com.mambabuilt/mcp-brand-sponsor-finder
NPM · @MAMBALABSDEV/MCP-BRAND-SPONSOR-FINDER
Brands paying creators in a niche, with evidence links, dates, and recency scores.
Available components
Last scanned (5 hours ago)
Scores higher than 38% of npm servers
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 6 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability57
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1247 tokens (~1247/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 1 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +11
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.85 ▲ functional
- 29 Oct 26 57
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@mambalabsdev/mcp-brand-sponsor-finder@1.1.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 92 packages
| Packages resolved | 92 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
find_brand_sponsors Find brands paying creators in a niche, with evidence ~1,247
Find brands with recent public proof of paid placement in a niche. Give a niche (for example health and fitness, beauty and skincare, food and beverage) and optionally audience keywords, seed YouTube channels, podcast feeds, or newsletters, and event sponsor pages. The actor reads public YouTube descriptions, podcast show notes, newsletter issues, event sponsor pages, partnership job posts, and brand creator program pages, and returns one row per brand domain (sighting count, last seen date, sources, creators or events sponsored, public contact, recency score) and one row per sighting (brand, domain, source, creator or event, date, evidence link, promo code, placement type, pitch angle). Instagram, TikTok, and the Meta Ad Library are not read. ROW CAP AND PAGING: a call returns at most max_rows rows (default 50, at most 200) as a JSON array in the first content block, and a paging block in the second with total_rows and next_cursor. To get every row, call again with only cursor set to next_cursor until next_cursor is null. A cursor call reads the same finished run's rows, starts no new run, and is not billed again. Input with nothing to run returns one free row whose error_reason starts with input_invalid:. A run that does not succeed is returned as an error with its run ID. Read-only; requires an APIFY_TOKEN; Apify charges per brand row, per sighting row, and per run start.
| Name | Type | Req | Description |
|---|---|---|---|
| audience_keywords | string | – | Optional. More search terms for the audience, one per line or separated by commas, for example "strength training". Each one widens the podcast, newsletter, and (with your key) YouTube channel search… |
| cursor | string | – | Wrapper setting, not sent to the actor. The next_cursor from the previous call's paging block. With a cursor the call starts no run and returns the next page of that run's rows, so nothing is billed… |
| event_calendar | string | – | Optional. Events whose sponsor or partner page to read, as a JSON list of objects: [{"name": "...", "url": "sponsor page URL", "date": "YYYY-MM-DD", "city": "...", "audience": "...", "size": "..."}],… |
| include_brands | string | – | true or false, default true. One row per brand domain with sighting count, last seen date, sources, creators or events, contact, and recency score. Default true. |
| include_sightings | string | – | true or false, default true. One row per sighting with its evidence link, date, promo code, placement type, and pitch angle. Default true. |
| max_brands_to_check | string | – | Brands, most sighted first, whose job boards and program pages are checked. Whole number, default 25, at most 200. Sent as text so Clay works. Default 25. |
| max_channels | string | – | YouTube channels read per run. Whole number, default 20, at most 100. Sent as text so Clay works. Default 20. |
| max_charge_usd | string | – | Optional. The run stops before it would charge more than this. |
| max_episodes_per_podcast | string | – | Newest episodes read per show. Whole number, default 8, at most 30. Sent as text so Clay works. Default 8. |
| max_issues_per_newsletter | string | – | Newest issues read per newsletter. Whole number, default 8, at most 30. Sent as text so Clay works. Default 8. |
| max_newsletters | string | – | Newsletters read per run. Whole number, default 8, at most 50. Sent as text so Clay works. Default 8. |
| max_podcasts | string | – | Podcast shows read per run. Whole number, default 15, at most 100. Sent as text so Clay works. Default 15. |
| max_rows | string | – | Wrapper setting, not sent to the actor. Rows returned per call: whole number, default 50, at most 200. Reach the rest of the run's rows with cursor. |
| max_videos_per_channel | string | – | Newest uploads read per channel (the public feed holds 15). Whole number, default 15, at most 50. Sent as text so Clay works. Default 15. |
| niche | string | – | The audience niche, for example "health and fitness", "beauty and skincare", or "food and beverage". Searches for channels, shows, and newsletters use it, and every row carries it. These three niches… |
| seed_sources | string | – | Optional. YouTube channel URLs or @handles, podcast RSS feed URLs, or newsletter URLs to read first, one per line or separated by commas. Each is read even beyond the per source limits. |
| sources | string | – | Optional. Which sources to run, separated by commas, any of: youtube, podcast, event, newsletter, job_post, program. Empty runs all of them. job_post and program check the brands the other sources fo… |
| use_niche_presets | string | – | true or false, default true. For health and fitness, beauty and skincare, and food and beverage, also read the channels, shows, newsletters, and event pages Mamba Labs has read before. Default true. |
| window_days | string | – | Only sightings from the last N days. Whole number, default 90, at most 365. Sent as text so Clay works. Default 90. |
No output schema declared.
No examples provided.
How do I install the com.mambabuilt/mcp-brand-sponsor-finder server?
com.mambabuilt/mcp-brand-sponsor-finder runs locally as an npm package, launched with npx -y @mambalabsdev/mcp-brand-sponsor-finder. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @mambalabsdev/mcp-brand-sponsor-finder
claude mcp add com-mambabuilt-mcp-brand-sponsor-finder -- npx -y @mambalabsdev/mcp-brand-sponsor-finder
What is the com.mambabuilt/mcp-brand-sponsor-finder server?
com.mambabuilt/mcp-brand-sponsor-finder is listed in the public MCP registry as com.mambabuilt/mcp-brand-sponsor-finder. Brands paying creators in a niche, with evidence links, dates, and recency scores. This page covers its npm package (@mambalabsdev/mcp-brand-sponsor-finder).
Is the com.mambabuilt/mcp-brand-sponsor-finder server safe to use?
com.mambabuilt/mcp-brand-sponsor-finder scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.mambabuilt/mcp-brand-sponsor-finder server expose?
com.mambabuilt/mcp-brand-sponsor-finder exposes 1 tool: find_brand_sponsors. Their descriptions and schemas cost roughly 1,247 tokens of context every time the server is loaded.
Is the com.mambabuilt/mcp-brand-sponsor-finder server still maintained?
com.mambabuilt/mcp-brand-sponsor-finder is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the com.mambabuilt/mcp-brand-sponsor-finder server under?
com.mambabuilt/mcp-brand-sponsor-finder declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.