Control WarmySender from your AI agent

Your Claude, ChatGPT, OpenClaw, Cursor, Windsurf, Zed — or any MCP-compatible AI agent — can now build, launch, and manage your cold email, LinkedIn, and Instagram campaigns, verify emails, and tune warmup. Your agent never sends directly and can't raise a limit — one install, full control, safety limits enforced by the scheduler.

What this is

WarmySender runs your outreach on autopilot with AI agents, across every channel: cold email, email warmup, LinkedIn, Instagram, and multichannel sequences, plus real-time email verification. The /ai-agents page is the public install hub for connecting AI agents to WarmySender via the Model Context Protocol (MCP).

One install gets your agent full natural-language control of your workspace. Your agent can build, launch, and manage campaigns on every channel — cold email, LinkedIn, and Instagram — create and enroll prospects, verify email addresses, check email and account health, tune warmup, and manage suppression lists. Creating or launching a campaign only hands it to the same safety-checked scheduler the WarmySender web UI uses — the agent never sends directly and can never raise a limit, so nothing goes out in a burst. Looking for the deep technical docs? See the full MCP integration guide.

Use WarmySender from your own AI app

Point any MCP-compatible AI client at our public server. One Bearer token, every tool scope-gated by workspace.

Fastest — one command. Run our launcher and it wires up the connection for you — no config file to hand-edit:

npx -y @warmysender/mcp --api-key=ws_YOUR_API_KEY
MCP server URL
https://warmysender.com/mcp
Authentication
Authorization: Bearer ws_YOUR_API_KEY — create the key at Settings → API Keys.
Or sign in with OAuth — no key to paste; approve access on a WarmySender screen and we issue a workspace-scoped token.
Protocol
Streamable HTTP, MCP spec 2024-11-05 or newer.
Tool surface
Read · write (cold email, prospects, suppression, warmup) · LinkedIn & Instagram campaign create/launch/pause/resume/enroll (safety-gated) · email verification. Each tool is scope-gated by the API key's declared scopes.

The server URL is identical across every supported client — only the install snippet format differs. See the MCP integration guide for client-specific configs.

What you can ask

Natural language goes in. Scheduler-safe actions come out. Some prompts to try:

Supported AI clients

Seven clients ship with one-paste install snippets. Any other MCP-compatible client (Continue, Cline, Goose, custom agents) also works — point it at https://warmysender.com/mcp with your Bearer token.

Claude Desktop

Native desktop app from Anthropic. Paste one snippet into claude_desktop_config.json and restart — your agent runs cold email, warmup, and LinkedIn campaigns from chat.

Claude Code

Anthropic's CLI for software engineering. One claude mcp add command registers WarmySender — perfect for engineers who want to manage outreach from the terminal.

ChatGPT

Add WarmySender as an MCP connector inside ChatGPT (Settings → Connectors → Add MCP server). Drive cold email, warmup, and LinkedIn campaigns from any GPT conversation. Requires a ChatGPT plan with Connectors enabled.

OpenClaw

The lobster-mascot 🦞 open-source AI agent. Run one openclaw mcp set warmysender command and OpenClaw can call any WarmySender tool — build and launch cold email, LinkedIn, and Instagram campaigns, enroll prospects, verify emails, check mailbox and account health, all from the OpenClaw chat.

Cursor

AI-first code editor. Drop a .cursor/mcp.json into your project root — Cursor speaks streamable-http natively, no launcher needed.

Windsurf

Codeium's agentic IDE. Add WarmySender to ~/.codeium/windsurf/mcp_config.json and Cascade can drive your campaigns alongside your code.

Zed

High-performance multiplayer code editor. Add WarmySender under context_servers in settings.json — your AI panel can now run outreach without leaving the editor.

What your AI can do

60 tools across 8 capability groups, every one scope-gated and workspace-scoped. Your agent can run cold email campaigns and prospects; LinkedIn end to end — connection and message campaigns, publishing and managing posts, and creating, publishing, or closing recruiter jobs and reading their applicants; Instagram DM campaigns; warmup and mailbox tuning; email verification; and workspace and job checks. Grouped by channel and capability:

Cold email & prospects (16 tools)

Build, launch, pause, and resume cold-email campaigns; add, update, and bulk-import prospects; and manage your suppression list — all in plain language.

Tracking domains (4 tools)

Use your own branded domain for open and click tracking. Add a tracking domain, check that it is set up correctly, list the ones you have, and remove any you no longer need.

LinkedIn — campaigns, posts & recruiter (18 tools)

Run LinkedIn end to end: connection and message campaigns, publish and manage posts, and create, publish, or close recruiter jobs and read their applicants. Every action is paced within your account’s safe daily and weekly limits.

Safety-gated. Routed through the scheduler — daily, weekly, and ramp limits always apply.

Instagram DMs (9 tools)

Create and launch Instagram DM campaigns, enroll prospects, and check account health and results. New accounts ramp up gradually and stay within a safe daily and hourly action budget.

Safety-gated. Routed through the scheduler — daily, weekly, and ramp limits always apply.

Warmup & mailboxes (5 tools)

Tune warmup settings, adjust many mailboxes at once, and check mailbox health and warmup ramp status before you scale up sending.

Email verification (3 tools)

Verify a single address or submit a whole list, then read the results — the same safe pacing and allowance as the in-app verifier, so an agent can’t burst it.

