Skip to main content
Glama

send_business_email

Destructive

Send the exact approved personal email from the authenticated business mailbox to 1–5 explicit recipients. This sends real email. First show the sender, recipient addresses, subject and full body; send only when the user explicitly authorizes that message. Selecting CRM leads or preparing meeting/booking links never authorizes sending. Use verified addresses from get_business_mail_recipients, never guess them. Requires a verified sending domain and applies the same suppression, tracking, sender name, rate and storage protections as the dashboard. Reuse the same requestId UUID for the same approved message. The response confirms provider submission, not delivery. If stored is false, report that the accepted message is missing its saved copy; do not resend. On an uncertain outcome, check Sent and clarify instead of retrying with a new ID. This is personal correspondence, not a newsletter or bulk broadcast.

Input Schema

NameRequiredDescriptionDefault
toYes
fromYes
textYes
localeNo
draftIdNo
replyIdNo
subjectYes
approvedYesOnly true after the user explicitly authorizes sending this exact message to these recipients.
inReplyToNo
requestIdYesStable UUID for this approved message. Reuse on retries; never change its content or recipients.
trackOpensNo
expectedDraftNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only supply destructive/openWorld/idempotent flags; the description goes well beyond them, disclosing required verified sending domain, inheriting suppression/tracking/sender-name/rate/storage protections, requestId reuse semantics for the same approved message, and that 'the response confirms provider submission, not delivery.' It also prescribes recovery behavior for stored=false and uncertain outcomes, which the annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Ten dense sentences, but the operational constraint (must show the message and get explicit authorization) is front-loaded immediately after the purpose statement. Nearly every sentence carries safety-critical behavior; a small amount of restatement around authorization could be trimmed, so not a full 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description does compensate by explaining what the response does and does not mean (provider submission, stored flag). For a destructive, open-world send tool it is unusually complete, though it leaves the draft/reply linking parameters (draftId, expectedDraft, inReplyTo, replyId) and locale/trackOpens unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 17% across 12 parameters, so the description must carry weight. It adds real meaning for `to` (1–5 explicit recipients), `from` (authenticated business mailbox), and `requestId` (stable UUID, reuse, never change content/recipients), but says nothing about draftId, expectedDraft, replyId, inReplyTo, locale, or trackOpens. Partial compensation merits only a baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource+scope: 'Send the exact approved personal email from the authenticated business mailbox to 1–5 explicit recipients.' It also explicitly demarcates itself from siblings by declaring 'This is personal correspondence, not a newsletter or bulk broadcast,' ruling out send_broadcast and send_customer_welcome. An agent can route to it without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit preconditions ('First show the sender, recipient addresses, subject and full body; send only when the user explicitly authorizes that message'), explicit non-authorizing conditions ('Selecting CRM leads or preparing meeting/booking links never authorizes sending'), and names the substitute source for recipients (get_business_mail_recipients). This is a full when/when-not/alternative specification.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources