{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-07",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "tool": {
    "slug": "mailpace",
    "name": "MailPace",
    "vendor": "OhMySMTP Ltd",
    "vendorUrl": "https://mailpace.com",
    "kind": "http-api",
    "category": "email",
    "summary": "MailPace is a UK transactional email service, formerly OhMySMTP, hosted in the EU. It sends mail through an HTTPS API or SMTP, turns inbound mail into webhooks and has a Domains and Email Status API.",
    "url": "https://www.anchorterminal.com/tools/mailpace",
    "markdownUrl": "https://www.anchorterminal.com/tools/mailpace.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mailpace.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mailpace.json",
    "dns": "mailpace.grade.anchorterminal.com",
    "repo": "https://github.com/mailpace/mailpace-mcp",
    "transports": [
      "http"
    ],
    "packages": [
      {
        "registry": "npm",
        "name": "@mailpace/mailpace.js"
      }
    ],
    "auth": "api-key",
    "authNotes": "Each domain has its own server token, sent in the `MailPace-Server-Token` header, which can send from that domain and read its email status. An organisation token in `MailPace-Organization-Token` manages domains and domain tokens through the Domains API, including revoking them. Both are made in the dashboard after a browser signup.",
    "pricing": "paid",
    "pricingNotes": "$10 a month includes 10,000 emails sent or received, then $1 per 1,000, per the Paddle prices the pricing page loads and the comparison pages ($100 for 100,000, $1,000 for 1 million). A free plan of up to 100 emails a month is given on request by email. Paddle is the merchant of record; card, PayPal, Apple Pay or Google Pay.",
    "priceSummary": "$10 / mo",
    "where": "local",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 in the docs repository, the pricing page or the MCP server source (checked 2026-11-06). Payment is by Paddle subscription; the FAQ says crypto isn't accepted.",
      "endpoints": []
    },
    "toolCount": 12,
    "popularity": {
      "githubStars": 1,
      "npmWeekly": 207,
      "pypiWeekly": null,
      "asOf": "2026-11-06"
    },
    "docsUrl": "https://docs.mailpace.com/",
    "capabilities": [
      "email.send",
      "email.inbound",
      "email.domains",
      "email.analytics"
    ],
    "tags": [
      "hosted",
      "closed-source",
      "smtp",
      "webhooks",
      "idempotency",
      "status-page",
      "sla",
      "eu",
      "mcp",
      "typescript",
      "ruby",
      "go",
      "php"
    ],
    "lastRelease": "2026-10-22",
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 58.4,
      "grade": "C",
      "agentReady": false,
      "rank": 750,
      "ranked": true,
      "rankOf": 1486,
      "categoryRank": 17,
      "methodology": "0.7",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 71,
        "maintenance": 65,
        "payments": 25,
        "reliability": 70,
        "schema": 54,
        "security": 50,
        "transparency": 75
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 70,
          "points": 14,
          "reason": "Graded with the hosted lines. A public Upptime status page at status.mailpace.com, driven by the mailpace/status repository, with monitors for the application, SMTP, docs, blog and landing page and GitHub issues as incident reports (20). The 90 days from 8 August hold two incidents, an application outage on 22 September 2026 that the operator put down to an upstream provider returning 5xx (issue open for two minutes), and SMTP down on 2 November 2026 for about 35 minutes, which leaves SMTP at 99.65% for the week. Minor incidents only (20). No rate limit numbers are published; the docs say limits vary by organisation age, plan and history (0). A documented 429 with its message, no Retry-After or backoff guidance, and an `Idempotency-Key` on sends with written retry rules (10 of 15). The terms guarantee 99% monthly availability of the API and dashboard with a 5% credit per 30 minutes (10). The API is at v1 with no beta label (10). Total 70.",
          "checked": "2026-11-06"
