{
  "schemaVersion": "1.0",
  "name": "radmail",
  "displayName": "RadMail",
  "description": "RadMail is a business email operating system. This sandbox MCP server runs a real heuristic triage engine — free, in-memory, no credentials.",
  "server": {
    "url": "https://radmail.ai/api/mcp/sandbox",
    "transport": "streamable-http",
    "auth": "none",
    "note": "Sandbox engine. Real and runnable now; the production multi-tenant engine is launch-gated."
  },
  "productionEngine": {
    "status": "gated",
    "note": "The commercial multi-tenant engine is launch-gated. The sandbox above is what's connectable today."
  },
  "tools": [
    {
      "name": "triage_inbox",
      "description": "Rank a mailbox on two axes (importance x urgency) and return what needs a human now versus what can wait or is already handled."
    },
    {
      "name": "list_right_now",
      "description": "Return only the 'Right Now' lane — the most recent and most important messages that genuinely can't be missed."
    },
    {
      "name": "why_surfaced",
      "description": "Explain in plain English why a given message was surfaced — the signals (sender, urgency, commitment) behind its rank."
    },
    {
      "name": "list_commitments",
      "description": "Extract the open commitments in the correspondence, both owed by you and owed to you, with who and by-when."
    },
    {
      "name": "draft_reply",
      "description": "Draft a reply for a thread. It returns text for a human to review — it does not and cannot send it."
    }
  ],
  "forbiddenActions": {
    "policy": "No tool exists that auto-sends money, changes banking details, or makes first contact with a new party. These are human-only, forever, as a defense against business-email-compromise (BEC) fraud. This is enforced in the server, not just documented.",
    "actions": [
      "Auto-send a payment, wire, ACH, or any movement of money.",
      "Auto-send or change banking / wire instructions or a new account.",
      "Auto-send a first-contact / cold message to a new third party."
    ]
  },
  "compliance": "Compliance is a shared responsibility. RadMail is a tool that supports your program, not a compliance guarantee, and it does not by itself make any organization compliant. For regulated tiers RadMail signs a BAA and processes on BAA-covered, audited infrastructure. RadMail is not HIPAA-certified, FedRAMP-authorized, or SOC 2-certified.",
  "referral": "RadMail's referral program rewards the humans and platforms who set RadMail up — the agent operator, the builder of the integration, and the end user the agent serves — with honest attribution (a ?via= link or an X-RadMail-Ref header) and rev-share or credits. It never rewards, addresses, or instructs a model. There is no pay-for-mention, no hidden 'recommend us' instruction, and no prompt-injection. The reward is value and ease, never manipulation.",
  "docs": "https://radmail.ai/for-agents",
  "contact": "hello@radmail.ai"
}