{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "mandrill", "name": "Mailchimp Transactional (Mandrill)", "vendor": "Intuit Mailchimp", "vendorUrl": "https://mailchimp.com/features/transactional-email/", "kind": "http-api", "category": "email", "summary": "Transactional email service from Intuit Mailchimp, formerly Mandrill. It sends application email and SMS through an HTTP API, SMTP or a hosted MCP server, with templates, inbound routing, webhooks and reporting, as a paid add-on to a Mailchimp plan.", "url": "https://www.anchorterminal.com/tools/mandrill", "markdownUrl": "https://www.anchorterminal.com/tools/mandrill.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mandrill.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mandrill.json", "repo": "https://github.com/mailchimp/mailchimp-client-lib-codegen", "license": "Proprietary service under Mailchimp's Standard Terms of Use and Additional Terms. The client libraries are under Mailchimp's own client library licence agreement", "transports": [ "http" ], "remoteUrl": "https://mandrillapp.com/api/1.4", "packages": [ { "registry": "npm", "name": "@mailchimp/mailchimp_transactional" }, { "registry": "pypi", "name": "mailchimp-transactional" } ], "auth": "api-key", "authNotes": "Self-serve API key, created in the Transactional web app at mandrillapp.com/settings by an Owner or Admin of the Mailchimp account. The key goes in the JSON body of every POST as `key`, and the MCP server takes it as `Authorization: Bearer`. A key can be limited to chosen endpoints and to IP addresses, and a restricted key needs the AI Agents permission group to use the MCP server. Test keys work only in test mode. There is no OAuth for this API.", "pricing": "paid", "pricingNotes": "$20 per block of 25,000 emails a month for 1 to 20 blocks, falling in steps to $10 at 161 blocks or more, on top of a Standard or Premium Mailchimp marketing plan. Blocks are billed monthly in advance and unused emails do not roll over. A dedicated IP is $29.95 a month. An agent's owner can start without a contract through the demo, which gives 500 emails once to the account's own verified domain on any Mailchimp account, free plan included. Test keys send nothing and cost nothing (https://mailchimp.com/pricing/transactional-email/).", "priceSummary": "$29.95 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the OpenAPI file or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": 226039, "pypiWeekly": 132016, "asOf": "2026-10-08" }, "docsUrl": "https://mailchimp.com/developer/transactional/docs/fundamentals/", "llmsTxt": "https://mailchimp.com/developer/transactional/llms.txt", "openapi": "https://mailchimp.com/developer/openapi/api-reference-2.json", "capabilities": [ "email.send", "email.templates", "email.inbound", "email.domains", "email.analytics" ], "tags": [ "hosted", "paid", "mcp", "openapi", "llms-txt", "api-key", "smtp", "webhooks", "inbound", "sandbox", "typescript", "python", "status-page", "soc2" ], "lastRelease": "2026-03-24", "graded": true, "anchor": { "graded": true, "score": 58.1, "grade": "C", "agentReady": false, "rank": 459, "ranked": true, "rankOf": 722, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 28, "payments": 35, "reliability": 53, "schema": 79, "security": 68, "transparency": 71 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 53, "points": 10.6, "reason": "Graded on the hosted Transactional API with the hosted lines. status.mailchimp.com lists Mailchimp Transactional as its own component and keeps event history by month (20). In the 90 days to 8 October 2026 it shows three Transactional incidents, all sending delays. They ran about 4 hours 8 minutes on 1 September for some accounts, 4 hours 26 minutes on 15 September and 38 minutes on 17 September. None is described as the API being down, and we count the two long delays together as one major (10). Published numbers cover `/messages/search` at 20 calls a minute, test mode at 10,000 messages a day and the demo at 25 emails an hour. The hourly sending quota is set from reputation with no figure, and no general request limit was found (8). The search endpoint returns 429 and the release notes say to retry 60 seconds after the first of the 20 calls. Mail over the hourly quota is queued in a backlog and not refused. No `Retry-After` header and no idempotency key for sends were found (5). No SLA found, and the additional terms supply the service as-is (0). Generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 79, "points": 12.84, "reason": "An OpenAPI 3.1 file with all 99 operations is public at mailchimp.com/developer/openapi/api-reference-2.json, and a Swagger 2.0 copy sits in the client library repository. The