Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.makehybrid/mcp

REMOTE · MAKEHYBRID.COM · 2 COMPONENTS

LinkedIn, the messaging channels and the work trackers of a MakeHybrid account, as tools.

77 Trust /100

Last scanned (5 hours ago)

Scores higher than 69% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Communication

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security94
Transport & Reachability100
Schema Quality & AI Usability61
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 16747 tokens (~144/item across 116 items; 116 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability check failed: schema churn in the 5 days we've observed: 5 tool removals, 0 breaking changes, 0 auth/transport breaks, 100 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 117 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Nov 26 0
    • Tool “makehybrid_list_operations” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_read” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_write” rewrote its description, which is the text the model reads security
  • 2 Nov 26 0
    • Stability: 0.03 → fail ▼ security
    • A breaking change shipped without a version bump: still 1.0.0 ▼ security
    • Tool “complete_chats” was removed ▼ security
    • Tool “complete_connect_link” was removed ▼ security
    • Tool “complete_inbox_v1_conversations_messages” was removed ▼ security
    • Tool “complete_posts” was removed ▼ security
    • Tool “complete_webhooks_inbox” was removed ▼ security
    • The server rewrote its instructions, which are the text every model session reads security
    • New tool “complete_asana_v1_connections_link”, which the server declares destructive security
    • New tool “complete_booking_v1_pages_create”, which the server declares destructive security
    • New tool “complete_campaigns_create”, which the server declares destructive security
    • New tool “complete_chatwoot_v1_connections_link”, which the server declares destructive security
    • New tool “complete_clickup_v1_connections_link”, which the server declares destructive security
    • New tool “complete_connect_link_create”, which the server declares destructive security
    • New tool “complete_discord_v1_connection_link”, which the server declares destructive security
    • New tool “complete_hubspot_v1_connections_link”, which the server declares destructive security
    • New tool “complete_inbox_v1_conversations_messages_send”, which the server declares destructive security
    • New tool “complete_inboxes_chats_create”, which the server declares destructive security
    • New tool “complete_jira_v1_connections_link”, which the server declares destructive security
    • New tool “complete_line_v1_connections_link”, which the server declares destructive security
    • New tool “complete_pages_logo”, which the server declares destructive security
    • New tool “complete_posts_create”, which the server declares destructive security
    • New tool “complete_rooms_create”, which the server declares destructive security
    • New tool “complete_rooms_messages_send”, which the server declares destructive security
    • New tool “complete_rooms_tasks_create”, which the server declares destructive security
    • New tool “complete_slack_v1_connection_link”, which the server declares destructive security
    • New tool “complete_users_visit_profile”, which the server declares destructive security
    • New tool “complete_webchat_v1_widgets_create”, which the server declares destructive security
    • New tool “complete_webhooks_inbox_create”, which the server declares destructive security
    • New tool “complete_whatsapp_v1_messages”, which the server declares destructive security
    • Tool “makehybrid_list_operations” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_read” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_write” rewrote its description, which is the text the model reads security
    • Schema quality: 195 → 144 ▲ functional
    • New tool “complete_asana_v1_connections” functional
    • New tool “complete_asana_v1_connections_projects” functional
    • New tool “complete_asana_v1_connections_projects_tasks” functional
    • New tool “complete_booking_v1_pages_calls” functional
    • New tool “complete_booking_v1_pages_get” functional
    • New tool “complete_booking_v1_pages_list” functional
    • New tool “complete_campaigns_list” functional
    • New tool “complete_chats_get” functional
