# dropscan-mcp [Health: Active]

**Category:** 📦 Delivery  
**Repository:** https://github.com/bitterdev/dropscan-mcp  
**GitHub Stars:** 1  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/dropscan-mcp

## Description
MCP server for the Dropscan postal mail scanning API: read scanned letters, act on mailings.

## Tools
Capabilities this server exposes over MCP:

- **list_scanboxes** — GET /scanboxes

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `uvx` (confidence: high):

```json
"mcpServers": {
  "dropscan-mcp": {
    "command": "uvx",
    "args": ["dropscan-mcp"],
    "env": {
      "DROPSCAN_TOKEN": ""
    }
  }
}
```

**Requires environment variables:** `DROPSCAN_TOKEN` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What dropscan-mcp does

The dropscan-mcp MCP server gives an MCP client access to a Dropscan account, where physical letters are received through scanboxes. It supports account inspection, mailing retrieval, file downloads, and selected account-management operations through the Dropscan API.

Read-only access includes listing scanboxes and mailings, filtering mailings by status or age, and retrieving an individual mailing. Agents can also request a mailing as a PDF, ZIP archive, envelope image, or OCR plaintext. Downloaded binary assets are written to disk and the tool reports the resulting path, byte size, and content type.

The server also exposes read access to recipients, forwarding addresses, shipments, and webhook rules. With writes enabled, an agent can request or cancel a mailing action, assign a recipient, create recipients and forwarding addresses, and create, update, or delete webhook rules.

## How it works

The dropscan-mcp MCP server runs over stdio and sends HTTP requests to Dropscan using a personal access token. The token comes from `DROPSCAN_TOKEN` and is sent as a Bearer authorization header; it is not embedded in the application.

All read operations remain available without an additional switch. Operations that change state are protected by two checks. `DROPSCAN_ALLOW_WRITES` must be set to `1`, `true`, or `yes`, and the individual tool call must include `confirm: true`. The write flag is disabled unless explicitly configured.

This protection matters because the server talks to a production Dropscan account. A forward operation physically mails a letter and can incur a charge. A destroy operation permanently shreds the letter. For forwarding, the request also needs a forwarding address ID and a forwarding date in ISO `YYYY-MM-DD` format.

## Setup and configuration

Install the package from a local clone with Python 3.10 or newer:

```bash
python3 -m venv .venv
./.venv/bin/pip install .
```

Provide a Dropscan personal access token in `DROPSCAN_TOKEN`. The server can be registered with Claude Code using its MCP command, or configured in Claude Desktop with a command that runs the package's Python module. The process uses stdio, so the client must launch the server locally.

Leave `DROPSCAN_ALLOW_WRITES` unset for read-only operation. Set it to an accepted true value only when action and management tools are needed. Download tools use `~/Downloads` by default; set `DROPSCAN_DOWNLOAD_DIR` or pass `save_path` to choose another location.

## Tools and capabilities

Read-only tools cover:

- Scanbox and mailing discovery, including mailing status and age filters.
- Mailing metadata and downloads in PDF, ZIP, envelope-image, and plaintext formats.
- Recipient, forwarding-address, shipment, and webhook-rule lookup.

Write and action tools cover scan, forward, and destroy requests; action cancellation; mailing-recipient assignment; recipient and forwarding-address creation; and webhook-rule creation, editing, and deletion. Webhook subscriptions can use the documented Dropscan event names, including mailing, shipment, and package-tracking events.

The dropscan-mcp MCP server requires a valid Dropscan personal access token and does not provide a sandbox for testing destructive operations. Use the read-only mode when an agent only needs to inspect mail or retrieve scans.

_Full upstream README: https://allmcps.com/mcp/dropscan-mcp/readme_