Mektup

io.github.WeeCi由 GitHub 帳號 WeeCi 發布v0.2.6更新於 Oct 24, 2026

Fully-managed email as MCP tools - register domains, real mailboxes, send and receive mail.

已驗證Streamable HTTP可網頁執行效率與工作流溝通與協作

概覽

AI 產生的概覽

Mektup 把託管的多網域郵件平台包裝成 MCP 工具,讓助理註冊網域、建立信箱並收發真實郵件。

可以做什麼
  • 管理網域:註冊網域、取得 DNS 記錄、驗證網域、列出或刪除網域
  • 管理信箱:建立、列出、重設密碼、刪除信箱,並設定 Webhook、轉寄、身分與假期自動回覆
  • 寄送郵件:寄出含純文字、HTML 與附件的真實郵件,可直接消耗草稿
  • 讀取郵件:列出郵件與討論串、取得完整郵件、下載附件、標記、移動、移至垃圾桶或刪除
  • 整理:管理草稿、資料夾與帳戶層級聯絡人
  • 查看帳戶:身分、用量與計費額度、API 金鑰、未讀數量與投遞統計
適用情境
適合讓助理在自己的工作階段中操作真實郵件:建置網域與信箱、寄送郵件,或讀取與分類收到的郵件,而不必手寫 API 呼叫或把金鑰貼進產生的程式碼。
執行需求
可使用 mcp.usemektup.com 的遠端 Streamable HTTP 端點,或在本地複製儲存庫後以 Node.js 與 npm install 執行 stdio 程序。必須驗證:以 Mektup 帳戶進行 OAuth 登入,或以 Authorization Bearer 標頭送出 API 金鑰(本地執行時為 MEKTUP_API_KEY)。需要 Mektup 帳戶;使用自有網域時還需 DNS 管理權限。
安裝前請注意
此伺服器會執行真實且無法復原的操作:寄送郵件、建立與撤銷 API 金鑰、刪除網域、信箱、郵件與聯絡人,以及永久刪除已在垃圾桶中的郵件。新建的 API 金鑰與信箱密碼只會顯示一次。郵件的 HTML 內容由外部控制,不應直接渲染。計費額度不足會導致 402 錯誤,大量操作前應先查看用量。Authorization 權杖會被轉送至 Mektup API。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mektup,將其新增到工作區。
  2. 連接 所需的 憑證。它們會被私密儲存,絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.WeeCi%2Fmektup-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。

{
  "mcpServers": {
    "mektup": {
      "type": "http",
      "url": "https://mcp.usemektup.com/mcp"
    }
  }
}

README

Mektup MCP Server

Mektup is a fully-managed, multi-domain email platform - Mektup hosts all the mail infrastructure, so there's nothing to self-host; you just sign up and use it. This MCP server lets an AI coding agent (Claude Code, Claude Desktop, Cursor, Lovable, Replit, Base44, or any MCP-compatible client) manage real email for a domain — register it, add the DNS records, create mailboxes, send and read mail, manage drafts/contacts/folders/forwarding/vacation replies — as native tool calls inside its own session, instead of the human hand-writing curl commands or pasting an API key into generated code.

Every tool call is a straight HTTP call to the real Mektup REST API. There's no separate logic to learn — if you understand the API, you understand the MCP server. Full coverage: every REST endpoint has a matching tool, verified with real read and write round-trips against the live production API (create → update → list → delete, confirmed at each step).

Two ways to run it, same tool set either way (lib/build-server.js defines the tools once, shared by both):

  • Remote (Streamable HTTP) — a server we host at https://mcp.usemektup.com/mcp. Point any client that takes a "custom MCP server" URL at it directly, no install. This is what Lovable/Cursor/Replit/Base44-style platforms want.
  • Local (stdio) — run server.js yourself with your key in an env var. For MCP clients that only support launching a local process (Claude Desktop config, etc.).

Remote server (recommended for platform integrations)

Endpoint: https://mcp.usemektup.com/mcp (Streamable HTTP — supports both the direct-JSON-response and SSE-streaming response modes of the spec).

Stateless: no session is kept between requests — every tool call is already a one-shot passthrough to the REST API, so there's no session state worth keeping.

