temporam

SUSPICIOUS. The core temporary-email API behavior is coherent and the credential scope is narrow, but the documented default API host conflicts with the vendor’s public docs and the referenced @temporam/mcp package could not be verified as official. Direct use of official Temporam HTTPS endpoints looks proportionate; use of the unverified MCP package materially increases risk.