# OutreachBox (npm · @outreachbox/mcp)

Cold email, prospect research, inbox triage, and content marketing in OutreachBox.

- Trust score: 57/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `api.outreachbox.com`: 38/100, [markdown](https://verifymcp.io/servers/pulsereal-outreachbox/api.md), [page](https://verifymcp.io/servers/pulsereal-outreachbox/api)
- npm · `@outreachbox/mcp`: 57/100 (this document), [markdown](https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp.md), [page](https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp)

## Channel facts

- Registry: `npm`
- Package: `@outreachbox/mcp`
- Version: `1.1.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 81/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.
  - No install/post-install scripts declared.
  - 33 of 106 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 19/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 26 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 64/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 3182 tokens (~56/item across 56 items; 56 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 89/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 67% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 56 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the OutreachBox MCP server?

OutreachBox runs locally as an npm package, launched with npx -y @outreachbox/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add pulsereal-outreachbox -- npx -y @outreachbox/mcp
```

### Cursor

```json
{
  "mcpServers": {
    "pulsereal-outreachbox": {
      "command": "npx",
      "args": [
        "-y",
        "@outreachbox/mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "pulsereal-outreachbox": {
      "command": "npx",
      "args": [
        "-y",
        "@outreachbox/mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add pulsereal-outreachbox -- npx -y @outreachbox/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "pulsereal-outreachbox": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@outreachbox/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add pulsereal-outreachbox --command npx --arg -y --arg @outreachbox/mcp
```

### Hermes

```yaml
mcp_servers:
  pulsereal-outreachbox:
    command: "npx"
    args: ["-y", "@outreachbox/mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "pulsereal-outreachbox": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@outreachbox/mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add pulsereal-outreachbox -t stdio -c npx -a -y @outreachbox/mcp
```

### Other

```json
{
  "mcpServers": {
    "pulsereal-outreachbox": {
      "command": "npx",
      "args": [
        "-y",
        "@outreachbox/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-03 (score 57, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-11-02 (score 42)

First indexed and scored.

## MCP tools (56)

### `contacts_create` (~140 tokens)

Create/upsert a single contact in OutreachBox.

Input parameters:

- `company` (string): Company name
- `customFields` (object): Custom fields mapping
- `email` (string): Email address of the contact
- `firstName` (string): First name
- `jobTitle` (string): Job title of the contact
- `lastName` (string): Last name
- `linkedinUrl` (string): LinkedIn profile URL
- `phone` (string): Phone number of the contact
- `source` (string): Source of the lead
- `tags` (array): Tags associated with this contact
- `website` (string): Company website URL

### `contacts_bulk` (~38 tokens)

Bulk upsert up to 1000 contacts in OutreachBox.

Input parameters:

- `contacts` (array, required): List of contacts to create (max 1000)

### `contacts_list` (~71 tokens)

List organization contacts with search/filter options.

Input parameters:

- `limit` (integer): Limit the number of records
- `offset` (integer): Offset for pagination
- `search` (string): Search query for contacts
- `status` (string): Filter by status
- `tag` (string): Filter by a specific tag

### `contacts_get` (~31 tokens)

Get details of a specific contact by database ID.

Input parameters:

- `id` (string, required): The database ID of the resource

### `contacts_update` (~110 tokens)

Update fields on an existing contact by ID.

Input parameters:

- `company` (string)
- `customFields` (object)
- `email` (string)
- `firstName` (string)
- `id` (string, required): Contact ID to update
- `jobTitle` (string)
- `lastName` (string)
- `linkedinUrl` (string)
- `phone` (string)
- `source` (string)
- `tags` (array)
- `website` (string)

### `contacts_delete` (~29 tokens)

Permanently delete a contact by ID.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_email_create` (~122 tokens)

Create a new sequence or drip email campaign.

Input parameters:

- `contactIds` (array): Associated contact IDs
- `description` (string): Description
- `emailAccountId` (string): Sender account ID
- `name` (string, required): Name of the campaign
- `scheduledAt` (string): Optional ISO date string for scheduled start
- `settings` (object)
- `steps` (array): Outreach steps (max 5)
- `targeting` (object)
- `templateId` (string): Email template ID
- `type` (string, required): Campaign type

### `campaigns_email_list` (~17 tokens)

List all email campaigns in the organization.

