Back to Browse

Listmonk Mcp Ts MCP Server

Developer ToolsModerate6.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Listmonk MCP server: subscribers, lists, campaigns, templates, media, transactional email

About

Listmonk MCP server: subscribers, lists, campaigns, templates, media, transactional email

Security Report

6.7
Moderate6.7Moderate Risk

The Listmonk MCP server authenticates with a user-supplied API token from environment variables, and its permissions (network HTTP to the configured Listmonk instance, file reads restricted to LISTMONK_MCP_FILES_DIR with realpath/symlink checks) match its stated purpose. Findings are limited to low-severity items: the Basic-style token is sent in an Authorization header over whatever URL the user configures, campaign body regex input is unvalidated, and the listmonkClient.ts source is truncated so the rest of the client could not be fully reviewed. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Listmonk base URL, e.g. https://listmonk.example.comOptional

Environment variable: LISTMONK_MCP_URL

Listmonk API user nameOptional

Environment variable: LISTMONK_MCP_USERNAME

Listmonk API user password or tokenRequired

Environment variable: LISTMONK_MCP_PASSWORD

Directory the file tools (*_from_file, upload_media_file) may read from; they are disabled when unsetOptional

Environment variable: LISTMONK_MCP_FILES_DIR

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-tecspda-listmonk-mcp-ts": {
      "env": {
        "LISTMONK_MCP_URL": "your-listmonk-mcp-url-here",
        "LISTMONK_MCP_PASSWORD": "your-listmonk-mcp-password-here",
        "LISTMONK_MCP_USERNAME": "your-listmonk-mcp-username-here",
        "LISTMONK_MCP_FILES_DIR": "your-listmonk-mcp-files-dir-here"
      },
      "args": [
        "-y",
        "listmonk-mcp-ts"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Listmonk MCP Server

Listmonk MCP Server

An MCP server for Listmonk, the self-hosted newsletter and mailing list manager. It lets AI agents (Claude Code, Claude Desktop, Cursor, Cline, VS Code and others) manage subscribers, mailing lists, campaigns, templates and media, and send transactional email through your Listmonk instance.

TypeScript port of rhnvrm/listmonk-mcp by Rohan Verma, extended with file-based templates, campaign body editing and hardened file access.

Written in TypeScript, runs on Bun.

Русская версия

Features

  • Subscribers: add, update, delete, change status, search with Listmonk SQL queries, look up by ID or email.
  • Mailing lists: create, update, delete, list, list members.
  • Campaigns: create, update, preview, send now, schedule. Edit the body with plain-text, regex and batch replace.
  • Templates: create, update, delete, read. Large HTML bodies (for example MJML exports) can be loaded straight from a file.
  • Transactional email: send a tx template to one recipient with custom data.
  • Media: upload, rename, delete, list.

Requirements

  • Bun 1.1 or newer.
  • Listmonk with an API user. In the Listmonk admin, open Users, create a user of type API and copy its token. Give it a role with only the permissions the agent needs.

Quick start

One-click install (then replace the placeholder URL, user and token in the client's MCP settings):

Install in Cursor Install in VS Code

Claude Code

claude mcp add --transport stdio --scope user \
  --env LISTMONK_MCP_URL=https://listmonk.example.com \
  --env LISTMONK_MCP_USERNAME=api_user \
  --env LISTMONK_MCP_PASSWORD=your-api-token \
  listmonk -- bunx listmonk-mcp-ts

Claude Desktop, Cursor, Cline and other clients

Add the server to the client's MCP config (mcpServers section):

{
  "mcpServers": {
    "listmonk": {
      "command": "bunx",
      "args": ["listmonk-mcp-ts"],
      "env": {
        "LISTMONK_MCP_URL": "https://listmonk.example.com",
        "LISTMONK_MCP_USERNAME": "api_user",
        "LISTMONK_MCP_PASSWORD": "your-api-token",
        "LISTMONK_MCP_FILES_DIR": "/path/to/email-templates"
      }
    }
  }
}

Where the config file lives for each client: Claude Desktop, Cursor and Windsurf, Cline, VS Code.

The server is started by the client when a session opens and stops with it. You do not need to keep it running.

Configuration

VariableRequiredDefaultDescription
LISTMONK_MCP_URLyesListmonk base URL, http:// or https://
LISTMONK_MCP_USERNAMEyesAPI user name
LISTMONK_MCP_PASSWORDyesAPI user token
LISTMONK_MCP_FILES_DIRnoDirectory the file tools may read from. File tools are disabled when it is not set
LISTMONK_MCP_TIMEOUTno30HTTP timeout, seconds
LISTMONK_MCP_MAX_RETRIESno3Retries on network errors. Only GET requests are retried
LISTMONK_MCP_SERVER_NAMEnoListmonk MCP ServerServer name reported to the client

Variables can also come from a .env file in the working directory, or from a file passed with --config /path/to/.env.

CLI options: -c, --config <file> loads an env file, -v, --version prints the version.

Tools

AreaTools
Healthcheck_listmonk_health
Subscribersadd_subscriber, update_subscriber, remove_subscriber, change_subscriber_status, list_subscribers, get_subscriber_by_id, get_subscriber_by_email
Mailing listsget_mailing_lists, get_list_by_id, get_list_subscribers_tool, create_mailing_list, update_mailing_list, delete_mailing_list
Campaignsget_campaigns, get_campaign, get_campaign_preview, create_campaign, update_campaign, send_campaign, schedule_campaign
Campaign bodyreplace_in_campaign_body, regex_replace_in_campaign_body, batch_replace_in_campaign_body
Templatesget_templates, get_template, create_template, update_template, create_template_from_file, update_template_from_file, delete_template
Transactionalsend_transactional_email
Mediaget_media_list, upload_media_file, rename_media, delete_media_file

Templates from a file

Passing a large HTML body inline through a tool call is slow and the model can change it while copying. create_template_from_file and update_template_from_file read the body from a file instead, so the stored template matches the file byte for byte. subject is required for tx templates.

The file path can be absolute or relative to LISTMONK_MCP_FILES_DIR.

Security

  • File access is limited to LISTMONK_MCP_FILES_DIR. create_template_from_file, update_template_from_file and upload_media_file refuse any path outside it, symlinks included, and are disabled when it is not set. Subscriber names, campaign bodies and other data read from Listmonk may contain instructions written by strangers (prompt injection). Without this limit such text could make the agent read ~/.ssh or .env and email it out.
  • Keep approval on for sending tools. send_campaign, schedule_campaign and send_transactional_email send real email. Do not auto-approve them in your client.
  • Use a dedicated API user with a role limited to what the agent needs, not an admin account.
  • Keep the token out of shared files. If your MCP config is committed or synced, pass the token through the environment instead.

Development

git clone https://github.com/tecspda/listmonk-mcp-ts.git
cd listmonk-mcp-ts
bun install
cp .env.example .env   # fill in your Listmonk details
bun run start          # run the server
bun run dev            # run with reload on change
bun run check          # type check
bun test               # tests

To run a local checkout from an MCP client, use "command": "bun", "args": ["run", "/path/to/listmonk-mcp-ts/src/index.ts"].

Need a Listmonk instance for testing? See Docker setup.

License

MIT

Reviews

No reviews yet

Be the first to review this server!