link to it in the Transactional llms.txt returns 404 (25). llms.txt for the developer site and for Transactional, and a Markdown copy of every page at the URL plus `.md` (10). Each operation has a summary and a description averaging about 120 characters. They say what a call does and seldom when not to use it (11). Request bodies carry 36 enums, required fields, date patterns and minimum and maximum values. Headers, metadata and merge variables are free-form objects (11). Reference pages show request and response samples with code in eight languages, and each operation lists typed error bodies. The OpenAPI file itself has no examples (13). The version is in the path, but the docs use 1.0, 1.3 and 1.4 in different places, and the public changelog has nothing newer than 19 August 2025, so the move to 1.4 in March 2026 is not in it (9)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 60, "points": 9.75, "reason": "Graded on the API. `/messages/search` takes a `limit` up to 1,000 and send responses are one small object per recipient. No field selection was found. The hosted MCP server has 9 tools and reaches the 99 operations through `list_api`, `describe_api` and `call_api`, which keeps the definitions small (16). Search filters by date, tag, sender and API key, with no offset or cursor, so larger result sets go through a queued export (10). Errors return `status`, `code`, `name` and `message`, and the fundamentals page pairs common ones with a cause and a fix (16). No idempotency key. Test keys let an agent try sends without delivery, and scheduled messages can be listed and cancelled. We could not read the MCP tool annotations without a key (5). A send needs a key, a sender, a recipient and content. Official libraries for Node, Python, PHP and Ruby (13)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 68, "points": 11.9, "reason": "API keys are created and revoked in the web app, several to an account, and each can be limited to chosen endpoints and to IP addresses. Keys do not expire and no rotation tooling was found. A new key has full account access by default. The key travels in the JSON body or a Bearer header, not the URL (26). Per-endpoint key permissions, IP limits, test keys that send nothing and subaccounts that can be paused. No approval step for sends or deletes (15). The API and the MCP server return inbound mail and stored message content, which is untrusted text. No guidance on prompt injection was found in the MCP guide or the docs (3). The Account Security page lists the IP addresses that used the account and whether each came by API, SMTP or web, and searches can filter by API key (10). A responsible disclosure programme with no rewards, a security.txt with a contact and no Expires field, SOC 2 reports and ISO 27001 per the security page, and regular penetration tests. No public advisory feed found (14)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 35, "points": 4.38, "reason": "No x402, MPP or L402 (0). Block prices are public without a login, $20 per 25,000 emails falling to $10, and $29.95 a month for a dedicated IP. Full use also needs a Standard or Premium marketing plan, whose price is on a separate page (20). The demo gives 500 emails once on any Mailchimp account, free plan included. We take 5 off because it sends only to the account's own verified domain and we could not confirm that signup asks for no card (15). A person signs up in a browser, enables the add-on, creates a key and sets DNS records, so there is no autonomous route (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "The newest dated release we found is version 1.4.1 of the specification and the Node and Python libraries on 24 March 2026, 198 days before this check (0). No dated Transactional release or changelog entry in the last 90 days. The newest changelog entry is 19 August 2025 (0). A public changelog, a support contact and an API help address in the specification. We saw no public issue replies (6). The Node and Python libraries are both at 1.4.1 and match the current API version, with about 226,000 and 132,000 weekly downloads (15). The generator repository has workflows that validate the specification and build and test each library, and the Node library was updated in February 2024 for an Axios advisory. The test workflow needs a secret key, so we could not see results (7)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 71, "points": 6.21, "note": "editorial 64, provenance 77", "reason": "Closed service with published terms and a named contracting entity. The client libraries are source-available under Mailchimp's own licence agreement, which is not an OSI licence (15). The additional terms