### `campaigns_email_get` (~30 tokens)

Get details of a specific email campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_email_launch` (~29 tokens)

Launch/start a draft email campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_email_pause` (~28 tokens)

Pause a running email campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_email_stop` (~32 tokens)

Permanently stop a running or paused email campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_prospects_create` (~124 tokens)

Create a prospects research campaign to search for matching leads.

Input parameters:

- `contactDiscovery` (object)
- `description` (string)
- `filters` (object): Search filter settings
- `keywords` (array): Keywords to prioritize
- `name` (string, required): Prospecting campaign name
- `projectId` (string, required): Target project ID
- `query` (string, required): Search query e.g. "Software Engineers in California"
- `searchType` (string): Values: web, news, images, maps, company_leads
- `tags` (array)

### `campaigns_prospects_list` (~17 tokens)

List all prospect discovery campaigns.

### `campaigns_prospects_get` (~34 tokens)

Get details and discover status of a prospect campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_sales_create` (~118 tokens)

Create a sales intelligence lookup campaign.

Input parameters:

- `contactDiscovery` (object)
- `description` (string)
- `filters` (object): Search filter settings
- `keywords` (array): Keywords to prioritize
- `name` (string, required): Prospecting campaign name
- `projectId` (string, required): Target project ID
- `query` (string, required): Search query e.g. "Software Engineers in California"
- `searchType` (string): Values: web, news, images, maps, company_leads
- `tags` (array)

### `campaigns_sales_list` (~15 tokens)

List all sales research campaigns.

### `campaigns_sales_get` (~32 tokens)

Get details and research status of a sales campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `campaigns_influencer_create` (~119 tokens)

Create an influencer discovery campaign.

Input parameters:

- `contactDiscovery` (object)
- `description` (string)
- `filters` (object): Search filter settings
- `keywords` (array): Keywords to prioritize
- `name` (string, required): Prospecting campaign name
- `projectId` (string, required): Target project ID
- `query` (string, required): Search query e.g. "Software Engineers in California"
- `searchType` (string): Values: web, news, images, maps, company_leads
- `tags` (array)

### `campaigns_influencer_list` (~17 tokens)

List all influencer research campaigns.

### `campaigns_influencer_get` (~32 tokens)

Get progress/details of an influencer campaign.

Input parameters:

- `id` (string, required): The database ID of the resource

### `research_topic_create` (~113 tokens)

Initiate a deep topic research session on search keywords.

Input parameters:

- `depthLevel` (integer, required): Search depth (1 to 5)
- `geographicTarget` (string, required): Geographic market targeted
- `keywords` (array, required): Research search keywords
- `language` (string)
- `name` (string, required): Topic research session name
- `projectId` (string)
- `researchTypes` (array, required): E.g. "News Articles", "Industry Trends"
- `timeRange` (string, required): Timeframe constraint in days

### `research_topic_list` (~15 tokens)

List all topic research sessions.

### `research_topic_get` (~32 tokens)

Get results and configurations of a topic research session.

Input parameters:

- `id` (string, required): The database ID of the resource

### `content_generate` (~173 tokens)

Generate AI social posts or articles with real-time web facts.

Input parameters:

- `contentType` (string, required): E.g. social_post, article, email_template
- `enableSERP` (boolean): Retrieve live SERP Google facts
- `humanizeContent` (boolean)
- `keywords` (array)
- `length` (string): Target length (short, medium, long)
- `llmProvider` (string): AI model provider key
- `platform` (string): Platform name e.g. linkedin, twitter
- `projectId` (string)
- `prompt` (string): AI prompt to base content generation on
- `searchType` (string): SERP or PERPLEXITY
- `style` (string)
- `title` (string)
- `tone` (string): Tone of voice

### `content_list` (~14 tokens)

List all generated content assets.

### `content_get` (~31 tokens)

Get details and text content of a generated asset.

Input parameters:

- `id` (string, required): The database ID of the resource

### `content_calendar_generate` (~93 tokens)

Programmatically construct a monthly social media content calendar.

