Vision6 MCP by usefulapi
REMOTE · VISION6.USEFULAPI.IO
Read Vision6 lists, contacts, messages and reports; update contacts; send transactional email/SMS.
Available components
Last scanned (5 hours ago)
Scores higher than 46% of remote servers
Reachable. Last reached 25 Oct 2026.
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security78
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability74
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3892 tokens (~169/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage90
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 71% of tool parameters carry a description.Partial
Tool Safety92
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 2 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "vision6_list_reports" implies "send" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- Server version: 1.0.0 → 1.0.3 functional
- 24 Oct 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Probed https://vision6.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of vision6.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 38690, 57355 | 8, 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 302 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://vision6.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://vision6.usefulapi.io/.well-known/oauth-protected-resource/mcp" Protected resource metadata
| Document | https://vision6.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://vision6.usefulapi.io/mcp |
| Authorisation server | https://vision6.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://vision6.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/vision6/ |
| http (plaintext) | http://vision6.usefulapi.io/mcp | Inconclusive | 302 | http://vision6.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
vision6_add_contacts Add several contacts ~127
WRITE: add up to 200 contacts to a list in one request (faster than one by one). Each needs an email and/or mobile. Vision6 returns no contact data (HTTP 204), so use vision6_list_contacts to read them back. May trigger automations. POST /lists/{list_id}/contacts.
| Name | Type | Req | Description |
|---|---|---|---|
| contacts | array | yes | – |
| list_id | integer | yes | – |
| remove_unsubscribers | string | – | Skip addresses that are on the unsubscribers list: any (account-wide), list (this list), none (default: create everyone). |
No output schema declared.
No examples provided.
vision6_create_contact Create a contact ~284
WRITE: add one contact to a list (needs an email and/or mobile that matches a field of the list). May trigger the list's 'contact created' automations and notification emails. Returns the new contact. POST /lists/{list_id}/contacts.
| Name | Type | Req | Description |
|---|---|---|---|
| double_opt_in | boolean | – | true marks the contact as already confirmed (sets the double opt-in time to now). It cannot be reset to false afterwards. |
| string | – | Email address (the list must have an Email field). | |
| email_subscribed | boolean | – | Whether the email address is subscribed to receive messages. |
| fields | object | – | Custom list field values, keyed by the lowercase key of the field name (underscores for spaces/dashes, e.g. first_name). Use vision6_list_list_fields to see the list's fields. |
| is_active | boolean | – | The contact's active status. |
| list_id | integer | yes | – |
| mobile | string | – | Mobile number in international format without + or spaces (Australia: 61400000009). The list must have a Mobile field. |
| mobile_subscribed | boolean | – | Whether the mobile number is subscribed to receive messages. |
| remove_unsubscribers | string | – | Skip addresses that are on the unsubscribers list: any (account-wide), list (this list), none (default: create everyone). |
No output schema declared.
No examples provided.
vision6_create_list Create a contact list ~154
WRITE: create a new, empty contact list inside a list folder (see vision6_list_folders with type list). Returns the new list. POST /lists.
| Name | Type | Req | Description |
|---|---|---|---|
| allow_send_to_duplicates | boolean | – | Allow sends to duplicate email or mobile addresses. |
| folder_id | integer | yes | Id of the list folder to create the list in. |
| is_gdpr_compliant | boolean | – | – |
| name | string | yes | – |
| on_register_address | array | – | Email addresses to notify when a contact is added. |
| on_unsubscribe_address | array | – | Email addresses to notify when a contact unsubscribes. |
| on_update_address | array | – | Email addresses to notify when a contact is updated. |
No output schema declared.