and the docs agree that sent message content is kept 30 days, the docs add 90 days for bounce details and 48 hours for the backlog, and a data processing addendum dated 26 September 2024 covers deletion. The terms add that retention is not guaranteed (24). No deprecation policy was found, and the API Use Policy says the APIs can change by a posting or an email. Past notices carried dates, such as the TLS 1.0 and 1.1 retirement announced on 5 June 2023 for 18 July 2023 (10). A sub-processor list with locations is public but was last updated on 29 February 2024, and the security page places Mailchimp's own servers in United States data centres (15)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the API. `/messages/search` takes a `limit` up to 1,000 and send responses are one small object per recipient. No field selection was found. The hosted MCP server has 9 tools and reaches the 99 operations through `list_api`, `describe_api` and `call_api`, which keeps the definitions small (16). Search filters by date, tag, sender and API key, with no offset or cursor, so larger result sets go through a queued export (10). Errors return `status`, `code`, `name` and `message`, and the fundamentals page pairs common ones with a cause and a fix (16). No idempotency key. Test keys let an agent try sends without delivery, and scheduled messages can be listed and cancelled. We could not read the MCP tool annotations without a key (5). A send needs a key, a sender, a recipient and content. Official libraries for Node, Python, PHP and Ruby (13).", "maintenance": "The newest dated release we found is version 1.4.1 of the specification and the Node and Python libraries on 24 March 2026, 198 days before this check (0). No dated Transactional release or changelog entry in the last 90 days. The newest changelog entry is 19 August 2025 (0). A public changelog, a support contact and an API help address in the specification. We saw no public issue replies (6). The Node and Python libraries are both at 1.4.1 and match the current API version, with about 226,000 and 132,000 weekly downloads (15). The generator repository has workflows that validate the specification and build and test each library, and the Node library was updated in February 2024 for an Axios advisory. The test workflow needs a secret key, so we could not see results (7).", "payments": "No x402, MPP or L402 (0). Block prices are public without a login, $20 per 25,000 emails falling to $10, and $29.95 a month for a dedicated IP. Full use also needs a Standard or Premium marketing plan, whose price is on a separate page (20). The demo gives 500 emails once on any Mailchimp account, free plan included. We take 5 off because it sends only to the account's own verified domain and we could not confirm that signup asks for no card (15). A person signs up in a browser, enables the add-on, creates a key and sets DNS records, so there is no autonomous route (0).", "reliability": "Graded on the hosted Transactional API with the hosted lines. status.mailchimp.com lists Mailchimp Transactional as its own component and keeps event history by month (20). In the 90 days to 8 October 2026 it shows three Transactional incidents, all sending delays. They ran about 4 hours 8 minutes on 1 September for some accounts, 4 hours 26 minutes on 15 September and 38 minutes on 17 September. None is described as the API being down, and we count the two long delays together as one major (10). Published numbers cover `/messages/search` at 20 calls a minute, test mode at 10,000 messages a day and the demo at 25 emails an hour. The hourly sending quota is set from reputation with no figure, and no general request limit was found (8). The search endpoint returns 429 and the release notes say to retry 60 seconds after the first of the 20 calls. Mail over the hourly quota is queued in a backlog and not refused. No `Retry-After` header and no idempotency key for sends were found (5). No SLA found, and the additional terms supply the service as-is (0). Generally available (10).", "schema": "An OpenAPI 3.1 file with all 99 operations is public at mailchimp.com/developer/openapi/api-reference-2.json, and a Swagger 2.0 copy sits in the client library repository. The link to it in the Transactional llms.txt returns 404 (25). llms.txt for the developer site and for Transactional, and a Markdown copy of every page at the URL plus `.md` (10). Each operation has a summary and a description averaging about 120 characters. They say what a call does and seldom when not to use it (11). Request bodies carry 36 enums, required fields, date patterns and minimum and maximum values. Headers, metadata and merge variables are free-form