Input parameters:

- `autoPublish` (boolean)
- `enableSERP` (boolean)
- `keywords` (array)
- `month` (integer, required): Month (0-11)
- `postsPerMonth` (integer): Target number of calendar items
- `projectId` (string, required)
- `topic` (string)
- `year` (integer, required): Calendar Year

### `content_calendar_list` (~14 tokens)

List content calendar entries.

### `content_calendar_get` (~31 tokens)

Get details of a scheduled content calendar entry.

Input parameters:

- `id` (string, required): The database ID of the resource

### `designs_generate` (~67 tokens)

Generate AI brand template designs.

Input parameters:

- `count` (integer)
- `enableWebSearch` (boolean)
- `keywords` (array, required)
- `platforms` (array)
- `projectId` (string, required)
- `templateId` (string)
- `topic` (string)

### `social_accounts_list` (~36 tokens)

List connected social media accounts available for publishing.

Input parameters:

- `platform` (string): Filter by platform e.g. linkedin, twitter, facebook

### `social_publish` (~112 tokens)

Publish content to a connected social account (LinkedIn, Twitter, etc.). Provide either a saved contentId or raw post text.

Input parameters:

- `accountId` (string, required): Connected social account ID to publish to
- `content` (string): Raw post text to publish directly
- `contentId` (string): ID of saved content to publish
- `platform` (string): Platform name e.g. linkedin, twitter (used when publishing raw content)
- `title` (string): Title for the post when publishing raw content

### `email_accounts_list` (~33 tokens)

List connected email accounts used for sending.

Input parameters:

- `status` (string): Filter sender accounts by active, paused, error

### `email_accounts_stats` (~23 tokens)

Get aggregate reputation, usage, and daily limits stats for senders.

### `email_accounts_get` (~34 tokens)

Get credentials configuration for a sender account (secrets removed).

Input parameters:

- `id` (string, required): The database ID of the resource

### `email_accounts_verify` (~34 tokens)

Verify IMAP/SMTP connectivity state of a sender account.

Input parameters:

- `id` (string, required): The database ID of the resource

### `inbox_list` (~98 tokens)

Retrieve emails from unified inbox (supports filtering by incoming replies).

Input parameters:

- `emailAccountId` (string)
- `fromDate` (string): ISO Date threshold
- `isRead` (boolean)
- `limit` (integer)
- `offset` (integer)
- `search` (string): Search mail subject, body, or sender
- `toDate` (string): ISO Date threshold
- `type` (string): Filter by direction

### `inbox_stats` (~26 tokens)

Get read/unread metrics for the inbox.

Input parameters:

- `emailAccountId` (string)

### `inbox_check` (~33 tokens)

Trigger mail server sync to fetch new replies/bounces.

Input parameters:

- `emailAccountId` (string, required): Email account ID to sync

### `inbox_get` (~31 tokens)

Get full body and headers of an inbox message.

Input parameters:

- `id` (string, required): The database ID of the resource

### `inbox_read` (~28 tokens)

Mark an inbox message as read.

Input parameters:

- `id` (string, required): The database ID of the resource

### `email_send` (~128 tokens)

Send a new outbound email from a connected sender account.

Input parameters:

- `accountId` (string, required): Sender email account ID to send from (see email_accounts_list)
- `bcc` (array): BCC recipient email addresses
- `body` (string, required): Email body content (HTML when isHtml is true)
- `cc` (array): CC recipient email addresses
- `fromName` (string): Display name for the sender
- `isHtml` (boolean): Treat body as HTML (default true)
- `subject` (string, required): Email subject line
- `to` (string, required): Recipient email address

### `inbox_reply` (~125 tokens)

Reply to an inbox message. Recipient/subject default to the original sender and "Re: <subject>".

Input parameters:

- `body` (string, required): Reply body content (HTML when isHtml is true)
- `fromName` (string): Display name for the sender
- `id` (string, required): Inbox message ID to reply to
- `isHtml` (boolean): Treat body as HTML (default true)
- `subject` (string): Subject; defaults to "Re: <original subject>" when omitted
- `to` (array): Recipients; defaults to the original sender when omitted

### `templates_list` (~36 tokens)

List reusable email templates (own, shared, and system) available to the organization.

Input parameters:

- `category` (string): Filter templates by category

### `templates_get` (~35 tokens)

Get a single email template including its full content and variables by ID.

