JetAPI
MCPB · JETAPI-MCP-SERVER.MCPB · 2 COMPONENTS · SCANNED SEP 20
Send WhatsApp, Telegram, SMS and MAX messages, files and bulk mailings via JetAPI
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security23
- Malware scan not yet available for this package.Unverified
- Known CVEs were checked across the 96 of 96 dependencies we could resolve, so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (ISC).Pass
- Actively maintained (last published 5 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability69
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2498 tokens (~178/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
mcpb · jetapi-mcp-server.mcpb
Download bundleEvery change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 14 Sept 26 46
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed mcpb/https://github.com/jetapi/jetapi-mcp-server/releases/download/v1.0.2/jetapi-mcp-server.mcpb
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
create_webhook Create webhook ~184
Register a webhook URL to receive real-time notifications for specific JetAPI events (e.g. whatsapp_log_out, delivery status updates, incoming messages). Use it when the user wants their server, CRM or automation (n8n, Make, Zapier) to receive replies or react to WhatsApp/Telegram events.
| Name | Type | Req | Description |
|---|---|---|---|
| types | array | yes | Event types: whatsapp_log_out (WhatsApp account disconnected); whatsapp_log_in (WhatsApp account connected); whatsapp_incoming_msg (incoming and outgoing WhatsApp messages (with file download links)… |
| url | string | yes | HTTPS URL to receive notifications as POST requests. |
No output schema declared.
No examples provided.
delete_delivery Delete delivery ~95
Delete a sent message from WhatsApp or Telegram (tdlib). Only works for messages with final 'Delivered' status. Deletion occurs on all recipient devices. Only messages sent through JetAPI via the tdlib or whatsapp channels can be deleted; SMS cannot. Use it when the user asks to unsend or recall a message.
| Name | Type | Req | Description |
|---|---|---|---|
| delivery_id | integer | yes | ID of the delivered message to delete (delivery.id from send_message). |
No output schema declared.
No examples provided.
delete_webhook Delete webhook ~34
Delete a webhook by ID. The webhook will stop receiving notifications.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Webhook ID to delete. |
No output schema declared.
No examples provided.
get_account Get account ~75
Get full JetAPI account information including token, balance, dispatch routing, sender names, subscription status and Telegram/WhatsApp sessions count. Use it to verify the token works, check whether the subscription is active, or diagnose undelivered messages (e.g. WhatsApp or Telegram not authorized). For just the balance use get_balance.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_balance Get balance ~54
Get JetAPI account balance, customer ID, available dispatch routing channels, and registered sender names. Use it when the user asks how much money is left, before a large mailing, or to find a valid sender_name for SMS.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_delivery_status Get delivery status ~90
Get the current status and full details of a specific message delivery by its ID. Returns status, operator info, phone, scheduled time, costs and more. Use it after send_message or send_file when the user asks whether a message was delivered or read, or why it failed — the status is explained in plain words.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Delivery ID from the send_message or send_file response. |
No output schema declared.
No examples provided.
get_phone_info Get phone info ~86
Look up phone number information including country, mobile operator name and brand. Useful before sending to verify the number and determine routing. Also returns the number normalized to international format, e.g. when the user wrote it with spaces or brackets.
| Name | Type | Req | Description |
|---|---|---|---|
| phone | string | yes | Phone in international format. Special characters allowed, e.g. +995 (598) 46-45-33. |
No output schema declared.
No examples provided.
get_utm_tags Get UTM tags ~59
Get list of all UTM tags (utm_marks) configured in the JetAPI account for tracking message dispatches. Use it to reuse an existing label as utm_mark in send_message, send_bulk or send_file, so statistics stay grouped.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_webhook Get webhook ~52
Get details of a specific webhook by its ID: the URL it posts to and the event types it subscribes to.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Webhook ID (from create_webhook or list_webhooks). |
No output schema declared.
No examples provided.
list_webhooks List webhooks ~40
List all registered webhooks for this JetAPI account. Use it to see where events are delivered or to find a webhook ID before updating or deleting it.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
send_bulk Send bulk message ~314
Send the same message to multiple phone numbers at once. Supports scheduling, UTM marks, dispatch routing cascade, Telegram usernames and tdlib user IDs. Use it for announcements, campaigns or reminders to a list of recipients. For one recipient, or when a delivery ID is needed for tracking, use send_message.
| Name | Type | Req | Description |
|---|---|---|---|
| dispatch_routing | array | – | Channels in the order JetAPI should try them (cascade: the next channel is used only if delivery through the previous one fails). whatsapp = WhatsApp, tdlib = personal Telegram account, telegram = Te… |
| phones_numbers | array | yes | Phone numbers in international format, e.g. ["79991234567", "+995598464533"]. |
| scheduled_at | string | – | Delayed sending time, format YYYY-MM-DD HH:MM:SS in UTC+0. At least 1 minute and at most 1 month ahead. |
| sender_name | string | – | Registered SMS sender name (see get_balance → sender names). |
| tdlib_user_id | string | – | Telegram user ID (positive = private chat, negative = group chat). tdlib channel only. |
| text | string | yes | Message text. |
| usernames | array | – | Telegram usernames (tdlib only): requires "tdlib" in dispatch_routing. |
| utm_mark | string | – | Label for tracking dispatches (see get_utm_tags). |
No output schema declared.