No examples provided.
vision6_create_message Create a message (draft) ~370
WRITE: save a new email or SMS message in Vision6. This only stores the message; it is NOT sent (use the Vision6 app to send a campaign, or vision6_send_transactional for a one-off send). Email needs email_type, subject and matching body fields (plain: content_text; html: content_html; plain-html: both; raw_html: content_html or content_html_raw). SMS needs content_sms. The drag-and-drop builder is not supported. POST /messages.
| Name | Type | Req | Description |
|---|---|---|---|
| content_html | string | – | HTML body (email types html and plain-html; raw_html accepts it or content_html_raw). |
| content_html_raw | string | – | Raw HTML document (email type raw_html). |
| content_sms | string | – | SMS text (required for an sms message; keep it near 500 characters). |
| content_text | string | – | Plain-text body (email types plain and plain-html). |
| email_type | string | – | Required for email. |
| folder_id | integer | – | Message folder id (see vision6_list_folders with type message). Omit to use the account's first message folder. |
| from_address | string | – | Sender address. For email it must be a verified address/domain in the account. Omit to use the account's saved default (see vision6_get_message_sender_defaults). |
| from_name | string | – | – |
| is_responsive | boolean | – | Responsive HTML flag (email). |
| is_template | boolean | – | Mark the message as reusable starter content. |
| name | string | yes | Display name of the message in Vision6. |
| reply_to | string | – | – |
| subject | string | – | Email subject line (required for email). Supports wildcards like %%first_name**there%%. |
| type | string | yes | – |
No output schema declared.
No examples provided.
vision6_delete_contact Delete a contact ~117
WRITE, IRREVERSIBLE: permanently delete one contact from a list (for example for a privacy erasure request). To stop emailing someone but keep the record, use vision6_update_contact with email_subscribed=false instead. Pass confirm=true only after the user agreed to the deletion. DELETE /lists/{list_id}/contacts?id={contact_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true: you confirm the user asked to permanently delete this contact. |
| contact_id | integer | yes | – |
| list_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_get_account Get API key details ~61
Details of the API key this server uses: the scopes it grants (e.g. list.view, contact.create, message.edit, report.view) and its creation/expiry time. Use it to see why a request is refused. GET /v1/.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
vision6_get_contact Get a contact ~72
One contact by id within a list, with all fields. GET /lists/{list_id}/contacts/{contact_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | integer | yes | – |
| fields | string | – | Optional comma separated list of response fields to return, e.g. id,email. |
| list_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_get_list Get a contact list ~31
One contact list by id. GET /lists/{list_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| list_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_get_message Get a message ~66
One message by id. With include_content=true the HTML and plain-text body is included. GET /messages/{message_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| include_content | boolean | – | Also return the message body (body_html, body_text). Can be large. |
| message_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_get_message_sender_defaults Get default sender details ~43
The account's default from name, from address and reply-to, applied to new email messages when you omit them. GET /message-sender-defaults.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
vision6_get_report Get a send report ~122
One send report by id with all delivery and engagement counts, per-link click counts and recipient domain distribution. Optionally includes A/B test results and social click/share statistics. GET /reports/{report_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | string | – | Optional comma separated list of response fields to return, e.g. id,email. |
| include_ab_test | boolean | – | Include A/B test variant statistics (only for A/B test reports). |
| include_social | boolean | – | Include Facebook/Twitter/LinkedIn click and share statistics. |
| report_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_get_transactional_group Get a transactional group ~40
One transactional group by id with its delivery statistics. GET /transactional-groups/{group_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | integer | yes | – |
No output schema declared.
No examples provided.
vision6_list_contacts List contacts ~269
List the contacts of one list: email, mobile, subscribed/blocked status, active flag, double opt-in and the list's custom fields. Filter by email, mobile, active flag, creation/modification time or any custom field (`filters`, e.g. {"city":"Brisbane"} or {"source:ne":"promo"}). GET /lists/{list_id}/contacts.
| Name | Type | Req | Description |
|---|---|---|---|
| created_since | string | – | Only contacts created at or after this UTC timestamp. |
| string | – | Exact email address. | |
| fields | string | – | Optional comma separated list of response fields to return, e.g. id,email. |
| filters | object | – | Custom field filters: key = lowercase field key, optionally with :ne or :in (comma separated values), e.g. {"state:in":"qld,nsw"}. |
| is_active | boolean | – | – |
| limit | integer | – | Results per page, 1-1000 (default 50). |
| list_id | integer | yes | – |
| mobile | string | – | Exact mobile number (international format without +). |
| modified_since | string | – | Only contacts changed at or after this UTC timestamp. |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
No output schema declared.
