MCP.Market

Mailpal MCP server

by michaelyousrie·io.github.michaelyousrie/mailpal·v0.1.1
No reviews yet

List, inspect, and run saved HTTP requests from MailPal collections; write tools on Pro

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

0 stars53 downloads/wk

Reviews

Write one

Nobody has reviewed Mailpal yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Mailpal tools (16, 5 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • bashwrite action

    Run a bash command in a persistent shell. State (cwd, env vars) persists across calls.

  • create_collectionwrite action

    Create a new empty collection in the workspace. Pro.

  • create_or_update_requestwrite action

    Create a request in a collection, or update it when requestId is given. Pro.

  • edit

    Replace old_string with new_string in a file. old_string must be unique unless replace_all.

  • generate_tests

    Add baseline assertions to a request (expected status from its latest run, else 200). Pro.

  • get_history_recent

    List recent request executions (newest first).

  • get_request

    Get the full definition of one saved request by id.

  • glob

    Match files under the workdir against a glob pattern. Results are mtime-sorted, newest first.

  • grep

    Search file contents for a regex. Uses ripgrep if available, otherwise a built-in walker.

  • list_collections

    List all API collections in the workspace with their folders and request names/ids.

  • list_variables

    List each collection's variables. Secret variables appear as {"secret": "NAME"} references; secret values are never returned.

  • read

    Read a UTF-8 text file relative to the workdir.

  • run_requestwrite action

    Execute a saved request. {{VAR}} placeholders resolve from the owning collection's variables. Returns status, headers, timing and body (truncated to 50KB). Secret values are resolved internally and never returned.

  • scaffold_test_suite

    Add a baseline status assertion to every request in a collection that has no tests yet. Pro.

  • set_collection_variable

    Set a NON-SECRET variable on a collection. Secret-referenced variables cannot be written through MCP. Pro.

  • writewrite action

    Write a UTF-8 text file relative to the workdir, creating parent directories as needed.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

1 medium
  • Code scan2 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 80 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/index.js: …ourceCode, sch); const validate = new Function(`${names_1.default.self}`, `${names_1.de…
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Mailpal compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 48,255 servers
Tools
16
the typical server has 7
Tools that change things
31%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
53
more than 44% of 12,191 servers with a package

What its tools let an agent do: 8 read · 4 create · 3 change · 1 run or deploy

Install Mailpal in Claude Code, Cursor or VS Code

Runs npx -y mailpal-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mailpal -- npx -y mailpal-mcp
Add to Cursor

What the publisher says

From the Mailpal repository's README, as published. We do not edit it. Read it on GitHub

MailPal

The honest API client for VS Code. Collections, variables, unlimited history, an MCP server for AI agents, and a free tier that stays free.

Install from the VS Code Marketplace

Why MailPal exists

The most popular REST client for VS Code has 7.4 million installs and a 2.5 star rating, because its free tier slowly moved everything, including your own request history, behind a paywall.

MailPal makes the opposite promise, and treats it like a contract:

  • The free tier is fully usable for a single user, forever.
  • Unlimited requests, unlimited collections, unlimited local history.
  • Pro adds new value only. It never gates access to your own data.
  • If a license lapses, Pro features stop. Everything else keeps working.

Highlights

  • Full request builder with a Postman-style editor: auto-growing key/value rows, header autocomplete, color-coded JSON editing with format and validation
  • Auto headers surfaced, so you see and control everything sent on the wire
  • Syntax-highlighted responses (JSON and XML), HTML raw/preview toggle, resizable request/response split
  • Per-collection variables with {{VAR}} placeholders; secret values live in your OS keychain, never in files
  • Unlimited local history with one-click re-send
  • Import Postman v2.1, Thunder Client, OpenAPI 3.x, and curl; export Postman and curl
  • Assertions per request with pass/fail on every send
  • A bundled MCP server, registered with VS Code agent mode automatically, so AI agents can list, run, and (with Pro) create requests

For AI agents (MCP)

The MCP server also ships standalone on npm as mailpal-mcp:

claude mcp add mailpal -- npx -y mailpal-mcp

Works with any MCP client (Cursor, Claude Desktop, and friends) via npx -y mailpal-mcp.

Support

Questions, bugs, and feature requests: open an issue.

This repository hosts the project's public home, issues, and media. The extension itself ships through the VS Code Marketplace.

Nothing above is checked by us. What we check is on the safety report.

Mailpal: common questions

Is Mailpal MCP server safe?
Mostly: it is graded B (80/100). Read the Mailpal safety report
How do I install Mailpal?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mailpal need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is Mailpal maintained?
The last commit was 81 days ago (2026-08-15). The latest release is v0.1.1.
How does Mailpal compare with other MCP servers?
safety score 80/100 (higher than 60% of 48,255 servers); tools 16 (the typical server has 7); tools that change things 31% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.