SendGrid Secure runs on your own machine — the client starts it, so there is no endpoint to ping. 103 installs a week from pypi. Last commit 2 Sep 2026.
Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.
Nothing serious here today
Today is the operative word: we check SendGrid Secure every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add sendgrid-mcp-secure -e 'SENDGRID_API_KEY=<SENDGRID_API_KEY>' -- uvx sendgrid-mcp-secure{
"mcpServers": {
"sendgrid-mcp-secure": {
"command": "uvx",
"args": [
"sendgrid-mcp-secure"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>"
}
}
}
}[mcp_servers.sendgrid-mcp-secure]
command = "uvx"
args = ["sendgrid-mcp-secure"]
env = { SENDGRID_API_KEY = "<SENDGRID_API_KEY>" }{
"mcpServers": {
"sendgrid-mcp-secure": {
"command": "uvx",
"args": [
"sendgrid-mcp-secure"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>"
}
}
}
}{
"servers": {
"sendgrid-mcp-secure": {
"type": "stdio",
"command": "uvx",
"args": [
"sendgrid-mcp-secure"
],
"env": {
"SENDGRID_API_KEY": "<SENDGRID_API_KEY>"
}
}
}
}Put your own value in place of
<SENDGRID_API_KEY> (SendGrid API key (use a restricted key with Mail Send scope only)).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
SENDGRID_MCP_MODE (dry-run (default) or live), SENDGRID_MCP_RECIPIENT_ALLOWLIST (Comma-separated recipient addresses/domains allowed to receive mail), SENDGRID_MCP_WRITES_PER_HOUR (Hourly cap on write operations (sends)), SENDGRID_MCP_MAX_RECIPIENTS (Max recipients per send), SENDGRID_MCP_AUDIT_LOG (Path to the append-only audit log), SENDGRID_MCP_ALLOW_BCC (BCC stays disabled unless explicitly enabled).
Alternatives to SendGrid Secure
same job, measured the same waySecurity gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.
MCP server for Microsoft Entra ID sign-in and audit-log triage (read-only by default)
Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log.
MCP server that runs on an OpenWrt router: deny-by-default policy, audit log, rollback-armed changes
Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.
MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.
MCP server for MikroTik RouterOS and SwOS: typed tools, dry-run, RBAC, audit logs, and rollback.
Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.
SendGrid Secure — questions
Answers built from our own checks of this server.