    • New tool “complete_chats_list” functional
    • New tool “complete_chats_picture” functional
    • New tool “complete_chatwoot_v1_connections” functional
    • New tool “complete_chatwoot_v1_connections_conversations” functional
    • New tool “complete_chatwoot_v1_connections_inboxes” functional
    • New tool “complete_clickup_v1_connections” functional
    • New tool “complete_clickup_v1_connections_projects” functional
    • New tool “complete_clickup_v1_connections_projects_tasks” functional
    • New tool “complete_connect_link_get” functional
    • New tool “complete_connect_options” functional
    • New tool “complete_discord_v1_channels_messages” functional
    • New tool “complete_discord_v1_servers” functional
    • New tool “complete_discord_v1_servers_channels” functional
    • New tool “complete_hubspot_v1_connections” functional
    • New tool “complete_hubspot_v1_connections_projects” functional
    • New tool “complete_hubspot_v1_connections_projects_tasks” functional
    • New tool “complete_inbox_v1_account” functional
    • New tool “complete_inbox_v1_agents” functional
    • New tool “complete_inbox_v1_contacts” functional
    • New tool “complete_inbox_v1_conversations_messages_list” functional
    • New tool “complete_inbox_v1_teams” functional
    • New tool “complete_inboxes_chats_list” functional
    • New tool “complete_jira_v1_connections” functional
    • New tool “complete_jira_v1_connections_projects” functional
    • New tool “complete_jira_v1_connections_projects_tasks” functional
    • New tool “complete_line_v1_connections_chats” functional
    • New tool “complete_line_v1_connections_get” functional
    • New tool “complete_line_v1_connections_list” functional
    • New tool “complete_linkedin_company_pages” functional
    • New tool “complete_linkedin_contracts” functional
    • New tool “complete_linkedin_inmail_credits” functional
    • New tool “complete_linkedin_jobs” functional
    • New tool “complete_linkedin_projects” functional
    • New tool “complete_linkedin_recruiter_jobs” functional
    • New tool “complete_linkedin_search” functional
    • New tool “complete_linkedin_search_parameters” functional
    • New tool “complete_pages” functional
    • New tool “complete_posts_comments” functional
    • New tool “complete_posts_get” functional
    • New tool “complete_posts_reactions” functional
    • New tool “complete_rooms_arrivals” functional
    • New tool “complete_rooms_channels” functional
    • New tool “complete_rooms_keys” functional
    • New tool “complete_rooms_list” functional
    • New tool “complete_rooms_messages_list” functional
    • New tool “complete_rooms_servers” functional
    • New tool “complete_rooms_tasks_list” functional
    • New tool “complete_rooms_work_ready” functional
    • New tool “complete_setup” functional
    • New tool “complete_slack_v1_workspaces” functional
    • New tool “complete_slack_v1_workspaces_channels” functional
    • New tool “complete_slack_v1_workspaces_users” functional
    • New tool “complete_topvoices” functional
    • New tool “complete_users_chat” functional
    • New tool “complete_webchat_v1_agents” functional
    • New tool “complete_webchat_v1_rooms” functional
    • New tool “complete_webchat_v1_widgets_list” functional
    • New tool “complete_webhooks_endpoints” functional
    • New tool “complete_webhooks_inbox_list” functional
    • New tool “complete_webhooks_status” functional
    • New tool “complete_whatsapp_v1_chats” functional
    • New tool “complete_whatsapp_v1_connection” functional
    • New tool “complete_whatsapp_v1_groups” functional
    • New tool “complete_workspace_people” functional
    • New tool “complete_workspace_surface” functional
    • New tool “complete_x_v1_2_dm_events” functional
    • New tool “complete_x_v1_2_users_me” functional
    • New tool “complete_x_v1_connection” functional
    • New tool “complete_users_me_relation_requests” functional
    • New tool “complete_inbox_v1_labels” functional
    • “makehybrid_list_operations” reworded the description of “group” cosmetic
  • 1 Nov 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “makehybrid_read” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_write” rewrote its description, which is the text the model reads security
    • Tool “makehybrid_list_operations” rewrote its description, which is the text the model reads security
    • Stability: unverified → 0.03 ▲ functional
  • 31 Oct 26 77