Input parameters:

- `id` (string, required): The database ID of the resource

### `templates_create` (~126 tokens)

Create a reusable email template. Variables in {{double-brace}} syntax are auto-extracted.

Input parameters:

- `categories` (array): Additional categories
- `category` (string): Primary category
- `htmlContent` (string, required): HTML body content (supports {{variables}})
- `isShared` (boolean): Share the template across the organization
- `name` (string, required): Template name
- `subject` (string, required): Email subject line (supports {{variables}})
- `textContent` (string): Plain-text body fallback
- `variables` (array): Explicit variable names (auto-extracted from content otherwise)

### `templates_update` (~88 tokens)

Update fields on an existing email template by ID.

Input parameters:

- `categories` (array)
- `category` (string)
- `htmlContent` (string)
- `id` (string, required): Template ID to update
- `isShared` (boolean)
- `name` (string)
- `subject` (string)
- `textContent` (string)
- `variables` (array)

### `templates_delete` (~30 tokens)

Permanently delete an email template by ID.

Input parameters:

- `id` (string, required): The database ID of the resource

### `analytics_members` (~30 tokens)

Fetch organization-wide member performance metrics.

Input parameters:

- `userId` (string): Optionally scope analytics to user ID

### `analytics_user` (~15 tokens)

Fetch active user metrics dashboard stats.

### `projects_list` (~28 tokens)

Retrieve a list of all active projects in the organization. Use this to find the correct projectId.

### `projects_create` (~115 tokens)

Create a new project context with target keywords, URLs, and descriptions.

Input parameters:

- `budget` (number): Marketing budget allocation
- `description` (string, required): A detailed description of the project/business
- `focusKeywords` (array): Main target SEO keywords
- `marketingGoals` (array): Main marketing objectives
- `name` (string, required): Name of the project
- `targetAudience` (array): Description of customer personas
- `url` (string, required): The root web URL of the project (e.g. https://mybusiness.com)

### `projects_get` (~46 tokens)

Get details of a specific project (including crawled metadata, target audience, and SEO/content metrics) to construct brand context.

Input parameters:

- `id` (string, required): The database ID of the resource

### `projects_update` (~95 tokens)

Update project settings, targets, or details.

Input parameters:

- `budget` (number)
- `description` (string)
- `focusKeywords` (array)
- `id` (string, required): The project ID to update
- `marketingGoals` (array)
- `name` (string)
- `priority` (string)
- `status` (string)
- `targetAudience` (array)
- `url` (string)

### `projects_delete` (~29 tokens)

Archive a project by its database ID.

Input parameters:

- `id` (string, required): The database ID of the resource

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp#diagnostics

## Score history

- 2026-11-05: 57
- 2026-11-04: 57
- 2026-11-03: 57
- 2026-11-02: 42

## Common questions

### What is the OutreachBox MCP server?

OutreachBox is an MCP server listed in the public MCP registry as io.github.pulsereal/outreachbox. Cold email, prospect research, inbox triage, and content marketing in OutreachBox. This page covers its npm package (@outreachbox/mcp).

### Is the OutreachBox MCP server safe to use?

OutreachBox scores 57 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the OutreachBox MCP server expose?

OutreachBox exposes 56 tools: contacts_create, contacts_bulk, contacts_list, contacts_get, contacts_update, and 51 more. Their descriptions and schemas cost roughly 3,182 tokens of context every time the server is loaded.

### Is the OutreachBox MCP server still maintained?

OutreachBox is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the OutreachBox MCP server under?

OutreachBox declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the OutreachBox MCP server?

VerifyMCP ran 15 checks on OutreachBox, covering Malware scan, Known CVEs, Install scripts, Dependency health and 11 more. One item could not be completed, a gap on our side rather than a finding about OutreachBox: Stability. One category scores 0 for that reason, because we only credit what we can confirm. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- npm package: https://www.npmjs.com/package/@outreachbox/mcp
- Socket report: https://socket.dev/npm/package/@outreachbox/mcp
- Website: https://outreachbox.com/
- Changelog RSS feed: https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp.json
- HTML version of this page: https://verifymcp.io/servers/pulsereal-outreachbox/outreachbox-mcp