# com.mambabuilt/mcp-newsletter-sponsor-tracker (npm · @mambalabsdev/mcp-newsletter-sponsor-tracker)

Who sponsors a newsletter, or which newsletters a brand sponsors, from public archives.

- Trust score: 48/100 (low)
- Change this week: −22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- npm · `@mambalabsdev/mcp-newsletter-sponsor-tracker`: 48/100 (this document), [markdown](https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.md), [page](https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker)

## Channel facts

- Registry: `npm`
- Package: `@mambalabsdev/mcp-newsletter-sponsor-tracker`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 13/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: the version this server declares is not published in its registry.
  - No install/post-install scripts declared.
  - Dependency health could not be checked: the version this server declares is not published in its registry.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 64/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 441 tokens (~441/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 33/100
  - Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 1 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the com.mambabuilt/mcp-newsletter-sponsor-tracker server?

com.mambabuilt/mcp-newsletter-sponsor-tracker runs locally as an npm package, launched with npx -y @mambalabsdev/mcp-newsletter-sponsor-tracker. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add com-mambabuilt-mcp-newsletter-sponsor-tracker -- npx -y @mambalabsdev/mcp-newsletter-sponsor-tracker
```

### Cursor

```json
{
  "mcpServers": {
    "com-mambabuilt-mcp-newsletter-sponsor-tracker": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-newsletter-sponsor-tracker"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-mambabuilt-mcp-newsletter-sponsor-tracker": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-newsletter-sponsor-tracker"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add com-mambabuilt-mcp-newsletter-sponsor-tracker -- npx -y @mambalabsdev/mcp-newsletter-sponsor-tracker
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-mambabuilt-mcp-newsletter-sponsor-tracker": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mambalabsdev/mcp-newsletter-sponsor-tracker"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-mambabuilt-mcp-newsletter-sponsor-tracker --command npx --arg -y --arg @mambalabsdev/mcp-newsletter-sponsor-tracker
```

### Hermes

```yaml
mcp_servers:
  com-mambabuilt-mcp-newsletter-sponsor-tracker:
    command: "npx"
    args: ["-y", "@mambalabsdev/mcp-newsletter-sponsor-tracker"]
```

### Netclaw

```json
{
  "McpServers": {
    "com-mambabuilt-mcp-newsletter-sponsor-tracker": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@mambalabsdev/mcp-newsletter-sponsor-tracker"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-mambabuilt-mcp-newsletter-sponsor-tracker -t stdio -c npx -a -y @mambalabsdev/mcp-newsletter-sponsor-tracker
```

### Other

```json
{
  "mcpServers": {
    "com-mambabuilt-mcp-newsletter-sponsor-tracker": {
      "command": "npx",
      "args": [
        "-y",
        "@mambalabsdev/mcp-newsletter-sponsor-tracker"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 48, −25)

- [security regression] Malware scan: pass → unverified
- [security regression] Known CVEs: pass → unverified
- [functional regression] Dependency health: 0.85 → unverified
- [functional] Package version: 1.0.0 → 1.0.1

### 2026-11-04 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-28 (score 70, +1)

- [functional improvement] Stability: unverified → 0.07

### 2026-10-27 (score 69, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-10-26 (score 54)

First indexed and scored.

## MCP tools (1)

### `track_newsletter_sponsors` (~441 tokens)

Track newsletter sponsors

Find who sponsors a newsletter, or which newsletters a brand sponsors, from public newsletter archives (Substack archive JSON, beehiiv and other sitemaps, RSS). mode newsletter: give newsletter_urls (for example notboring.co) and get one row per sponsor found in the newest issues, with sponsor name, domain, link without tracking, placements, share of issues, first and last issue seen, and issue links, plus one free summary row per newsletter. mode brand: give brand_name and brand_domain (for example Attio, attio.com) and get the newsletters whose recent issues carry a sponsor placement for the brand, found through Google results and confirmed in each newsletter's own issues. A placement is a short block with a sponsor label (presented by, brought to you by, sponsored by, together with) and the first outside link beside it. A run that does not succeed is returned as an error with its run ID. Read-only; requires an APIFY_TOKEN; Apify charges per sponsor row and, in brand mode, one brand search event.

Input parameters:

- `brand_domain` (string): Brand mode. The sponsor domain, for example attio.com.
- `brand_name` (string): Brand mode. The sponsor name as newsletters print it, for example Attio.
- `issues_to_scan` (string): Newest issues read per newsletter, 1 to 200; at most 20 in brand mode. Default 20.
- `max_charge_usd` (string): Optional. The run stops before any row that would take its charges over this amount.
- `mode` (string): newsletter (default): newsletter links in, sponsors out. brand: a brand in, the newsletters that ran its placements out.
- `newsletter_urls` (array): Newsletter mode. Home page links or domains, up to 100, for example notboring.co.
- `newsletters_to_check` (string): Brand mode. Candidate newsletters to confirm, 1 to 10. Default 10.
- `since_days` (string): Stop at issues older than this many days. 0: no limit. Default 365.

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker#diagnostics

## Score history

- 2026-11-05: 48
- 2026-11-04: 73
- 2026-11-03: 72
- 2026-11-02: 72
- 2026-11-01: 71
- 2026-10-31: 71
- 2026-10-30: 70
- 2026-10-29: 70
- 2026-10-28: 70
- 2026-10-27: 69
- 2026-10-26: 54

## Common questions

### What is the com.mambabuilt/mcp-newsletter-sponsor-tracker server?

com.mambabuilt/mcp-newsletter-sponsor-tracker is listed in the public MCP registry as com.mambabuilt/mcp-newsletter-sponsor-tracker. Who sponsors a newsletter, or which newsletters a brand sponsors, from public archives. This page covers its npm package (@mambalabsdev/mcp-newsletter-sponsor-tracker).

### Is the com.mambabuilt/mcp-newsletter-sponsor-tracker server safe to use?

com.mambabuilt/mcp-newsletter-sponsor-tracker scores 48 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.mambabuilt/mcp-newsletter-sponsor-tracker server expose?

com.mambabuilt/mcp-newsletter-sponsor-tracker exposes 1 tool: track_newsletter_sponsors. Their descriptions and schemas cost roughly 441 tokens of context every time the server is loaded.

### Is the com.mambabuilt/mcp-newsletter-sponsor-tracker server still maintained?

com.mambabuilt/mcp-newsletter-sponsor-tracker is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the com.mambabuilt/mcp-newsletter-sponsor-tracker server under?

com.mambabuilt/mcp-newsletter-sponsor-tracker declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the com.mambabuilt/mcp-newsletter-sponsor-tracker server?

VerifyMCP ran 13 checks on com.mambabuilt/mcp-newsletter-sponsor-tracker, covering Install scripts, Source repository, Provenance, License and 9 more. 3 items could not be completed, a gap on our side rather than a finding about com.mambabuilt/mcp-newsletter-sponsor-tracker: Malware scan, Known CVEs and Dependency health. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- npm package: https://www.npmjs.com/package/@mambalabsdev/mcp-newsletter-sponsor-tracker
- Socket report: https://socket.dev/npm/package/@mambalabsdev/mcp-newsletter-sponsor-tracker
- Repository: https://github.com/mambalabsdev/mcp-newsletter-sponsor-tracker
- Changelog RSS feed: https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker.json
- HTML version of this page: https://verifymcp.io/servers/com-mambabuilt-mcp-newsletter-sponsor-tracker/mambalabsdev-mcp-newsletter-sponsor-tracker