Name: Cyberimpact MCP by usefulapi
Author: usefulapi

Cyberimpact MCP by usefulapi

Read Cyberimpact members, groups and mailing results; add members, send opt-ins, create mailings.

Tool-list grade A Remote · Streamable HTTP No auth needed 25 tools v1.17.2 MIT

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Read Cyberimpact members, groups and mailing results; add members, send opt-ins, create mailings.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http cyberimpact-mcp-by-usefulapi https://cyberimpact.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   cyberimpact_get_account, cyberimpact_list_members, cyberimpact_get_member and 22 more

Cyberimpact MCP by usefulapi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi598 servers

25 categories

All 598 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Check the connection and show which Cyberimpact account the API token belongs to (username, email, account name). GET /ping.

No parameter schema on file.

List subscribed contacts (members) with name, email, language, consent type, mailing counts and custom fields. status: active (in at least one group, default), orphans (in no group) or all. Filter by the date a member joined or was last updated. Bounced and unsubscribed members have their own tools. GET /members.

Parameter	Type	Required	Notes
status	string	no	Which subscribed members (default active).
sort	string	no	Sort order.
joinedOnFrom	string	no	Joined on or after this date.
joinedOnTo	string	no	Joined on or before this date (whole day).
updatedOnFrom	string	no	Updated on or after this date.
updatedOnTo	string	no	Updated on or before this date (whole day).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

One member by email address or id: all attributes, consent type, mailings received/opened/clicked and custom fields (keyed by custom field id; see cyberimpact_list_custom_fields). GET /members/{key}.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.

The groups a member belongs to (id, title, public/private, dynamic). GET /members/{key}/groups.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.
sort	string	no	Sort order.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

The mailings a member received (use it to see what a contact was sent and when). GET /members/{key}/mailings.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.
sort	string	no	Sort order.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

A member's consent record: consent type, relation type, consent date, expiration and proof (for CASL compliance checks). GET /members/{key}/consent.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.

Members whose last mailing hard-bounced (invalid addresses to clean up), with the bounce date. GET /members/bounced.

Parameter	Type	Required	Notes
sort	string	no	Sort order.
bouncedOnFrom	string	no	Bounced on or after this date.
bouncedOnTo	string	no	Bounced on or before this date (whole day).
updatedOnFrom	string	no	Updated on or after this date.
updatedOnTo	string	no	Updated on or before this date (whole day).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

Members who unsubscribed, with the unsubscribe date. These contacts must not be mailed again. GET /members/unsubscribed.

Parameter	Type	Required	Notes
sort	string	no	Sort order.
unsubscribedOnFrom	string	no	Unsubscribed on or after this date.
unsubscribedOnTo	string	no	Unsubscribed on or before this date (whole day).
updatedOnFrom	string	no	Updated on or after this date.
updatedOnTo	string	no	Updated on or before this date (whole day).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

The account's custom member fields (id, name, type text/date/integer/decimal). Member customFields are keyed by these ids. GET /customfields.

No parameter schema on file.

List the account's groups (mailing lists) with member and mailing counts, public/private and dynamic flags. Use the ids to target mailings and opt-ins. GET /groups.

Parameter	Type	Required	Notes
sort	string	no	Sort order.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

One group by id with its member count, mailing count and flags. GET /groups/{id}.

Parameter	Type	Required	Notes
group_id	integer	yes	Cyberimpact group id.

The members of one group, with the same member filters as cyberimpact_list_members. GET /groups/{id}/members.

Parameter	Type	Required	Notes
group_id	integer	yes	Cyberimpact group id.
sort	string	no	Sort order.
joinedOnFrom	string	no	Joined on or after this date.
joinedOnTo	string	no	Joined on or before this date (whole day).
updatedOnFrom	string	no	Updated on or after this date.
updatedOnTo	string	no	Updated on or before this date (whole day).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

List mailings by state: sent (default, archived ones excluded), scheduled (queued to go out) or archived. Each has id, subject, language, send/schedule date, recipient count and sender. Optionally only mailings sent to one group. GET /mailings/{sent|scheduled|archived}.

Parameter	Type	Required	Notes
kind	string	no	Which mailings (default sent).
group_id	integer	no	Only mailings sent to this group id.
sort	string	no	Sort order (date_sent_* only applies to archived mailings).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

One mailing by id with its results: sent/delivered/stopped counts, views, clicks, delivery/click/view rates, per-link clicks, recipient groups, sender and body (HTML/text, cut at 20 000 characters). GET /mailings/{id}.

Parameter	Type	Required	Notes
mailing_id	integer	yes	Cyberimpact mailing id.

Who received a mailing and what happened: kind = all, delivered, stopped, hard_bounced, soft_bounced, unsubscribed, opened or clicked. Optionally only recipients from one group. GET /mailings/{id}/recipients[/{kind}].

Parameter	Type	Required	Notes
mailing_id	integer	yes	Cyberimpact mailing id.
kind	string	no	Which recipients (default all).
group_id	integer	no	Only recipients that belong to this group id.
sort	string	no	Sort order.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

List the account's email templates (id, title, created/updated). GET /templates.

Parameter	Type	Required	Notes
sort	string	no	Sort order.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (default 25).

One template by id with its HTML and text body (cut at 20 000 characters). GET /templates/{id}.

Parameter	Type	Required	Notes
template_id	integer	yes	Cyberimpact template id.

Status of a bulk batch job (NEW, PROCESSING or COMPLETED) and its result. Set show_error_details to list the per-member errors. GET /batches/{id}.

Parameter	Type	Required	Notes
batch_id	integer	yes	Cyberimpact batch id.
show_error_details	boolean	no	Include the details of each error.

