lob-mcp

A Model Context Protocol server that enables LLMs to interact with the Lob.com API for address verification and sending physical mail. It provides 76 tools across 12 resource groups including postcards, letters, checks, and templates with built-in safety features for production use.

→ optimize-overseas/lob-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: LOB_API_KEY, LOB_LIVE_API_KEY, LOB_TEST_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretLOB_API_KEY

configLOB_API_VERSION— _(account default)_ Pin a specific Lob API version via the Lob-Version header (e.g. 2020-02-11).

configLOB_BASE_URL

configLOB_CONFIRMATION_TTL_SECONDS— 600 How long a preview's confirmation_token stays valid.

🔐 secretLOB_LIVE_API_KEY— No Lob live_… key. Used for live-account work — see Modes below.

configLOB_LIVE_MODE— Setup Test key Live key Result

configLOB_MAX_PIECES_PER_RUN— Exact piece-count cap via . Hard ceiling, not estimate.

configLOB_READS_USE_TEST— Force test reads ✅ ✅ any + =true → reads on test regardless.

configLOB_REQUEST_TIMEOUT_MS

configLOB_REQUIRE_CONFIRMATION— true When true, live-mode commits require a confirmation_token from the matching _preview tool. Set to false to skip the gate (loses payload-binding safety).

configLOB_REQUIRE_ELICITATION_FOR_BULK_OVER_PIECES— _(unset)_ If set, fires elicitation when a buckslip or card inventory order's quantity exceeds this threshold.

configLOB_REQUIRE_ELICITATION_FOR_CHECKS_OVER_USD— _(unset)_ If set, fires an MCP elicitation form when a check amount exceeds this threshold. The form must be confirmed before the send.

🔐 secretLOB_TEST_API_KEY— Yes Lob test_… key. Used for previews via /resource_proofs and as the fallback for everything when no live key is configured.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/optimize-overseas-lob-mcp-a2umiy)](https://m8ven.ai/mcp/optimize-overseas-lob-mcp-a2umiy)

commit: 7fcbbba890ffb3bfcd4a4c443373a5c996fb0130

code hash: ab6002da66c71ef0e014fcce47a6a84407b594d010ce3cecb94db168d72ae380

verified: 6/8/2026, 12:26:20 PM

view raw JSON →