Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.
Connect Runs on your machine
claude mcp add sendgrid-mcp-secure -e SENDGRID_API_KEY=<SENDGRID_API_KEY> -e SENDGRID_MCP_MODE=<SENDGRID_MCP_MODE> -e SENDGRID_MCP_RECIPIENT_ALLOWLIST=<SENDGRID_MCP_RECIPIENT_ALLOWLIST> -e SENDGRID_MCP_WRITES_PER_HOUR=<SENDGRID_MCP_WRITES_PER_HOUR> -e SENDGRID_MCP_MAX_RECIPIENTS=<SENDGRID_MCP_MAX_RECIPIENTS> -e SENDGRID_MCP_AUDIT_LOG=<SENDGRID_MCP_AUDIT_LOG> -e SENDGRID_MCP_ALLOW_BCC=<SENDGRID_MCP_ALLOW_BCC> -- uvx sendgrid-mcp-secure==0.1.0{
"mcpServers": {
"sendgrid-mcp-secure": {
"command": "uvx",
"args": [
"sendgrid-mcp-secure==0.1.0"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>",
"SENDGRID_MCP_MODE": "<SENDGRID_MCP_MODE>",
"SENDGRID_MCP_RECIPIENT_ALLOWLIST": "<SENDGRID_MCP_RECIPIENT_ALLOWLIST>",
"SENDGRID_MCP_WRITES_PER_HOUR": "<SENDGRID_MCP_WRITES_PER_HOUR>",
"SENDGRID_MCP_MAX_RECIPIENTS": "<SENDGRID_MCP_MAX_RECIPIENTS>",
"SENDGRID_MCP_AUDIT_LOG": "<SENDGRID_MCP_AUDIT_LOG>",
"SENDGRID_MCP_ALLOW_BCC": "<SENDGRID_MCP_ALLOW_BCC>"
}
}
}
}{
"mcpServers": {
"sendgrid-mcp-secure": {
"command": "uvx",
"args": [
"sendgrid-mcp-secure==0.1.0"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>",
"SENDGRID_MCP_MODE": "<SENDGRID_MCP_MODE>",
"SENDGRID_MCP_RECIPIENT_ALLOWLIST": "<SENDGRID_MCP_RECIPIENT_ALLOWLIST>",
"SENDGRID_MCP_WRITES_PER_HOUR": "<SENDGRID_MCP_WRITES_PER_HOUR>",
"SENDGRID_MCP_MAX_RECIPIENTS": "<SENDGRID_MCP_MAX_RECIPIENTS>",
"SENDGRID_MCP_AUDIT_LOG": "<SENDGRID_MCP_AUDIT_LOG>",
"SENDGRID_MCP_ALLOW_BCC": "<SENDGRID_MCP_ALLOW_BCC>"
}
}
}
}{
"servers": {
"sendgrid-mcp-secure": {
"type": "stdio",
"command": "uvx",
"args": [
"sendgrid-mcp-secure==0.1.0"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>",
"SENDGRID_MCP_MODE": "<SENDGRID_MCP_MODE>",
"SENDGRID_MCP_RECIPIENT_ALLOWLIST": "<SENDGRID_MCP_RECIPIENT_ALLOWLIST>",
"SENDGRID_MCP_WRITES_PER_HOUR": "<SENDGRID_MCP_WRITES_PER_HOUR>",
"SENDGRID_MCP_MAX_RECIPIENTS": "<SENDGRID_MCP_MAX_RECIPIENTS>",
"SENDGRID_MCP_AUDIT_LOG": "<SENDGRID_MCP_AUDIT_LOG>",
"SENDGRID_MCP_ALLOW_BCC": "<SENDGRID_MCP_ALLOW_BCC>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SENDGRID_API_KEYRequired, secret | SendGrid API key (use a restricted key with Mail Send scope only) |
SENDGRID_MCP_MODEOptional | dry-run (default) or live |
SENDGRID_MCP_RECIPIENT_ALLOWLISTOptional | Comma-separated recipient addresses/domains allowed to receive mail |
SENDGRID_MCP_WRITES_PER_HOUROptional | Hourly cap on write operations (sends) |
SENDGRID_MCP_MAX_RECIPIENTSOptional | Max recipients per send |
SENDGRID_MCP_AUDIT_LOGOptional | Path to the append-only audit log |
SENDGRID_MCP_ALLOW_BCCOptional | BCC stays disabled unless explicitly enabled |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 14 Aug 2026 |
| Last updated | 14 Aug 2026 |
| Registry name | io.github.Choppaaahh/sendgrid-mcp-secure |
More cloud and devops servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.