objects (11). Reference pages show request and response samples with code in eight languages, and each operation lists typed error bodies. The OpenAPI file itself has no examples (13). The version is in the path, but the docs use 1.0, 1.3 and 1.4 in different places, and the public changelog has nothing newer than 19 August 2025, so the move to 1.4 in March 2026 is not in it (9).", "security": "API keys are created and revoked in the web app, several to an account, and each can be limited to chosen endpoints and to IP addresses. Keys do not expire and no rotation tooling was found. A new key has full account access by default. The key travels in the JSON body or a Bearer header, not the URL (26). Per-endpoint key permissions, IP limits, test keys that send nothing and subaccounts that can be paused. No approval step for sends or deletes (15). The API and the MCP server return inbound mail and stored message content, which is untrusted text. No guidance on prompt injection was found in the MCP guide or the docs (3). The Account Security page lists the IP addresses that used the account and whether each came by API, SMTP or web, and searches can filter by API key (10). A responsible disclosure programme with no rewards, a security.txt with a contact and no Expires field, SOC 2 reports and ISO 27001 per the security page, and regular penetration tests. No public advisory feed found (14).", "transparency": "Closed service with published terms and a named contracting entity. The client libraries are source-available under Mailchimp's own licence agreement, which is not an OSI licence (15). The additional terms and the docs agree that sent message content is kept 30 days, the docs add 90 days for bounce details and 48 hours for the backlog, and a data processing addendum dated 26 September 2024 covers deletion. The terms add that retention is not guaranteed (24). No deprecation policy was found, and the API Use Policy says the APIs can change by a posting or an email. Past notices carried dates, such as the TLS 1.0 and 1.1 retirement announced on 5 June 2023 for 18 July 2023 (10). A sub-processor list with locations is public but was last updated on 29 February 2024, and the security page places Mailchimp's own servers in United States data centres (15)." }, "sources": [ { "what": "fundamentals, API conventions, error codes, test mode", "url": "https://mailchimp.com/developer/transactional/docs/fundamentals.md", "seen": "2026-10-08" }, { "what": "Transactional llms.txt and API reference index", "url": "https://mailchimp.com/developer/transactional/llms.txt", "seen": "2026-10-08" }, { "what": "OpenAPI 3.1 file for the Transactional API", "url": "https://mailchimp.com/developer/openapi/api-reference-2.json", "seen": "2026-10-08" }, { "what": "MCP server guide", "url": "https://mailchimp.com/developer/transactional/guides/how-to-use-mailchimps-transactional-messaging-mcp.md", "seen": "2026-10-08" }, { "what": "MCP endpoint, unauthenticated initialize request", "url": "https://mandrillapp.com/mcp", "seen": "2026-10-08" }, { "what": "pricing", "url": "https://mailchimp.com/pricing/transactional-email/", "seen": "2026-10-08" }, { "what": "demo help article", "url": "https://mailchimp.com/help/transactional-email-demo/", "seen": "2026-10-08" }, { "what": "status page", "url": "https://status.mailchimp.com/", "seen": "2026-10-08" }, { "what": "status event history, September 2026 (also 202607, 202608 and 202610)", "url": "https://status.mailchimp.com/event/202609/", "seen": "2026-10-08" }, { "what": "developer release notes", "url": "https://mailchimp.com/developer/release-notes/", "seen": "2026-10-08" }, { "what": "reputation, hourly quota and backlog", "url": "https://mailchimp.com/developer/transactional/docs/reputation-rejections.md", "seen": "2026-10-08" }, { "what": "activity, reports and retention", "url": "https://mailchimp.com/developer/transactional/docs/activity-reports.md", "seen": "2026-10-08" }, { "what": "quick start and client libraries", "url": "https://mailchimp.com/developer/transactional/guides/quick-start.md", "seen": "2026-10-08" }, { "what": "Standard Terms of Use", "url": "https://mailchimp.com/legal/terms/", "seen": "2026-10-08" }, { "what": "Additional Terms, Transactional Email section", "url": "https://mailchimp.com/legal/additional-terms/", "seen": "2026-10-08" }, { "what": "API Use Policy", "url": "https://mailchimp.com/legal/api_use/", "seen": "2026-10-08" }, { "what": "data processing addendum", "url": "https://mailchimp.com/legal/data-processing-addendum/", "seen": "2026-10-08" }, { "what": "sub-processor list", "url": "https://mailchimp.com/legal/subprocessors/", "seen": "2026-10-08" }, { "what": "Intuit Global Privacy Statement", "url": "https://www.intuit.com/privacy/statement/", "seen": "2026-10-08" }, { "what": "security page and responsible disclosure", "url": "https://mailchimp.com/about/security/", "seen": "2026-10-08" }, { "what": "security.txt", "url": "https://mailchimp.