{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T19:05:06.878Z","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker","markdownUrl":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.md","server":{"slug":"com-mambabuilt-mcp-newsletter-sponsor-tracker","name":"com.mambabuilt/mcp-newsletter-sponsor-tracker","registryName":"com.mambabuilt/mcp-newsletter-sponsor-tracker","description":"Who sponsors a newsletter, or which newsletters a brand sponsors, from public archives.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mambalabsdev-mcp-newsletter-sponsor-tracker","type":"npm","identifier":"@mambalabsdev/mcp-newsletter-sponsor-tracker","withdrawn":false,"url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker","version":"1.0.1","transport":"stdio","scoredAt":"2026-11-05T11:49:19.256Z"},"score":{"total":48,"tier":"low","status":"scored","weekDelta":-22,"history":[{"date":"2026-11-05","total":48},{"date":"2026-11-04","total":73},{"date":"2026-11-03","total":72},{"date":"2026-11-02","total":72},{"date":"2026-11-01","total":71},{"date":"2026-10-31","total":71},{"date":"2026-10-30","total":70},{"date":"2026-10-29","total":70},{"date":"2026-10-28","total":70},{"date":"2026-10-27","total":69},{"date":"2026-10-26","total":54}]},"categories":[{"name":"Supply Chain Security","score":13,"verdict":"unverified","reasons":["Malware scan not yet available for this package.","Known CVEs could not be checked: the version this server declares is not published in its registry.","No install/post-install scripts declared.","Dependency health could not be checked: the version this server declares is not published in its registry."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"vendor_not_cached"}},{"code":"cve.inconclusive","args":{"reason":"root_version_missing"}},{"code":"installscript.none","args":{}},{"code":"dephealth.inconclusive","args":{"reason":"root_version_missing"}}]},{"name":"Provenance & Transparency","score":48,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 0 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"0"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":64,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 441 tokens (~441/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"441","items":"1","tools":"1","tokens":"441","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":33,"verdict":"partial","reasons":["Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"10"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 1 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"1","judged":"1"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Malware scan not yet available for this package.","Known CVEs could not be checked: the version this server declares is not published in its registry.","Dependency health could not be checked: the version this server declares is not published in its registry."],"malware":[],"components":[{"slug":"mambalabsdev-mcp-newsletter-sponsor-tracker","type":"npm","identifier":"@mambalabsdev/mcp-newsletter-sponsor-tracker","withdrawn":false,"score":48,"current":true,"url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker","markdownUrl":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@mambalabsdev/mcp-newsletter-sponsor-tracker"},{"label":"Version","value":"1.0.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"track_newsletter_sponsors","title":"Track newsletter sponsors","description":"Find who sponsors a newsletter, or which newsletters a brand sponsors, from public newsletter archives (Substack archive JSON, beehiiv and other sitemaps, RSS). mode newsletter: give newsletter_urls (for example notboring.co) and get one row per sponsor found in the newest issues, with sponsor name, domain, link without tracking, placements, share of issues, first and last issue seen, and issue links, plus one free summary row per newsletter. mode brand: give brand_name and brand_domain (for example Attio, attio.com) and get the newsletters whose recent issues carry a sponsor placement for the brand, found through Google results and confirmed in each newsletter's own issues. A placement is a short block with a sponsor label (presented by, brought to you by, sponsored by, together with) and the first outside link beside it. A run that does not succeed is returned as an error with its run ID. Read-only; requires an APIFY_TOKEN; Apify charges per sponsor row and, in brand mode, one brand search event.","inputs":[{"name":"brand_domain","type":"string","required":false,"description":"Brand mode. The sponsor domain, for example attio.com."},{"name":"brand_name","type":"string","required":false,"description":"Brand mode. The sponsor name as newsletters print it, for example Attio."},{"name":"issues_to_scan","type":"string","required":false,"description":"Newest issues read per newsletter, 1 to 200; at most 20 in brand mode. Default 20."},{"name":"max_charge_usd","type":"string","required":false,"description":"Optional. The run stops before any row that would take its charges over this amount."},{"name":"mode","type":"string","required":false,"description":"newsletter (default): newsletter links in, sponsors out. brand: a brand in, the newsletters that ran its placements out."},{"name":"newsletter_urls","type":"array","required":false,"description":"Newsletter mode. Home page links or domains, up to 100, for example notboring.co."},{"name":"newsletters_to_check","type":"string","required":false,"description":"Brand mode. Candidate newsletters to confirm, 1 to 10. Default 10."},{"name":"since_days","type":"string","required":false,"description":"Stop at issues older than this many days. 0: no limit. Default 365."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":441}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T11:49:19.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-26","recent":[{"id":"chg_01a1ab8a-bf2f-70db-9ebc-188c4cf33a79","kind":"score.total_changed","summary":"Trust score (73 → 48)","materiality":"functional","direction":"regression","scoreDelta":-25,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1ab8a-bf2f-70db-9ebc-188c4cf33a79"},{"id":"chg_01a1ab8a-bf2d-7151-b413-d36b519d2775","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1ab8a-bf2d-7151-b413-d36b519d2775"},{"id":"chg_01a1ab8a-bf2e-70b9-896c-02f1c694c8e4","kind":"check.unverifiable","summary":"Known CVEs (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1ab8a-bf2e-70b9-896c-02f1c694c8e4"},{"id":"chg_01a1ab8a-bf2e-7682-bcba-aa6f122cfb2c","kind":"check.unverifiable","summary":"Dependency health (0.85 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1ab8a-bf2e-7682-bcba-aa6f122cfb2c"},{"id":"chg_01a1ab8a-bf2e-7afd-80ab-794bfe86dded","kind":"package.version_changed","summary":"Package version (1.0.0 → 1.0.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1ab8a-bf2e-7afd-80ab-794bfe86dded"},{"id":"chg_01a1a5a3-9109-7d53-ae73-94ac88dd2f82","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1a5a3-9109-7d53-ae73-94ac88dd2f82"},{"id":"chg_01a19b50-54a7-78af-8b51-4500696e9ccf","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a19b50-54a7-78af-8b51-4500696e9ccf"},{"id":"chg_01a19103-a325-7d01-bf83-d83e777921de","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a19103-a325-7d01-bf83-d83e777921de"},{"id":"chg_01a1818f-8b1a-7841-9f52-9a9521f97e93","kind":"check.reverified","summary":"Stability (unverified → 0.07)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1818f-8b1a-7841-9f52-9a9521f97e93"},{"id":"chg_01a1818f-8b1c-7471-b699-5477b8319b6a","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a1818f-8b1c-7471-b699-5477b8319b6a"},{"id":"chg_01a17c68-c10a-743a-a01b-61a8d150c409","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a17c68-c10a-743a-a01b-61a8d150c409"},{"id":"chg_01a17c68-c127-735d-ba91-07ffb28e905e","kind":"score.total_changed","summary":"Trust score (54 → 69)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a17c68-c127-735d-ba91-07ffb28e905e"},{"id":"chg_01a178a5-a163-733d-b7a2-6db10b37bef7","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#chg-chg_01a178a5-a163-733d-b7a2-6db10b37bef7"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker","markdown":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.md","changelogJson":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker/changelog.json","changelogRss":"https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@mambalabsdev/mcp-newsletter-sponsor-tracker"},{"label":"Socket report","href":"https://socket.dev/npm/package/@mambalabsdev/mcp-newsletter-sponsor-tracker"},{"label":"Repository","href":"https://github.com/mambalabsdev/mcp-newsletter-sponsor-tracker"}]}}