# BlackSheepMail > Email-automatizációs SaaS: ügyfél-, csoport-, sablon- és kampánykezelés, > webshop-integráció (rendelés/ügyfél-események) és kosár-emlékeztető küldés. ## Product summary (EN) BlackSheepMail is an email-automation SaaS for businesses that manage customer relationships and email campaigns from one place: customer and group (segment) management, a drag-and-drop email template builder with an AI writing assistant (subject/body drafting, rewriting, spellcheck), scheduled campaign sending via Gmail or your own SMTP, webshop integration (WooCommerce, Shopify, UNAS, Shoprenter) driving cart-recovery and order-triggered emails, visual automation sequences, and real-time analytics (opens, clicks, conversion, ROI). Live at https://blacksheepmail.com. UI languages: Hungarian (primary) and English — append `?lang=hu` or `?lang=en` to any public page to switch. ## Termék-összefoglaló (HU) A BlackSheepMail email-automatizációs SaaS: ügyfél- és csoportkezelés, drag & drop email-sablonszerkesztő AI-írássegéddel (tárgy/szöveg, átfogalmazás, helyesírás), ütemezett kampányküldés Gmailen vagy saját SMTP-n, webshop- integráció (WooCommerce, Shopify, UNAS, Shoprenter) kosár-emlékeztetőhöz és rendelés-alapú emailekhez, vizuális automatizáció-szekvenciák, valós idejű analitika (megnyitás, kattintás, konverzió, ROI). Élesben: https://blacksheepmail.com. Felületi nyelvek: magyar (elsődleges) és angol — `?lang=hu` / `?lang=en` bármely publikus oldalon. ## Key capabilities (what BlackSheepMail offers) Objective, verifiable facts about BlackSheepMail's own feature set. (Rewritten 2026-08-06: this section previously framed these as things large international platforms lack — that comparative claim was not accurate and has been removed.) - **Native MCP (Model Context Protocol) server** with **22 tools** — AI assistants (Claude, ChatGPT, Gemini) can read and write the account (customers, groups, tags, segments, templates) and launch campaigns at parity with the human user, over a single Bearer-authenticated endpoint. - **BYOK (bring your own AI key)** — the AI email assistant can run on the user's own OpenAI/Anthropic API key, so AI usage is not gated behind a per-message platform credit. - **Hungarian webshop integrations** — native UNAS and ShopRenter connectors (alongside WooCommerce and Shopify) for cart-recovery and order-triggered email. - **Graph-based visual automation builder** — node/edge sequence editor with branching conditions, event triggers and wait steps. - **Open, documented API** — REST with Bearer auth, OpenAPI 3.1, and a ChatGPT Actions-ready variant. ## Plans & add-ons (catalog) The machine-readable source of truth is `config/Csomagok.php` (`Csomagok::osszehasonlitoLista()`); pricing is configured per-plan in Paddle at checkout and is not duplicated here. - Free — smtp_google, visual template editor - Standard — + own SMTP, webshop integration - AI — + AI email assistant - Pro — + Amazon SES - Enterprise — same as Pro, higher limits The visual template editor is included in every plan. Add-ons (stackable on any plan): AI assistant (`ai_assistant`), AI Agent (`ai_agent`, autonomous chat that writes/groups/sends), own AI key (`ai_sajat_kulcs`), webshop event boost (`webshop_tobblet`), automation builder (`email_szekvencia`). ## Public pages - `/` — marketing homepage (this document's live counterpart) - `/login` — sign in / registration - `/aszf` — terms of service (draft) - `/adatvedelem` — privacy policy (draft) - `/blog` — blog & knowledge base: practical guides on email marketing, webshop automation and using AI assistants (MCP) with BlackSheepMail. Individual articles at `/blog?s={slug}`. Not linked from the site navigation, but fully public and indexable — discover articles via `/sitemap.xml`. ## Authentication Session-based login (cookie). Mutating (POST/PUT/PATCH/DELETE) requests require a CSRF token, sent either as `csrf_token` in the request body or as the `X-CSRF-TOKEN` header — the value must match the server-side session token. The CSRF check is a UX/defense-in-depth layer; the authoritative gate for what an account is allowed to do is always the server-side entitlement gate, keyed off the account's plan and add-ons. `/login` also offers "Continue with Google" (OAuth identity sign-in/sign-up, no password/2FA) — a human-in-the-browser flow, not agent-callable, so it is not part of the machine-readable API contract below. ## Main routes (authenticated) - `/` — dashboard (also `/index`) - `/letrehozas` — customers (Ügyfél) - `/csoport` — customer groups (Csoport) - `/kampany` — email campaigns (Kampány) - `/sablon` — email templates (Sablon) - settings modal — account/plan/integration settings, including plans/pricing (the "Előfizetés" tab); opened from the app shell (no dedicated route). The machine-readable plan/add-on catalog is also available via `GET /agent/capabilities`. ## Webshop integration (external, signature-authenticated) - `POST /webshop/webhook?platform=&bolt=` — inbound webshop event webhook. Authenticated by request signature (not session/CSRF) — called by the merchant's webshop platform, not by a logged-in browser session. ## Capabilities / limits What an account can do (plan + add-ons) and how much of each metered resource it has used is exposed as a machine-readable snapshot: - `GET /agent/capabilities` — authenticated JSON snapshot of the current account's plan, capabilities, effective limits, owned add-ons, and the plan/add-on catalog. Read-only, no side effects. Returns 401 if not logged in. ## Machine-readable API contract The full machine-readable HTTP API contract (OpenAPI 3.1) for the agent-relevant endpoints above is available at `GET /openapi.json`. ## AI connector (Bearer API + MCP) For AI assistants (Claude, ChatGPT, Gemini) the app exposes a per-account Bearer-key REST API and an MCP server: - `POST /mcp` — MCP server (Streamable HTTP, JSON-RPC 2.0), `Authorization: Bearer `. Exposes **22 tools** total; each is gated by the key's scope in a strict hierarchy (esemeny ⊂ olvasas ⊂ iras ⊂ teljes): `esemeny` (1 event tool), `olvasas` (13 read tools), `iras` (19 tools — non-sending create/update only), `teljes` (all 22, incl. the 2 campaign-launch tools and transactional send). Campaign sending always requires a two-step, in-chat confirmation flow. **Anything that sends email requires `teljes`** — the `iras` scope is deliberately non-sending, so a key handed to an AI assistant cannot mail your contacts. - **Transactional sending** (`POST /api/tranzakcios`, scope `teljes`): template-based, single-recipient email (password reminder, order confirmation) on a quota that is separate from campaign sending. Paid plans only. By design it does **not** apply the unsubscribe/suppression list, and its footer contains **no** unsubscribe link and **no** open-tracking pixel — it is for genuine transactional mail, not marketing. - `GET /openapi.gpt.json` — a trimmed OpenAPI variant of the 9 Bearer endpoints, suitable for ChatGPT custom GPT Actions import (absolute server URL placeholder must be replaced with the live domain). - Setup guide for all three platforms: `tervek/md/AI_CONNECTOR_SETUP.md` (in-repo documentation, not a public route). ## Notes for agents This file establishes baseline discoverability. The main views expose stable `data-action` and `data-list` attributes for reliable UI automation, independent of the (unstable) CSS class names.