MCP

The MCP server exposes the same actions as the dashboard as tools, so an AI assistant can write, schedule and report on campaigns without a custom integration. It speaks Streamable HTTP and uses your StalkMail account.

Draft documentation. The MCP server ships with the beta and tool names may change before then.

Endpoint

https://app.stalkmail.com/mcp

Connect an assistant

Clients that support OAuth sign-in (ChatGPT, Claude, Grok) connect with your StalkMail account and inherit your permissions. Clients without OAuth use an API key.

With OAuth

Add the MCP endpoint in the connector settings of your assistant.
Approve the sign-in in the browser window that opens.
Pick the account or newsletter you want it to work with.

With an API key

For Claude Code, Cursor, Codex and other local clients, add the server with your key in an environment variable.

{
  "mcpServers": {
    "stalkmail": {
      "type": "http",
      "url": "https://app.stalkmail.com/mcp",
      "headers": {
        "Authorization": "Bearer ${STALKMAIL_API_KEY}"
      }
    }
  }
}

Tools

Tool	Does
list_campaigns	List campaigns with status and schedule.
create_campaign	Create a draft from a subject and body.
schedule_campaign	Schedule a draft for a date and time.
send_campaign	Send a campaign now. Requires confirmation.
get_campaign_report	Delivery and engagement for one campaign.
list_contacts	Search contacts and read their status.
import_contacts	Import a CSV from a local file or URL.
list_domains	List sending domains and their verification state.

Confirmation before sending

Tools that change something are marked as such. send_campaign is marked destructive and irreversible: a well-behaved client asks the person before calling it, and the server rejects a send that arrives without a confirmation token. Scheduling is reversible until the send starts, so it does not require the same confirmation.

Turning agent actions on or off

Settings → Notifications has an Allow MCP actions toggle. When it is off, the API rejects requests tagged with X-StalkMail-Client: mcp while ordinary REST API keys keep working. Use it to pause an assistant without revoking its key. The same page controls the daily or weekly account summary email.

What an agent cannot do

Read the data of another account. Tools are scoped to yours.
Change billing or delete the account.
Send past the remaining allowance of your plan.
Bypass the pre-send checks or the suppression list.

Authentication API reference