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://makehybrid.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=makehybrid.com CN=WE1,O=Google Trust Services,C=US 15 Oct 2026 13 Jan 2027 ECDSA 256 ECDSA-SHA256 310270ade6abfdaf13742caff230f087
SANs: makehybrid.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of makehybrid.com. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
makehybrid.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="https://makehybrid.com", resource_metadata="https://makehybrid.com/.well-known/oauth-protected-resource"

Bearer realm="https://makehybrid.com", resource_metadata="https://makehybrid.com/.well-known/oauth-protected-resource"
Header Value
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-options nosniff
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()
www-authenticate Bearer realm="https://makehybrid.com", resource_metadata="https://makehybrid.com/.well-known/oauth-protected-resource"

Protected resource metadata

Document https://makehybrid.com/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://makehybrid.com/mcp
Authorisation server https://makehybrid.com

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://makehybrid.com/mcp Verified 200
http (plaintext) http://makehybrid.com/mcp HTTPS enforced 301 https://makehybrid.com/mcp
MCP tools · 116 exposed · ~15,740 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
complete_whatsapp_v1_chats ~73

The number's chats, newest first: limit, offset. -- MakeHybrid API plan, GET /whatsapp/v1/chats, group whatsapp.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_whatsapp_v1_connection ~82

Whether a WhatsApp number is linked, with its phone number and name, or the state it is in. -- MakeHybrid API plan, GET /whatsapp/v1/connection, group whatsapp.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_whatsapp_v1_groups ~71

The groups the number is in, with their chat_id. -- MakeHybrid API plan, GET /whatsapp/v1/groups, group whatsapp.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_whatsapp_v1_messages ~135

Send a text from the linked number: to is a phone number like +15551234567, or a chat_id such as 15551234567@c.us or a group's ...@g.us. Messages are paced 10 to 20 seconds apart, as a person types. -- MakeHybrid API plan, POST /whatsapp/v1/messages, group whatsapp.

NameTypeReqDescription
bodyobject–JSON request body for POST /whatsapp/v1/messages.
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_workspace_people ~141

Who is in this organization: me (user_id, role), rooms (id, name), people (user_id, email, name, role of owner, admin, colleague or client, joined_at, room_ids, all_rooms - owners and admins are in every room) and the invitations still open. Managers only. To invite somebody or change a role, a person does it signed in on the account page: this key cannot. -- MakeHybrid API plan, GET /workspace/people, group workspace.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_workspace_surface ~83

What this organization shows its people: surface (full for the whole dashboard, or app for the rooms app alone) and the caller's role. -- MakeHybrid API plan, GET /workspace/surface, group workspace.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_x_v1_2_dm_events ~85

Your recent direct messages on X, across conversations: query max_results, pagination_token, dm_event.fields. -- MakeHybrid API plan, GET /x/v1/2/dm_events, group x.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_x_v1_2_users_me ~73

Your connected X account, as X describes it. -- MakeHybrid API plan, GET /x/v1/2/users/me, group x.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_x_v1_connection ~86

Whether an X account is connected, and which: user_id, username, and x_chat (whether X Chat's encrypted messages are on). -- MakeHybrid API plan, GET /x/v1/connection, group x.

NameTypeReqDescription
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

complete_x_v1_messages ~126

Send a message on X to one person: body {to: an X user id or a username such as @pat, text}. Goes to X Chat, encrypted, when you have a conversation there and the passcode was given; otherwise a direct message. -- MakeHybrid API plan, POST /x/v1/messages, group x.

NameTypeReqDescription
bodyobject–JSON request body for POST /x/v1/messages.
queryobject–Optional query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings.

No output schema declared.

No examples provided.

makehybrid_about ~95

What MakeHybrid is, what this connection can do, and what it needs before it can act. ANSWER ANY GENERAL QUESTION ABOUT MAKEHYBRID WITH THIS -- "what do you do?", "what can you help with?", "what is this?" -- and call it first when you have not used this server before. It needs no API key and no sign-in, and reports whether this connection is signed in yet.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

makehybrid_describe_operation ~140

Show one operation in full: method, path, plan, group, required scope, path parameters, summary, the source file it was derived from, and the exact makehybrid_read/makehybrid_write arguments that invoke it. Use this before calling an operation you have not called before.

NameTypeReqDescription
refstringyesReference to one operation: "plan:operation_id" (e.g. "complete:get_asana_v1_connections"), "plan:METHOD /path" (e.g. "complete:POST /complete/v2/{account_id}/posts"), or a bare operation id when it…

No output schema declared.

No examples provided.

makehybrid_list_operations ~287

Search the MakeHybrid LinkedIn API catalogue (447 operations: 447 MakeHybrid API) and get back a compact table of plan, method, path, group and operation id, plus the total number of matches. Start here, then pass an id to makehybrid_describe_operation, then to makehybrid_read or makehybrid_write.

NameTypeReqDescription
groupstring–Exact group to filter by. Groups in this manifest: asana, billing, booking, brand, campaigns, chats, chatwoot, clickup, connect, discord, hubspot, inbox, inboxes, jira, line, linkedin, pages, posts,…
limitinteger–Maximum rows to return (default 50, max 200). The total match count is always reported, so narrow with query/group instead of raising this when the result is large.
planstring–Restrict to one MakeHybrid plan: complete = MakeHybrid API (/linkedin). complete is the full LinkedIn surface, billed per seat (one LinkedIn account each) after a 30-day trial.
querystring–Case-insensitive substring matched against the operation id, path, group and summary. Examples: "search", "invitation", "chats/messages", "webhook".

