# com.mambabuilt/mcp-gtm-suite (npm · @mambalabsdev/mcp-gtm-suite) 11 Mamba Labs account-intelligence MCP tools in one server: identity, signals, ICP. Clay-ready. - Trust score: 68/100 (medium) - Change this week: +24 - Registry status: active - Liveness: live - Owner verified: no - Last scored: 2026-08-03 ## Components - npm · `@mambalabsdev/mcp-gtm-suite`: 68/100 (this document), [markdown](https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite.md), [page](https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite) ## Channel facts - Registry: `npm` - Package: `@mambalabsdev/mcp-gtm-suite` - Version: `1.1.0` - Transport: `stdio` ## Trust breakdown How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog) Scored 2026-08-03. - **Supply Chain Security**: 87/100 - No malware found by supply-chain analysis. - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. - No install/post-install scripts declared. - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. - **Provenance & Transparency**: 45/100 - Source repository is publicly reachable at the declared URL. - Provenance check failed: no build-provenance attestation is published. - Clear OSI-approved license (MIT). - Actively maintained (last published 41 days ago). - Disclosure check failed: no security disclosure policy was found in the source repository. - **Schema Quality & AI Usability**: 67/100 - AI-judged instruction clarity (excellent). - Context-footprint check failed: tool/resource definitions use about 1847 tokens (~167/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. - Usage-examples check failed: none of the tools include examples. - **Stability & Change Management**: 27/100 - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses. - **Tool Coverage**: 100/100 - 100% of tools have a non-trivial description (not blank, and not just the tool's name). - 100% of tool parameters carry a description. - **Capabilities**: 100/100 - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28. ## Install ### Claude ```bash claude mcp add com-mambabuilt-mcp-gtm-suite -- npx -y @mambalabsdev/mcp-gtm-suite ``` ### Codex ```bash codex mcp add com-mambabuilt-mcp-gtm-suite -- npx -y @mambalabsdev/mcp-gtm-suite ``` ### opencode ```json { "$schema": "https://opencode.ai/config.json", "mcp": { "com-mambabuilt-mcp-gtm-suite": { "type": "local", "command": [ "npx", "-y", "@mambalabsdev/mcp-gtm-suite" ], "enabled": true } } } ``` ### OpenClaw ```bash openclaw mcp add com-mambabuilt-mcp-gtm-suite --command npx --arg -y --arg @mambalabsdev/mcp-gtm-suite ``` ### Hermes ```yaml mcp_servers: com-mambabuilt-mcp-gtm-suite: command: "npx" args: ["-y", "@mambalabsdev/mcp-gtm-suite"] ``` ### Other ```json { "mcpServers": { "com-mambabuilt-mcp-gtm-suite": { "command": "npx", "args": [ "-y", "@mambalabsdev/mcp-gtm-suite" ] } } } ``` ## Changelog Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims. ### 2026-08-03 (score 68, +4) - [functional improvement] Stability: unverified → 0.27 ### 2026-08-02 (score 64, +40) - [security regression] Provenance: unverified → fail - [security improvement] Install scripts: unverified → pass - [security improvement] Known CVEs: unverified → partial - [security improvement] Malware scan: unverified → pass - [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. - [functional regression] Capabilities: pass → unverified - [functional regression] Tool coverage: 100 → unverified - [functional improvement] Schema quality: unverified → excellent - [functional improvement] License: unverified → pass - [functional improvement] Maintenance: unverified → pass - [functional improvement] Dependency health: unverified → partial - [functional] First check of Schema quality: unverified - [functional] Licence: MIT ### 2026-08-01 (score 24, +5) - [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). - [functional improvement] MCP protocol: unverified → pass ### 2026-07-31 (score 19, −7) - [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server ### 2026-07-30 (score 26, −18) - [security regression] Malware scan: pass → unverified ### 2026-07-27 (score 44) First indexed and scored. ## MCP tools (11) ### `scan_gtm_hiring_signals` (~128 tokens) Scan GTM Hiring Signals Scan company career pages to detect GTM hiring activity. Returns sales, marketing, and revenue operations job postings across Greenhouse, Lever, and Ashby