instantly-mcp
Instantly MCP 服务器
一个 MCP 服务器,将你的 Instantly.ai 冷邮件工作区呈现在 AI 客户端面前。让 Claude 查询上周的回复率、 将富化后的潜在客户加载到活动中、对 Unibox 收件箱进行分诊、暂停一个正在损害信誉的邮箱——通过 Instantly v2 API 提供 40 个工具。
这个项目的核心是安全模型。 每次写入都必须在显式的 confirm 之后才能执行,自主性是一套带容量上限和硬阻止列表的分级策略,所有这一切都在代码中强制执行——而不是在提示词中要求。智能体无法通过对话绕过上限,因为上限就是一条 if 语句。
You: "Launch the Design Partners campaign."
Claude: → launch_campaign(campaign_id="camp-1")
← "Would LAUNCH (activate) campaign camp-1 — it will start sending.
AUTONOMY_LEVEL=manual — every write needs confirm=true.
Re-call with confirm=true to execute."
This will start sending from your mailboxes. Confirm?
You: "Yes."
Claude: → launch_campaign(campaign_id="camp-1", confirm=true) ← now it runs预览零 HTTP 调用,所以在你说同意之前,不会有任何请求到达 Instantly。
传输方式: 默认使用本地 stdio——无需托管、无需公网 URL、无需令牌。一个环境变量即可切换到托管 HTTP/SSE(托管)。
认证: 使用你的 Instantly v2 密钥,从
INSTANTLY_API_KEY读取,绝不硬编码,也绝不记录日志。已验证: 路径和请求体结构已对照在线 v2 参考文档核实;真实 API 与直观猜测不一致的地方都已记录在案。
已测试: 测试套件完全模拟,绝不触碰真实 API。
快速开始
需要 Python 3.11+ 和一个具有 v2 API 访问权限的 Instantly 账户。
1. 安装
git clone https://github.com/katekruger/instantlymcp.git
cd instantlymcp
# Option A — uv (preferred)
uv sync
# Option B — venv + pip
python3.12 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"2. 获取 API 密钥
在 Instantly 中,进入 设置 → 集成 → API 并创建一个 v2 密钥。 Instantly 支持限定范围的密钥——先用只读密钥安全地试用分析功能,确认可信后再扩大范围。
export INSTANTLY_API_KEY=your_key_here3. 确认它能启动
# Fails cleanly if the key is unset:
unset INSTANTLY_API_KEY
instantly-mcp # -> "ERROR: INSTANTLY_API_KEY is not set", exit 1
# Starts (stdio server waits on stdin) with any non-empty key:
INSTANTLY_API_KEY=dummy instantly-mcp在工具被实际调用之前不会发出任何 HTTP 请求。按 Ctrl-C 停止。
4. 注册到你的 MCP 客户端
将以下内容添加到你的客户端配置中,并调整绝对路径:
{
"mcpServers": {
"instantly": {
"command": "uv",
"args": ["--directory", "/absolute/path/to/instantlymcp", "run", "instantly-mcp"],
"env": { "INSTANTLY_API_KEY": "your_key_here" }
}
}
}如果你使用 venv + pip 而不是 uv 安装,请将 command 指向 venv 的入口点并去掉 args:
{
"mcpServers": {
"instantly": {
"command": "/absolute/path/to/instantlymcp/.venv/bin/instantly-mcp",
"env": { "INSTANTLY_API_KEY": "your_key_here" }
}
}
}该配置文件的位置(macOS):
Claude Desktop:
~/Library/Application Support/Claude/claude_desktop_config.jsonClaude Code:
claude mcp add instantly -e INSTANTLY_API_KEY=your_key_here -- uv --directory /absolute/path/to/instantlymcp run instantly-mcp
5. 试试看
重启客户端,确认 instantly 工具出现,然后从一个读取操作开始:
"列出我的 Instantly 活动"。然后尝试一次写入——你会先看到预览。
Related MCP server: Apollo.io MCP Server
它能做什么
40 个工具。读取操作自由执行;写入操作分级管理。完整签名和分级见工具参考。
领域 | 工具 | 最高级别 |
分析 | 活动、账户以及按步骤/变体分析,含计算出的打开/回复/点击/退订率 | READ |
潜在客户 | 列表、获取、按邮箱搜索、添加(去重)、更新、设置兴趣状态、移动、删除 | HIGH_WRITE |
潜在客户列表 | 列表、创建 | LOW_WRITE |
活动 | 列表、获取、零写入预览构建、创建(以暂停状态启动)、更新、启动、暂停 | HIGH_WRITE |
邮件 / Unibox | 列表、获取、统计未读数、标记线程已读、回复、转发 | HIGH_WRITE |
发件账户 | 列表、获取、暂停、恢复、更新 | HIGH_WRITE |
黑名单 | 列表、添加、移除 | HIGH_WRITE |
送达率与工作区 | 验证邮箱、读取工作区、列表/创建/删除 webhook | HIGH_WRITE |
其中有四个是硬阻止的——delete_lead、delete_webhook、
pause_account、remove_from_blocklist——在任何自主级别下,无论策略如何规定,没有 confirm=true 就绝不会执行。
安全模型
级别 | LOW_WRITE(可逆) | HIGH_WRITE(不可逆 / 影响范围大) |
