SureContact MCP server for AI agents

Live

BEARER TOKEN

EMAIL MARKETING

CRM & Sales

SureContact gives your agent email marketing and CRM in one workspace: manage contacts, tags, and lists, review campaigns and reports, enroll contacts in sequences, send one-off emails, and track deals, tasks, and purchases.

  • Per-user credentials: each call uses the actual user's access token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
SureContact
agent · Acme Q3
Run
How did email engagement look last month?
S
surecontact_report_email_engagement_get
117ms
Marketing agent
Last month's emails drew 7,540 opens and 1,120 clicks, a 41% open rate and a 6.1% click rate.
Sources: SureContact email engagement report
surecontact
1 report
18:29
Message Claude...

Tools your marketing agent reaches for on SureContact, scoped per user.

CALL ANY TOOL
126 tools for marketing in SureContact: manage contacts, tags, lists, and companies, review campaigns and reports, enroll contacts in sequences, send one-off emails, and track deals, tasks, and purchases.
surecontact_activity_get
Get activity
Retrieve one contact activity by its UUID. Returns the activity with its type, type label, description, metadata and timestamps. Use activity_get when you have an activity UUID from contact_activities_list.
Parameters
Name
Type
Required
Description
activity_uuid
string
Required
UUID of the activity. Example: 550e8400-e29b-41d4-a716-446655440000.
surecontact_automations_list
List automations
surecontact_campaign_recipients_count_get
Get campaign recipients count
surecontact_company_archive
Archive company
surecontact_company_contact_link
Company contact link
surecontact_company_create
Create company
surecontact_company_deals_list
List company deals
surecontact_company_delete
Delete company
surecontact_company_note_update
Update company note
surecontact_company_primary_set
Set company primary
surecontact_contact_automation_start
Start contact automation
surecontact_contact_companies_attach
Attach contact companies
surecontact_contact_get_by_email
Contact get by email
surecontact_contact_tags_attach
Attach contact tags
surecontact_contact_upsert
Upsert contact
surecontact_deal_activities_list
List deal activities
surecontact_deal_contacts_attach
Attach deal contacts
surecontact_deal_create
Create deal
surecontact_deal_note_delete
Delete deal note
surecontact_deal_stage_update
Update deal stage
surecontact_deal_won
Deal won
surecontact_email_send
Send email
surecontact_email_template_get
Get email template
surecontact_list_contacts_list
List list contacts
surecontact_pages_list
List pages
surecontact_pipeline_get
Get pipeline
surecontact_report_email_sending_get
Get report email sending
surecontact_tag_contacts_add
Add tag contacts
surecontact_tag_contacts_remove
Remove tag contacts
surecontact_task_companies_detach
Detach task companies

For more tools, view docs.

Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// SureContact tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["surecontact"], toolNames: [
    "surecontact_contact_get_by_email",
    "surecontact_contact_tags_attach",
    "surecontact_sequence_enroll"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Tag jordan@example.com as webinar-oct and enroll her in the Onboarding sequence" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["surecontact"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Tag jordan@example.com as webinar-oct and enroll her in the Onboarding sequence" }],
  tools,
});

// Execute the tool call with the user's vaulted SureContact access token
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["surecontact"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Tag jordan@example.com as webinar-oct and enroll her in the Onboarding sequence" }],
  tools,
});

// Tool call runs with the user's vaulted SureContact access token
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["surecontact"] }, pageSize: 100,
});

const agent = new Agent({
  name: "marketing_agent",
  model: "gemini-2.5-pro",
  instruction: "SureContact tools scoped to this user",
  tools,
});

await agent.run("Tag jordan@example.com as webinar-oct and enroll her in the Onboarding sequence");
Try these prompts
Copy any prompt into your agent. Each maps directly to a SureContact tool. Click to copy, paste into your agent, done.
Contacts and lists
Copy the prompt
Copied
Find the contact with email jordan@example.com.
Copy the prompt
Copied
Tag every contact in the Webinar list as webinar-oct.
Copy the prompt
Copied
Add Jordan to the Newsletter list.
Campaigns and sequences
Copy the prompt
Copied
How did email engagement look last month?
Copy the prompt
Copied
Show the sending progress of today's campaign.
Copy the prompt
Copied
Enroll jordan@example.com in the Onboarding sequence.
Deals and tasks
Copy the prompt
Copied
Create a $5,000 deal for Contoso in the Discovery stage.
Copy the prompt
Copied
Mark the Fabrikam deal as won.
Copy the prompt
Copied
Create a task to call Jordan tomorrow.
SEE HOW AUTH WORKS
Each user connects their own SureContact access token once, and Scalekit sends it with every call. Tokens stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
SureContact
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
SureContact
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
SureContact
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
SureContact
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other sales and marketing connectors.
GTM and RevOps Teams
CRM AI agent
Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.
GTM and RevOps Teams
Outbound prospecting agent
Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.
Test other agents
See the same per-user auth pattern across other sales and marketing connectors.
GTM
CRM AI agent
Turn each Granola call transcript into a HubSpot record update, a drafted Gmail follow-up, and a Slack recap.
SALES
Outbound prospecting agent
Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared SureContact access token looks fine in a demo. In production every email send and contact change looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
SureContact today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access SureContact as the user or through a shared access token?
As the user. Each user connects their own SureContact access token once, and Scalekit sends it with every call. Audit logs attribute every contact change, email, and deal update to that user, not a shared service account.
Where is the SureContact access token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new access token. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in SureContact?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example reporting and contact lookups without surecontact_email_send, or without surecontact_tag_delete, which permanently deletes a tag and removes it from all contacts. Scalekit also enforces scope checks before every API call.
What happens when a user revokes SureContact access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Can the agent send emails from SureContact?
Yes, if you expose surecontact_email_send. It sends a one-off email to one contact, with a subject and HTML body or from a template, and delivery is queued. Bulk sends go through campaigns, which the agent can read and report on.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""surecontact"": {
""url"": ""https://mcp.scalekit.com/surecontact"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.surecontact]
url = ""https://mcp.scalekit.com/surecontact""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""surecontact"": {
""url"": ""https://mcp.scalekit.com/surecontact"",
""type"": ""http""
}
}
}