ahasend-mcp
A Go module with MCP tools for AhaSend. With these tools, an AI agent can send email, find out why an email failed, and manage domains, templates, contacts, lists, campaigns, webhooks, routes, suppressions, SMTP credentials and sub-accounts.
Each tool calls the AhaSend v2 API through ahasend-go. The API key's scopes decide what the agent can do.
The module builds a server with the official Go MCP SDK. Your program chooses how to serve it: stdio, HTTP, or any other SDK transport.
go get github.com/AhaSend/ahasend-mcp
Example
server, err := ahasendmcp.NewServer(
&mcp.Implementation{Name: "my-app", Version: "1.0.0"},
ahasendmcp.Options{
Client: api.NewAPIClient(api.WithAPIKey(apiKey)),
AccountID: accountID,
DashboardBaseURL: "https://dash.ahasend.com",
ConfirmationKey: key, // at least 32 random bytes
},
)
if err != nil {
return err
}
return server.Run(ctx, &mcp.StdioTransport{})
Options
| Field | What it does |
|---|---|
Client |
The ahasend-go client, with the API key. Required. |
AccountID |
The account the tools work on. Required. |
DashboardBaseURL |
The AhaSend dashboard URL, used in campaign links. Required. |
ConfirmationKey |
A secret of at least 32 bytes that signs campaign send questions. Required. |
Scopes |
The API key's scopes. Only tools the key can use are shown. nil shows every tool. |
Toolsets |
Show only these toolsets. nil shows all. |
ReadOnly |
Show only tools that change nothing. |
Stateless |
Set to true if you serve over stateless HTTP. |
MaxRecipientsPerSend |
The most recipients for one send. Default 50. |
ReadInbound |
Let the message tools return email the account received. Off by default. |
Blocked |
If set, every tool call returns this text as an error and does nothing. |
Recorder |
Gets one record per tool call: tool name, success, error kind and time taken. Never the inputs or results. |
If you serve many users, build a new server for each request with that
user's key and scopes. This is cheap. Use the same ConfirmationKey on
every instance.
Catalogue() lists every tool with the scopes it needs.
OfferedScopes() lists every scope the tools use, for a page where a user
picks scopes.
Tools
| Toolset | Tools |
|---|---|
sending |
send_email, send_conversation_email, send_template_email, cancel_scheduled_email |
diagnostics |
list_messages, get_message, diagnose_message, get_deliverability_stats, get_bounce_stats, get_delivery_time_stats |
domains |
list_domains, get_domain, add_domain, check_domain_dns, update_domain, delete_domain |
templates |
list_templates, get_template, create_template, update_template, delete_template, get_template_draft, discard_template_draft, publish_template, list_template_versions, get_template_version, restore_template_version, list_campaign_templates, get_campaign_template, create_campaign_template, update_campaign_template, delete_campaign_template |
audience |
list_contacts, get_contact, create_contact, upsert_contacts, update_contact, delete_contact, list_contact_lists, list_lists, get_list, create_list, update_list, delete_list, list_list_contacts, add_contacts_to_list, upsert_list_contact, remove_contact_from_list |
campaigns |
list_campaigns, get_campaign, create_campaign, update_campaign, delete_campaign, duplicate_campaign, send_campaign_test, send_campaign, schedule_campaign, unschedule_campaign, get_campaign_stats, list_campaign_recipients |
management |
get_account, list_webhooks, get_webhook, create_webhook, update_webhook, delete_webhook, list_routes, get_route, create_route, update_route, delete_route, list_suppressions, add_suppression, remove_suppression, list_smtp_credentials, get_smtp_credential, delete_smtp_credential, list_sub_accounts, get_sub_account, create_sub_account, update_sub_account, get_sub_account_usage |
Each tool needs the scopes its API endpoint needs. send_campaign and
schedule_campaign also need campaigns:read and lists:read. The
campaign template tools also need campaigns:read.
List tools return 20 items by default and at most 100. Pass the returned cursor to get the next page.
There are no tools to create API keys or SMTP credentials, change account settings, billing or team members, remove all suppressions, or delete or suspend sub-accounts.
Safety rules
Campaign sends need a person's yes. send_campaign and
schedule_campaign show the user a form with the send time, the number of
contacts, the campaign name, subject, sender and lists. They send only if
the user answers yes. If the campaign changes after the question, the tool
asks again. If the client cannot show a form, the tool sends nothing and
returns a link to the campaign in the dashboard.
One-off sends have a recipient limit. A single send to more than
MaxRecipientsPerSend recipients (default 50) is refused. Use a campaign
for bulk email.
Received email is hidden by default. Anyone can send email to an
account's inbound addresses, and that email can contain text that tries to
trick the agent. Unless ReadInbound is on, the message tools do not return
received email. When it is on, received messages are marked
untrusted: true.
Errors
When the API refuses a call, the tool returns an error with the API's message and what to do next.
Trying it locally
cmd/ahasend-mcp-dev serves every tool over stdio with your own API key.
It is for testing only.
go build -o ahasend-mcp-dev ./cmd/ahasend-mcp-dev
claude mcp add ahasend \
-e AHASEND_API_KEY=... -e AHASEND_ACCOUNT_ID=... \
-- ./ahasend-mcp-dev
Set AHASEND_BASE_URL to use an API other than the default.
License
MIT