# com.mambabuilt/mcp-brand-sponsor-finder (npm · @mambalabsdev/mcp-brand-sponsor-finder)

Brands paying creators in a niche, with evidence links, dates, and recency scores.

- Trust score: 45/100 (low)
- Change this week: −12
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- npm · `@mambalabsdev/mcp-brand-sponsor-finder`: 45/100 (this document), [markdown](https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder.md), [page](https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder)

## Channel facts

- Registry: `npm`
- Package: `@mambalabsdev/mcp-brand-sponsor-finder`
- Version: `1.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 13/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: the version this server declares is not published in its registry.
  - No install/post-install scripts declared.
  - Dependency health could not be checked: the version this server declares is not published in its registry.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 57/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1247 tokens (~1247/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 1 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the com.mambabuilt/mcp-brand-sponsor-finder server?

com.mambabuilt/mcp-brand-sponsor-finder runs locally as an npm package, launched with npx -y @mambalabsdev/mcp-brand-sponsor-finder. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add com-mambabuilt-mcp-brand-sponsor-finder -- npx -y @mambalabsdev/mcp-brand-sponsor-finder
```

### Cursor

```json
{
  "mcpServers": {
    "com-mambabuilt-mcp-brand-sponsor-finder": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-brand-sponsor-finder"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-mambabuilt-mcp-brand-sponsor-finder": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-brand-sponsor-finder"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add com-mambabuilt-mcp-brand-sponsor-finder -- npx -y @mambalabsdev/mcp-brand-sponsor-finder
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-mambabuilt-mcp-brand-sponsor-finder": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mambalabsdev/mcp-brand-sponsor-finder"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-mambabuilt-mcp-brand-sponsor-finder --command npx --arg -y --arg @mambalabsdev/mcp-brand-sponsor-finder
```

### Hermes

```yaml
mcp_servers:
  com-mambabuilt-mcp-brand-sponsor-finder:
    command: "npx"
    args: ["-y", "@mambalabsdev/mcp-brand-sponsor-finder"]
```

### Netclaw

```json
{
  "McpServers": {
    "com-mambabuilt-mcp-brand-sponsor-finder": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@mambalabsdev/mcp-brand-sponsor-finder"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-mambabuilt-mcp-brand-sponsor-finder -t stdio -c npx -a -y @mambalabsdev/mcp-brand-sponsor-finder
```

### Other

```json
{
  "mcpServers": {
    "com-mambabuilt-mcp-brand-sponsor-finder": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-brand-sponsor-finder"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 45, −25)

- [security regression] Malware scan: pass → unverified
- [security regression] Known CVEs: pass → unverified
- [functional regression] Dependency health: 0.85 → unverified
- [functional] Package version: 1.1.0 → 1.1.1

### 2026-11-03 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-01 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 68, +11)

- [security improvement] Known CVEs: unverified → pass
- [functional improvement] Dependency health: unverified → 0.85

### 2026-10-29 (score 57)

First indexed and scored.

## MCP tools (1)

### `find_brand_sponsors` (~1247 tokens)

Find brands paying creators in a niche, with evidence

Find brands with recent public proof of paid placement in a niche. Give a niche (for example health and fitness, beauty and skincare, food and beverage) and optionally audience keywords, seed YouTube channels, podcast feeds, or newsletters, and event sponsor pages. The actor reads public YouTube descriptions, podcast show notes, newsletter issues, event sponsor pages, partnership job posts, and brand creator program pages, and returns one row per brand domain (sighting count, last seen date, sources, creators or events sponsored, public contact, recency score) and one row per sighting (brand, domain, source, creator or event, date, evidence link, promo code, placement type, pitch angle). Instagram, TikTok, and the Meta Ad Library are not read. ROW CAP AND PAGING: a call returns at most max_rows rows (default 50, at most 200) as a JSON array in the first content block, and a paging block in the second with total_rows and next_cursor. To get every row, call again with only cursor set to next_cursor until next_cursor is null. A cursor call reads the same finished run's rows, starts no new run, and is not billed again. Input with nothing to run returns one free row whose error_reason starts with input_invalid:. A run that does not succeed is returned as an error with its run ID. Read-only; requires an APIFY_TOKEN; Apify charges per brand row, per sighting row, and per run start.