No examples provided.
vision6_list_folders List folders ~114
List the account's folders (list folders and message folders) with id, name, type and size. Needed for the folder id when creating a list or message. GET /folders.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Results per page, 1-1000 (default 50). |
| name | string | – | – |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
| type | string | – | Folder type, e.g. list or message. |
No output schema declared.
No examples provided.
vision6_list_list_fields List a list's fields ~121
The fields (columns) of a contact list: label, type (email, mobile, text, dropdown, date ...), allowed values and whether they are mandatory. The lowercase underscore form of a label is the key used for contact values and filters. GET /lists/{list_id}/fields.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Results per page, 1-1000 (default 50). |
| list_id | integer | yes | – |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
No output schema declared.
No examples provided.
vision6_list_lists List contact lists ~91
List the account's contact lists with id, name, creation/modification time and notification settings. Filter by exact name. GET /lists.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Results per page, 1-1000 (default 50). |
| name | string | – | Exact list name. |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
No output schema declared.
No examples provided.
vision6_list_messages List messages ~114
List saved email and SMS messages (templates and campaigns) with id, type, name, subject and sender. Filter by type or exact name/subject. GET /messages.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Results per page, 1-1000 (default 50). |
| name | string | – | Exact message name. |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
| subject | string | – | Exact subject. |
| type | string | – | – |
No output schema declared.
No examples provided.
vision6_list_reports List send reports ~193
Send reports for campaigns, newest first: message name, type, sent, bounced, opened, unique clicks, unsubscribes, complaints, total recipients and last sent time. Filter by message, type, test sends or creation time. Click and domain breakdowns are only returned when requested via `fields`. GET /reports.
| Name | Type | Req | Description |
|---|---|---|---|
| created_since | string | – | Only reports created at or after this UTC timestamp. |
| fields | string | – | Optional comma separated list of response fields to return, e.g. id,email. |
| is_test | boolean | – | false = only real campaign sends, true = only test sends. |
| limit | integer | – | Results per page, 1-1000 (default 50). |
| message_id | integer | – | – |
| message_type | string | – | – |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
No output schema declared.
No examples provided.
vision6_list_sent_contacts List contacts a message was sent to ~151
The contacts one message was sent to, with send time, first/last open time and open type (html, text, sms or not_opened). Use it to see who opened a campaign. GET /messages/{message_id}/sent-contacts.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | integer | – | – |
| limit | integer | – | Results per page, 1-1000 (default 50). |
| list_id | integer | – | – |
| message_id | integer | yes | – |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
| open_type | string | – | – |
| report_id | integer | – | Only sends belonging to this report. |
No output schema declared.
No examples provided.
vision6_list_transactional_groups List transactional groups ~126
Transactional send groups (one per group name used with vision6_send_transactional) with sent, failed, bounced, delivered, opened, clicked and unsubscribed counts. GET /transactional-groups.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Results per page, 1-1000 (default 50). |
| name | string | – | Exact group name. |
| offset | integer | – | Skip this many results (default 0). Pass the previous reply's next_offset. |
| type | string | yes | Group type (the reference marks it required; call once per type). |
No output schema declared.
No examples provided.
vision6_send_transactional Send a transactional email or SMS ~398
WRITE: SENDS REAL EMAIL OR SMS to the recipients immediately (asynchronously) and USES ACCOUNT SENDING CREDITS. It cannot be recalled. Up to 100 recipients per call, each identified by exactly one of contact_id, email or mobile, plus optional personalisation values (wildcards %%key%% in the body). Either send a saved message (message_id) or custom content (subject/body_html/body_text, and for SMS body_text + from_address). Unsubscribed addresses are skipped. Email always needs list_id. Results appear in the transactional group (vision6_get_transactional_group). The account owner's email must be confirmed in Vision6 first. Pass confirm_send=true only after the user approved these recipients and this content. POST /transactional-sends.
| Name | Type | Req | Description |
|---|---|---|---|
| body_html | string | – | Custom HTML body (email, without message_id). |
| body_text | string | – | Custom plain-text body (email or SMS, without message_id). |
| confirm_send | boolean | yes | Must be true: you confirm the user approved sending this email/SMS now (it cannot be recalled and uses credits). |
| from_address | string | – | Verified sender email address, or the sender mobile number for SMS. |
| from_name | string | – | – |
| group_id | integer | – | – |
| group_name | string | – | Name of the transactional group that collects the results (created if new). One of group_name or group_id is required. |
| list_id | integer | – | List the recipients belong to (required for email; optional for SMS). |
| message_id | integer | – | A saved message to send. Do not combine with custom content. |
| recipients | array | yes | – |
| reply_to | string | – | – |
| subject | string | – | Custom email subject (without message_id). |
| type | string | yes | – |
| unsubscribe_type | string | – | SMS with custom content only: how recipients can opt out. |
No output schema declared.