Tenant isolation: identical to the REST API, because it is the REST API underneath — the server holds no account-specific credential itself, it just forwards whichever token the caller sent (API key or OAuth access token, see below) straight through to api.usemektup.com, which is the only place that actually verifies it. A token only ever sees its own account's data.

Two auth modes, same endpoint, both arrive as the same Authorization: Bearer <token> header:

OAuth (recommended for platform integrations)

For a platform with real end users (Lovable, Cursor, Replit, Base44, ...) — the user clicks "connect," signs in with their existing Mektup account, approves, done. No token copy-paste, no dashboard visit.

Clerk (clerk.usemektup.com) is the OAuth 2.1 authorization server — this MCP server is only ever a resource server. Discovery is automatic for any spec-compliant OAuth-capable MCP client: it only needs the endpoint URL above and finds the rest itself via https://mcp.usemektup.com/.well-known/oauth-protected-resource/mcp (RFC 9728), which points at Clerk's own https://clerk.usemektup.com/.well-known/oauth-authorization-server (RFC 8414). From there the client registers itself via Dynamic Client Registration (no manual setup needed on your end) and runs a standard Authorization Code + PKCE flow, ending with a JWT access token used exactly like an API key.

Lovable: Connectors → All → Custom (MCP card) → Server Name Mektup, Server URL https://mcp.usemektup.com/mcp, Auth → OAuth (default when a server supports it) → Add & authorize.

API key (simplest for a single account, scripts, or a client without OAuth support)

Authorization: Bearer mek_live_... — create one at app.usemektup.com → API keys.

Adding it to a client that supports custom MCP connectors is normally 3 fields:

FieldValue
Server URLhttps://mcp.usemektup.com/mcp
Auth typeBearer token / API key
Tokenyour mek_live_... key

Cursor / Claude Desktop / any client that reads raw MCP JSON config:

json
{  "mcpServers": {    "mektup": {      "url": "https://mcp.usemektup.com/mcp",      "headers": { "Authorization": "Bearer mek_live_..." }    }  }}

Replit / Base44 / other "connect a tool" flows: same three fields as the table above — server URL, Bearer auth, key.


Local (stdio) setup

Use this when a client can only launch a local process, not call a remote URL.

1. Get an API key. Sign in to the dashboard at app.usemektup.com, open API keys, and create one. Keys look like mek_live_... and are shown exactly once - copy it immediately.

2. Install dependencies:

bash
git clone https://github.com/WeeCi/mektup-mcp.gitcd mektup-mcpnpm install

3. Configure your MCP client to run server.js with the key as an environment variable. For Claude Desktop / Claude Code, add to your MCP config (e.g. claude_desktop_config.json):

json
{  "mcpServers": {    "mektup": {      "command": "node",      "args": ["/absolute/path/to/mektup-mcp/server.js"],      "env": {        "MEKTUP_API_KEY": "mek_live_..."      }    }  }}

MEKTUP_API_BASE_URL is optional and defaults to https://api.usemektup.com — no need to set it under normal use.

The server refuses to start without MEKTUP_API_KEY set.


How tools respond

Every tool returns its result as JSON text on success. On failure, it returns isError: true with Error: <message> — the message is the same one the underlying REST endpoint returned (see the API reference for exact error conditions, including billing-limit 402s, per endpoint).


Tools

Account

ToolInputDescription
get_me—Get the authenticated account identity. Useful as an auth health check.
get_usage—Current billing tier, its limits, and real usage against them. Check before a bulk operation.

API keys

ToolInputDescription
list_api_keys—List keys on this account (prefix and status only).
create_api_key—Create a new key. The full key is returned exactly once - surface it to the user immediately so they can save it.
revoke_api_keyidRevoke a key immediately. Cannot be undone - confirm with the user first, especially if it might be the key this very session is using.

Domains

ToolInputDescription
create_domaindomainRegister a domain, get back the exact DNS records (MX/SPF/DMARC/DKIM) and a setup recommendation. Never touches DNS itself.
list_domains—List every domain on this account.
get_domain_recordsdomainRe-fetch a registered domain's DNS records any time after creation.
verify_domaindomainActively re-check live DNS and flip verified once it matches. Not automatic.
delete_domaindomainDelete a domain and everything under it. Destructive — confirm with the user first.

