not go with "box".
unreadboolean–Only the threads you have not read: the bold rows of the screen, and the same count its Inbox shows. Needs "box". A key that acts for no person has no read state and is told so rather than answered w…

No output schema declared.

No examples provided.

list_drafts ~87

Lists the answers Iris has written, with the thread each belongs to, the contact it goes to and the text as it stands. Filter on "pending_review" for the review queue.

NameTypeReqDescription
statusstring–Which drafts to list: "pending_review" for those awaiting a decision, "sent" for those that went out, "rejected" for those that were turned down.

No output schema declared.

No examples provided.

list_folders ~134

Lists the folders the people of a mailbox made in it, beside the six every mailbox has (inbox, sent, drafts, spam, trash, archive), each with its id, its name, its full path ("Clients/LCS") and its parent. The ids are what list_conversations, search_conversations and file_conversation take, and what update_folder and delete_folder act on.

NameTypeReqDescription
boxstringyesThe address of the mailbox to look in, for example "simon@sonentreprise.com": call list_sender_addresses to find it. A support queue is not a mailbox and has no folders.

No output schema declared.

No examples provided.

list_knowledge ~47

Lists the playbook docs of the account with their full content: this is the material Iris reads before drafting, and the place to look when an answer needs to say what the house does.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_mailboxes ~65

Lists the mailboxes of the account: each one with the people who hold it, the other names that deliver into it and the storage its plan entitles the account to, which every box of it shares. It says who is on a box, never what is in one.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_people ~107

Lists everyone on the account: how they sign in, the rank they hold, and how far they see into the mail. An owner and a manager work every helpdesk queue, which is said as works_every_queue; anyone else works the queues named on them and nothing else. It says who works where, never what any of it holds. A rank is not written from here: for a client of Simafri Suite it is held at the shop and restated at every sign-in.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_scheduled_sends ~120

Lists the messages given a "send_at" that have not left yet, soonest first: when each leaves (in the zone of the person you act for), from which address, to whom, the subject and text, and the thread an answer goes into. A message that has left is no longer here but in its thread. One that could not leave stays, with state "failed" and the reason, until it is cancelled.

NameTypeReqDescription
addressstring–Narrows to the messages leaving from one address, from list_sender_addresses.

No output schema declared.

No examples provided.

list_sender_addresses ~57

Lists the inbound addresses of the account, each with the block that closes what is written from it and, for a mailbox, the other names that deliver into it. Sending from any of these is what brings the answer back into the mailbox.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_suppressed_recipients ~100

Lists the addresses that pressed "this is spam" on this account's mail, with the day and the label their provider gave it. The account writes to none of them, and it does so SILENTLY: a message to one of these addresses is stopped before it leaves, with no bounce and nothing in the thread to see. So this is the list to read when a mail seems to have gone nowhere and nothing said why.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_teams ~82

Lists the teams of the account, the administrative team or the technical one for instance, each with its slug (what assign_conversation and the other team tools take) and who is in it. A team is a way of handing a thread to several people at once; it opens no queue, so a member only ever sees the threads of the queues they work.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

mark_not_spam ~200

Puts a thread the filter or someone else filed as spam back into the Inbox of its mailbox, and unblocks its sender. A thread that is not in Spam is left where it is, and nothing is unblocked. To take several threads out of Spam, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.

No output schema declared.

No examples provided.

mark_read ~222

Clears the bold on a thread for YOU, exactly as opening it on screen does: a colleague reading the same shared mailbox keeps their own. Reading a thread with get_conversation does not do this by itself, on purpose: fetching a mail is not the same as having read it. A message arriving after this call turns the thread bold again. To clear the bold on several threads, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.

No output schema declared.

No examples provided.

mark_unread ~184

Puts a thread back among the bold rows, for you alone: what you want to come back to. A colleague sees no change. To put several threads back among the bold rows, give conversation_id the list of their ids, in ONE call rather than one call per thread: the answer then lists in "results" the outcome of each thread in the order given ("ok", with its "result" or its "error") and counts "succeeded" and "failed". Each thread passes exactly the checks it would alone, so one refused or out of reach ("not found") leaves the others done, and the call is an error only when none succeeded.

NameTypeReqDescription
conversation_id–yesThe id of the conversation, as list_conversations gives it, or a list of up to 50 ids to do the same to every one of them in a single call.