No examples provided.
vision6_update_contact Update a contact ~272
WRITE: change one contact's email, mobile, custom field values, subscription status (email_subscribed/mobile_subscribed=false unsubscribes), active flag or double opt-in. Only the fields you pass change. May trigger 'contact updated' automations. Returns the updated contact. PATCH /lists/{list_id}/contacts/{contact_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | integer | yes | – |
| double_opt_in | boolean | – | true marks the contact as already confirmed (sets the double opt-in time to now). It cannot be reset to false afterwards. |
| string | – | Email address (the list must have an Email field). | |
| email_subscribed | boolean | – | Whether the email address is subscribed to receive messages. |
| fields | object | – | Custom list field values, keyed by the lowercase key of the field name (underscores for spaces/dashes, e.g. first_name). Use vision6_list_list_fields to see the list's fields. |
| is_active | boolean | – | The contact's active status. |
| list_id | integer | yes | – |
| mobile | string | – | Mobile number in international format without + or spaces (Australia: 61400000009). The list must have a Mobile field. |
| mobile_subscribed | boolean | – | Whether the mobile number is subscribed to receive messages. |
No output schema declared.
No examples provided.
vision6_update_message Update a message ~297
WRITE: change a saved message's name, subject, sender, folder or body. Only the fields you pass change. It does not send anything. PATCH /messages/{message_id}.
| Name | Type | Req | Description |
|---|---|---|---|
| content_html | string | – | HTML body (email types html and plain-html; raw_html accepts it or content_html_raw). |
| content_html_raw | string | – | Raw HTML document (email type raw_html). |
| content_sms | string | – | SMS text (required for an sms message; keep it near 500 characters). |
| content_text | string | – | Plain-text body (email types plain and plain-html). |
| folder_id | integer | – | Message folder id (see vision6_list_folders with type message). Omit to use the account's first message folder. |
| from_address | string | – | Sender address. For email it must be a verified address/domain in the account. Omit to use the account's saved default (see vision6_get_message_sender_defaults). |
| from_name | string | – | – |
| is_responsive | boolean | – | Responsive HTML flag (email). |
| is_template | boolean | – | Mark the message as reusable starter content. |
| message_id | integer | yes | – |
| name | string | – | Display name of the message in Vision6. |
| reply_to | string | – | – |
| subject | string | – | Email subject line (required for email). Supports wildcards like %%first_name**there%%. |
No output schema declared.
No examples provided.
How do I install the Vision6 MCP by usefulapi server?
Vision6 MCP by usefulapi is a hosted endpoint at https://vision6.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · vision6.usefulapi.io
claude mcp add --transport http io-usefulapi-vision6 'https://vision6.usefulapi.io/mcp'
What is the Vision6 MCP by usefulapi server?
Vision6 MCP by usefulapi is listed in the public MCP registry as io.usefulapi/vision6. Read Vision6 lists, contacts, messages and reports; update contacts; send transactional email/SMS. This page covers its hosted endpoint (https://vision6.usefulapi.io/mcp).
Is the Vision6 MCP by usefulapi server safe to use?
Vision6 MCP by usefulapi scores 60 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Vision6 MCP by usefulapi server expose?
Vision6 MCP by usefulapi exposes 23 tools: vision6_get_account, vision6_list_lists, vision6_get_list, vision6_list_list_fields, vision6_list_folders, and 18 more. Their descriptions and schemas cost roughly 3,633 tokens of context every time the server is loaded.
Does the Vision6 MCP by usefulapi server require authentication?
Yes. Vision6 MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Vision6 MCP by usefulapi server still maintained?
Vision6 MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.