Secure Password Resets, Delivered Instantly

import requests

API = "https://api.multimail.dev/v1"
HEADERS = {"Authorization": "Bearer mm_live_xxx"}

def send_password_reset(user: dict, request_context: dict):
    reset_url = generate_reset_url(user["id"])

    body = (
        f"Hi {user[&"cm">#039;name']},\n\n"
        f"We received a password reset request for your account.\n\n"
        f"Reset your password: {reset_url}\n\n"
        f"This link expires in 15 minutes.\n\n"
        f"Request details:\n"
        f"  IP: {request_context[&"cm">#039;ip']}\n"
        f"  Browser: {request_context[&"cm">#039;browser']}\n"
        f"  Location: {request_context[&"cm">#039;location']}\n\n"
        f"If you didn&"cm">#039;t request this reset, you can safely "
        f"ignore this email. Your password will not be changed."
    )

    response = requests.post(
        f"{API}/send",
        headers=HEADERS,
        json={
            "from": "[email protected]",
            "to": user["email"],
            "subject": "Reset your password (link expires in 15 minutes)",
            "text_body": body,
            "html_body": build_reset_html(user, reset_url, request_context)
        }
    )
    print(f"Reset email sent in {response.elapsed.total_seconds():.2f}s")

import requests

API = "https://api.multimail.dev/v1"
HEADERS = {"Authorization": "Bearer mm_live_xxx"}

def check_reset_abuse(user: dict, request_context: dict) -> bool:
    """Check for suspicious reset patterns."""
    recent_resets = get_recent_resets(user["id"], hours=1)

    if len(recent_resets) > 3:
        "cm"># Multiple reset attempts — send security alert
        requests.post(
            f"{API}/send",
            headers=HEADERS,
            json={
                "from": "[email protected]",
                "to": user["email"],
                "subject": "Security alert: Multiple password reset attempts",
                "text_body": (
                    f"Hi {user[&"cm">#039;name']},\n\n"
                    f"We detected {len(recent_resets)} password reset "
                    f"attempts on your account in the last hour.\n\n"
                    f"If this was you, you can use the most recent "
                    f"reset link. If not, we recommend enabling 2FA."
                )
            }
        )
        return True
    return False

"cm">// Using MultiMail MCP tools for password resets

async function handlePasswordReset(
  user: User,
  context: RequestContext
) {
  const resetUrl = generateResetUrl(user.id);

  "cm">// Send reset email immediately
  await mcp.send_email({
    to: user.email,
    subject: "Reset your password (link expires in 15 minutes)",
    text_body: [
      `Hi ${user.name},`,
      ``,
      `Reset your password: ${resetUrl}`,
      `This link expires in 15 minutes.`,
      ``,
      `Request details:`,
      `  IP: ${context.ip}`,
      `  Browser: ${context.browser}`,
      `  Location: ${context.location}`,
      ``,
      `If you didn't request this, ignore this email.`
    ].join("\n")
  });

  "cm">// Log the reset event
  await mcp.add_contact({
    email: user.email,
    metadata: {
      last_reset_request: new Date().toISOString(),
      reset_ip: context.ip
    }
  });
}