No output schema declared.

No examples provided.

makehybrid_read ~375

READ any operation in the MakeHybrid manifest -- the GET ones, 185 of them (447 MakeHybrid API). Chats, messages, profiles, posts, reactions, search, company pages and the work trackers. This tool cannot change anything: it refuses every operation that is not a GET, so it is safe to call while exploring. Documented in MakeHybrid's own API reference at /linkedin-docs.html. The catalogue is derived from the live API, so an endpoint added upstream becomes readable here as soon as the manifest refreshes, with no new tool. Use makehybrid_list_operations to find the operation id and makehybrid_describe_operation to see its parameters, then call it here. Authentication is handled by the server.

NameTypeReqDescription
bodyobject–JSON request body, for POST/PUT/PATCH/DELETE operations only. Omit it for GET.
operationstringyesThe operation id from makehybrid_list_operations (e.g. "get_v1_accounts"), or "METHOD /path" (e.g. "POST /complete/v2/{account_id}/posts"). A "plan:" prefix here overrides the plan argument.
path_paramsobject–Values for the {placeholders} in the operation path, by name, e.g. {"account_id":"acc_123"}. Every placeholder is required; values are URL-escaped for you, so pass them raw.
planstringyesWhich MakeHybrid plan: complete = MakeHybrid API (/linkedin). complete is the full LinkedIn surface, billed per seat (one LinkedIn account each) after a 30-day trial.
queryobject–Query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings; null and undefined entries are dropped.

No output schema declared.

No examples provided.

makehybrid_status ~59

Report the configured host, enabled plans, whether an API key is configured (never the key itself), the manifest's origin, digest and age, the operation count per plan, and whether writes are enabled. Use this when a call fails unexpectedly.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

makehybrid_write ~332

WRITE through any operation in the MakeHybrid manifest that changes something -- 262 of them (447 MakeHybrid API): sending a message, publishing a post, commenting, reacting, inviting, moving a task. This tool refuses every GET; read with makehybrid_read. Documented in MakeHybrid's own API reference at /linkedin-docs.html. Use makehybrid_list_operations to find the operation id and makehybrid_describe_operation to see its parameters, then call it here. Authentication is handled by the server.

NameTypeReqDescription
bodyobject–JSON request body, for POST/PUT/PATCH/DELETE operations only. Omit it for GET.
operationstringyesThe operation id from makehybrid_list_operations (e.g. "get_v1_accounts"), or "METHOD /path" (e.g. "POST /complete/v2/{account_id}/posts"). A "plan:" prefix here overrides the plan argument.
path_paramsobject–Values for the {placeholders} in the operation path, by name, e.g. {"account_id":"acc_123"}. Every placeholder is required; values are URL-escaped for you, so pass them raw.
planstringyesWhich MakeHybrid plan: complete = MakeHybrid API (/linkedin). complete is the full LinkedIn surface, billed per seat (one LinkedIn account each) after a 30-day trial.
queryobject–Query-string parameters, e.g. {"limit":"20","cursor":"..."}. Values are coerced to strings; null and undefined entries are dropped.

No output schema declared.

No examples provided.

Install

How do I install the com.makehybrid/mcp server?

com.makehybrid/mcp is a hosted endpoint at https://makehybrid.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · makehybrid.com

# add to Claude Code
claude mcp add --transport http com-makehybrid-mcp 'https://makehybrid.com/mcp'
Common questions

What is the com.makehybrid/mcp server?

com.makehybrid/mcp is listed in the public MCP registry as com.makehybrid/mcp. LinkedIn, the messaging channels and the work trackers of a MakeHybrid account, as tools. This page covers its hosted endpoint (https://makehybrid.com/mcp).

Is the com.makehybrid/mcp server safe to use?

com.makehybrid/mcp scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.makehybrid/mcp server expose?

com.makehybrid/mcp exposes 116 tools: makehybrid_about, makehybrid_list_operations, makehybrid_describe_operation, makehybrid_read, makehybrid_write, and 111 more. Their descriptions and schemas cost roughly 15,740 tokens of context every time the server is loaded.

Does the com.makehybrid/mcp server require authentication?

Yes. com.makehybrid/mcp asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the com.makehybrid/mcp server still maintained?

com.makehybrid/mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.