Apavin MCP
With the context, permissions and controls it needs to act safely. Your agent searches conversations, reads customer history and drafts replies. A person approves what goes out.
What MCP is
The Model Context Protocol lets an AI client discover tools on a server and call them. Apavin runs an MCP server for your business communication. It is not a chatbot and not another inbox you have to watch: it is the layer that lets the agent you already use reach email and WhatsApp, under rules you control.
Email connects over IMAP and SMTP with an app password: Gmail and Google Workspace, Outlook.com, Microsoft 365, Yahoo, Zoho Mail or any other host. WhatsApp connects through Meta’s official WhatsApp Business Platform Cloud API with your own number. There is no WhatsApp Web automation and no personal-number workaround.
Connection guide
Sign up free. MCP Developer has no time limit and no card.
Any IMAP/SMTP mailbox with an app password, and a number on Meta's official WhatsApp Cloud API.
Read, draft, submit for sending, templates, follow-ups. Each is a switch. Sending starts off.
Paste the MCP URL into Claude, Cursor, VS Code or your own agent. It signs in with OAuth.
Messages the agent submits wait in Apavin. A person reads each one and presses approve.
Shown in Apavin under Settings, AI agents (MCP), Connect, with a connection test that checks initialization, tool discovery and your accounts without sending anything.
Your client opens Apavin in a browser. You see which application is asking, which workspace, and each permission it wants. Untick what you do not want, approve, and you are returned to your client.
Examples
The agent searches the shared inbox, reads the thread, checks your knowledge base for the price, and saves a draft for you to read.
Who they are, what they asked, what was promised, and whether the 24 hour reply window is still open.
Thread summaries mark awaiting_reply and list the open questions in the customer's last message.
Answers come from documents you uploaded. When the knowledge base has nothing, the tool says so instead of guessing.
The send returns pending_approval and a link. A person approves it in Apavin, and only then does it go out.
Follow-ups are scheduled for a time you choose, approved first, and cancellable until they send.
Permissions and approvals
When you connect Claude or Cursor, Apavin shows the operations it is asking for. Untick any of them.
Workspace switches for reading, drafting, sending, templates, follow-ups and audit access. Off is off, on every call.
MCP Developer reads and drafts. Business adds sending with approval. Growth adds rule-based auto-send.
Your role is checked on every request. Lose access and your agent loses it on its next call, not when its token expires.
The recipient, the account it will go out from, the complete message, the action, the agent’s stated reason, the customer’s last message, template and window constraints, and afterwards who approved it, when, and what the provider reported. Approve, decline, or cancel a scheduled send.
Tools
search_emailsSearch business email · read onlyget_email_threadRead an email thread · read onlyget_email_messageRead one email · read onlysummarize_email_threadSummarize an email thread · read onlycreate_email_draftPrepare an email draftupdate_email_draftEdit an email draftsend_emailSend an email (approval required by default) · approval by defaultschedule_email_follow_upSchedule an email follow-up · approval by defaultget_email_delivery_statusCheck an email's status · read onlysearch_whatsapp_conversationsSearch WhatsApp conversations · read onlyget_whatsapp_conversationRead a WhatsApp conversation · read onlyget_whatsapp_messageRead one WhatsApp message · read onlycreate_whatsapp_reply_draftPrepare a WhatsApp reply draftsend_whatsapp_replySend a WhatsApp reply (approval required by default) · approval by defaultsend_whatsapp_templateSend an approved WhatsApp template (approval required) · approval by defaultschedule_whatsapp_follow_upSchedule a WhatsApp follow-up · approval by defaultcancel_scheduled_messageCancel a pending or scheduled messageget_whatsapp_delivery_statusCheck a WhatsApp message's status · read onlyget_reply_queueWho is waiting on a reply · read onlyget_reply_guidelinesHow this team writes · read onlyget_customer_contextGet a customer's context · read onlysearch_customer_conversationsSearch conversations across email and WhatsApp · read onlyget_business_knowledgeLook up business knowledge · read onlylist_connected_accountsList connected accounts · read onlyget_action_permissionsWhat this agent may do · read onlyget_usage_summaryMCP usage this month · read onlyget_recent_action_logsRecent MCP activity · read onlyadd_customer_noteAdd a note to a customercreate_follow_up_taskCreate a follow-up taskSecurity and revocation
Access tokens last an hour and are stored only as hashes. Refresh tokens rotate, and presenting an old one revokes the connection. Revoking cancels anything the agent queued and has not sent. Credentials for your mailbox and WhatsApp number are encrypted at rest and never returned by any tool.
Plans
| Every 30 days | MCP DeveloperNo time limit, no card₹0$0 | MCP BusinessEmail and WhatsApp, sending with approval₹1,499$19 | MCP GrowthMore accounts, members and auto-send rules₹4,999$59 | EnterpriseAgreed limits and retentionCustom quoteCustom quote |
|---|---|---|---|---|
| MCP calls a month | 500 | 2,000 | 10,000 | Agreed per contract |
| Email accounts for agents | 1 | 1 | 5 | Agreed |
| WhatsApp numbers for agents | None | 1 | 3 | Agreed |
| Members who can connect agents | 1 | 1 | 5 | Agreed |
| Search, read, summaries, drafts | Email only | ✓ | ✓ | ✓ |
| Customer context and business knowledge | ✓ | ✓ | ✓ | ✓ |
| Sending, after a person approves | - | ✓ | ✓ | ✓ |
| WhatsApp templates and scheduled follow-ups | - | ✓ | ✓ | ✓ |
| Rule-based auto-send with kill switch | - | - | ✓ | ✓ |
| Audit log kept | 7 days | 30 days | 90 days | Agreed |
| Sandbox mode | ✓ | ✓ | ✓ | ✓ |
| Start for free | Choose Business | Choose Growth | Contact sales |
Questions
The Model Context Protocol is a standard way for an AI assistant to use outside tools. An MCP server publishes a list of tools with their inputs; an MCP client such as Claude, Cursor or VS Code connects to it and lets the model call those tools. Apavin's MCP server publishes tools for business email, WhatsApp and customer context.
Yes. MCP Developer is free with no time limit: 500 calls a month, one email account, search, reading, summaries and drafts. Sending and WhatsApp start on MCP Business.
Not unless your admin sets that up, and only on MCP Growth or Enterprise. By default every outbound message returns pending_approval and waits for a person in Apavin. Even with auto-send rules on, templates, scheduled messages and first messages to new recipients always wait for a person.
Any MCP client that supports remote servers over Streamable HTTP with OAuth. The settings page has instructions for MCP Inspector, Claude Code, Claude, Cursor and VS Code. Each is marked untested until it has been connected to the live endpoint and the result recorded.
It reads mail Apavin has synced into the shared inbox, which is mail received since you connected the account. It does not reach back into the mailbox's full history, and it only sees accounts your plan allows agents to use.
Revoke the connection under Settings, AI agents (MCP). Its tokens stop working immediately and any message it queued that has not been sent is cancelled. Switching MCP off for the workspace stops every agent at once.
Meta bills you directly for WhatsApp messages on your own WhatsApp Business account. Apavin does not resell or mark up Meta's charges, which vary by recipient country and message category.