MCP Hub
Back to servers

faxdrop-mcp

Enables AI assistants to send real faxes through the FaxDrop API. Provides safeguards including rate limiting, dry-run mode, and audit logging for secure fax operations.

glama
Updated
Apr 18, 2026

faxdrop-mcp

Send real faxes from any MCP-enabled AI assistant. Wraps the FaxDrop HTTP API.

CI CodeQL OpenSSF Scorecard Socket Security

npm version Node.js Version License: MIT MCP PRs Welcome

A Model Context Protocol (MCP) server that lets AI assistants (Claude, Cursor, Continue, OpenClaw…) send real faxes through the FaxDrop API.

Why this MCP?

Faxing is still required by US healthcare, government forms, and a long tail of legal/financial workflows. FaxDrop is a hosted fax service with a clean HTTP API and a free tier (2 faxes/month). This MCP exposes it to LLMs with the safeguards an agent platform expects: rate limit, dry-run, redacted audit log.

Installation

npm install -g faxdrop-mcp

Or use directly with npx:

npx faxdrop-mcp

Configuration

The server reads FAXDROP_API_KEY from the environment. Get your key at faxdrop.com/account (Developer API → Generate Key). Keys look like fd_live_<32 hex>.

Claude Desktop / Claude Code

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (or ~/.claude.json for Claude Code):

{
  "mcpServers": {
    "faxdrop": {
      "command": "npx",
      "args": ["-y", "faxdrop-mcp"],
      "env": {
        "FAXDROP_API_KEY": "fd_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      }
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "faxdrop": {
      "command": "npx",
      "args": ["-y", "faxdrop-mcp"],
      "env": {
        "FAXDROP_API_KEY": "fd_live_..."
      }
    }
  }
}

OpenClaw

Add to ~/.openclaw/openclaw.json, then restart the gateway (docker restart openclaw-openclaw-gateway-1 or your equivalent).

Tools (2)

faxdrop_send_fax

Send a fax. Uploads a local document to a fax number in international (E.164) format.

Required:

  • filePath (string, absolute) — PDF, DOCX, JPEG, or PNG, ≤10 MB
  • recipientNumber (string) — E.164, e.g. +12125551234
  • senderName (string)
  • senderEmail (string)

Optional cover-page fields:

  • includeCover (boolean) — free accounts default to true; paid accounts default to false
  • coverNote (string, ≤500) — message body
  • recipientName, subject, senderCompany, senderPhone

Returns: { success, faxId, status, statusUrl }

faxdrop_get_fax_status

Check the delivery status of a previously sent fax.

Required:

  • faxId (string) — the ID returned by faxdrop_send_fax

Returns: { id, status, recipientNumber, pages, completedAt, error? }

Status values: queued | sending | delivered | failed | partial. Most US faxes complete in under 90 seconds.

Safeguards

KnobEnv varDefaultNotes
Dry runFAXDROP_MCP_DRY_RUN=trueoffWrite tools (faxdrop_send_fax) return the would-be payload (sensitive fields redacted) and never call FaxDrop. Reads still pass through.
Audit logFAXDROP_MCP_AUDIT_LOG=/abs/path/audit.logoffAppend-only JSON Lines (file mode 0o600). Sensitive args are redacted.

Rate limiting is left to FaxDrop itself (10/min, 100/h, 500/day per key). 429 responses get error_type: "rate_limited" and a retry_after value, both surfaced to the caller.

FaxDropError responses are mapped to clean isError: true MCP responses with error_type, hint, and retry_after. HTTP 402 (no credits) and 429 (rate-limited) get explicit hints.

Security

  • Always confirm with the user (recipient, file, cover-page) before invoking faxdrop_send_fax. This is also baked into the tool description.
  • The MCP reads files from the user's local filesystem — only expose this server to agents you trust.
  • Test prompts safely with FAXDROP_MCP_DRY_RUN=true.
  • See SECURITY.md for the vulnerability reporting process.

Contributing

PRs welcome. Before submitting:

  • npm test (must stay green)
  • npm run build (must succeed)
  • npm run lint (must succeed)
  • CHANGELOG.md updated under [Unreleased]

Releases are automated: bump package.json → merge release PR → git tag -s vX.Y.Z && git push origin vX.Y.Z. The release workflow extracts the matching CHANGELOG section, creates the GitHub Release, signs dist/index.js with Sigstore, and publishes to npm with provenance.

License

MIT — see LICENSE.

Reviews

No reviews yet

Sign in to write a review