CRM Lifecycle Ops
NPM · CRM-LIFECYCLE-OPS
AI copilot for lifecycle and CRM ops on Braze, Klaviyo and Iterable. Read-only.
Available components
Last scanned (15 minutes ago)
Scores higher than 35% of npm servers
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- No production dependencies, so there is no dependency health to assess. View diagnostics → Pass
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2321 tokens (~116/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage86
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 57% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 20 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +26
- Malware scan: unverified → pass ▲ security
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → pass ▲ functional
- 3 Nov 26 42
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/crm-lifecycle-ops@0.5.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 0 packages
| Packages resolved | 0 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_exception Mark a finding as fine for us ~84
Record that a finding is acceptable for this team (not a tool bug), with a reason. Optionally scoped by `match` text. Locked checks can't be waived. For tool bugs use /report-problem instead.
| Name | Type | Req | Description |
|---|---|---|---|
| check_id | string | yes | – |
| match | string | – | Only waive findings whose message/evidence contains this text. |
| reason | string | yes | – |
No output schema declared.
No examples provided.
bulk_edit_preview Preview a bulk edit ~105
Find text (or a regex) across every subject, preheader, body and content block and preview the replacement, live items first. Preview only; nothing is written.
| Name | Type | Req | Description |
|---|---|---|---|
| active_only | boolean | – | – |
| find | string | yes | – |
| platform | string | yes | Which platform. |
| regex | boolean | – | – |
| replace | string | yes | – |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
check_campaign Check a campaign or journey ~96
QA every message in a campaign or journey (Canvas/flow): emails with content blocks expanded, push, SMS and in-app, plus its settings: audience, conversion events, naming and journey structure (dead ends, unreachable steps).
| Name | Type | Req | Description |
|---|---|---|---|
| name_or_id | string | yes | – |
| platform | string | yes | Which platform. |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
check_email Check an email ~240
QA one email before it sends, using the team's house rules: HTML structure, Outlook conditionals, Gmail clipping, alt text, links (non-production hosts, unsubscribe, UTMs, approved domains), personalization rendered for several synthetic personas, subject line, sender, brand terms, spelling variant and required footer text. Pass HTML or a local file path. Read-only; sends nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| check_links_live | boolean | – | Also check each link over the network (HEAD requests only; unsubscribe and click-tracking links are never requested). |
| file | string | – | Absolute path to a local .html file, used when html is not given. |
| from | string | – | Sender email address. |
| html | string | – | The email HTML, including template tags. |
| name | string | – | – |
| personas | array | – | Synthetic test profiles. Leave empty to use the team's personas or auto-generated ones. |
| platform | string | yes | Which platform's template language the email uses. |
| preheader | string | – | – |
| subject | string | – | – |
| transactional | boolean | – | Receipts, password resets and other transactional mail: skips the unsubscribe requirement. |
No output schema declared.
No examples provided.
check_message Check a push, SMS, in-app, content card or webhook ~243
QA one push notification, SMS/MMS, in-app message, content card or webhook using the team's house rules: renders personalization for several synthetic personas, then checks length against lock-screen / segment / in-app / card limits, SMS encoding and billed segments, opt-out wording and sender name, deep links and other links (non-production hosts, malformed URIs), buttons, webhook URL, secrets in URLs and JSON bodies that break on quotes, brand terms and spelling. Read-only; sends nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | Push body/alert, SMS text, or in-app message body (text or HTML). |
| buttons | array | – | In-app buttons. |
| channel | string | yes | – |
| deep_link | string | – | Tap-through destination: deep link or URL. |
| image_url | string | – | – |
| name | string | – | – |
| personas | array | – | – |
| platform | string | yes | Which platform's template language the message uses. |
| title | string | – | Push title or in-app header. |
| webhook_method | string | – | Webhook HTTP method (POST, GET…). |
| webhook_url | string | – | Webhook destination URL. |
No output schema declared.
No examples provided.
connection_status Connection status ~49
Which platforms have keys set (keys themselves are never shown), test each connection, and list the environment variables each platform needs.
| Name | Type | Req | Description |
|---|---|---|---|
| test | boolean | – | Also make one read-only call per connected platform. |
No output schema declared.
No examples provided.
find_overlaps Find overlaps with live programs ~112
For a planned journey or campaign: which live campaigns/journeys already target the same segments or lists, trigger on the same events, or use the same attributes, and which live items can't be ruled out.
| Name | Type | Req | Description |
|---|---|---|---|
| attributes | array | – | – |
| events | array | – | – |
| lists | array | – | – |
| platform | string | yes | Which platform. |
| segments | array | – | – |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
get_house_rules Show house rules ~34
The team's rulebook (what counts as right for them) and where it's stored. Returns defaults if /setup hasn't run.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
how_to Platform-specific build or edit instructions ~374
Step-by-step instructions for a build or edit task in Braze, Klaviyo or Iterable, in that platform's own terms, from a procedure library verified against the vendors' docs (with links). Filled in with the team's house rules (naming, sender, UTMs, fallback syntax, footer, channel limits) and, when a snapshot exists, the account: segments and blocks to reuse, whether the target is live, and shared content that would change other live programs. The plugin never edits the account; a person follows the steps. Tasks: create-campaign (Create a one-off or scheduled campaign); create-journey (Create a multi-step journey); edit-live-journey (Change a journey that's already live); edit-live-message (Change the copy of a live or scheduled message); edit-shared-content (Change a shared content block / snippet used in live messages); change-audience (Change who a campaign or journey targets, or add exclusions); link-tracking (Add UTM parameters and click tracking); frequency-and-quiet-hours (Set frequency caps, rate limits and quiet hours); conversion-tracking (Set the conversion event / metric); ab-test (Run an A/B or multivariate test); test-and-preview (Preview as a user and send tests); pause-stop-duplicate (Pause, stop or duplicate).
| Name | Type | Req | Description |
|---|---|---|---|
| attributes | array | – | Personalization attributes the copy will use. |
| audience | string | – | Who it's for, in plain words, to find segments to reuse. |
| channels | array | – | – |
| platform | string | yes | Which platform. |
| target | string | – | Existing campaign or journey being changed (edit tasks). |
| task | string | yes | – |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
launch_health Launch health ~63
Recent delivery numbers for a campaign or journey (sent, delivered, bounces, unsubscribes, spam complaints, opens, clicks) judged against stated thresholds. Needs a connected account.
| Name | Type | Req | Description |
|---|---|---|---|
| name_or_id | string | yes | – |
| platform | string | yes | Which platform. |
No output schema declared.