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 54,
          "points": 8.78,
          "reason": "No OpenAPI or other machine-readable contract for the HTTPS API. The MCP server's 12 tools have typed zod inputs and output schemas, but that server isn't published yet, so partial credit (8 of 25). llms.txt answers 404 on mailpace.com and docs.mailpace.com, and no Markdown copies are served (0). The reference states what each endpoint does, and the introduction says when not to use it (transactional only, no batch, no static IPs) (12 of 20). Field tables give type, examples and required or optional, with enums for status, sort and direction and the 50-recipient cap in text (9 of 15). Examples in curl and six languages and a full table of error responses with messages, though several listed messages have a broken quote (`{\"error:\"...`) and the send reference says 30 MB where the home page says 25 MB (12 of 15). Version in the path with a promise that an old version runs until a published end-of-life date, and dated changelog posts (13 of 15). Total 54.",
          "checked": "2026-11-06"
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 71,
          "points": 11.54,
          "reason": "Responses are small, the send returns an id and status and Email Status returns one email (18 of 25). Only the domains list takes `limit`, `offset`, `sort` and `direction`; there is no endpoint to list or search sent mail (8 of 20). Errors are JSON with a human message and an HTTP status for each case in the documented table, with no stable error codes (14 of 20). `Idempotency-Key` on sends, kept 24 hours per token, and failed validations are not stored so they can be retried. The MCP server marks send as not idempotent and revoke as destructive (18 of 20). A send needs from, to, a subject and a body; official libraries for Node, Rails, Go and PHP transports and an SMTP route (13 of 15). Total 71.",
          "checked": "2026-11-06"
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 50,
          "points": 8.75,
          "reason": "Per-domain server tokens that can only send from and read status for their domain, and an organisation token that creates, renames and revokes domain tokens through the Domains API. Tokens travel in headers only. The authentication page still tells users to contact support to regenerate a leaked token (25 of 30). No read-only token. A domain token can't touch other domains, and the unpublished MCP server has an optional recipient allowlist. No approval step on the hosted API (8 of 20). Inbound mail reaches the customer's webhook as untrusted content, and Email Status returns bounce text. The MCP README warns about prompt injection and suggests the allowlist (9 of 15). The dashboard keeps sent mail for 30 days; no log of API calls was found (6 of 15). No security.txt (404 on mailpace.com and app.mailpace.com), no disclosure policy, bug bounty, SOC 2 or ISO 27001. WebAuthn-only two-factor sign-in and Ed25519-signed webhooks are documented (2 of 20). Total 50.",
          "checked": "2026-11-06"
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 25,
          "points": 3.13,
          "reason": "No x402, MPP or L402 (0). $10 a month for 10,000 emails and $1 per 1,000 after, loaded from Paddle on the pricing page and stated in the comparison pages' tables without login (20). A free plan of up to 100 emails a month is available only by emailing support, so it isn't self-serve (5 of 20). Signup, DKIM verification and payment happen in a browser (0). Total 25.",
          "checked": "2026-11-06"
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 65,
          "points": 5.69,
          "reason": "Email Status API documented on 22 October 2026, and the MCP server rewritten as 2.0.0 on 4 November 2026, two days before this check (30). In the 90 days from 8 August, the Q3 changelog post of 31 August, the Email Status docs of 22 October, a mailpace-rails push on 17 October and the MCP rewrite, but only one changelog post (15 of 20). A closed service with email support. Three pull requests to the MCP repository from 2025 have no reply (8 of 15). Not in the official MCP registry (search for mailpace returned nothing on 6 November). The Node library was last pushed in October 2024 and Go in January 2024, while mailpace-rails is current (7 of 15). The MCP server gained CI with tests on 4 November; the older SDKs weren't checked for CI (5 of 10). Total 65.",