as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `ats_slug` (string): Optional ATS board slug override when it differs from the domain. - `domain` (string, required): Bare company domain, e.g. stripe.com - `role_filter` (array): Optional list of GTM role keywords to filter on. Defaults to the built-in list. ### `detect_gtm_tech_stack` (~107 tokens) Detect GTM Tech Stack Detect which GTM tools a company uses from its public website. Returns CRM, sequencer, and marketing automation signals with per-tool boolean flags as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `crawl_additional_pages` (boolean): Crawl up to 2 extra pages for better coverage. Defaults to true when omitted. - `domain` (string, required): Bare company domain, e.g. stripe.com ### `aggregate_gtm_signals` (~121 tokens) Aggregate GTM Signals Aggregate a company's GTM signals into one composite score. Runs hiring and tech-stack detection in one call and returns a composite score, recommended action, and optional summary as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_domain` (string, required): Bare company domain, e.g. stripe.com - `explain_mode` (boolean): If true, the summary becomes a longer, more detailed explanation. - `include_summary` (boolean): Include a plain-English gtm_signal_summary. ### `scan_job_board_keywords` (~206 tokens) Scan Job Board Keywords Scan a company's job board for roles in chosen categories across Greenhouse, Lever, Ashby, Workday, and Rippling. Returns matched role counts and titles per category as a flat, Clay-ready JSON row. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_domain` (string, required): Bare company domain, e.g. stripe.com - `custom_keywords` (array): Keyword strings to match when Custom is included in role_categories. - `enable_fallback` (boolean): Fall back to a pre-indexed job database when the live ATS cascade finds nothing. - `previous_roles_detected` (string): Comma-separated matched role titles from a previous run, to compute deltas. - `previous_run_date` (string): ISO date of the previous run, e.g. 2026-03-15. - `role_categories` (array, required): One or more of: GTM, Engineering, Finance, Operations, Executive, Custom. ### `resolve_linkedin_url` (~112 tokens) Resolve LinkedIn URL Resolve a company domain or name to its LinkedIn company URL with a confidence score, firmographics, and social links as a flat, Clay-ready JSON row. Provide at least one of company_domain or company_name. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_domain` (string): Bare company domain, e.g. stripe.com. Required if company_name is not provided. - `company_name` (string): Company name. Required if company_domain is not provided. ### `score_icp_fit` (~273 tokens) Score ICP Fit Score a company against your ideal customer profile (ICP) using weighted signals. Returns a 0 to 100 icp_score, an A to D icp_tier, and a per-signal breakdown as a flat, Clay-ready JSON row. Define your ICP with a template, scoring_config, or plain-English icp_description (which requires llm_api_key). Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_domain` (string, required): The primary domain of the company to score, e.g. clay.com - `company_name` (string): Optional display name of the company. - `fetch_signals` (boolean): If true, the actor fetches hiring and tech-stack signals automatically before scoring. - `icp_description` (string): Plain-English ICP description. Requires llm_api_key. - `include_explanation` (boolean): If true, adds a score_explanation string to the output. - `llm_api_key` (string): Your OpenAI or Anthropic key, used only with icp_description. - `llm_provider` (string): LLM provider for icp_description: openai or anthropic. - `scoring_config` (object): JSON object of scoring weights. - `template` (string): Name of a prebuilt scoring config. ### `resolve_company_identity` (~222 tokens) Resolve Company Identity Resolve any combination of company name, domain, or LinkedIn URL into one canonical company identity: the name, primary domain, and LinkedIn company URL, each with a 0-100 confidence score plus an overall score and a match method. Cross-checks the inputs you give it, resolves the ones you do not, and flags conflicts (a domain and a LinkedIn slug that disagree) instead of merging them. Provide at least one of company_name, domain, or linkedin_url. