[blockrushusa]

Adds a directmailamerica plugin that connects to DirectMailAmerica's official hosted MCP server. The server is built and run by Rainmaker LLC d/b/a DirectMailAmerica.com.

What's included

• third_party/directmailamerica/mcp.json: HTTP server at https://directmailamerica.com/api/mcp. No headers and no API key; sign-in is handled by OAuth.
• .cursor-plugin/plugin.json (1.1.0, cursor 3.13.0) with no required variables, plus a README, CHANGELOG, MIT LICENSE and a 256x256 logo (DirectMailAmerica's official mark)
• Four skills under skills/, each with a name that matches its directory:
  • dma-send-mail: letters, Certified Mail and single/double-sided postcards
  • dma-email-to-letter: Email to Letter rules and approvals
  • dma-email-to-postcard: Email to Postcard rules and approvals (new in 1.1.0)
  • dma-order-status: read-only order and billing status
• A marketplace entry appended last, with the same description as plugin.json, and a row in the root README table

Auth

The user clicks Connect in Cursor and signs in to DirectMailAmerica through OAuth. No API key is needed, and no credentials are included in the plugin.

Safety

Mailing prints and sends real USPS mail and spends money. Every skill tells the agent to show a quote/preview first and not to call send_letter, send_product_quote or the email approval tools until the user has explicitly approved the exact preview, the addresses and the price, and to ask again if anything changes. Sends use idempotency keys. Email to Letter and Email to Postcard rules default to approval mode; automatic sending and adding funds each need the user's separate, explicit consent. The status skill is read-only.

Validation

node scripts/validate-plugins.mjs passes.

Contact

Rainmaker LLC d/b/a DirectMailAmerica.com, support@directmailamerica.com, https://directmailamerica.com/agents

---

Note

Medium Risk
Introduces an agent integration that can trigger real paid USPS mail and account spending via a third-party hosted MCP; risk is mitigated in-repo by OAuth-only wiring and strict skill guardrails, not by code enforcement in this repo.

Overview
Adds a new directmailamerica third-party Cursor plugin so agents can use DirectMailAmerica’s hosted HTTP MCP at https://directmailamerica.com/api/mcp (OAuth Connect in Cursor; no API key in mcp.json).

The plugin ships manifest 1.1.0 (min Cursor 3.13.0), docs, MIT license, and four skills (dma-send-mail, dma-email-to-letter, dma-email-to-postcard, dma-order-status) that steer quote/preview-first flows and block paid sends, email approvals, funding, and autosend without explicit user consent. Marketplace marketplace.json and the root README plugin table get a matching listing entry.

^{Reviewed by Cursor Bugbot for commit 3e11b1f. Bugbot is set up for automated code reviews on this repo. Configure here.}