Resend

Recently shipped a security fix to the MCP server, inbox preview support for reply-all and idempotency keys, and a guard against email export deleting project files.

MCP no longer reads arbitrary local files. v2.25.0 restricts which local files the send-email and create-contact-import tools can read.

Inbox previews gained reply-all, idempotency keys, and agent settings. Node preview builds added reply-all on thread replies, idempotency keys on inbox sending methods, and get/update for agent settings.

email export can no longer wipe your project. In react-email@6.11.1, pointing --outDir at the project, home directory, email templates, or static assets used to delete them; it now leaves them alone. <Markdown> also applies markdownCustomStyles.th to table header cells, which were previously styled as td.

SDK correctness fixes across Go, Python, and Node. Go preserves JSON bodies across 307 and 308 redirects and keeps the base URL path prefix on broadcast requests. Python's Webhooks.verify raises ValueError on non-ASCII signatures instead of failing obscurely. Node forwards received email as raw bytes rather than re-decoding it as UTF-8.

Topics and usage stay reachable from every SDK. Webhook event constants for topic and contact.topics.updated, and usage/quota lookups, remain available across the Node, Python, Go, and MCP SDKs.