# io.usefulapi/nylas (remote · nylas.usefulapi.io)

MCP server for Nylas — read email, calendars, events and contacts, and send email or create events.

- Trust score: 73/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `nylas.usefulapi.io`: 73/100 (this document), [markdown](https://verifymcp.io/servers/io-usefulapi-nylas/nylas.md), [page](https://verifymcp.io/servers/io-usefulapi-nylas/nylas)

## Channel facts

- Endpoint: `https://nylas.usefulapi.io/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 78/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1622 tokens (~108/item across 15 items; 15 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http io-usefulapi-nylas https://nylas.usefulapi.io/mcp
```

### Codex

```toml
[mcp_servers.io-usefulapi-nylas]
url = "https://nylas.usefulapi.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-usefulapi-nylas": {
      "type": "remote",
      "url": "https://nylas.usefulapi.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-usefulapi-nylas --url https://nylas.usefulapi.io/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  io-usefulapi-nylas:
    url: "https://nylas.usefulapi.io/mcp"
```

### Other

```json
{
  "mcpServers": {
    "io-usefulapi-nylas": {
      "type": "http",
      "url": "https://nylas.usefulapi.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 73, +55)

- [security improvement] Authorization: unverified → pass
- [security improvement] Transport: fail → pass
- [functional regression] MCP protocol: unverified → fail
- [functional improvement] Endpoint reachability: not serving MCP → reachable
- [functional improvement] Stability: unverified → 0.20
- [functional improvement] Tool coverage: unverified → 100

### 2026-08-01 (score 18, −54)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: 0.13 → unverified
- [security regression] Authorization: pass → unverified
- [security regression] Transport: pass → fail
- [functional regression] Capabilities: fail → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 72, +3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 69, −2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 70, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-07-27 (score 69, +57)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 12)

First indexed and scored.

## MCP tools (15)

### `nylas_list_grants` (~75 tokens)

List grants (connected accounts)

List the connected accounts (grants) on this Nylas application, each with a grant_id used to scope other tools. Not grant-scoped. Nylas v3: GET /v3/grants.

Input parameters:

- `limit` (integer): Max grants to return.
- `offset` (integer): Pagination offset.

### `nylas_get_grant` (~59 tokens)

Get a grant

Get details for a single connected account (grant). Nylas v3: GET /v3/grants/{grant_id}.

Input parameters:

- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.

### `nylas_list_messages` (~177 tokens)

List messages

List email messages for the connected account, with optional filters. Nylas v3: GET /v3/grants/{grant_id}/messages.

Input parameters:

- `from` (string): Filter by sender email address.
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `in` (string): Filter by folder id.
- `limit` (integer): Max messages to return.
- `page_token` (string): Pagination cursor (next_cursor from a prior page).
- `search_query_native` (string): Provider-native search query string.
- `starred` (boolean): If set, filter by starred status.
- `subject` (string): Filter by subject.
- `to` (string): Filter by recipient email address.
- `unread` (boolean): If set, filter by unread status.

### `nylas_get_message` (~74 tokens)

Get a message

Get a single email message by id. Nylas v3: GET /v3/grants/{grant_id}/messages/{message_id}.

Input parameters:

- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `message_id` (string, required): The message id to fetch.

### `nylas_list_folders` (~72 tokens)

List folders

List mail folders/labels for the connected account. Nylas v3: GET /v3/grants/{grant_id}/folders.

Input parameters:

- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `limit` (integer): Max folders to return.

### `nylas_list_calendars` (~100 tokens)

List calendars

List calendars for the connected account (each has a calendar_id used by the events tools). Nylas v3: GET /v3/grants/{grant_id}/calendars.

Input parameters:

- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `limit` (integer): Max calendars to return.
- `page_token` (string): Pagination cursor (next_cursor from a prior page).

### `nylas_get_calendar` (~75 tokens)

Get a calendar

Get a single calendar by id. Nylas v3: GET /v3/grants/{grant_id}/calendars/{calendar_id}.

Input parameters:

- `calendar_id` (string, required): The calendar id to fetch.
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.

### `nylas_list_events` (~157 tokens)

List events

List calendar events. Requires calendar_id (sent as a query param). Nylas v3: GET /v3/grants/{grant_id}/events.