Input parameters:

- `audience_keywords` (string): Optional. More search terms for the audience, one per line or separated by commas, for example "strength training". Each one widens the podcast, newsletter, and (with your key) YouTube channel search…
- `cursor` (string): Wrapper setting, not sent to the actor. The next_cursor from the previous call's paging block. With a cursor the call starts no run and returns the next page of that run's rows, so nothing is billed…
- `event_calendar` (string): Optional. Events whose sponsor or partner page to read, as a JSON list of objects: [{"name": "...", "url": "sponsor page URL", "date": "YYYY-MM-DD", "city": "...", "audience": "...", "size": "..."}],…
- `include_brands` (string): true or false, default true. One row per brand domain with sighting count, last seen date, sources, creators or events, contact, and recency score. Default true.
- `include_sightings` (string): true or false, default true. One row per sighting with its evidence link, date, promo code, placement type, and pitch angle. Default true.
- `max_brands_to_check` (string): Brands, most sighted first, whose job boards and program pages are checked. Whole number, default 25, at most 200. Sent as text so Clay works. Default 25.
- `max_channels` (string): YouTube channels read per run. Whole number, default 20, at most 100. Sent as text so Clay works. Default 20.
- `max_charge_usd` (string): Optional. The run stops before it would charge more than this.
- `max_episodes_per_podcast` (string): Newest episodes read per show. Whole number, default 8, at most 30. Sent as text so Clay works. Default 8.
- `max_issues_per_newsletter` (string): Newest issues read per newsletter. Whole number, default 8, at most 30. Sent as text so Clay works. Default 8.
- `max_newsletters` (string): Newsletters read per run. Whole number, default 8, at most 50. Sent as text so Clay works. Default 8.
- `max_podcasts` (string): Podcast shows read per run. Whole number, default 15, at most 100. Sent as text so Clay works. Default 15.
- `max_rows` (string): Wrapper setting, not sent to the actor. Rows returned per call: whole number, default 50, at most 200. Reach the rest of the run's rows with cursor.
- `max_videos_per_channel` (string): Newest uploads read per channel (the public feed holds 15). Whole number, default 15, at most 50. Sent as text so Clay works. Default 15.
- `niche` (string): The audience niche, for example "health and fitness", "beauty and skincare", or "food and beverage". Searches for channels, shows, and newsletters use it, and every row carries it. These three niches…
- `seed_sources` (string): Optional. YouTube channel URLs or @handles, podcast RSS feed URLs, or newsletter URLs to read first, one per line or separated by commas. Each is read even beyond the per source limits.
- `sources` (string): Optional. Which sources to run, separated by commas, any of: youtube, podcast, event, newsletter, job_post, program. Empty runs all of them. job_post and program check the brands the other sources fo…
- `use_niche_presets` (string): true or false, default true. For health and fitness, beauty and skincare, and food and beverage, also read the channels, shows, newsletters, and event pages Mamba Labs has read before. Default true.
- `window_days` (string): Only sightings from the last N days. Whole number, default 90, at most 365. Sent as text so Clay works. Default 90.

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder#diagnostics

## Score history

- 2026-11-05: 45
- 2026-11-04: 70
- 2026-11-03: 70
- 2026-11-02: 69
- 2026-11-01: 69
- 2026-10-31: 68
- 2026-10-30: 68
- 2026-10-29: 57

## Common questions

### What is the com.mambabuilt/mcp-brand-sponsor-finder server?

com.mambabuilt/mcp-brand-sponsor-finder is listed in the public MCP registry as com.mambabuilt/mcp-brand-sponsor-finder. Brands paying creators in a niche, with evidence links, dates, and recency scores. This page covers its npm package (@mambalabsdev/mcp-brand-sponsor-finder).

### Is the com.mambabuilt/mcp-brand-sponsor-finder server safe to use?

com.mambabuilt/mcp-brand-sponsor-finder scores 45 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.mambabuilt/mcp-brand-sponsor-finder server expose?

com.mambabuilt/mcp-brand-sponsor-finder exposes 1 tool: find_brand_sponsors. Their descriptions and schemas cost roughly 1,247 tokens of context every time the server is loaded.

### Is the com.mambabuilt/mcp-brand-sponsor-finder server still maintained?

com.mambabuilt/mcp-brand-sponsor-finder is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the com.mambabuilt/mcp-brand-sponsor-finder server under?

com.mambabuilt/mcp-brand-sponsor-finder declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/@mambalabsdev/mcp-brand-sponsor-finder
- Socket report: https://socket.dev/npm/package/@mambalabsdev/mcp-brand-sponsor-finder
- Repository: https://github.com/mambalabsdev/mcp-brand-sponsor-finder
- Changelog RSS feed: https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder.json
- HTML version of this page: https://verifymcp.io/servers/com-mambabuilt-mcp-brand-sponsor-finder/mambalabsdev-mcp-brand-sponsor-finder