gtm.help
REMOTE · GTM.HELP
Your go-to-market plan, plays and opportunities from gtm.help, inside any AI agent.
Available components
Last scanned (9 hours ago)
Scores higher than 89% of remote servers
Reachable. Last reached 25 Oct 2026.
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1954 tokens (~122/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- 20 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 16 Oct 26 79
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Probed https://gtm.help/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=gtm.help | CN=WE1,O=Google Trust Services,C=US | 28 Sept 2026 | 27 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 9aa72824fdf01b940ea1d75a597b0e2f |
| SANs: gtm.help | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of gtm.help. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| help. | present | 10505, 58472 | 13, 13 | Verified |
| gtm.help. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="mcp", resource_metadata="https://gtm.help/.well-known/oauth-protected-resource"
Bearer realm="mcp", resource_metadata="https://gtm.help/.well-known/oauth-protected-resource"| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
Protected resource metadata
| Document | https://gtm.help/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://gtm.help/mcp |
| Authorisation server | https://rkeyupcfqxuyqamegwoi.supabase.co/auth/v1 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://gtm.help/mcp | Verified | 200 | |
| http (plaintext) | http://gtm.help/mcp | HTTPS enforced | 301 | https://gtm.help/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_business_note Add a business note ~56
Save a note about the business so the growth plan and the consultant remember it (results, context, constraints).
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Workspace id from list_workspaces. |
| note | string | yes | The note to remember. |
No output schema declared.
No examples provided.
analyze_site Analyse a website ~55
Analyse any website and return three high-leverage growth plays it could start this week. Free — no subscription required.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The website to analyse, e.g. acme.com or https://acme.com |
No output schema declared.
No examples provided.
complete_play Complete a play ~75
Mark a growth play as shipped (or reopen it). Completing a play unlocks the next one in the ranked plan.
| Name | Type | Req | Description |
|---|---|---|---|
| done | boolean | – | Set false to reopen the play. Defaults to true. |
| note | string | – | Optional note about what was shipped. |
| play_id | string | yes | Play id from get_plan. |
No output schema declared.
No examples provided.
draft_reply Draft a reply to a conversation ~116
Write a reply for one Reddit, LinkedIn or X opportunity from list_opportunities, using the business's own context and the workspace's writing settings (karma-safe, mention business). Returns the text and the exact link to paste it at. gtm.help never posts on the user's behalf — the user copies, edits and posts it themselves.
| Name | Type | Req | Description |
|---|---|---|---|
| opportunity_id | string | yes | Opportunity id from list_opportunities. |
| tone | string | – | default, short, detailed, or no-pitch (never names the business). Defaults to default. |
No output schema declared.
No examples provided.
get_business Get business profile and memory ~81
Read one workspace's full profile — website, description, audience, industry, stage, goal, budget, hours per week, competitors, channels, what has been tried — plus the notes stored with add_business_note and a quick progress summary. Use it before giving advice so it fits this business.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Workspace id from list_workspaces. |
No output schema declared.
No examples provided.
get_plan Get growth plan ~84
Read the ranked growth plays for one workspace. Returns title, category, fit score, effort, budget, tools and status, ordered by rank.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Workspace id from list_workspaces. |
| limit | integer | – | How many plays to return. Defaults to 20. |
| status | string | – | Filter by completion state. Defaults to open plays. |
No output schema declared.
No examples provided.
get_play Get play detail ~41
Read the full detail of one growth play: rationale, steps, tools, budget and success metric.
| Name | Type | Req | Description |
|---|---|---|---|
| play_id | string | yes | Play id from get_plan. |
No output schema declared.
No examples provided.
list_integrations List connected tools and latest metrics ~72
Show which tools a workspace has connected (Google Analytics, Search Console, Composio apps such as HubSpot, Stripe, Shopify, Mailchimp and more) with their health, and the most recent metric summary synced from each. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Workspace id from list_workspaces. |
No output schema declared.
No examples provided.
list_invoices List invoices and receipts ~67
Read the user's gtm.help billing history: invoice number, date, status, amount, tax and links to the PDF and hosted receipt. Only the signed-in customer's own invoices are visible.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many recent invoices. Defaults to 12, max 50. |
No output schema declared.