No examples provided.
send_file Send file ~669
Send a file (document, image, audio, video, contact) to a recipient via WhatsApp or Telegram. File is uploaded as multipart/form-data. Images under 10MB sent natively, larger files as download links active for 7 days. Use it when the user wants to share a document, photo, voice message, video or contact card. Provide the file as exactly one of: file_path (local file), file_url (downloaded by the server) or file_base64 (with file_name). Supported: pdf, doc, docx, ppt, pptx, xls, xlsx, zip, 7z; ogg, opus, mp3, aac, amr, 3gp; jpeg, png, webp; mp4; vcf. Max 100 MB. Recipient rules are the same as send_message.
| Name | Type | Req | Description |
|---|---|---|---|
| callback_url | string | – | URL that receives the final delivery status as a POST request (retried every 2 minutes, up to 10 times, until it returns HTTP 200). |
| caption | string | – | Description below the file (WhatsApp only). |
| customer_id | string | – | Internal client ID. |
| dispatch_routing | array | – | Channels in the order JetAPI should try them (cascade: the next channel is used only if delivery through the previous one fails). whatsapp = WhatsApp, tdlib = personal Telegram account, telegram = Te… |
| external_id | string | – | Your client-side ID for this message (idempotency ID). |
| file_base64 | string | – | File content as base64 (a data: URL is accepted too). Requires file_name. |
| file_name | string | – | Filename with extension, e.g. document.pdf. Defaults to the name from file_path or file_url. |
| file_path | string | – | Absolute path of a local file to upload (~ is expanded). |
| file_url | string | – | Public http(s) URL of the file; the server downloads and uploads it. |
| phone | string | – | Recipient phone in international format. Optional if username is used (tdlib). |
| priority | string | – | Sending priority. Chosen automatically if omitted. |
| reply_to_message_id | string | – | ID of the message to reply to, taken from an incoming-message webhook. |
| scheduled_at | string | – | Delayed sending time, format YYYY-MM-DD HH:MM:SS in UTC+0. At least 1 minute and at most 1 month ahead. |
| sender_name | string | – | Registered SMS sender name (see get_balance → sender names). |
| simulate_typing | boolean | – | Default true: show a typing indicator in WhatsApp before sending. false sends instantly. |
| tdlib_user_id | string | – | Telegram user ID (positive = private chat, negative = group chat). tdlib channel only. |
| type | string | – | document = send as file, image = send as photo (WhatsApp/tdlib). |
| username | string | – | Telegram username (tdlib only). |
| utm_mark | string | – | Label for tracking dispatches (see get_utm_tags). |
No output schema declared.
No examples provided.
send_message Send message ~584
Send a text message via WhatsApp, Telegram (tdlib), Telegram Bot, SMS, VK/OK (notify), or MAX (max), with optional cascade fallback between channels. Supports scheduling, priority, reply-to, typing simulation, and delivery callbacks. Use it when the user asks to text, message, notify or reply to one person or group chat. For many phone numbers use send_bulk; for documents, images, audio or video use send_file. Recipient: `phone` is required, except for personal Telegram (dispatch_routing ["tdlib"]) where `username` or `tdlib_user_id` can be used instead, and WhatsApp where `whatsapp_lid` can be used. Returns the delivery ID for get_delivery_status and delete_delivery.
| Name | Type | Req | Description |
|---|---|---|---|
| callback_url | string | – | URL that receives the final delivery status as a POST request (retried every 2 minutes, up to 10 times, until it returns HTTP 200). |
| dispatch_routing | array | – | Channels in the order JetAPI should try them (cascade: the next channel is used only if delivery through the previous one fails). whatsapp = WhatsApp, tdlib = personal Telegram account, telegram = Te… |
| external_id | string | – | Your client-side ID for this message (idempotency ID). |
| phone | string | – | Recipient phone in international format, e.g. 79991234567. Optional if username/tdlib_user_id is used for tdlib. |
| priority | string | – | Sending priority. Chosen automatically if omitted. |
| reply_to_message_id | string | – | ID of the message to reply to, taken from an incoming-message webhook. |
| scheduled_at | string | – | Delayed sending time, format YYYY-MM-DD HH:MM:SS in UTC+0. At least 1 minute and at most 1 month ahead. |
| sender_name | string | – | Registered SMS sender name (see get_balance → sender names). |
| simulate_typing | boolean | – | Default true: show a typing indicator in WhatsApp before sending. false sends instantly. |
| tdlib_user_id | string | – | Telegram user ID (positive = private chat, negative = group chat). tdlib channel only. |
| text | string | yes | Message text. Max 3500 chars for messengers, 160 for one SMS segment in Latin characters. |
| username | string | – | Telegram username (format: username or @username). tdlib only. |
| utm_mark | string | – | Label for tracking dispatches (see get_utm_tags). |
| whatsapp_lid | string | – | WhatsApp LID. Format: 43445322325 or 43445322325@lid. WhatsApp only. |
No output schema declared.
No examples provided.
update_webhook Update webhook ~86
Update an existing webhook — change its URL or the list of event types it subscribes to. Pass only what should change; types replaces the whole list.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Webhook ID (from create_webhook or list_webhooks). |
| types | array | – | New list of event types (replaces the current list). |
| url | string | – | New URL. |
No output schema declared.
No examples provided.
What is the JetAPI MCP server?
JetAPI is an MCP server listed in the public MCP registry as io.github.jetapi/jetapi-mcp-server. Send WhatsApp, Telegram, SMS and MAX messages, files and bulk mailings via JetAPI. This page covers its MCPB bundle (https://github.com/jetapi/jetapi-mcp-server/releases/download/v1.0.2/jetapi-mcp-server.mcpb).
Is the JetAPI MCP server safe to use?
JetAPI scores 46 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the JetAPI MCP server expose?
JetAPI exposes 14 tools: get_account, get_balance, get_utm_tags, send_message, get_delivery_status, and 9 more. Their descriptions and schemas cost roughly 2,422 tokens of context every time the server is loaded.
What licence is the JetAPI MCP server under?
JetAPI declares the ISC licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.