No examples provided.
learn_from_email Learn conventions from a good email ~89
Read an email the team considers correct and propose house rules from it: link domains, UTM params and values, sender, name fallback, US/GB spelling, subject style, footer and postal address. Proposals only; confirm with the person before saving.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | – |
| from | string | – | – |
| html | string | – | – |
| subject | string | – | – |
No output schema declared.
No examples provided.
list_checks List all checks ~45
Every check, with its id, default severity and what it catches, plus which ones are locked (can't be turned off). Use to explain a finding or fill in a problem report.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_items Find campaigns, journeys, segments or blocks ~101
Search the latest snapshot by name. Use it to resolve what the person means before checking, mapping or analysing impact.
| Name | Type | Req | Description |
|---|---|---|---|
| active_only | boolean | – | – |
| kind | string | – | – |
| limit | integer | – | Max results per kind (default 50). |
| platform | string | yes | Which platform. |
| query | string | – | – |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
ops_report Ops report ~98
From the usage log: messages and campaigns checked, blocking problems caught, most common findings, weekly trend and estimated hours saved (assumption stated). With team: true, totals every operator's log in the shared team folder and breaks it down per operator.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | – |
| minutes_per_manual_check | number | – | – |
| team | boolean | – | Report across the whole team (needs the team report folder set in plugin settings). |
No output schema declared.
No examples provided.
record_audience Record an audience seen on screen ~121
Fill an API gap: record which segment/list a campaign or journey targets, as read from the platform's dashboard (e.g. via Claude in Chrome). Stored as 'seen-on-screen' with today's date on the latest snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| item | string | yes | Campaign or journey name or id. |
| mode | string | – | – |
| platform | string | yes | Which platform. |
| segment | string | yes | Segment or list name or id. |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
refresh_account Refresh account snapshot ~71
Pull the latest campaigns, journeys, segments, templates and content blocks into a local snapshot (read-only API calls), then report what changed since the previous one. Set demo: true to load the fictional Fernbrook Market demo account instead.
| Name | Type | Req | Description |
|---|---|---|---|
| demo | boolean | – | – |
| platform | string | yes | Which platform. |
No output schema declared.
No examples provided.
save_house_rules Save house rules ~79
Replace the team's rulebook. Always show the person the changes and get a yes first. Locked checks can't be overridden. Schema: locale, brand, links, compliance, senders, personalization, style, naming, severity, exceptions.
| Name | Type | Req | Description |
|---|---|---|---|
| rules | object | yes | The full rulebook object (get it with get_house_rules, edit, save). |
No output schema declared.
No examples provided.
show_journey Show a journey ~81
A Mermaid diagram of a live journey (Canvas/flow) with subject lines, plus structural problems (dead ends, unreachable steps, empty message steps).
| Name | Type | Req | Description |
|---|---|---|---|
| name_or_id | string | yes | – |
| platform | string | yes | Which platform. |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
what_breaks What breaks if I change this ~137
Everything that depends on an attribute, segment/list, content block, event, message or piece of text, live items first, each with how we know (api-verified, parsed from template, seen on screen…) and a list of live items we can't rule out.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | – |
| platform | string | yes | Which platform. |
| value | string | yes | Name or id, e.g. loyalty_tier, VIP members, footer_v2, Order Placed, or a phrase/URL. |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
what_changed What changed in the account ~99
Differences between the latest snapshot and the previous one (or the newest one taken before `since`): added, removed, status changes, content, audience and structure edits. Live items first.
| Name | Type | Req | Description |
|---|---|---|---|
| platform | string | yes | Which platform. |
| since | string | – | ISO date, e.g. 2026-11-01 |
| workspace | string | – | Workspace label. Defaults to the connected one, or "demo" when nothing is connected. |
No output schema declared.
No examples provided.
How do I install the CRM Lifecycle Ops MCP server?
CRM Lifecycle Ops runs locally as an npm package, launched with npx -y crm-lifecycle-ops. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · crm-lifecycle-ops
claude mcp add har5h98-crm-lifecycle-ops -- npx -y crm-lifecycle-ops
What is the CRM Lifecycle Ops MCP server?
CRM Lifecycle Ops is an MCP server listed in the public MCP registry as io.github.har5h98/crm-lifecycle-ops. AI copilot for lifecycle and CRM ops on Braze, Klaviyo and Iterable. Read-only. This page covers its npm package (crm-lifecycle-ops).
Is the CRM Lifecycle Ops MCP server safe to use?
CRM Lifecycle Ops scores 68 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CRM Lifecycle Ops MCP server expose?
CRM Lifecycle Ops exposes 20 tools: check_email, check_message, check_campaign, list_checks, get_house_rules, and 15 more. Their descriptions and schemas cost roughly 2,321 tokens of context every time the server is loaded.
Is the CRM Lifecycle Ops MCP server still maintained?
CRM Lifecycle Ops is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the CRM Lifecycle Ops MCP server under?
CRM Lifecycle Ops declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.