mimecast

Check Mimecast email delivery queue status and identify stuck or deferred messages

Review Mimecast TTP threat logs for URL clicks, malicious attachments, and impersonation attempts

Trace an email through Mimecast by sender, recipient, subject, or date range

Use this agent when verifying Mimecast email continuity and archiving health — not for threat investigation, but for checking continuity mode status, verifying archiving is capturing expected mail volumes, auditing connector health, and confirming restore capability. Trigger for: Mimecast continuity, email continuity, Mimecast archiving, archive health, Mimecast backup, email restore, continuity mode, Mimecast archive verification, email service availability, Mimecast connector, archive completeness, Mimecast operational health. Examples: "Check our Mimecast continuity status for all clients", "Verify that email archiving is capturing the expected volume for Acme Corp", "Is Mimecast continuity mode active for any of our clients?", "Audit the archive health across the Mimecast fleet"

Use this agent when investigating email-borne threats, tracing suspicious messages, analyzing TTP click and attachment logs, auditing Mimecast security posture, or managing held email queues for MSP clients on the Mimecast platform. Trigger for: Mimecast threat investigation, TTP URL click, Mimecast phishing, Mimecast message trace, held email Mimecast, Mimecast impersonation, attachment sandbox Mimecast, Mimecast audit log, email delivery issue Mimecast. Examples: "Investigate this phishing email reported by a Mimecast user", "Did any users click on URLs from this phishing campaign?", "Check the Mimecast TTP logs for malicious attachment blocks today", "Our client says email from their vendor isn't arriving — trace it"

Use this skill when working with Mimecast MCP tools — available tools, OAuth 2.0 client credentials authentication, regional API endpoints, pagination, rate limiting, and error handling.

Use this skill when tracking or tracing Mimecast email messages — searching by sender/recipient/subject, retrieving message metadata, placing messages on hold, or releasing held messages.

Use this skill when checking Mimecast email delivery queue status — identifying stuck messages, delivery delays, and backlog conditions.

Use this skill when investigating Mimecast threat activity — TTP logs for URL clicks, malicious attachment analysis, impersonation attempts, threat remediation incidents, and audit events.