Claude and AI assistants (MCP)

Frontmail runs a remote Model Context Protocol server. Connect it to Claude (claude.ai, the Claude apps, Cowork or Claude Code) and ask things like “How many emails did the contact form send last week?” or “Create a German version of the order confirmation template”. The assistant works through the same permission checks as the dashboard.

Connect Claude

1. In the dashboard, open Settings → AI assistants and copy the Connector URL (https://mcp.frontmail.dev/mcp).
2. In Claude, open Settings → Connectors → Add custom connector, paste the URL and click Connect.
3. Frontmail’s consent screen opens. Choose the organizations the assistant may use and the permissions (below), then click Allow access. You return to Claude.

For Claude Code: claude mcp add --transport http frontmail https://mcp.frontmail.dev/mcp, then run /mcp to sign in.

Permissions

Permission	What the assistant can do
Read templates	list and read templates, versions, diffs, language variants, integration snippets, render previews, list email services (name and type only)
Create and edit templates	create, edit, roll back and delete templates and language variants, machine-translate with your organization’s key
View statistics	summary, usage over time, credit usage, breakdown by template or service
View team	members and pending invitations
Manage team	invite members, change roles, remove members
Frontmail-wide statistics	superadmins only – see below

Two checks apply to every call, and both must allow it:

• The permissions you granted to this connection, and only for the organizations you selected.
• Your role in the organization, exactly as in the dashboard (Teams and roles). A viewer who grants “Create and edit templates” still can’t edit templates; an admin still can’t hand out the billing role. Role changes, removal from the organization or suspension apply to the very next call.

The connector never exposes billing, keys, security settings, service credentials, message history or contacts (recipient data), test sends, exports or organization deletion. Changes made through it are recorded in the audit log with via: mcp and the assistant’s name.

Superadmin statistics

Frontmail staff can grant Frontmail-wide statistics (usage and revenue across all organizations, organization search and detail, send queue health, infrastructure costs). It is read-only and offered only when:

• the account is a superadmin with two-factor authentication turned on, and
• you signed in within the last hour (otherwise the consent screen asks you to sign in again).

Infrastructure costs (in USD) combine two sources – ask e.g. “What does our infrastructure cost this month and what drives it?”:

• AWS from Cost Explorer (whole AWS account): month to date, month-end forecast, previous month, by AWS service and by stage, daily costs, the stage budget. The per-stage split needs the sst:stage cost allocation tag activated in AWS Billing → Cost allocation tags.
• Google Cloud (BigQuery analytics) from the Cloud Billing export: by service, project and day, net of credits (free tier), with the amounts also in the billing account’s currency. Turn the export on once: Cloud console → Billing → Billing export → BigQuery export → Standard usage cost, project frontmail-prod, dataset billing_export (created by the deployment). It contains data from the day it was enabled.

Together with the emails sent in the month the report shows the cost per 1,000 emails. Cloudflare is not included. The data lags up to a day and the report is cached for 6 hours (each Cost Explorer request costs $0.01).

The permission expires 24 hours after you grant it; connect again to renew it. Removing the superadmin flag ends it immediately.

Disconnect

Settings → AI assistants lists every connected assistant with its permissions, organizations and last use. Disconnect revokes it immediately – every token of the connection stops working. Deleting your account removes all connections.

Security details

• OAuth 2.1 with PKCE (S256) and dynamic client registration. Only Claude’s redirect addresses (claude.ai, claude.com) and local addresses (localhost, for Claude Code and MCP Inspector) are accepted, so a look-alike app can’t receive your authorization. The consent screen shows where you’ll return – continue only if you just started connecting from your assistant.
• Access tokens last 1 hour; refresh tokens rotate on every use and a reused refresh token revokes the connection. A connection expires after 180 days.
• Tokens are stored only as hashes. The consent itself happens on app.frontmail.dev with your normal sign-in (including 2FA); the MCP server never sees your session.