com.mambabuilt/mcp-gtm-suite

NPM · @MAMBALABSDEV/MCP-GTM-SUITE · SCANNED AUG 3

11 Mamba Labs account-intelligence MCP tools in one server: identity, signals, ICP. Clay-ready.

Available components

+24 this week 68 68 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 41 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability67

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1847 tokens (~167/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @mambalabsdev/mcp-gtm-suite

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add com-mambabuilt-mcp-gtm-suite -- npx -y @mambalabsdev/mcp-gtm-suite

# add to Codex CLI

codex mcp add com-mambabuilt-mcp-gtm-suite -- npx -y @mambalabsdev/mcp-gtm-suite

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-mambabuilt-mcp-gtm-suite": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mambalabsdev/mcp-gtm-suite"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add com-mambabuilt-mcp-gtm-suite --command npx --arg -y --arg @mambalabsdev/mcp-gtm-suite

# ~/.hermes/config.yaml

mcp_servers:
  com-mambabuilt-mcp-gtm-suite:
    command: "npx"
    args: ["-y", "@mambalabsdev/mcp-gtm-suite"]

// mcp.json

{
  "mcpServers": {
    "com-mambabuilt-mcp-gtm-suite": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-gtm-suite"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
2 Aug 26 +40
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- First check of Schema quality: unverified functional
- Licence: MIT functional
1 Aug 26 +5
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
31 Jul 26 −7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 44

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@mambalabsdev/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 11 exposed · ~1,847 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

aggregate_gtm_signals Aggregate GTM Signals ~121

Aggregate a company's GTM signals into one composite score. Runs hiring and tech-stack detection in one call and returns a composite score, recommended action, and optional summary as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_domain	string	yes	Bare company domain, e.g. stripe.com
explain_mode	boolean	—	If true, the summary becomes a longer, more detailed explanation.
include_summary	boolean	—	Include a plain-English gtm_signal_summary.

No output schema declared.

No examples provided.

detect_gtm_tech_stack Detect GTM Tech Stack ~107

Detect which GTM tools a company uses from its public website. Returns CRM, sequencer, and marketing automation signals with per-tool boolean flags as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
crawl_additional_pages	boolean	—	Crawl up to 2 extra pages for better coverage. Defaults to true when omitted.
domain	string	yes	Bare company domain, e.g. stripe.com

No output schema declared.

No examples provided.

enrich_company_firmographics Enrich Company Firmographics ~208

Enrich a company domain into structured firmographics: employee band, industry, HQ, founded year, revenue estimate, logo, and description, with source provenance. Parsed from the company's schema.org/Organization JSON-LD and HTML meta tags and returned as a flat, Clay-ready JSON row with a source_signals array and a data_completeness score. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
batchSize	number	—	Domains enriched concurrently per wave in batch mode. Default 5, maximum 10.
company_name	string	—	Optional company name, used as a fallback label when the page does not expose one.
domain	string	—	Bare company domain to enrich, e.g. stripe.com. Provide this or domains.
domains	array	—	List of bare domains for batch processing. Takes precedence over domain.
skipCache	boolean	—	Force a fresh enrichment and ignore the 7 day result cache.

No output schema declared.

No examples provided.

get_company_changes Get Company Changes ~117

Monitor a company domain for changes across hiring, tech stack, funding, firmographics, and social since the last run. Returns only what changed as typed change events in flat, Clay-ready JSON. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_name	string	—	Optional company name hint, used when the domain does not match the brand name, e.g. Deel for deel.com.
domain	string	yes	Company domain to monitor, without https or www, e.g. stripe.com.

No output schema declared.

No examples provided.

get_funding_press_signals Get Funding and Press Signals ~117

Scan Google News and PR wires for funding rounds, executive moves, product launches, and acquisitions at any company domain. Returns deduplicated, dated events in flat Clay-ready JSON. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_name	string	—	Optional company name hint, used when the domain does not match the brand name, e.g. Deel for deel.com.
domain	string	yes	Company domain to scan, without https or www, e.g. stripe.com.

No output schema declared.