          "checked": "2026-11-06"
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 75,
          "points": 6.56,
          "note": "editorial 69, provenance 81",
          "reason": "Closed hosted service under terms that name OhMySMTP Ltd with its company number. The MCP server, SDKs, landing site and status page are MIT (18 of 30). The privacy policy (30 August 2026), the pricing page and the DPA agree on retention, 30 days in the dashboard and 7 more in backups, 37 days at most (25 of 30). The API reference promises an old version runs until a published end-of-life date, and the terms list dated changes. The terms also say changes apply immediately (8 of 20). Sub-processors listed with purpose and location, Freethought hosting in the EU, Hetzner backups in Germany, AppSignal in Amsterdam, Paddle in the UK and Tutanota in Germany (18 of 20). Total 69.",
          "checked": "2026-11-06"
        }
      ],
      "assessment": {
        "date": "2026-11-06",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "Responses are small, the send returns an id and status and Email Status returns one email (18 of 25). Only the domains list takes `limit`, `offset`, `sort` and `direction`; there is no endpoint to list or search sent mail (8 of 20). Errors are JSON with a human message and an HTTP status for each case in the documented table, with no stable error codes (14 of 20). `Idempotency-Key` on sends, kept 24 hours per token, and failed validations are not stored so they can be retried. The MCP server marks send as not idempotent and revoke as destructive (18 of 20). A send needs from, to, a subject and a body; official libraries for Node, Rails, Go and PHP transports and an SMTP route (13 of 15). Total 71.",
          "maintenance": "Email Status API documented on 22 October 2026, and the MCP server rewritten as 2.0.0 on 4 November 2026, two days before this check (30). In the 90 days from 8 August, the Q3 changelog post of 31 August, the Email Status docs of 22 October, a mailpace-rails push on 17 October and the MCP rewrite, but only one changelog post (15 of 20). A closed service with email support. Three pull requests to the MCP repository from 2025 have no reply (8 of 15). Not in the official MCP registry (search for mailpace returned nothing on 6 November). The Node library was last pushed in October 2024 and Go in January 2024, while mailpace-rails is current (7 of 15). The MCP server gained CI with tests on 4 November; the older SDKs weren't checked for CI (5 of 10). Total 65.",
          "payments": "No x402, MPP or L402 (0). $10 a month for 10,000 emails and $1 per 1,000 after, loaded from Paddle on the pricing page and stated in the comparison pages' tables without login (20). A free plan of up to 100 emails a month is available only by emailing support, so it isn't self-serve (5 of 20). Signup, DKIM verification and payment happen in a browser (0). Total 25.",
          "reliability": "Graded with the hosted lines. A public Upptime status page at status.mailpace.com, driven by the mailpace/status repository, with monitors for the application, SMTP, docs, blog and landing page and GitHub issues as incident reports (20). The 90 days from 8 August hold two incidents, an application outage on 22 September 2026 that the operator put down to an upstream provider returning 5xx (issue open for two minutes), and SMTP down on 2 November 2026 for about 35 minutes, which leaves SMTP at 99.65% for the week. Minor incidents only (20). No rate limit numbers are published; the docs say limits vary by organisation age, plan and history (0). A documented 429 with its message, no Retry-After or backoff guidance, and an `Idempotency-Key` on sends with written retry rules (10 of 15). The terms guarantee 99% monthly availability of the API and dashboard with a 5% credit per 30 minutes (10). The API is at v1 with no beta label (10). Total 70.",
