Back to Browse

Resend Email MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Complete Resend email MCP: full API coverage + debug layer (deliverability, DNS, bounces).

About

Complete Resend email MCP: full API coverage + debug layer (deliverability, DNS, bounces).

Security Report

4.8
Use Caution4.8High Risk

This is a well-engineered MCP server for the Resend email API with strong security fundamentals. Authentication is properly required via API keys stored in environment variables, not hardcoded. The server implements thoughtful security controls including path traversal prevention for file attachments, URL validation to prevent credential exfiltration, and a readonly mode for safe account exploration. Code quality is high with proper error handling and input validation. Permissions align well with the stated purpose (Resend API integration). Minor observations: the MAX_BODY_CHARS limit could be slightly lower, and verbose error hints (while helpful) theoretically reveal some API structure, but these are low-severity and do not materially impact security. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

file_stat

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Resend API key (https://resend.com/api-keys)Required

Environment variable: RESEND_API_KEY

Default sender address (verified domain), e.g. 'Acme <hello@acme.com>'Optional

Environment variable: RESEND_FROM

Default Reply-To addressOptional

Environment variable: RESEND_REPLY_TO

Set to 'true' to block every mutating toolOptional

Environment variable: RESEND_READONLY

Directory that local-file attachments are restricted to (disk reads disabled unless set)Optional

Environment variable: RESEND_ATTACHMENTS_DIR

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-helbertparanhos-resend-email-mcp": {
      "env": {
        "RESEND_FROM": "your-resend-from-here",
        "RESEND_API_KEY": "your-resend-api-key-here",
        "RESEND_READONLY": "your-resend-readonly-here",
        "RESEND_REPLY_TO": "your-resend-reply-to-here",
        "RESEND_ATTACHMENTS_DIR": "your-resend-attachments-dir-here"
      },
      "args": [
        "-y",
        "resend-email-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

resend-email-mcp

The most complete Resend MCP server — full coverage of the Resend API (emails, domains, contacts, broadcasts, templates, segments, topics, webhooks, logs) plus a unique debug/diagnostics layer no other Resend MCP offers: deliverability analysis, DNS troubleshooting, email lifecycle inspection, bounce explanation, and account auditing.

Works with Claude Code, Cursor, Claude Desktop, and any other MCP client.

npm version License: MIT GitHub Stars GitHub Forks GitHub Issues Glama Quality

TypeScript Node.js MCP Claude Code Cursor Claude Desktop

Instagram YouTube LinkedIn Buy Me A Coffee Strat Academy


Why this MCP

resend-email-mcpOfficial resend-mcpMinimal MCPs
Send / batch / schedulepartial
Domains, contacts, broadcasts, templates, segments, topics, webhooks
API request logs tools
Debug layer (diagnose, analyze, inspect, explain, audit)7 tools
Readonly safety mode
Raw escape hatch for new endpoints
Idempotency-key supportpartial

75 tools + 2 resources.


Quick start

1. Get a Resend API key

Create one at https://resend.com/api-keys.

2. Add to your MCP client

Claude Code (CLI)
claude mcp add resend -e RESEND_API_KEY=re_xxxxxxxx -- npx -y resend-email-mcp
Cursor / Claude Desktop / generic (mcp.json / claude_desktop_config.json)
{
  "mcpServers": {
    "resend": {
      "command": "npx",
      "args": ["-y", "resend-email-mcp"],
      "env": {
        "RESEND_API_KEY": "re_xxxxxxxx",
        "RESEND_FROM": "Acme <hello@acme.com>"
      }
    }
  }
}

Config file locations:

  • Claude Desktop (Windows): %APPDATA%\Claude\claude_desktop_config.json
  • Claude Desktop (macOS): ~/Library/Application Support/Claude/claude_desktop_config.json
  • Cursor: ~/.cursor/mcp.json (or per-project .cursor/mcp.json)

Restart the client and ask: "Send a test email to delivered@resend.dev" or "Audit my Resend account."


Configuration

Env varRequiredDescription
RESEND_API_KEYYour Resend API key
RESEND_FROMDefault sender for send_email when from is omitted (must be a verified domain)
RESEND_REPLY_TODefault Reply-To address
RESEND_READONLYtrue blocks every mutating tool (send/create/update/delete). Safe exploration of production
RESEND_ATTACHMENTS_DIRDirectory that send_email's localPath attachments are restricted to. Unset = disk reads disabled (safe default; path traversal is blocked)
RESEND_BASE_URLOverride API base URL (default https://api.resend.com). Must be https (http only for localhost)
RESEND_MAX_RETRIESRetries on 429/5xx (default 3)

Tools

Emails

send_email · send_batch_emails · get_email · list_emails · update_email · cancel_email · preview_email

send_email accepts attachments by base64 content, public path (URL), or localPath (a file on disk, read and base64-encoded automatically — only enabled when RESEND_ATTACHMENTS_DIR is set, and restricted to that directory). preview_email dry-runs a message — resolving the final sender, sizing attachments, and surfacing warnings — without sending.