| 需要 | 需要 |
| 在限额内无人值守运行 | 需要 |
| 在限额内运行 | 在限额内运行,硬阻止列表除外 |
在分级之上还有:每次调用和滚动 24 小时容量上限(潜在客户、邮件、
活动)、可选的活动允许/拒绝列表,以及一份仅追加的 audit.log,
记录每次已执行的写入操作并脱敏处理密钥。即使处于 autonomous 级别,超过上限也会强制显示预览。详情见安全与自主性。
托管
本地 stdio 无需托管,也是正确的默认选择——没有需要防御的网络暴露面。只有当服务器需要在你机器关机时仍然存在时才需要托管,主要是为了接收 Instantly webhook。通过 HTTP 时,入站认证是强制的,服务器默认拒绝启动:没有令牌、令牌少于 32 个字符、或非 https 公网 URL 都会拒绝启动。附带了 Dockerfile 和 Render 蓝图。见托管。
文档
页面 | 内容 |
全部 40 个工具,按领域分组,含风险级别 | |
| |
每个环境变量、其默认值及其作用 | |
HTTP 传输、威胁模型、OAuth 登录流程、Docker/Render、webhook | |
在线 Instantly v2 API 与直观理解不一致的地方 | |
报告漏洞;此服务器保护什么、不保护什么 | |
运行测试和 linter,以及一个好的改动应该是什么样 |
仓库结构
src/instantly_mcp/
server.py MCP server: the 40 tool definitions, login route, transport selection
client.py Instantly v2 API client (httpx) — all HTTP lives here
models.py Pydantic input models and normalizers
policy.py Risk tiers, autonomy levels, volume caps, audit log
auth.py Inbound bearer-token auth for HTTP transports; fails closed
oauth.py Single-user OAuth authorization server for MCP clients
formatting.py Compact, LLM-friendly summaries of raw API responses
tests/ Fully mocked — never hits the live API
docs/ The pages listed above
Dockerfile Container image for hosted deployment (non-root, reads $PORT)
render.yaml Render blueprint; secrets are prompted, never committed
.env.example Annotated template for every supported variable开发
pytest -q # all mocked, no network, no API key needed
ruff check src tests # lintCI 在每次推送和拉取请求时都会针对 Python 3.11、3.12 和 3.13 运行。
许可证
MIT。
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityFmaintenanceEnables interaction with Instantly.ai email outreach platform through 31 tools across accounts, campaigns, leads, emails, and analytics. Supports both local and remote deployment with multi-tenant authentication.27MIT
- AlicenseNot gradedqualityAmaintenanceFastMCP server exposing the full operational surface of the Apollo.io REST API to AI assistants. Provides 27 tools for outbound sales automation including campaign health, sequence management, mailbox warmup, CRM operations, and programmatic template/sequence editing with audit logging.3MIT
- AlicenseNot gradedqualityBmaintenanceEnables management of OpenAI Ads campaigns, ad groups, ads, and insights through MCP, with approval-gated live mutations for safe write operations.57MIT
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to manage multiple HighLevel CRM sub-accounts through a single OAuth-based MCP server, providing read-only access to contacts, conversations, opportunities, calendars, payments, blogs, emails, and social media.
Related MCP Connectors
Read-only MCP access to sessions, funnels, campaigns, errors, live visitors, and anomalies.
Managed LinkedIn MCP server for AI agents: search, connect, message and enrich on accounts you own.
Connect any AI agent to 11+ social platforms: schedule, publish & track posts via hosted MCP.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/katekruger/instantlymcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server