          "schema": "No OpenAPI or other machine-readable contract for the HTTPS API. The MCP server's 12 tools have typed zod inputs and output schemas, but that server isn't published yet, so partial credit (8 of 25). llms.txt answers 404 on mailpace.com and docs.mailpace.com, and no Markdown copies are served (0). The reference states what each endpoint does, and the introduction says when not to use it (transactional only, no batch, no static IPs) (12 of 20). Field tables give type, examples and required or optional, with enums for status, sort and direction and the 50-recipient cap in text (9 of 15). Examples in curl and six languages and a full table of error responses with messages, though several listed messages have a broken quote (`{\"error:\"...`) and the send reference says 30 MB where the home page says 25 MB (12 of 15). Version in the path with a promise that an old version runs until a published end-of-life date, and dated changelog posts (13 of 15). Total 54.",
          "security": "Per-domain server tokens that can only send from and read status for their domain, and an organisation token that creates, renames and revokes domain tokens through the Domains API. Tokens travel in headers only. The authentication page still tells users to contact support to regenerate a leaked token (25 of 30). No read-only token. A domain token can't touch other domains, and the unpublished MCP server has an optional recipient allowlist. No approval step on the hosted API (8 of 20). Inbound mail reaches the customer's webhook as untrusted content, and Email Status returns bounce text. The MCP README warns about prompt injection and suggests the allowlist (9 of 15). The dashboard keeps sent mail for 30 days; no log of API calls was found (6 of 15). No security.txt (404 on mailpace.com and app.mailpace.com), no disclosure policy, bug bounty, SOC 2 or ISO 27001. WebAuthn-only two-factor sign-in and Ed25519-signed webhooks are documented (2 of 20). Total 50.",
          "transparency": "Closed hosted service under terms that name OhMySMTP Ltd with its company number. The MCP server, SDKs, landing site and status page are MIT (18 of 30). The privacy policy (30 August 2026), the pricing page and the DPA agree on retention, 30 days in the dashboard and 7 more in backups, 37 days at most (25 of 30). The API reference promises an old version runs until a published end-of-life date, and the terms list dated changes. The terms also say changes apply immediately (8 of 20). Sub-processors listed with purpose and location, Freethought hosting in the EU, Hetzner backups in Germany, AppSignal in Amsterdam, Paddle in the UK and Tutanota in Germany (18 of 20). Total 69."
        },
        "sources": [
          {
            "what": "home page and quick facts",
            "url": "https://mailpace.com/",
            "seen": "2026-11-06"
          },
          {
            "what": "pricing page",
            "url": "https://mailpace.com/pricing",
            "seen": "2026-11-06"
          },
          {
            "what": "Paddle prices the pricing page loads",
            "url": "https://checkout.paddle.com/api/2.0/prices?product_ids=687241,687246\u0026customer_country=US",
            "seen": "2026-11-06"
          },
          {
            "what": "docs introduction",
            "url": "https://docs.mailpace.com/",
            "seen": "2026-11-06"
          },
          {
            "what": "docs repository (reference, guides, history)",
            "url": "https://github.com/mailpace/docs",
            "seen": "2026-11-06"
          },
          {
            "what": "MCP server source",
            "url": "https://github.com/mailpace/mailpace-mcp",
            "seen": "2026-11-06"
          },
          {
            "what": "status repository and incident issues",
            "url": "https://github.com/mailpace/status/issues?q=is%3Aissue",
            "seen": "2026-11-06"
          },
          {
            "what": "landing repository (terms, privacy, DPA, changelog posts)",
            "url": "https://github.com/mailpace/landing",
            "seen": "2026-11-06"
          },
          {
            "what": "terms",
            "url": "https://mailpace.com/terms",
