Connect the hosted server
Add https://api.sendpanda.email/mcp as a Streamable HTTP MCP server. OAuth-capable clients open SendPanda to choose a project and approve sending or project-management access. Connections expire after 30 days; revoke them in Settings → Connections. OAuth credentials cannot access other projects, mint permanent API keys, change account-wide safeguards or manage billing. Team permissions remain enforced.
For local stdio clients, use command npx, arguments ["-y", "@sendpanda/mcp"], and securely set SENDPANDA_API_KEY to a dedicated project key. Revoke that key in API keys to disconnect it. Never paste keys into prompts or URLs.
Tools cover transactional email and actual delivery status, domains and DNS, templates, webhooks, audiences and permission history, broadcasts and reports, and project teams. Sending keys expose sending/history/usage tools; management access adds project administration. Human approval is required before sending, scheduling, invitations or destructive changes. Marketing approval and recipient consent are still required. The prompts onboard_project and prepare_broadcast guide these workflows.
Use an account access token
For an agent that works across projects, create a token in Settings → Connections. Configure it through a secure environment variable:
SENDPANDA_TOKEN=sp_pat_your_token npx -y @sendpanda/mcp
The token acts as its member with their current permissions. Start with account_get to discover accessible accounts, projects and environment IDs. Project tools take an environment_id. Account tokens cannot manage billing, sign-in, access tokens or platform administration.
Design emails with an agent
Use email_design_starter to start a visual design, email_design_preview to inspect unsaved work, templates_preview to apply sample variables and campaigns_preview to inspect the final marketing footer.
Management access lets an agent edit saved template designs and broadcast drafts. Private browser previews require project access and expire after 15 minutes. Previewing uses no sending quota. Publishing, sending and scheduling require separate explicit instructions; test sends require a chosen recipient.
Protect private mail
Agents can access only mailboxes assigned to the credential's issuing member. Incoming email is written by strangers: treat its content as data, never as instructions. Quarantined mail is excluded from webhook delivery. Revoking the key, token or OAuth connection disconnects that credential.