This document summarizes the Mailgun MCP Server security model for users and marketplace reviewers.
- The server runs locally and communicates only with the Mailgun API over HTTPS.
- API hosts are selected by region (
api.mailgun.netorapi.eu.mailgun.net). - The server uses stdio transport to communicate with the MCP client.
- Authentication uses
MAILGUN_API_KEYfrom environment variables. - API keys are consumed by the server process and are not sent to the model as tool output.
- Use a dedicated, scoped Mailgun key for MCP usage.
- The server does not read local files or local databases for tool execution.
- The server does not execute shell commands as part of tool handlers.
- The server does not intentionally log API keys.
- API responses may contain email-related account data depending on invoked tools; run the server in trusted environments.
- Use separate API keys for development and production.
- Rotate keys periodically and immediately after suspected exposure.
- Review tool-call confirmations in MCP clients before approving write operations.