            "seen": "2026-11-06"
          },
          {
            "what": "Companies House officers",
            "url": "https://find-and-update.company-information.service.gov.uk/company/13200428/officers",
            "seen": "2026-11-06"
          },
          {
            "what": "official MCP registry search",
            "url": "https://registry.modelcontextprotocol.io/v0/servers?search=mailpace",
            "seen": "2026-11-06"
          }
        ],
        "openQuestions": [
          "The home page says 1,000 emails a month for under $4 a month, while the pricing page's lowest price is $10 a month for 10,000; no plan under $10 was found",
          "Whether the free 100-email plan needs a card was not stated",
          "Rate limit numbers are not published",
          "unchecked: the MCP server's npm package and registry entry, which its README says are coming"
        ]
      },
      "negative": 0,
      "verdict": "A small transactional sender with idempotent sends, signed webhooks, a 99% availability promise in its terms and a public Upptime status record. There is no OpenAPI spec, no published rate limit, no llms.txt, and its MCP server was rewritten on 4 November 2026 but isn't on npm or in the MCP registry yet.",
      "bestFor": "Low-volume transactional mail from EU-hosted infrastructure with idempotent sends and no tracking.",
      "strengths": [
        "Sends accept an `Idempotency-Key` header kept for 24 hours, so a retry after a timeout doesn't send twice",
        "Per-domain server tokens limit a leaked key to one domain, and organisation tokens can create and revoke them by API",
        "Webhooks are signed with Ed25519 and inbound mail is retried five times before it fails",
        "Status page on Upptime with GitHub issues as incident reports, and a 99% monthly availability promise with credits in the terms",
        "Sub-processors and their locations are listed, and mail is kept 30 days plus 7 in backups per the DPA"
      ],
      "weaknesses": [
        "No OpenAPI spec, llms.txt or Markdown docs for agents; the reference is Docusaurus pages",
        "Rate limits aren't published; the docs say they vary by organisation age, plan and history",
        "No free plan without emailing support, and the paid plan starts at $10 a month",
        "MCP server 2.0.0 exists only in the repository; npm and the MCP registry had nothing for it on 6 November 2026",
        "No security.txt, disclosure policy or certification found"
      ],
      "agentNotes": [
        "Send a UUID in `Idempotency-Key` on every `POST /api/v1/send`, and reuse it on a retry; keys last 24 hours and are tied to one token",
        "Use the server token of the sending domain, since the From domain must match the token's domain or the API returns 403",
        "On 429 `You are sending emails too quickly` back off; no Retry-After is documented",
        "Send only transactional mail; marketing and bulk newsletters are prohibited by the docs and terms",
        "Read delivery with `GET /api/v1/domains/:domain_id/emails/:id` using the id the send returned"
      ],
      "metrics": {
        "kind": "remote",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "C",
          "methodology": "0.7",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 58.4
        }
      ],
      "editorialScores": {
        "ergonomics": 71,
        "maintenance": 65,
        "payments": 25,
        "reliability": 70,
        "schema": 54,
        "security": 50,
        "transparency": 69
      },
      "provenanceScore": 81,
      "checked": {
        "categories": {
          "ergonomics": "2026-11-06",
          "maintenance": "2026-11-06",
          "payments": "2026-11-06",
          "reliability": "2026-11-06",
          "schema": "2026-11-06",
          "security": "2026-11-06",
          "transparency": "2026-11-06"
        },
        "last": "2026-11-06",
        "oldest": "2026-11-06",
        "stale": false,
        "staleAfterDays": 90
      },
      "scoreHistory": [
        {
          "date": "2026-11-06",
          "grade": "C",
          "kind": "listed",
          "method": "0.7",
          "score": 58.4
