Claude security directory

Mailtrap

Published by Mailtrap.io

High risk

[Mailtrap.io](https://mailtrap.io) is a comprehensive email platform that helps developers and teams test, debug, and deliver emails safely. It provides both email testing (sandbox) and email delivery services. This MCP (Model Context Protocol) server provides AI assistants with the ability to: - Send emails via Mailtrap's delivery API - Test emails using Mailtrap's sandbox environment - Manage email templates (create, update, delete, list).

Security assessment

Plutonium assessed this desktop extension for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can send messages as you: This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.

Available capabilities

This add-on exposes 23 tools or capabilities.

  • send-email
  • create-template
  • list-templates
  • update-template
  • delete-template
  • send-sandbox-email
  • get-sandbox-messages
  • show-sandbox-email-message
  • list-sandbox-projects
  • create-sandbox-project
  • delete-sandbox-project
  • create-sandbox-inbox
  • get-sandbox-inbox
  • update-sandbox-inbox
  • delete-sandbox-inbox
  • clean-sandbox-inbox
  • get-sending-stats
  • list-email-logs
  • get-email-log-message
  • list-sending-domains
  • get-sending-domain
  • create-sending-domain
  • delete-sending-domain

The interactive security report will load automatically.