Leads database (3 tools)

Search 11M+ B2B leads by role, industry, and location, then save the ones you want into a prospect list or export them with full contact details. Searching is free; each new lead uses your monthly allowance or purchasable lead credits.

Workspace & jobs (2 tools)

Confirm what an API key can access and track the status of any queued job or bulk operation.

Safety is always on

LinkedIn daily and weekly limits, warmup ramps, and domain hard-caps are enforced by the scheduler regardless of what your AI asks for. Your AI cannot connect or disconnect accounts.

Five guardrails always apply:

  1. Workspace scoping on every call. Your API key resolves to exactly one workspace. There is no path to read or mutate another tenant's data.
  2. Scheduler-first execution. LinkedIn invite, message, and view calls never happen inline from MCP. The scheduler owns the rate limits, ramp schedule, and per-account safety caps. Asking the AI to enroll 1,000 prospects still sends at the safe rate.
  3. LinkedIn daily/weekly limits and the 4-week ramp are non-negotiable. A new account starts at ~10 invites/day and grows over four weeks to safe maximums (50 invites/day, 150 messages/day). MCP cannot raise these — account safety always wins over speed.
  4. Per-mailbox sending pacer and warmup [ref: XXXX] identifier stay intact. No tool exposed to the AI modifies or removes the warmup subject-line tag or bypasses per-mailbox daily caps.
  5. No connect / disconnect / delete tools. Connecting and disconnecting email or LinkedIn accounts stays in the UI. There are no delete_* tools — soft-cancel via pause and archive only.

More on LinkedIn safety: LinkedIn Safety FAQ.

Pricing & tiers

MCP usage is included in every paid plan — no extra add-on charge. Free-plan users see Upgrade to connect on this page; every paid plan (Pro and up) can install, and customers on the legacy Starter and Business plans can install too.

Plan MCP calls / month
Starter (legacy) 1,000
Pro 10,000
Business (legacy) 100,000
Enterprise Unlimited
Ultimate Unlimited

Per-minute rate limits also apply and scale with your plan (on Pro: 60 reads/min, 15 writes/min, 10 LinkedIn writes/min, 3 bulk/min — per workspace; Enterprise and Ultimate get higher per-minute budgets). A LinkedIn add-on seat is required per LinkedIn account if you call LinkedIn tools. See the pricing page for the full breakdown including monthly and annual billing.

Quick start in 3 steps

  1. Connect your agent — paste one snippet. Pick Claude Desktop, Claude Code, ChatGPT, OpenClaw, Cursor, Windsurf, or Zed, then paste a single install snippet. Create the key first at Settings → API Keys (you only see the value once) and drop it into the snippet — or sign in with OAuth (no key to paste). Full copy-paste configs live on the MCP server docs page.
  2. Ask in plain language. Try “list my campaigns”, “check mailbox health”, or “pause the LinkedIn campaign for the Acme audience”. Your client discovers every tool automatically — no commands to memorise.
  3. We send safely. The scheduler enforces your daily, weekly, and ramp limits on every action. Your agent never sends directly and can never raise a limit — ask it to enroll 1,000 prospects and it still goes out at the safe rate.

Frequently asked questions

Which AI agents can I connect?

Claude Desktop, Claude Code, ChatGPT, OpenClaw, Cursor, Windsurf, and Zed are officially supported with one-paste install snippets. Any other Model Context Protocol (MCP) client that speaks Streamable HTTP also works — point it at https://warmysender.com/mcp with a Bearer token.

What can my AI actually do once connected?

Run your entire outreach across every channel. Your agent can build, launch, and manage cold email, LinkedIn, and Instagram campaigns (create, launch, pause, resume, enroll), create and enroll prospects, verify email addresses, tune warmup, check mailbox and account health, and manage suppression lists — all in plain language. It never sends directly and can never raise a limit: the scheduler paces every send within safe daily/weekly/hourly caps and the ramp. Connecting and disconnecting accounts stays in the UI for safety.

Can my AI accidentally burn my sending reputation or get my LinkedIn banned?

No. Every LinkedIn action routes through our scheduler, which enforces LinkedIn per-account daily and weekly limits plus the 4-week ramp schedule. Email sends respect the per-mailbox pacer, domain caps, and warmup ramp. If your AI asks to enroll 1,000 prospects at once, the scheduler still sends at the safe rate. MCP cannot bypass any of these limits — account safety always wins.

Who can use the AI Agents integration?

Free plan users see "Upgrade to connect". Pro, Enterprise, and Ultimate plans can install (legacy Starter and Business customers can install too). MCP usage is included in the subscription — no extra add-on charge. See the pricing page for current rates.

How many calls do I get per month?

Pro includes 10,000 MCP calls per month; Enterprise and Ultimate are unlimited (legacy Starter includes 1,000 and legacy Business includes 100,000). Per-minute rate limits apply on top and scale with your plan — on Pro: 60 reads/min, 15 writes/min, 10 LinkedIn writes/min, 3 bulk/min per workspace; Enterprise and Ultimate get higher per-minute budgets.

How do I revoke access?

Go to Settings > API Keys and revoke the key. Revocation is instant — the next call from any AI client using that key gets an unauthorized error. You can also narrow scopes on a key to tighten what the AI is allowed to do without fully revoking.