WRITE: add a contact as a subscribed member WITHOUT a confirmation email (implied consent) and put it in the given groups; the contact can then be mailed. Only use it for people who really gave their consent (CASL); to ask the person to confirm first use cyberimpact_send_optin. A member that already exists is rejected by the API. Throttled by Cyberimpact; for many contacts use the app's import. PO

Parameter	Type	Required	Notes
email	string	yes	The member's email address.
group_ids	array	yes	Group ids to subscribe the member to (see cyberimpact_list_groups).
firstname	string	no	First name.
lastname	string	no	Last name.
company	string	no	Company.
gender	string	no	m, f or o.
language	string	no	en_ca or fr_ca.
birthdate	string	no	Birth date, yyyy-mm-dd.
postalCode	string	no	Postal code.
country	string	no	ISO 3166-1 alpha-2 country code, e.g. CA.
note	string	no	Free-text note.
customFields	object	no	Custom field values keyed by custom field id (see cyberimpact_list_custom_fields).

WRITE: change only the given attributes of a member (other attributes stay as they are). The old values of the changed fields are overwritten and not recoverable through the API. Set new_email to change the address. PATCH /members/{key}.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.
new_email	string	no	The member's NEW email address.
firstname	string	no	First name.
lastname	string	no	Last name.
company	string	no	Company.
gender	string	no	m, f or o.
language	string	no	en_ca or fr_ca.
birthdate	string	no	Birth date, yyyy-mm-dd.
postalCode	string	no	Postal code.
country	string	no	ISO 3166-1 alpha-2 country code, e.g. CA.
note	string	no	Free-text note.
customFields	object	no	Custom field values keyed by custom field id (see cyberimpact_list_custom_fields).

WRITE: add an existing member to more groups (existing group memberships are kept). Being in a group makes the member a recipient of mailings sent to it. Returns the member's groups after the update. POST /members/{key}/groups.

Parameter	Type	Required	Notes
key	string	yes	The member's email address or numeric id.
group_ids	array	yes	Group ids to add the member to.

WRITE, SENDS AN EMAIL to the given address: an opt-in confirmation request. The person is added to the groups only after they confirm (the member is created if it does not exist). Use this instead of cyberimpact_add_member when you do not have the person's consent yet. Only call it after the user has approved sending to this address, and set confirm_send to true. Throttled by Cyberimpact. POST /me

Parameter	Type	Required	Notes
email	string	yes	The address that receives the confirmation email.
group_ids	array	yes	Group ids the person joins once they confirm.
optinConfirmUrl	string	no	Page the person lands on after confirming (http:// or https:// URL).
firstname	string	no	First name.
lastname	string	no	Last name.
company	string	no	Company.
gender	string	no	m, f or o.
language	string	no	en_ca or fr_ca.
birthdate	string	no	Birth date, yyyy-mm-dd.
postalCode	string	no	Postal code.
country	string	no	ISO 3166-1 alpha-2 country code, e.g. CA.
note	string	no	Free-text note.
customFields	object	no	Custom field values keyed by custom field id (see cyberimpact_list_custom_fields).
confirm_send	boolean	yes	Must be true: the user explicitly approved emailing this address.

WRITE: create a new, empty group (mailing list). A public group can be offered on subscription forms; a private one is internal. Groups cannot be deleted through this server. POST /groups.

Parameter	Type	Required	Notes
title	string	yes	The group name.
is_public	boolean	yes	true = public group, false = private group.

WRITE: create a new email template from HTML and/or text. It is only saved in the account; nothing is sent. POST /templates.

Parameter	Type	Required	Notes
title	string	yes	The template name.
bodyHtml	string	no	HTML body. At least one of bodyHtml or bodyText is required.
bodyText	string	no	Plain-text body. At least one of bodyHtml or bodyText is required.

WRITE, SENDS EMAIL TO CUSTOMERS: create a mailing scheduled to be sent at send_at to every member of the chosen groups. It goes out for real unless it is cancelled in the Cyberimpact app before send_at. Only call it after the user has approved the subject, body, sender and groups, and set confirm_send to true. mail_from must be a validated sender address of the account. A mailing cannot be deleted

Parameter	Type	Required	Notes
subject	string	yes	Email subject.
language	string	yes	en_ca or fr_ca.
group_ids	array	yes	Groups whose members receive the mailing (see cyberimpact_list_groups; check member counts first).
send_at	string	yes	When to start sending, 'yyyy-mm-dd HH:mm:ss'. Cyberimpact reports dates in Eastern time (EST/EDT).
bodyHtml	string	no	HTML body. At least one of bodyHtml or bodyText is required.
bodyText	string	no	Plain-text body. At least one of bodyHtml or bodyText is required.
mail_from	string	no	From address; must be a validated sender in the account.
from_name	string	no	From name.
reply_to	string	no	Reply-to address.
statistics	string	no	detailed (default) or anonymized open/click statistics.
confirm_send	boolean	yes	Must be true: the user explicitly approved sending this mailing to these groups.

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Cyberimpact MCP by usefulapi or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.17.2 · scanned 7 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 1 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest0d103db3b6ef8a53a3e779935edcf37c3b8622a7893e6a58c9cc055e735157e7

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
cyberimpact_get_account	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_members	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_member	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_member_groups	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_member_mailings	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_member_consent	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_bounced_members	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_unsubscribed_members	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_custom_fields	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_groups	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_group	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_group_members	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_mailings	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_mailing	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_mailing_recipients	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_list_templates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_template	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_get_batch	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
cyberimpact_add_member	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
cyberimpact_update_member	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
cyberimpact_add_member_to_groups	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
cyberimpact_send_optin	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
cyberimpact_create_group	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
cyberimpact_create_template	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
cyberimpact_create_mailing	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest0d103db3b6ef8a53

Scanned2026-11-07

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Cyberimpact MCP by usefulapi

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also