No examples provided.
list_opportunities List conversations worth answering ~170
Read the Reddit, LinkedIn and X conversations the agents found for a workspace: threads, posts and comments where the user's business can genuinely help. Ranked by fit and heat. Use draft_reply to write an answer and update_opportunity to record what happened. Nothing is ever posted automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Which network: reddit, linkedin, x or all. Defaults to all. |
| business_id | string | yes | Workspace id from list_workspaces. |
| limit | integer | – | How many to return. Defaults to 10, max 50. |
| sort | string | – | Order. Defaults to best (fit + heat). |
| status | string | – | open = not yet answered, drafted = has a saved draft, replied = marked as answered. Defaults to open (which includes drafted). |
No output schema declared.
No examples provided.
list_workspaces List workspaces ~35
List the growth workspaces (businesses) belonging to the signed-in user, with their website, goal, stage and budget.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
share_recap Share a growth recap ~92
Create a public, shareable summary of recent progress for a workspace. Returns a URL that can be pasted into a chat, tweet, report or Slack thread.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | Workspace id from list_workspaces. |
| focus | string | – | Time window for completed plays: week, month, or all time. Defaults to week. |
| title | string | – | Optional title for the recap card. |
No output schema declared.
No examples provided.
submit_play_draft Submit finished work for a play ~156
Save the finished work for one play (copy, code or research, in markdown) onto the founder's gtm.help board as Ready to review. Use this whenever you have written the work for a play, instead of leaving it only in chat. It never marks the play done and never publishes anything.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_name | string | – | Your name, e.g. Claude or Cursor, shown on the board. |
| deliverable | string | yes | The finished work in markdown, ready to copy and use. |
| kind | string | – | copy_kit (copy/emails/posts), code (markup/files) or audit (research). Defaults to copy_kit. |
| play_id | string | yes | Play id from get_plan. |
No output schema declared.
No examples provided.
update_opportunity Mark a conversation replied, ignored or snoozed ~159
Record what happened to a Reddit, LinkedIn or X opportunity: replied (the user posted their answer — include the link), ignored (not a fit, with an optional reason that sharpens future ranking), snoozed (come back later) or open (put it back on the board).
| Name | Type | Req | Description |
|---|---|---|---|
| opportunity_id | string | yes | Opportunity id from list_opportunities. |
| posted_url | string | – | Link to the user's posted reply, when status is replied. |
| reason | string | – | Why it was ignored, e.g. 'wrong audience' or 'already answered'. Shapes future ranking. |
| snooze_days | integer | – | Days to hide it when snoozed. Defaults to 3. |
| status | string | yes | New state. |
No output schema declared.
No examples provided.
update_play_status Move a play on the board ~140
Change a growth play's state: start it (in_progress), park it for later (snoozed, with days), skip it for good (skipped, with a reason), reopen it (open) or finish it (done). Mirrors the To do / In progress / Done / Parked board in the app.
| Name | Type | Req | Description |
|---|---|---|---|
| play_id | string | yes | Play id from get_plan. |
| reason | string | – | Why it was parked or skipped — the best signal for the next plan. |
| snooze_days | integer | – | Days to park it when snoozed. Defaults to 7. |
| status | string | yes | New state. |
No output schema declared.
No examples provided.
update_watchlist Read or edit what an agent watches ~133
Read or change the watch lists behind the Reddit, LinkedIn or X agent for a workspace: keywords, topics the business can answer, competitors, people/accounts, and (Reddit only) subreddits. Each list holds up to 10 entries. Call with no add/remove to just read them.
| Name | Type | Req | Description |
|---|---|---|---|
| add | array | – | Entries to add. |
| agent | string | yes | reddit, linkedin or x. |
| business_id | string | yes | Workspace id from list_workspaces. |
| list | string | – | Which list to change. Required when adding or removing. |
| remove | array | – | Entries to remove. |
No output schema declared.
No examples provided.
How do I install the gtm.help MCP server?
gtm.help is a hosted endpoint at https://gtm.help/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · gtm.help
claude mcp add --transport http help-gtm-gtm-help 'https://gtm.help/mcp'
What is the gtm.help MCP server?
gtm.help is an MCP server listed in the public MCP registry as help.gtm/gtm-help. Your go-to-market plan, plays and opportunities from gtm.help, inside any AI agent. This page covers its hosted endpoint (https://gtm.help/mcp).
Is the gtm.help MCP server safe to use?
gtm.help scores 83 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the gtm.help MCP server expose?
gtm.help exposes 16 tools: analyze_site, list_workspaces, get_business, get_plan, get_play, and 11 more. Their descriptions and schemas cost roughly 1,532 tokens of context every time the server is loaded.
Does the gtm.help MCP server require authentication?
Yes. gtm.help asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the gtm.help MCP server still maintained?
gtm.help is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.