Attachments (sent & received)

list_email_attachments · get_email_attachment · list_received_emails · get_received_email · list_received_attachments · get_received_attachment

Domains

create_domain · get_domain · list_domains · update_domain · delete_domain · verify_domain

API keys

create_api_key · list_api_keys · delete_api_key

Broadcasts

create_broadcast · get_broadcast · list_broadcasts · update_broadcast · send_broadcast · delete_broadcast

Contacts

create_contact · get_contact · list_contacts · update_contact · delete_contact · get_contact_topics · update_contact_topics · list_contact_segments · add_contact_to_segment · remove_contact_from_segment

Contact properties

create_contact_property · get_contact_property · list_contact_properties · update_contact_property · delete_contact_property

Segments

create_segment · get_segment · list_segments · delete_segment · list_segment_contacts

Templates

create_template · get_template · list_templates · update_template · delete_template · publish_template · duplicate_template

Topics

create_topic · get_topic · list_topics · update_topic · delete_topic

Webhooks

create_webhook · get_webhook · list_webhooks · update_webhook · delete_webhook

Logs

list_logs · get_log

🔍 Debug & diagnostics (the differentiator)

ToolWhat it does
diagnose_domainInspects every DNS record (SPF/DKIM/DMARC) and reports what's missing + how to fix it
analyze_deliverabilityAggregates recent sends into delivery/bounce/complaint rates with a health verdict
inspect_emailRenders one email's full lifecycle timeline and flags problems
explain_bounceClassifies a bounce (hard/soft/block) and recommends the action
audit_accountOne-shot health check of domains, keys, and deliverability
search_logsSmart filtering of API logs by status/path/recipient to find failures
test_sendSafely simulates delivered/bounced/complained via Resend sandbox addresses

Escape hatch

resend_raw — call any Resend endpoint not yet wrapped in a dedicated tool.

Resources

Beyond tools, the server exposes two read-only MCP resources so a client can pull account context without spending a tool call:

URIContent
resend://accountDomains + API keys snapshot
resend://domainsAll sending domains with verification status

Every tool is annotated with MCP hints (readOnlyHint, destructiveHint, idempotentHint) so clients can show which operations are safe and which need confirmation.


Example prompts

  • "Diagnose why acme.com isn't verified."diagnose_domain
  • "How healthy is my email sending this week?"analyze_deliverability
  • "What happened to email re_abc123?"inspect_email
  • "Why did that email bounce and what should I do?"explain_bounce
  • "Something's wrong with my Resend setup — check everything."audit_account
  • "Send our launch newsletter to the 'beta' segment."create_broadcast + send_broadcast

Testing safely

Use Resend's sandbox addresses (no reputation impact):

  • delivered@resend.dev — simulates delivery
  • bounced@resend.dev — simulates a hard bounce
  • complained@resend.dev — simulates a spam complaint

Or just run test_send and then inspect_email on the returned ID.

Enable RESEND_READONLY=true to explore a production account without any risk of sending or deleting.


Troubleshooting

This MCP is built to debug itself — when something fails, reach for the diagnostic tools instead of guessing.

Symptom / errorLikely causeWhat to run
validation_error: from domain is not verifiedYour from/RESEND_FROM domain isn't verifiedlist_domainsdiagnose_domain (shows missing DNS records + fixes) → verify_domain
Emails send but never arriveDeliverability / reputation issueanalyze_deliverability then inspect_email on a sample ID
missing_api_key / invalid_api_key (HTTP 401)RESEND_API_KEY unset or wrongCheck the .env; create a key at resend.com/api-keys
restricted_api_key / not_authorized (403)Key scoped to sending-only or one domainUse a full_access key (list_api_keys to inspect)
rate_limit_exceeded (429)Too many requestsThe client auto-retries with backoff; reduce volume
daily_quota_exceededPlan send limit reachedUpgrade plan or wait for reset
A specific email bouncedInvalid/blocking recipientexplain_bounce (classifies hard/soft/block + action)
"Is anything wrong with my setup?"audit_account (one-shot health check)
Request fails for unknown reasonsearch_logs with only_errors: true

Every error returned by this server includes the HTTP status, Resend's error name, and an actionable Hint line.


Local development

git clone https://github.com/helbertparanhos/resend-email-mcp.git
cd resend-email-mcp
npm install
npm run build
cp .env.example .env   # add your RESEND_API_KEY
npm run inspector      # opens the MCP Inspector against the built server

License

MIT © Helbert Paranhos / Strat Academy

Built with the Model Context Protocol. Not affiliated with Resend.

Reviews

No reviews yet

Be the first to review this server!