Mailboxes

ToolInputDescription
create_mailboxdomain, localPart, password?Create a mailbox with real IMAP/SMTP-AUTH credentials, usable in any mail client.
list_mailboxesdomainList mailboxes on a domain.
reset_mailbox_passworddomain, localPart, password?Reset a mailbox's login password. Shown once.
delete_mailboxdomain, localPartDelete a mailbox. Confirm with the user first.

Webhooks

ToolInputDescription
get_mailbox_webhookdomain, localPartCheck a mailbox's configured webhook URL (never returns the signing secret).
set_mailbox_webhookdomain, localPart, url, regenerateSecret?Set/update the URL that fires (HMAC-signed) on every new inbound message - how an agent finds out about new mail without polling list_messages. Returns the signing secret once, on first setup or rotation.
delete_mailbox_webhookdomain, localPartRemove a mailbox's webhook.

Forwarding

ToolInputDescription
list_forwardsdomain, localPartList addresses that get a copy of incoming mail.
add_forwarddomain, localPart, forwardToAdd a forwarding address.
remove_forwarddomain, localPart, idRemove a forwarding address.

Identity

ToolInputDescription
get_identitydomain, localPartGet display name and signature.
set_identitydomain, localPart, displayName?, signatureText?, signatureHtml?Set display name/signature, applied automatically to outgoing mail.

Vacation / auto-reply

ToolInputDescription
get_vacationdomain, localPartGet vacation auto-reply settings.
set_vacationdomain, localPart, enabled, subject?, message?Enable/configure auto-reply. message required when enabling.

Folders

ToolInputDescription
list_foldersdomain, localPartList custom folders.
create_folderdomain, localPart, nameCreate a folder.
delete_folderdomain, localPart, idDelete a folder (mail in it falls back to Inbox/Sent).

Contacts

Account-level, not per-mailbox.

ToolInputDescription
list_contacts—List contacts.
create_contactname?, emailAdd a contact.
update_contactid, name?, email?Partially update — only send fields to change.
delete_contactidDelete a contact.

Drafts

ToolInputDescription
list_draftsdomain, localPartList drafts (metadata only).
get_draftdomain, localPart, idGet a draft including its body.
create_draftdomain, localPart, to?, subject?, text?, html?Create a draft.
update_draftdomain, localPart, id, to?, subject?, text?, html?Partial update (autosave-friendly).
delete_draftdomain, localPart, idDelete a draft.

Sending

ToolInputDescription
send_emailfrom, to, subject, text?, html?, attachments?, draftId?Send real mail. from must be a mailbox on this account, or any address on a domain this account has verified. Attachments are {filename, contentType?, contentBase64}, max 10MB decoded each. Pass draftId to delete a draft on successful send.

Example:

send_email({ from: "[email protected]", to: "[email protected]", subject: "It works", text: "Real mail, sent through Mektup." })→ { "messageId": "<[email protected]>", "envelope": { "from": "[email protected]", "to": ["[email protected]"] } }

Messages & threads

ToolInputDescription
list_messagesmailbox, limit?, direction?, trash?, folder?, q?List messages (one row per thread). Pass direction to split Inbox/Sent — omitting it merges both.
get_delivery_statsmailbox, days?Aggregate sent/deferred/bounced/unknown counts for a mailbox's outbound mail, sourced from Mektup's own Postfix delivery log — not a tracking pixel.
get_threadthreadKey, mailbox, direction?, trash?, folder?Every message in one thread, oldest first.
get_messageidFull message content. Marks it read as a side effect. html is attacker-controlled — never render it directly.
update_messageid, read?, restore?, flagged?, folderId?Mark read/unread, restore from trash, flag, or move to a folder — any combination in one call.
delete_messageidTwo-stage delete: first call trashes, second call on an already-trashed message permanently deletes it. Confirm before a permanent delete.
download_attachmentid, indexDownload one attachment, base64-encoded. Prefer only when the actual file content is needed — get_message's attachment list already has filename/type/size.

Account-wide

ToolInputDescription
get_unread_counts—Unread Inbox count for every domain/mailbox at once.

See also

License

MIT

來源:README.md,提交 eff0dd8

工具

0
該伺服器需要登入,因此 SourceWeft 無法在沒有帳號的情況下讀取其工具,也未收錄。已連接帳號所能看到的內容可能因帳號及其權限而異。

版本歷史

1
  1. v0.2.6最新Sep 16, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分