        }
      ]
    },
    "connect": {
      "http": "curl https://app.mailpace.com/api/v1/send -X POST -H \"Accept: application/json\" -H \"Content-Type: application/json\" -H \"MailPace-Server-Token: $MAILPACE_TOKEN\" -H \"Idempotency-Key: $(uuidgen)\" -d '{\"from\":\"you@yourdomain.com\",\"to\":\"person@example.com\",\"subject\":\"Hello\",\"textbody\":\"Hello\"}'"
    },
    "letme": {
      "capability": "https://letme.dev/email.send",
      "tool": "https://letme.dev/mailpace"
    },
    "notable": [
      "Send endpoint takes an `Idempotency-Key` header, kept 24 hours per API token, so a retried send is delivered once (https://docs.mailpace.com/guide/idempotency)",
      "Email Status API added on 22 October 2026 returns queued, delivered, deferred, bounced or spam with the bounce response for one email (https://docs.mailpace.com/reference/email-status)",
      "MCP server rewritten as version 2.0.0 on 4 November 2026 with 12 tools, annotations, output schemas and an optional recipient allowlist. It isn't on npm or in the official MCP registry yet (https://github.com/mailpace/mailpace-mcp)",
      "No open or click tracking, by design, and only transactional mail is allowed (https://docs.mailpace.com/)",
      "Terms promise 99% monthly availability of the API and dashboard with a 5% credit per 30 minutes of downtime (https://mailpace.com/terms)"
    ],
    "area": "communication",
    "details": [
      {
        "label": "Surface listed",
        "value": "The HTTPS API at app.mailpace.com/api/v1 (send, Domains API, Email Status API), SMTP and inbound webhooks, read from the docs repository, mailpace.com, the landing and status repositories and the MCP server source on 6 November 2026. No account was made"
      },
      {
        "label": "Limits",
        "value": "Up to 50 recipients in the To field, no batch endpoint, 30 MB total message size per the send reference (the home page says 25 MB). Rate limits unpublished"
      },
      {
        "label": "Retention",
        "value": "Emails shown in the dashboard for 30 days, deleted from backups 7 days later, 37 days at most, per the DPA"
      },
      {
        "label": "MCP server",
        "value": "mailpace-mcp 2.0.0, stdio, MIT, 12 tools (send, email status, domains and domain tokens), rewritten 4 November 2026. Its README says it will be published to npm and the official MCP registry as com.mailpace/mailpace-mcp"
      },
      {
        "label": "Hosting",
        "value": "Freethought (EU-hosted application servers and databases), Hetzner backups in Germany, AppSignal in Amsterdam, Paddle and Tutanota, per the privacy policy of 30 August 2026"
      },
      {
        "label": "Previous name",
        "value": "OhMySMTP until January 2022; the company is still OhMySMTP Ltd"
      }
    ],
    "unitPrices": [
      {
        "item": "Scaling plan",
        "unit": "month",
        "usd": 10,
        "note": "includes 10,000 emails sent or received"
      },
      {
        "item": "Emails beyond 10,000",
        "unit": "1k-emails",
        "usd": 1
      }
    ],
    "provenance": {
      "legalEntity": "OhMySMTP Ltd",
      "domain": "mailpace.com",
      "domainRegistered": "2022-01-10",
      "endpointOnVendorDomain": true,
      "terms": "https://mailpace.com/terms",
      "privacy": "https://mailpace.com/privacy",
      "statusPage": "https://status.mailpace.com",
      "changelog": "https://mailpace.com/category/changelog",
      "securityTxt": "none",
      "checked": "2026-11-06",
      "notes": [
        "The terms and privacy policy name OhMySMTP Ltd, incorporated in England and Wales, company number 13200428. Companies House lists two active directors.",
        "Terms last updated 9 January 2026, privacy policy 30 August 2026, DPA updated in October 2026 per the landing repository.",
        "mailpace.com/robots.txt allows all paths. The terms contain no clause on automated access to the website beyond the usual licence limits.",
        "RDAP gives mailpace.com a registration date of 10 January 2022; the service ran as OhMySMTP before that.",
        "/.well-known/security.txt returns 404 on mailpace.com and app.mailpace.com."