No output schema declared.

No examples provided.

merge_conversation ~242

Merges a helpdesk ticket into another of the same contact, for the client who wrote again beside their case rather than in it. Everything it held moves to the ticket named by "into": its messages, their files, its notes, its drafts. Its number keeps leading to the merged case, so the client's next reply quoting it lands there. The ticket merged away is gone, a note on the one that stays says so (with your reason, when you give one in "note"), and a draft that was waiting on it is set aside. It cannot be undone. Both must be tickets of a support queue you can open, with the same contact; a mailbox thread is refused.

NameTypeReqDescription
conversation_idstringyesThe id of the conversation, as list_conversations gives it.
intostringyesThe ticket that stays: its ticket number, as list_conversations gives it in "ticket_number", or its conversation id.
notestring–Optional: why both tickets are one request, for the people who work the case. It goes into the note that records the merge: do not leave a second note with add_note.

No output schema declared.

No examples provided.

poll_mailboxes ~45

Reads the account mailboxes right away instead of waiting for the next scheduled round, and answers with what came in. Call it when you expect a message that has not appeared yet.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

reject_draft ~69

Turns a draft down and sends nothing. The thread stays open for another answer, by Iris or by a person.

NameTypeReqDescription
draft_idstringyesThe id of the draft, as list_drafts gives it.
reasonstring–Why it was turned down, kept with the draft.

No output schema declared.

No examples provided.

remove_mailbox_alias ~105

Stops an address delivering into a box. What already arrived through it stays in the box, and each message still says which name it came in on.

NameTypeReqDescription
addressstringyesThe address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias.
aliasstringyesThe name to take away, from list_mailboxes.

No output schema declared.

No examples provided.

remove_mailbox_holder ~131

Takes a person off a mailbox: they stop reading it from that moment. Nothing is deleted, and a box left with no holder keeps receiving and keeps everything it holds. Recorded like the other direction.

NameTypeReqDescription
addressstringyesThe address of the mailbox, for example "marie@sonentreprise.com": call list_mailboxes to find it. A support queue is not a mailbox: it has no holder and takes no alias.
personstringyesThe email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.

No output schema declared.

No examples provided.

remove_queue_operator ~142

Takes a person off a helpdesk queue: they stop seeing its threads from that moment. Nothing is deleted, and a queue nobody is named on keeps receiving and is still worked by the owners and the managers of the account.

NameTypeReqDescription
personstringyesThe email address the person signs in with, which is not the same thing as the mailbox: it is how the account knows them.
queuestringyesThe address of the helpdesk queue, for example "contact@sonentreprise.com": call list_sender_addresses to find it. A mailbox is not a queue: it is one person's correspondence and it is handed over wi…

No output schema declared.

No examples provided.

remove_suppression ~139

Takes an address off the list above, so this account can write to them again. Weigh it before calling it: the row means a person pressed "this is spam" on mail from this account, and writing to them again is what turns a complaint into a sending reputation the whole platform shares. Call it when there is a reason to believe they want to hear from this account again, said by them, and not merely because a message would not leave. An address holding no suppression answers that there was nothing to lift.

NameTypeReqDescription
addressstringyesThe address to write to again, as list_suppressed_recipients gives it.

No output schema declared.

No examples provided.

Install

How do I install the Simafri Suite MCP server?

Simafri Suite is a hosted endpoint at https://suite-mcp.simafri.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · suite-mcp.simafri.com

# add to Claude Code
claude mcp add --transport http com-simafri-professional-email 'https://suite-mcp.simafri.com/mcp'
Common questions

What is the Simafri Suite MCP server?

Simafri Suite is an MCP server listed in the public MCP registry as com.simafri/professional-email. Professional email, calendar, contacts and files on your own domain. This page covers its hosted endpoint (https://suite-mcp.simafri.com/mcp).

Is the Simafri Suite MCP server safe to use?

Simafri Suite scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Simafri Suite MCP server expose?

Simafri Suite exposes 68 tools: list_conversations, search_conversations, get_conversation, get_customer_card, get_attachment, and 63 more. Their descriptions and schemas cost roughly 12,599 tokens of context every time the server is loaded.

Does the Simafri Suite MCP server require authentication?

Yes. Simafri Suite asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the Simafri Suite MCP server still maintained?

Simafri Suite is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.