Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pipefy/ai-toolkit --skill pipefy-members-email-webhooksgit clone --depth 1 https://github.com/pipefy/ai-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks)<a href="https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks"><img src="https://agentmods.dev/badge/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks"><img src="https://agentmods.dev/badge/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.01893 |
| Opus 5 | $0.00020 | $0.00946 |
| Sonnet 5 | $0.00008 | $0.00379 |
| Haiku 4.5 | $0.00004 | $0.00189 |
Grade A, and why
pipefy-members-email-webhooks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 132 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Members, Email & Webhooks
Manage pipe membership, send emails from card inboxes, read inbox replies, and manage webhooks. 12 MCP tools.
Member management
| Tool (MCP) | CLI | Read-only | Purpose |
|---|---|---|---|
invite_members |
pipefy member invite |
No | Invite one or more users by email + role. |
add_service_account_to_pipe |
pipefy member add-service-account |
No | Attach an existing org service account to a pipe by email + role (iPaaS setup). Verifies membership afterwards. |
remove_member_from_pipe |
pipefy member remove |
No | Two-step destructive.[^mcp-confirm] Verifies afterwards and warns if the member is still present (org-level permissions can override pipe removal). |
set_role |
pipefy member set-role |
No | Change a member's pipe role (member_id = user id). |
List existing members with get_pipe_members from skills/pipes-and-cards/pipefy-pipes-and-cards/SKILL.md. Id forms: docs/mcp/tools/identifiers.md#members-email-webhooks.
Steps — invite members
-
Check existing members:
MCP:
get_pipe_members pipe_id=67890CLI:
pipefy member list --pipe 67890 -
Invite new members:
MCP:
invite_members pipe_id=67890 members='[{"email":"[email protected]","role_name":"member"},{"email":"[email protected]","role_name":"admin"}]'CLI:
pipefy member invite --pipe 67890 --email [email protected] --role memberBefore inviting external emails (domain different from the org's known domains), warn the user that this is an external invitation and confirm before proceeding.
Before granting admin role, confirm with the user — admin is the highest pipe-level role.
Steps — add a service account to a pipe (iPaaS setup)
When setting up an iPaaS (Advanced Automations) flow that runs under a service account, the account must be a member of the target pipe, or pipe-scoped calls under its identity fail with a permission error even though the flow looks configured.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 132 lines · 41 tokens per session scan A d08a39040987
pipefy-members-email-webhooks is a skill published in the GitHub repository pipefy/ai-toolkit (45 stars, last pushed today), licensed Apache-2.0. It adds 41 tokens to every session and 1,893 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
clawaimail
Email infrastructure for AI agents — create inboxes, send and receive real emails, search messages, manage threads. Alternative to AgentMail with MCP server, REST API, webhooks, and WebSocket streaming.
fdcnal-usda-fooddata-central-agent
The FoodData Central API provides REST access to FoodData Central (FDC), assisting developers in incorporating nutrient data into their applications. It provides access to Standard Reference (SR) Legacy data, USDA Global Branded Foods Database, Foundation Foods, and FNDDS.
notebooklm
Install, authenticate, troubleshoot, and operate Gemini Notebook through the notebooklm-py CLI or typed async Python API. Use for notebook and source management, grounded chat and research, and artifact generation or download when the user mentions Gemini Notebook, notebooklm-py, the notebooklm CLI, or its Python API.…
commerce-app-migrate
Migrate an Adobe Commerce App Builder project from the Integration Starter Kit or Checkout Starter Kit to the new App Management approach. Run from the root of the App Builder project to be migrated. Pass --auto to skip confirmation prompts (suitable for CI or batch use) — auto mode prints a summary of all Q&A…
linear-graphql-skill
Operate Linear workspace issues, projects, and teams through Linear GraphQL API using UXC. Use when tasks require querying or creating issues, managing projects, or interacting with Linear workflow. Supports both Personal API Key and OAuth authentication.
frontmcp-development
Use when building any FrontMCP server component other than a tool (for tools, use create-tool). Covers @Resource static resources and parameterized URI templates; @Prompt reusable prompts (RAG, multi-turn); @Provider singleton dependency-injection providers (database pools, API clients); @Agent autonomous LLM agents…