      ],
      "score": 81,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "OhMySMTP Ltd",
          "points": 20,
          "max": 20,
          "state": "ok"
        },
        {
          "check": "Domain age",
          "value": "mailpace.com, registered 2022-01-10 (4 years)",
          "points": 7,
          "max": 15,
          "state": "part"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "mailpace.com",
          "points": 15,
          "max": 15,
          "state": "ok"
        },
        {
          "check": "Terms of service",
          "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points",
          "points": 7.1,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Privacy policy",
          "value": "read, states 6 of the 8 things a reader expects",
          "points": 8.5,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Status page",
          "value": "status.mailpace.com",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Changelog",
          "value": "published",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "security.txt",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "People named",
          "value": "2 named with their role, 1 with a public profile",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Support route",
          "value": "a support address, help pages",
          "points": 5,
          "max": 5,
          "state": "ok"
        }
      ],
      "policies": [
        {
          "kind": "terms",
          "url": "https://mailpace.com/terms",
          "state": "read",
          "readAt": "2026-11-06",
          "statedDate": "2026-01-09",
          "words": 2086,
          "points": 7.1,
          "max": 10,
          "expected": [
            {
              "key": "terms.date",
              "label": "Gives the date it was last updated",
              "found": true,
              "quote": "Last Updated: January 9th 2026",
              "says": "Last updated 2026-01-09"
            },
            {
              "key": "terms.law",
              "label": "Names the governing law or courts",
              "found": true,
              "quote": "Any claim relating to MailPace's web site shall be governed by the laws of the United Kingdom of Great Britain and Northern Ireland without regard to its conflict of law provisions.",
              "says": "The law of the United Kingdom of Great Britain"
            },
            {
              "key": "terms.liability",
              "label": "States a limit on its liability",
              "found": true,
              "quote": "In no event shall MailPace or its suppliers be liable for any damages (including, without limitation, damages for loss of data or profit, or due to business interruption,) arising out of the use or inability to use the materials on MailPace's Internet site or the service provided by MailPace, even if MailPace or a Mai…"
            },
            {
              "key": "terms.termination",
              "label": "Says how the agreement or account can be ended",
              "found": true,
              "quote": "MailPace may suspend the services without liability if: (i) MailPace reasonably believes that the services are being used in violation of the Agreement;"
            },
            {
              "key": "terms.changes",
              "label": "Says how changes to the terms are announced",
              "found": false
            },
            {
              "key": "terms.use",
              "label": "Lists what users may not do",
              "found": true,
              "quote": "You may not use MailPace’s network or services to engage in, foster, or promote illegal, abusive, or irresponsible behavior, including:"
            },
            {
              "key": "terms.sla",
              "label": "Refers to a service level or uptime commitment",
              "found": true,
              "quote": "MailPace guarantees that the email API service and dashboard will be available 99% of the time in any given monthly billing period, excluding maintenance.",
              "says": "Names 99% availability"
            }
          ],
          "toKnow": [
            {
              "key": "terms.automated",
              "label": "Restricts automated access",
              "found": true,
              "quote": "Creation of Bot accounts;",
              "costsPoints": true
            }
          ]
        },
        {
          "kind": "privacy",
          "url": "https://mailpace.com/privacy",
          "state": "read",
          "readAt": "2026-11-06",
          "statedDate": "2026-08-30",
          "words": 734,
          "points": 8.5,
          "max": 10,
          "expected": [
            {
              "key": "privacy.date",
              "label": "Gives the date it was last updated",
              "found": true,
              "quote": "Last Updated: August 30th 2026",
              "says": "Last updated 2026-08-30"
            },
            {
              "key": "privacy.collected",
              "label": "Says what personal data is collected",
              "found": true,
              "quote": "We collect your email address to allow us to provide a login service and to send important account notifications, such as plan upgrades and support services."
            },
            {
              "key": "privacy.retention",
              "label": "Says how long data is kept",
              "found": true,
              "quote": "These emails are sent through our SMTP server and stored for you to access them for up to 30 days.",
              "says": "Names a period of 30 days"
            },
            {
              "key": "privacy.processors",
              "label": "Says who else receives the data",
              "found": true,
              "quote": "Share your data with third parties for marketing purposes"
            },
            {
              "key": "privacy.sale",
              "label": "Says whether personal data is sold or shared for advertising",
              "found": false
            },
            {
              "key": "privacy.rights",
              "label": "Says what rights people have over their data",
              "found": true,
              "quote": "We share certain information to operate our service with companies that may be considered our \"sub-processors\" under GDPR."