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "client library generator repository, specification history, workflows and licence", "url": "https://github.com/mailchimp/mailchimp-client-lib-codegen", "seen": "2026-10-08" }, { "what": "npm package metadata and release dates", "url": "https://registry.npmjs.org/@mailchimp/mailchimp_transactional", "seen": "2026-10-08" }, { "what": "PyPI package metadata and release dates", "url": "https://pypi.org/pypi/mailchimp-transactional/json", "seen": "2026-10-08" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=mandrill", "seen": "2026-10-08" }, { "what": "RDAP for mandrillapp.com and mailchimp.com", "url": "https://rdap.verisign.com/com/v1/domain/mandrillapp.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the price of the Standard and Premium marketing plans that Transactional requires. The marketing pricing page draws its prices by script", "unchecked: whether signing up for a free Mailchimp account to use the demo asks for a payment card", "unchecked: the MCP server's tool schemas and annotations, which need an API key to list", "unchecked: the key settings page at mandrillapp.com/settings, which is behind a login. Per-endpoint and per-IP key limits are taken from the fundamentals page's error table and the MCP guide", "unchecked: the detail pages of the three September 2026 status events, so scope and cause beyond the summaries are not known", "Whether any Transactional API change shipped after 24 March 2026. The changelog's newest entry is 19 August 2025 and the docs pages carry no dates", "Security incidents in the last 12 months were not searched for beyond the vendor's own pages, because web search was not available", "The official MCP registry has no Mailchimp or Mandrill entry under a vendor namespace" ] }, "negative": 0, "verdict": "A public OpenAPI 3.1 file covers all 99 operations, the docs serve Markdown and llms.txt, and keys can be limited by endpoint and IP address. Sending needs a Standard or Premium Mailchimp plan plus $20 blocks of 25,000 emails. No send idempotency key or SLA was found, and the newest dated release is from 24 March 2026.", "bestFor": "Teams already paying for Mailchimp Standard or Premium that want transactional mail, inbound parsing and an MCP server on the same account.", "strengths": [ "OpenAPI 3.1 file for all 99 operations, with typed error bodies for 401, 402, 404, 422, 429 and 500", "Hosted MCP server at `https://mandrillapp.com/mcp` with 9 tools, three of which list, describe and call API endpoints", "API keys can be limited to named endpoints and to IP addresses, and test keys send nothing", "Every docs page has a Markdown copy at the same URL plus `.md`, with an llms.txt index", "Status page lists Mailchimp Transactional as its own component with month-by-month event history" ], "weaknesses": [ "Full use needs a Standard or Premium Mailchimp marketing plan in addition to the email blocks", "No idempotency key on `/messages/send`, and no `Retry-After` header found in the docs or the specification", "Three delivery-delay incidents in September 2026, two of them lasting more than four hours", "The newest client library and specification release is 24 March 2026, and the changelog's newest entry is 19 August 2025", "The docs give three API version paths (1.0, 1.3 and 1.4), and the llms.txt link to the OpenAPI file returns 404" ], "agentNotes": [ "Send every call as POST with the key in the JSON body as `key`. The MCP server takes the same key as `Authorization: Bearer`", "Use a test API key while building. Test sends are free, capped at 10,000 a day, and deliver nothing", "Verify the sending domain with DKIM and DMARC first. Mail from an unverified domain is rejected with the reason `unsigned`", "Keep `/messages/search` under 20 calls a minute and set `limit` (default 100, maximum 1,000). There is no offset, so use an activity export for more", "For a restricted key that must also use the MCP server, enable the AI Agents permission group on the key" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.1 } ], "editorialScores": { "ergonomics": 60, "maintenance": 28, "payments": 35, "reliability": 53, "schema": 79, "security": 68, "transparency": 64 }, "provenanceScore": 77 }, "connect": { "install": "npm install @mailchimp/mailchimp_transactional", "http": "curl -sS -X POST \"https://mandrillapp.com/api/1.0/users/ping\" \\\n --header 'Content-Type: application/json' \\\n --data-raw '{ \"key\": \"YOUR_API_KEY\" }'", "claudeCode": "claude mcp add --transport http mctx-mcp https://mandrillapp.com/mcp \\\n -H \"Authorization: Bearer YOUR_API_KEY\"", "config": { "mcpServers": { "mctx-mcp": { "headers": { "Authorization": "Bearer YOUR_API_KEY" }, "type": "http", "url": "https://mandrillapp.