Input parameters:

- `calendar_id` (string, required): REQUIRED. The calendar id (sent as a query param).
- `end` (integer): Filter: latest event start, Unix timestamp (seconds).
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `limit` (integer): Max events to return.
- `page_token` (string): Pagination cursor (next_cursor from a prior page).
- `show_cancelled` (boolean): Include cancelled events.
- `start` (integer): Filter: earliest event start, Unix timestamp (seconds).

### `nylas_get_event` (~103 tokens)

Get an event

Get a single calendar event by id. Requires calendar_id (sent as a query param). Nylas v3: GET /v3/grants/{grant_id}/events/{event_id}.

Input parameters:

- `calendar_id` (string, required): REQUIRED. The calendar id (sent as a query param).
- `event_id` (string, required): The event id to fetch.
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.

### `nylas_list_contacts` (~115 tokens)

List contacts

List contacts for the connected account, with optional email/phone filters. Nylas v3: GET /v3/grants/{grant_id}/contacts.

Input parameters:

- `email` (string): Filter by email address.
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `limit` (integer): Max contacts to return.
- `page_token` (string): Pagination cursor (next_cursor from a prior page).
- `phone_number` (string): Filter by phone number.

### `nylas_get_contact` (~73 tokens)

Get a contact

Get a single contact by id. Nylas v3: GET /v3/grants/{grant_id}/contacts/{contact_id}.

Input parameters:

- `contact_id` (string, required): The contact id to fetch.
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.

### `nylas_list_drafts` (~88 tokens)

List drafts

List draft emails for the connected account. Nylas v3: GET /v3/grants/{grant_id}/drafts.

Input parameters:

- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `limit` (integer): Max drafts to return.
- `page_token` (string): Pagination cursor (next_cursor from a prior page).

### `nylas_send_message` (~155 tokens)

Send an email

SENDS a real email via the connected account. This dispatches an actual message. Nylas v3: POST /v3/grants/{grant_id}/messages/send.

Input parameters:

- `bcc` (array): BCC email addresses (array of strings).
- `body` (string): Email body (HTML or plain text).
- `cc` (array): CC email addresses (array of strings).
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `reply_to_message_id` (string): Id of the message this is a reply to.
- `subject` (string): Email subject line.
- `to` (array, required): Recipient email addresses (array of strings).

### `nylas_create_event` (~166 tokens)

Create a calendar event

Creates a calendar event (may send invites to participants). Requires calendar_id (sent as a query param). Nylas v3: POST /v3/grants/{grant_id}/events.

Input parameters:

- `calendar_id` (string, required): REQUIRED. The calendar id to create the event in (sent as a query param).
- `description` (string): Event description.
- `end_time` (integer, required): Event end, Unix timestamp (seconds).
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `location` (string): Event location.
- `participants` (array): Participant email addresses (array of strings).
- `start_time` (integer, required): Event start, Unix timestamp (seconds).
- `title` (string, required): Event title.

### `nylas_create_draft` (~133 tokens)

Create a draft email

Creates a draft email (does NOT send — safe/additive). Nylas v3: POST /v3/grants/{grant_id}/drafts.

Input parameters:

- `bcc` (array): BCC email addresses (array of strings).
- `body` (string): Email body (HTML or plain text).
- `cc` (array): CC email addresses (array of strings).
- `grant_id` (string): Connected-account grant id. Overrides NYLAS_GRANT_ID for this call.
- `subject` (string): Email subject line.
- `to` (array, required): Recipient email addresses (array of strings).

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/io-usefulapi-nylas/nylas#diagnostics

## Score history

- 2026-08-03: 73
- 2026-08-02: 73
- 2026-08-01: 18
- 2026-07-31: 72
- 2026-07-30: 69
- 2026-07-29: 71
- 2026-07-28: 70
- 2026-07-27: 69
- 2026-07-26: 12

## Links

- Remote endpoint: https://nylas.usefulapi.io/mcp
- Repository: https://github.com/m190/usefulapi-mcp
- Changelog RSS feed: https://verifymcp.io/servers/io-usefulapi-nylas/nylas/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-usefulapi-nylas/nylas/changelog.json
- HTML version of this page: https://verifymcp.io/servers/io-usefulapi-nylas/nylas