No examples provided.

map_company_social_presence Map Company Social Presence ~236

Map a company's social media presence across LinkedIn, X, Instagram, Facebook, and YouTube. Returns profile URLs and follower counts in flat Clay-ready JSON. Profiles are discovered from the company's own homepage links, a web search fallback, and pattern guessing, then validated against the company. Follower counts are extracted where public; X is URL-only (its count needs login) and Instagram and Facebook counts are best-effort. Provide at least one of company_domain or company_name. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_domain	string	—	Bare company domain, e.g. stripe.com. Provide this or company_name.
company_name	string	—	Optional company name. Improves search accuracy and disambiguation. Provide this or company_domain.
includeFollowerCounts	boolean	—	Fetch profile pages to extract follower counts (default true). Set false for URLs only, which is cheaper.
platforms	array	—	Which platforms to map. Defaults to all five.
skipCache	boolean	—	Force a fresh lookup and ignore the 7 day result cache.

No output schema declared.

No examples provided.

resolve_company_identity Resolve Company Identity ~222

Resolve any combination of company name, domain, or LinkedIn URL into one canonical company identity: the name, primary domain, and LinkedIn company URL, each with a 0-100 confidence score plus an overall score and a match method. Cross-checks the inputs you give it, resolves the ones you do not, and flags conflicts (a domain and a LinkedIn slug that disagree) instead of merging them. Provide at least one of company_name, domain, or linkedin_url. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_name	string	—	Company name, e.g. Stripe. Provide at least one of company_name, domain, or linkedin_url.
domain	string	—	Bare company domain, e.g. stripe.com. The strongest canonical key when provided.
linkedin_url	string	—	LinkedIn company URL (https://www.linkedin.com/company/stripe) or bare slug (stripe).
skipCache	boolean	—	Force a fresh resolution and ignore the 7 day result cache.

No output schema declared.

No examples provided.

resolve_linkedin_url Resolve LinkedIn URL ~112

Resolve a company domain or name to its LinkedIn company URL with a confidence score, firmographics, and social links as a flat, Clay-ready JSON row. Provide at least one of company_domain or company_name. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_domain	string	—	Bare company domain, e.g. stripe.com. Required if company_name is not provided.
company_name	string	—	Company name. Required if company_domain is not provided.

No output schema declared.

No examples provided.

scan_gtm_hiring_signals Scan GTM Hiring Signals ~128

Scan company career pages to detect GTM hiring activity. Returns sales, marketing, and revenue operations job postings across Greenhouse, Lever, and Ashby as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
ats_slug	string	—	Optional ATS board slug override when it differs from the domain.
domain	string	yes	Bare company domain, e.g. stripe.com
role_filter	array	—	Optional list of GTM role keywords to filter on. Defaults to the built-in list.

No output schema declared.

No examples provided.

scan_job_board_keywords Scan Job Board Keywords ~206

Scan a company's job board for roles in chosen categories across Greenhouse, Lever, Ashby, Workday, and Rippling. Returns matched role counts and titles per category as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_domain	string	yes	Bare company domain, e.g. stripe.com
custom_keywords	array	—	Keyword strings to match when Custom is included in role_categories.
enable_fallback	boolean	—	Fall back to a pre-indexed job database when the live ATS cascade finds nothing.
previous_roles_detected	string	—	Comma-separated matched role titles from a previous run, to compute deltas.
previous_run_date	string	—	ISO date of the previous run, e.g. 2026-03-15.
role_categories	array	yes	One or more of: GTM, Engineering, Finance, Operations, Executive, Custom.

No output schema declared.

No examples provided.

score_icp_fit Score ICP Fit ~273

Score a company against your ideal customer profile (ICP) using weighted signals. Returns a 0 to 100 icp_score, an A to D icp_tier, and a per-signal breakdown as a flat, Clay-ready JSON row. Define your ICP with a template, scoring_config, or plain-English icp_description (which requires llm_api_key). Read-only; requires an APIFY_TOKEN and consumes Apify credits per call.

Input Output Examples

Name	Type	Req	Description
company_domain	string	yes	The primary domain of the company to score, e.g. clay.com
company_name	string	—	Optional display name of the company.
fetch_signals	boolean	—	If true, the actor fetches hiring and tech-stack signals automatically before scoring.
icp_description	string	—	Plain-English ICP description. Requires llm_api_key.
include_explanation	boolean	—	If true, adds a score_explanation string to the output.
llm_api_key	string	—	Your OpenAI or Anthropic key, used only with icp_description.
llm_provider	string	—	LLM provider for icp_description: openai or anthropic.
scoring_config	object	—	JSON object of scoring weights.
template	string	—	Name of a prebuilt scoring config.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug