Back to Browse

Drag MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

AI-powered email & WhatsApp for teams — manage your shared inbox from Claude, Cursor or ChatGPT.

About

AI-powered email & WhatsApp for teams — manage your shared inbox from Claude, Cursor or ChatGPT.

Security Report

5.2
Moderate5.2Moderate Risk

A well-structured MCP server for DragApp with proper API authentication via environment variables and reasonable permission scope for its purpose. Code quality is good with appropriate error handling and input validation. Minor findings around error handling breadth and missing validation in edge cases do not significantly impact security given the server's legitimate use case. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

6 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Your DragApp API key. Get it from app.dragapp.com → Settings → Integrations.Required

Environment variable: DRAG_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "com-dragapp-mcp-server": {
      "env": {
        "DRAG_API_KEY": "your-drag-api-key-here"
      },
      "args": [
        "-y",
        "@dragapp/mcp-server"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

DragApp MCP Server

An MCP server for DragApp — AI-powered email & WhatsApp for teams. Read and reply to emails, send WhatsApp messages, search threads, manage boards, and more from Claude, ChatGPT, Cursor, or any MCP-compatible AI tool.

Setup

Fastest: connect from your AI client (hosted)

Add this URL as a custom connector:

https://app.dragapp.com/mcp
  • Claude — Settings → Connectors → Add custom connector → paste the URL
  • ChatGPT — Settings → Connectors → Add → paste the URL
  • Gemini — add it as a remote MCP server with the same URL

When you connect, a Drag page opens and asks for your API key once (DragApp → Settings → Integrations). The key is verified and handed to your client as its access token; the service stores nothing, and the connect flow never puts your key in a URL. Works in any client that supports remote MCP connectors (OAuth 2.1 + PKCE, dynamic client registration). Nothing to install.

Local (config-file clients: Cursor, Windsurf, Claude Code)

1. Get your API key

Go to DragApp → Settings → Integrations → copy your API key.

2. Connect to your AI tool

Claude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "dragapp": {
      "command": "npx",
      "args": ["-y", "@dragapp/mcp-server"],
      "env": {
        "DRAG_API_KEY": "your-api-key"
      }
    }
  }
}

Cursor — add to .cursor/mcp.json:

{
  "mcpServers": {
    "dragapp": {
      "command": "npx",
      "args": ["-y", "@dragapp/mcp-server"],
      "env": {
        "DRAG_API_KEY": "your-api-key"
      }
    }
  }
}

Works with any MCP-compatible client — ChatGPT, Windsurf, Claude Code, etc.

What you can do

Ask your AI assistant:

  • "Show me unread emails on the Support board"
  • "Read the latest email from Acme Corp and draft a reply"
  • "Move all billing threads to the Done column"
  • "Search for emails mentioning 'invoice' on the Sales board"
  • "What's my team's average response time this week?"
  • "List all knowledge base articles"
  • "Create a task on the Support board assigned to Sarah"

Tools

Email (8 tools)

list_threads · get_thread · reply_to_thread · send_new_email · search_threads · filter_threads · move_thread · move_threads_bulk

Boards (5 tools)

list_boards · get_board · list_columns · list_board_members · list_teams

Cards (6 tools)

list_cards_in_column · get_card · create_card · update_card · move_card · archive_card

Labels (4 tools)

list_labels · add_label_to_thread · remove_label_from_thread · toggle_labels

Contacts (3 tools)

search_contacts · get_contact_conversations · create_contact

Knowledge Base (5 tools)

list_articles · get_article · create_article · update_article · search_knowledge

Analytics (4 tools)

get_response_times · get_avg_response_time · get_daily_activity · get_closed_activity

Automations (3 tools)

list_automations · toggle_automation · toggle_ai_drafts

WhatsApp (4 tools)

send_whatsapp_message · send_whatsapp_template · list_whatsapp_templates · get_whatsapp_conversation

Comments (2 tools)

add_comment · get_comment

Tags (2 tools)

list_tags · add_tag_to_card

Tasks (1 tool)

create_task

47 tools across 12 categories.

Development

git clone https://github.com/nick-timms/drag-mcp-server.git
cd drag-mcp-server
npm install
cp .env.example .env  # add your API key
npm run build
npm start

Secret-scanning pre-commit hook

This is a public repository. Before committing, install the pre-commit hook so gitleaks scans your staged changes for secrets (keys, JWTs, tokens):

pip install pre-commit   # one-time, if you don't have it
pre-commit install       # installs the git hook in this repo

Run it manually against everything at any time:

pre-commit run --all-files

The hook uses .gitleaks.toml. The same scan runs in CI on every push and pull request (.github/workflows/secret-scan.yml), and npm publish runs a tarball guard (scripts/check-tarball.mjs) that blocks the release if the built package contains any known-sensitive term.

License

MIT

Reviews

No reviews yet

Be the first to review this server!