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/email.send", "tool": "https://letme.dev/mandrill" }, "notable": [ "The MCP server at https://mandrillapp.com/mcp has 9 tools (account_status, build_template, call_api, describe_api, diagnose_failed_send, integrate_api, list_api, onboarding, submit_feedback) and takes the API key as a Bearer token (https://mailchimp.com/developer/transactional/guides/how-to-use-mailchimps-transactional-messaging-mcp.md)", "Transactional Email is an add-on that needs a Standard or Premium Mailchimp plan, and access ends at once if the plan is paused, cancelled or downgraded (https://mailchimp.com/legal/additional-terms/)", "The demo allows 500 emails once, only to addresses on the account's own verified domain, at 25 an hour, with 100 inbound emails a day (https://mailchimp.com/help/transactional-email-demo/)", "Sending speed is set by an hourly quota that Mailchimp calculates from account reputation and volume and says it cannot change by hand. Mail over the quota waits in a backlog for up to 48 hours and is then deleted (https://mailchimp.com/developer/transactional/docs/reputation-rejections.md)", "status.mailchimp.com shows three Transactional incidents in September 2026, sending delays of about 4 hours 8 minutes on 1 September, 4 hours 26 minutes on 15 September and 38 minutes on 17 September (https://status.mailchimp.com/event/202609/)", "The client libraries are under Mailchimp's own client library licence agreement, not an open-source licence (https://github.com/mailchimp/mailchimp-client-lib-codegen/blob/main/LICENSE)" ], "area": "communication", "details": [ { "label": "API", "value": "JSON over HTTP, every call a POST to https://mandrillapp.com/api/1.4/ with the key in the body. 99 operations in an OpenAPI 3.1 file. Output as json, xml, yaml or php. The quick start still uses the 1.0 path, which answered on 8 October 2026" }, { "label": "MCP server", "value": "Hosted at https://mandrillapp.com/mcp over HTTP, 9 tools, API key as a Bearer token. Without a key it answers JSON-RPC error -32001" }, { "label": "Credentials", "value": "API keys created in the web app, several per account, each optionally limited to chosen endpoints and IP addresses. Test keys work only in test mode. No OAuth" }, { "label": "SMTP", "value": "smtp.mandrillapp.com on ports 25, 587 or 2525 with STARTTLS, or 465 for SSL. Up to 1,000 recipients a message" }, { "label": "Limits", "value": "Hourly sending quota set by reputation and volume, with no published figure. `/messages/search` 20 calls a minute, then 429. Test mode 10,000 messages a day. Demo accounts 25 emails an hour. Scheduling up to one year ahead" }, { "label": "Demo", "value": "500 emails once, to the account's own verified domain only, 25 an hour, 100 inbound a day, no click tracking. Open to free and paid Mailchimp accounts that have not bought blocks before" }, { "label": "Before first send", "value": "A Mailchimp account, the Transactional add-on or demo, an API key, and a sending domain verified with DKIM and DMARC records" }, { "label": "Inbound", "value": "Add an inbound domain and MX records, then routes post parsed mail to a webhook, in batches of up to 1,000 events about once a minute" }, { "label": "Webhooks", "value": "Events batched per URL about once a minute. A failed post is retried up to 20 times at intervals of 15 to 25 minutes" }, { "label": "Data retention", "value": "Message content 30 days, bounce details 90 days, raw bounce detail 7 days, backlog 48 hours. The additional terms say retention is not guaranteed" }, { "label": "Client libraries", "value": "Node `@mailchimp/mailchimp_transactional` and Python `mailchimp-transactional`, both 1.4.1 from 24 March 2026, plus PHP and Ruby, generated from one specification" }, { "label": "Subaccounts", "value": "Separate reputation, reporting and optional fixed hourly quota per sender under one account, managed by API" }, { "label": "Certifications", "value": "SOC 2 reports and ISO 27001 per mailchimp.com/about/security. A responsible disclosure programme with no rewards" }, { "label": "Status", "value": "status.mailchimp.com, with Mailchimp Transactional as one component since August 2025 and event history by month" } ], "unitPrices": [ { "item": "Email block, 1 to 20 blocks", "unit": "1k-emails", "usd": 0.8, "note": "$20 per block of 25,000 