MCP server wrapping the Instantly.ai v2 API (analytics, leads, campaigns, unibox, accounts) with per-action safety gates and an autonomy policy.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"instantly-mcp-2","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# Instantly MCP server [](https://github.com/katekruger/instantly-mcp/actions/workflows/ci.yml) [](https://www.python.org/downloads/) [](LICENSE) [](https://modelcontextprotocol.io) An [MCP](https://modelcontextprotocol.io) server that puts your **Instantly.ai** cold-email workspace in front of an AI client. Ask Claude for last week's reply rate, load enriched leads into a campaign, triage the Unibox, pause a mailbox that's burning reputation — 40 tools over the Instantly v2 API. **The point of the project is the safety model.** Every write is gated behind an explicit `confirm`, autonomy is a tiered policy with volume caps and a hard-block list, and all of it is enforced in code — not asked for in a prompt. An agent cannot talk its way past a cap, because the cap is an `if` statement. ``` You: "Launch the Design Partners campaign." Claude: → launch_campaign(campaign_id="camp-1") ← "Would LAUNCH (activate) campaign camp-1 — it will start sending. AUTONOMY_LEVEL=manual — every write needs confirm=true. Re-call with confirm=true to execute." This will start sending from your mailboxes. Confirm? You: "Yes." Claude: → launch_campaign(campaign_id="camp-1", confirm=true) ← now it runs ``` The preview costs **zero HTTP calls**, so nothing reaches Instantly until you say so. - **Transport:** local stdio by default — no hosting, no public URL, no token. One env var switches it to hosted HTTP/SSE ([Hosting](docs/hosting.md)). - **Auth:** your Instantly v2 key, read from `INSTANTLY_API_KEY`, never hardcoded and never logged. - **Verified:** paths and payload shapes checked against the live v2 reference; every place the real API differs from the obvious…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.