            },
            {
              "key": "privacy.contact",
              "label": "Gives a privacy contact",
              "found": false
            },
            {
              "key": "privacy.transfers",
              "label": "Says where data is transferred or stored",
              "found": true,
              "quote": "Proudly made in the UK 🇬🇧 and hosted in the European Union 🇪🇺"
            }
          ]
        }
      ]
    },
    "humans": {
      "slug": "mailpace",
      "checked": "2026-11-06",
      "company": "OhMySMTP Ltd",
      "people": [
        {
          "name": "Paul Cleary",
          "role": "Founder, MailPace; director, OhMySMTP Ltd",
          "founder": true,
          "x": "https://x.com/EHLO_250",
          "page": "/people/paul-cleary/"
        },
        {
          "name": "Harriet Cleary",
          "role": "Director, OhMySMTP Ltd, appointed 20 February 2026",
          "page": "/people/harriet-cleary/"
        }
      ],
      "peopleNote": "MailPace's current site, docs and blog name no team. Its earlier blog (The Official MailPace Blog, the blog.mailpace.com build still served on Netlify) signs the rename post of 28 January 2022 \"Written by Paul, founder of MailPace\" and links his X account. Companies House lists Paul Cleary as a director of OhMySMTP Ltd (13200428) since its incorporation on 15 February 2021, and Harriet Cleary since 20 February 2026; the terms and privacy policy name OhMySMTP Ltd. Commits to the MCP, docs and status repositories come from the GitHub account paul-oms, whose profile gives no name, so it isn't linked here. No investors or funding announcements were found on mailpace.com, its blog, the old blog or the Companies House pages, so investors are left out.",
      "companySocial": {
        "github": "https://github.com/mailpace"
      },
      "support": {
        "emails": [
          "support@mailpace.com"
        ],
        "urls": [
          "https://docs.mailpace.com/",
          "https://status.mailpace.com"
        ]
      },
      "sources": [
        "https://mailpace.com/",
        "https://mailpace.com/terms",
        "https://mailpace.com/privacy",
        "https://docs.mailpace.com/",
        "https://find-and-update.company-information.service.gov.uk/company/13200428/officers",
        "https://github.com/mailpace",
        "https://determined-leavitt-2bc472.netlify.app/blog/ohmysmtp-is-now-mailpace",
        "https://mailpace.com/blog/changelog/ohmysmtp-is-now-mailpace"
      ],
      "ownership": {
        "status": "private",
        "checked": "2026-11-06",
        "sources": [
          "https://find-and-update.company-information.service.gov.uk/company/13200428/officers",
          "https://mailpace.com/terms"
        ]
      }
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/mailpace.json",
    "live": {
      "slug": "mailpace",
      "vendorStatus": {
        "page": "https://status.mailpace.com",
        "indicator": "unknown",
        "summary": "no machine-readable status found",
        "checkedAt": "2026-11-07T04:48:01.553362214Z"
      },
      "versions": [
        {
          "registry": "npm",
          "name": "@mailpace/mailpace.js",
          "version": "0.1.3",
          "seenAt": "2026-11-06T23:42:02.752996422Z"
        }
      ],
      "githubStars": 1,
      "npmWeekly": 207,
      "securityTxt": {
        "url": "https://mailpace.com/.well-known/security.txt",
        "state": "none",
        "checkedAt": "2026-11-07T16:01:07.630537329Z"
      },
      "pages": [
        {
          "url": "https://mailpace.com/category/changelog",
          "kind": "changelog",
          "status": 200,
          "checkedAt": "2026-11-07T14:13:40.841899008Z",
          "changedAt": "0001-01-01T00:00:00Z",
          "fingerprint": "38f92a159d1b"
        },
        {
          "url": "https://mailpace.com/privacy",
          "kind": "privacy",
          "status": 200,
          "checkedAt": "2026-11-07T14:13:45.28058492Z",
          "changedAt": "0001-01-01T00:00:00Z",
          "fingerprint": "e6b0fea49c1d"
        },
        {
          "url": "https://mailpace.com/terms",
          "kind": "terms",
          "status": 200,
          "checkedAt": "2026-11-07T14:13:45.480605157Z",
          "changedAt": "0001-01-01T00:00:00Z",
          "fingerprint": "24f1eed01dad"
        }
      ],
      "updatedAt": "2026-11-07T16:01:07.630537329Z"
    }
  }
}
