API capability pack for bounded Mailgun US API calls against https://api.mailgun.net only. Reads domains, DNS verification records, tracking and queue state, delivery events, domain and tag stats, tags, templates, suppression lists, mailing lists, list members, and inbound routes; can trigger one domain verification, remove one suppression record, and remove one mailing-list member. Enroll a Mailgun Basic Auth connection with username api and the API key as password; no credential is embedded in the manifest. Writes are approval-gated. The pack intentionally excludes EU-host calls, email sending, MIME/message attachment retrieval, domain/list/template/route create-update-delete, bulk suppression imports/clears, webhook/IP/admin management, and arbitrary API passthrough.