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_name` (string): Company name, e.g. Stripe. Provide at least one of company_name, domain, or linkedin_url. - `domain` (string): Bare company domain, e.g. stripe.com. The strongest canonical key when provided. - `linkedin_url` (string): LinkedIn company URL (https://www.linkedin.com/company/stripe) or bare slug (stripe). - `skipCache` (boolean): Force a fresh resolution and ignore the 7 day result cache. ### `enrich_company_firmographics` (~208 tokens) Enrich Company Firmographics Enrich a company domain into structured firmographics: employee band, industry, HQ, founded year, revenue estimate, logo, and description, with source provenance. Parsed from the company's schema.org/Organization JSON-LD and HTML meta tags and returned as a flat, Clay-ready JSON row with a source_signals array and a data_completeness score. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `batchSize` (number): Domains enriched concurrently per wave in batch mode. Default 5, maximum 10. - `company_name` (string): Optional company name, used as a fallback label when the page does not expose one. - `domain` (string): Bare company domain to enrich, e.g. stripe.com. Provide this or domains. - `domains` (array): List of bare domains for batch processing. Takes precedence over domain. - `skipCache` (boolean): Force a fresh enrichment and ignore the 7 day result cache. ### `map_company_social_presence` (~236 tokens) Map Company Social Presence Map a company's social media presence across LinkedIn, X, Instagram, Facebook, and YouTube. Returns profile URLs and follower counts in flat Clay-ready JSON. Profiles are discovered from the company's own homepage links, a web search fallback, and pattern guessing, then validated against the company. Follower counts are extracted where public; X is URL-only (its count needs login) and Instagram and Facebook counts are best-effort. Provide at least one of company_domain or company_name. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_domain` (string): Bare company domain, e.g. stripe.com. Provide this or company_name. - `company_name` (string): Optional company name. Improves search accuracy and disambiguation. Provide this or company_domain. - `includeFollowerCounts` (boolean): Fetch profile pages to extract follower counts (default true). Set false for URLs only, which is cheaper. - `platforms` (array): Which platforms to map. Defaults to all five. - `skipCache` (boolean): Force a fresh lookup and ignore the 7 day result cache. ### `get_funding_press_signals` (~117 tokens) Get Funding and Press Signals Scan Google News and PR wires for funding rounds, executive moves, product launches, and acquisitions at any company domain. Returns deduplicated, dated events in flat Clay-ready JSON. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_name` (string): Optional company name hint, used when the domain does not match the brand name, e.g. Deel for deel.com. - `domain` (string, required): Company domain to scan, without https or www, e.g. stripe.com. ### `get_company_changes` (~117 tokens) Get Company Changes Monitor a company domain for changes across hiring, tech stack, funding, firmographics, and social since the last run. Returns only what changed as typed change events in flat, Clay-ready JSON. Read-only; requires an APIFY_TOKEN and consumes Apify credits per call. Input parameters: - `company_name` (string): Optional company name hint, used when the domain does not match the brand name, e.g. Deel for deel.com. - `domain` (string, required): Company domain to monitor, without https or www, e.g. stripe.com. ## Diagnostics Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite#diagnostics ## Score history - 2026-08-03: 68 - 2026-08-02: 64 - 2026-08-01: 24 - 2026-07-31: 19 - 2026-07-30: 26 - 2026-07-28: 44 - 2026-07-27: 44 ## Links - npm package: https://www.npmjs.com/package/@mambalabsdev/mcp-gtm-suite - Socket report: https://socket.dev/npm/package/@mambalabsdev/mcp-gtm-suite - Repository: https://github.com/mambalabsdev/mcp-gtm-suite - Changelog RSS feed: https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite/changelog.xml - Changelog JSON feed: https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite/changelog.json - HTML version of this page: https://verifymcp.io/servers/com-mambabuilt-mcp-gtm-suite/mambalabsdev-mcp-gtm-suite