📦

cooper-mcp

Name: cooper-mcp
Author: cooper-email

v1 Ревизия содержимого r1 Безопасно ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе🔑 Переменные окружения

Connect and Troubleshoot Cooper Email MCP

Email integrations can fail because of incorrect endpoints, missing authentication, or client configuration. This skill guides Cooper Email MCP setup and diagnoses common connection errors.

Поддерживает: Claude Codex Code(CC)

🥉 78 Бронза

Maintain this Skill? Claim it 🥉 78 Бронза

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "cooper-mcp" from https://skillstore.io/skills/cooper-email-cooper-mcp.md and its manifest at https://skillstore.io/api/skills/cooper-email-cooper-mcp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/cooper-email-cooper-mcp.md Подписанный manifest GET /api/skills/cooper-email-cooper-mcp/manifest Подписанный lockfile GET /api/skills/cooper-email-cooper-mcp/lockfile

Протестировать

Использование «cooper-mcp». How do I connect Cooper Email in Claude?

Ожидаемый результат:

Open Settings, then Connectors, and add a custom connector.
Name it Cooper Email and use https://cooperemail.com/mcp.
Connect and complete OAuth sign-in.

Использование «cooper-mcp». My client reports 403 permission_denied.

Ожидаемый результат:

The key may be restricted to one inbox or a limited permission list.
Use cooper_whoami to inspect the account scope.
Compare the scope with the requested operation before changing permissions.

Использование «cooper-mcp». The Cooper MCP connection returns 404.

Ожидаемый результат:

Check that the endpoint includes /mcp. The documented endpoint is https://cooperemail.com/mcp.

Аудит безопасности

Безопасно

v1 • 26.10.2026 Открыть версионный отчет

Most findings match Markdown delimiters, documented service URLs, configuration paths, or legitimate authentication checks. Two findings identify one credential-exposure risk: shell expansion puts the API key into CLI arguments, potentially exposing it through process inspection. No evidence found of prompt injection, malicious exfiltration, or host reconnaissance in the reviewed skill text.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (2)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

SKILL.md:47

Generic API/secret keys

(add `--header "Authorization: Bearer $COOPER_API_KEY"` to use a key), or the

The shell expands COOPER_API_KEY inside the quoted header before invoking the CLI. The resulting argument contains the secret and can be exposed through process inspection.

Средний

SKILL.md:47-48

Ruby/shell backtick execution

(add `--header "Authorization: Bearer $COOPER_API_KEY"` to use a key), or the

The optional header expands COOPER_API_KEY into CLI arguments. Process inspection can expose the credential; Markdown backticks themselves are not executable.

Факторы риска

⚙️ Внешние команды (24)

🌐 Доступ к сети (8)

SKILL.md:3 SKILL.md:7 SKILL.md:15 SKILL.md:34 SKILL.md:46 SKILL.md:51 SKILL.md:55 SKILL.md:86

📁 Доступ к файловой системе (4)

SKILL.md:28 SKILL.md:28 SKILL.md:82 SKILL.md:83

🔑 Переменные окружения (4)

SKILL.md:35 SKILL.md:47 SKILL.md:67 SKILL.md:77

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/cooper-email-cooper-mcp/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/cooper-email-cooper-mcp/security.svg)](https://skillstore.io/skills/cooper-email-cooper-mcp?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/cooper-email-cooper-mcp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cooper-email-cooper-mcp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/cooper-email-cooper-mcp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

cooper-email. (2026). cooper-mcp security audit report (audit version 1) [Author version 1]. Skillstore. https://skillstore.io/skills/cooper-email-cooper-mcp/audits/1

Цитата BibTeX

@techreport{cooper-email-cooper-email-cooper-mcp-2026,
  author = {cooper-email},
  title = {cooper-mcp security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/cooper-email-cooper-mcp/audits/1},
  note = {Author version 1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cooper-mcp security audit report (audit version 1)"
version: "1"
type: report
authors:
  - name: "cooper-email"
date-released: "2026-10-26"
url: "https://skillstore.io/skills/cooper-email-cooper-mcp/audits/1"
identifiers:
  - type: other
    value: "skillstore:cooper-email-cooper-mcp:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Configure an editor connection

Connect Cursor to Cooper Email through OAuth and verify inbox access without sending messages.

Restore a failed integration

Identify whether an authentication error comes from missing sign-in, an unavailable environment variable, or limited key permissions.

Connect a conversational assistant

Add a Cooper Email connector in Claude and complete the OAuth consent flow.

Попробуйте эти промпты

Connect with OAuth

Help me connect Cooper Email MCP in Cursor using OAuth. Ask before changing configuration or creating an account.

Verify an existing connection

Verify my Cooper MCP connection with cooper_whoami and cooper_list_inboxes. Report authentication type and success without exposing credentials or sending mail.

Diagnose authentication failure

Diagnose my Cooper MCP 401 error in Claude Code. Check sign-in and variable availability without printing secrets or expanding keys into commands.

Investigate permissions and discovery

Investigate Cooper MCP discovery and 403 errors in my client. Compare identity scope with required permissions and propose minimal changes before applying them.

Лучшие практики

Prefer OAuth; otherwise use supported secret references and keep keys out of chat, command arguments, and committed files.
Verify connections with read-only identity and inbox checks before attempting mail operations.
Ask before creating accounts or changing permissions, and consult the live catalog rather than a fixed tool count.

Избегать

Pasting API keys into chat or expanding them into CLI header arguments.
Creating a new account to resolve an existing account authentication failure without user approval.
Using setup troubleshooting as permission to send messages or broaden account access.

Часто задаваемые вопросы

Does this skill run a local MCP server?

No. It guides connections to the hosted Cooper Email Streamable HTTP endpoint.

Which clients have setup guidance?

The skill covers Cursor, Claude Code, Claude connectors, and ChatGPT. It links configuration references for VS Code, Windsurf, Codex, and Goose.

Is an API key required?

No. Supported clients can use OAuth. API-key headers are an alternative for clients or scripts without OAuth.

Can this skill send or manage email?

That is outside its scope. Use the separate Cooper mail skills after the connection works.

How can I test the connection?

Reload the client, finish sign-in, and run cooper_whoami and cooper_list_inboxes as read-only checks.

What does a 401 error usually mean?

Sign-in may be incomplete, the credential may be invalid, or the API-key environment variable may be unavailable to the client.

Сведения для разработчиков

Автор

cooper-email

Лицензия

MIT

Версия автора

Ревизия Skillstore

Примечание о версии

Заявленная автором версия не соответствует SemVer.

Репозиторий

https://github.com/cooper-email/cooper-email/tree/e017faae12644b593317e55d97612eb24dfa24af/skills/cooper-mcp

Ссылка

539af95a108e3fe7ef8081ed6fe1b45a397275d3

Актуальность поддержки

26.10.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md