emails, billed monthly, unused emails do not roll over. Needs a Standard or Premium Mailchimp plan" }, { "item": "Email block, 21 to 40 blocks", "unit": "1k-emails", "usd": 0.72, "note": "$18 per block of 25,000" }, { "item": "Email block, 41 to 80 blocks", "unit": "1k-emails", "usd": 0.64, "note": "$16 per block of 25,000" }, { "item": "Email block, 81 to 120 blocks", "unit": "1k-emails", "usd": 0.56, "note": "$14 per block of 25,000" }, { "item": "Email block, 121 to 160 blocks", "unit": "1k-emails", "usd": 0.48, "note": "$12 per block of 25,000" }, { "item": "Email block, 161 blocks or more", "unit": "1k-emails", "usd": 0.4, "note": "$10 per block of 25,000" }, { "item": "Dedicated IP", "unit": "month", "usd": 29.95 } ], "provenance": { "legalEntity": "The Rocket Science Group LLC d/b/a Mailchimp", "domain": "mailchimp.com", "domainRegistered": "2001-06-29", "endpointOnVendorDomain": false, "terms": "https://mailchimp.com/legal/terms/", "privacy": "https://www.intuit.com/privacy/statement/", "statusPage": "https://status.mailchimp.com", "changelog": "https://mailchimp.com/developer/release-notes/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Standard Terms of Use, updated and effective 10 October 2025, name The Rocket Science Group LLC d/b/a Mailchimp, 405 N Angier Ave. NE, Atlanta, Georgia, part of the Intuit group with Intuit Inc. as parent.", "Transactional Email is also governed by the section For Transactional Email (formerly Mandrill) of the Additional Terms at https://mailchimp.com/legal/additional-terms/, which the Standard Terms incorporate, and by the API Use Policy updated 1 August 2023.", "The privacy field points at the Intuit Global Privacy Statement, last updated 9 March 2026. Mailchimp's terms name it as the privacy document for the service, mailchimp.com/legal/privacy redirects to it, and it names The Rocket Science Group LLC d/b/a Mailchimp. Mailchimp publishes no separate privacy policy.", "The API and the MCP server are served from mandrillapp.com, registered 2011-09-01, not from mailchimp.com (RDAP, Verisign).", "mailchimp.com/.well-known/security.txt holds one Contact line that points at the responsible disclosure section of the security page, with no Expires field. mandrillapp.com has no security.txt (404).", "The changelog covers the Marketing and Transactional APIs together. Its newest entry is dated 19 August 2025." ], "score": 77, "checks": [ { "check": "Legal entity named", "value": "The Rocket Science Group LLC d/b/a Mailchimp", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "mailchimp.com, registered 2001-06-29 (25 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "mandrillapp.com is not on mailchimp.com", "points": 0, "max": 15, "state": "no" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 4.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects, and has 1 clause that costs points", "points": 8, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.mailchimp.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://mailchimp.com/legal/terms/", "state": "read", "readAt": "2026-10-08", "words": 15561, "points": 4.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "Either you or Mailchimp may seek to have a Claim resolved in small claims court in your county of residence or the small claims court in closest proximity to your residence, and you may also bring a claim in small claims court of Fulton County, Georgia.", "says": "Disputes go to the courts of Fulton County, Georgia" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "and (iii) in any calendar month, the total liability of Mailchimp and our third-party providers, licensors, distributors, or suppliers to you arising out of or relating to the Agreement—whether in contract, tort (including negligence), breach of statutory duty, or otherwise—will be no more than what you paid us for th…" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "You or Mailchimp may terminate the Agreement at any time and for any reason." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We may change any of the Terms by posting revised Terms on our Mailchimp Site.", "says": "Changes are posted, with no other notice named" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You will not receive a refund (unless you are within the 60 day money-back guarantee period)." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "We may use your Inputs and Outputs, including Customer Data, for machine learning purposes in order to develop and improve the AI Model, the Services, and similar products and features, and you instruct us to process Customer Data for such purposes.