Instantly MCP server for AI agents

Live

BEARER TOKEN

COLD EMAIL

Marketing

Instantly gives your agent cold email outreach in your Instantly workspace: build and launch campaigns, add and move leads, reply from the Unibox, manage sending accounts and warmup, and read campaign analytics.

  • Per-user credentials: each call uses the actual user's access token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
Instantly
agent · Acme Q3
Run
Why is the Q3 Founders campaign sending so slowly?
S
instantly_campaign_sending_status_get
152ms
Outbound agent
2 sending accounts on Q3 Founders hit their daily limit, and 1 more is paused with a connection error. The other 5 are sending normally.
Sources: Instantly sending status, 1 campaign
instantly
8 accounts
18:29
Message Claude...

Tools your outbound agent reaches for on Instantly, scoped per user.

CALL ANY TOOL
94 tools for cold email in Instantly: create, launch, and pause campaigns and subsequences, add, move, and label leads, reply from the Unibox, manage sending accounts, warmup, and block lists, and read analytics.
instantly_account_campaigns_list
List account campaigns
List the campaigns that use a given sending account. Returns campaign IDs, names and statuses, plus next_starting_after. Use instantly_account_campaigns_list before pausing or deleting an account.
Parameters
Name
Type
Required
Description
email
string
Required
Email address of the sending account, as listed by instantly_accounts_list. Example: "john@acme-mail.com".
limit
number
Optional
Number of campaigns to return per page. Example: 25.
starting_after
string
Optional
Pagination cursor. Pass the next_starting_after value from the previous response to get the next page. Leave empty for the first page. Example: "0199a4b2-6c1e-7a3d-9f20-4b5c6d7e8f90".
instantly_account_delete
Delete account
instantly_account_get
Get account
instantly_account_mark_fixed
Account mark fixed
instantly_account_update
Update account
instantly_accounts_pause
Pause accounts
instantly_accounts_warmup_analytics_get
Get accounts warmup analytics
instantly_block_list_entries_delete
Delete block list entries
instantly_block_list_entry_update
Update block list entry
instantly_campaign_activate
Activate campaign
instantly_campaign_analytics_overview_get
Get campaign analytics overview
instantly_campaign_create
Create campaign
instantly_campaign_sending_status_get
Get campaign sending status
instantly_campaign_variables_add
Add campaign variables
instantly_campaigns_search_by_lead
Campaigns search by lead
instantly_custom_tag_delete
Delete custom tag
instantly_custom_tag_update
Update custom tag
instantly_custom_tags_assign
Assign custom tags
instantly_email_test_send
Send email test
instantly_email_thread_mark_read
Read email thread mark
instantly_emails_list
List emails
instantly_emails_unread_count
Count emails unread
instantly_lead_create
Create lead
instantly_lead_get
Get lead
instantly_lead_label_delete
Delete lead label
instantly_lead_label_update
Update lead label
instantly_lead_list_update
Update lead list
instantly_lead_subsequence_remove
Remove lead subsequence
instantly_leads_move
Move leads
instantly_subsequence_get
Get subsequence

For more tools, view docs.

Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Instantly tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["instantly"], toolNames: [
    "instantly_campaigns_list",
    "instantly_leads_add",
    "instantly_campaign_activate"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Add these leads to the Q3 Founders campaign and launch it" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["instantly"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Add these leads to the Q3 Founders campaign and launch it" }],
  tools,
});

// Execute the tool call with the user's vaulted Instantly access token
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["instantly"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Add these leads to the Q3 Founders campaign and launch it" }],
  tools,
});

// Tool call runs with the user's vaulted Instantly access token
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["instantly"] }, pageSize: 100,
});

const agent = new Agent({
  name: "outbound_agent",
  model: "gemini-2.5-pro",
  instruction: "Instantly tools scoped to this user",
  tools,
});

await agent.run("Add these leads to the Q3 Founders campaign and launch it");
Try these prompts
Copy any prompt into your agent. Each maps directly to a Instantly tool. Click to copy, paste into your agent, done.
Campaigns
Copy the prompt
Copied
Create a campaign called Q3 Founders that sends weekdays from 9am to 5pm.
Copy the prompt
Copied
Pause the Q3 Founders campaign.
Copy the prompt
Copied
Show open and reply rates for each step of the Q3 Founders campaign.
Leads
Copy the prompt
Copied
Add these 40 leads to the Q3 Founders campaign.
Copy the prompt
Copied
Mark jordan@acme.com as Interested.
Copy the prompt
Copied
Find which campaigns contain jordan@acme.com.
Inbox and accounts
Copy the prompt
Copied
List unread emails in the Unibox from today.
Copy the prompt
Copied
Reply to Jordan's email with our calendar link.
Copy the prompt
Copied
Run a vitals check on our sending accounts' DNS records.
SEE HOW AUTH WORKS
Each user connects their own Instantly access token once, and Scalekit sends it with every call. Credentials stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
Instantly
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Instantly
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Instantly
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Instantly
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other sales and outreach connectors.
GTM and RevOps Teams
Outbound prospecting agent
Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.
GTM and RevOps Teams
CRM AI agent
Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.
Test other agents
See the same per-user auth pattern across other sales and outreach connectors.
SALES
Outbound prospecting agent
Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.
GTM
CRM AI agent
Turn each Granola call transcript into a HubSpot record update, a drafted Gmail follow-up, and a Slack recap.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared Instantly access token looks fine in a demo. In production every campaign launch looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Instantly today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Instantly as the user or through a shared token?
As the user. Each user connects their own Instantly access token once, and Scalekit sends it with every call. Campaign changes, lead updates, and replies are attributed to that user in your audit trail, not a shared service account.
Where is the Instantly access token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new access token. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in Instantly?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example campaign and lead tools without instantly_campaign_delete or instantly_leads_delete. Scalekit also enforces scope checks before every API call.
What happens when a user revokes Instantly access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Can the agent tell why an Instantly campaign is not sending?
Yes. instantly_campaign_sending_status_get explains why a campaign is not sending or is sending slower than expected, and instantly_accounts_vitals_test checks DNS records such as SPF, DKIM, DMARC and MX on sending accounts.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""instantly"": {
""url"": ""https://mcp.scalekit.com/instantly"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.instantly]
url = ""https://mcp.scalekit.com/instantly""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""instantly"": {
""url"": ""https://mcp.scalekit.com/instantly"",
""type"": ""http""
}
}
}