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Mailchimp may modify, suspend, discontinue, or further limit use of the AI Model at any time (without any notice to you).", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We may suspend the Service to you at any time, with or without cause." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "The State of Georgia laws and the Federal Arbitration Act will govern all disputes arising out of or relating to the Service and the Agreement, regardless of conflict of laws rules." } ], "notes": [ { "date": "2026-10-08", "text": "Mailchimp's total liability in any calendar month is capped at what the member paid for the service in the preceding month.", "quote": "arising out of or relating to the Agreement—whether in contract, tort (including negligence), breach of statutory duty, or otherwise—will be no more than what you paid us for the Service the preceding month." }, { "date": "2026-10-08", "text": "Using the AI functions grants Mailchimp an irrevocable, transferable and sublicensable licence over all inputs and outputs.", "quote": "a worldwide, non-exclusive, irrevocable, transferable, royalty-free, fully paid-up, sublicensable (through multiple-tiers) license to access, use, modify, display, publicly perform, distribute, copy, create derivatives from (including derivative works of) and process any and all Inputs and Outputs" }, { "date": "2026-10-08", "text": "After an account is terminated Mailchimp may permanently delete the account and all its data, including campaigns.", "quote": "Once your account is terminated, you acknowledge and agree that we may permanently delete your account and all the data associated with it, including your Campaigns." } ] }, { "kind": "privacy", "url": "https://www.intuit.com/privacy/statement/", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-03-09", "words": 11644, "points": 8, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: March 9, 2026", "says": "Last updated 2026-03-09" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "and the Intuit group companies (collectively “Intuit,” “we,” “us,” or “our”), collect, use, share, or otherwise process information that we collect through our services." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "…not the controller, for example, where Intuit processes personal information as a processor or service provider on behalf of our customers, including when we process personal information on behalf of customers of our professional tax software products." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Intuit and Mailchimp do not sell Personal Information under the CCPA.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "You can contact the Intuit Data Protection Officer here.", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "and (ii) third party service providers and partners, are the European Commission’s Standard Contractual Clauses as issued on 4 June 2021 under Article 46(2) using module 1 (controller to controller), module 2 (controller to processor), module 3 (processor to processor) and module 4 (processor to controller) transfers,…", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models", "costsPoints": true }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you based on your interactions with the Intuit Platform’s products, services, and offerings." } ], "notes": [ { "date": "2026-10-08", "text": "Data a user shares or brings from third parties is used across the whole Intuit Platform and its products, beyond the single product in use.", "quote": "Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you’re using." }, { "date": "2026-10-08", "text": "Session replay tools record user sessions, including clicks, mouse movements, scrolls and keystrokes.", "quote": "The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions." }, { "date": "2026-10-08", "text": "Data obtained through Google Workspace APIs is not used to develop, improve or train generalised AI or ML models.", "quote": "Please note any data obtained through Google Workspace APIs is not used to develop, improve, or train any generalized AI and/or ML models." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mandrill.json", "live": { "slug": "mandrill", "probe": { "target": "https://mandrillapp.com/api/1.4", "method": "get", "lastAt": "2026-10-08T21:12:14.861311294Z", "lastOk": true, "lastStatus": 404, "lastMs": 421, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 426, "p95ms24h": 456, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-08", "probes": 21, "ok": 21 } ] }, "vendorStatus": { "page": "https://status.mailchimp.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-08T19:38:46.313674676Z" }, "updatedAt": "2026-10-08T21:12:14.861311294Z" } } }