# io.usefulapi/rewardful (remote · rewardful.usefulapi.io)

Browse affiliates, referrals, commissions and payouts, and set up campaigns and affiliates.

- Trust score: 77/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-03

## Components

- remote · `rewardful.usefulapi.io`: 77/100 (this document), [markdown](https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful.md), [page](https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful)

## Channel facts

- Endpoint: `https://rewardful.usefulapi.io/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-03.

- **Endpoint Security**: 89/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2507 tokens (~125/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 10/100
  - Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 20 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### How do I install the io.usefulapi/rewardful MCP server?

io.usefulapi/rewardful is a hosted endpoint at https://rewardful.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http io-usefulapi-rewardful 'https://rewardful.usefulapi.io/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "io-usefulapi-rewardful": {
      "url": "https://rewardful.usefulapi.io/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "io-usefulapi-rewardful": {
      "type": "http",
      "url": "https://rewardful.usefulapi.io/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.io-usefulapi-rewardful]
url = "https://rewardful.usefulapi.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-usefulapi-rewardful": {
      "type": "remote",
      "url": "https://rewardful.usefulapi.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-usefulapi-rewardful --url 'https://rewardful.usefulapi.io/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  io-usefulapi-rewardful:
    url: "https://rewardful.usefulapi.io/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "io-usefulapi-rewardful": {
      "Transport": "http",
      "Url": "https://rewardful.usefulapi.io/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add io-usefulapi-rewardful -t streamable-http -u 'https://rewardful.usefulapi.io/mcp'
```

### Other

```json
{
  "mcpServers": {
    "io-usefulapi-rewardful": {
      "type": "http",
      "url": "https://rewardful.usefulapi.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-02 (score 77, +1)

- [functional] Server version: 1.3.0 → 1.5.1

### 2026-10-01 (score 76, +5)

- [security improvement] HTTPS: unverified → pass
- [functional improvement] Stability: unverified → 0.03
- [functional] Server version: 1.0.0 → 1.3.0

### 2026-09-30 (score 71, +53)

- [security improvement] Authorization: unverified → pass
- [security improvement] Injection markers: unverified → pass
- [security improvement] Transport: fail → pass
- [security] First check of Judged manipulation: pass
- [security] First check of Authorization: partial
- [functional regression] MCP protocol: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Destructive annotations: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100

### 2026-09-29 (score 18)

First indexed and scored.

## MCP tools (20)

### `rewardful_list_campaigns` (~93 tokens)

List campaigns

List the affiliate program's campaigns with their reward rules (percent or fixed commission, payout minimum, referral expiry) and totals (visitors, leads, conversions, affiliates). Rewardful: GET /v1/campaigns.

Input parameters:

- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.

### `rewardful_get_campaign` (~44 tokens)

Get one campaign

Fetch a single campaign by id. Rewardful: GET /v1/campaigns/:id.

Input parameters:

- `campaign_id` (string, required): The campaign's id (UUID).

### `rewardful_list_affiliates` (~169 tokens)

List affiliates

List affiliates, newest first, with visitors/leads/conversions. Filter by campaign, or look one up by email or Stripe customer id (returns zero or one). Expand campaign, links or commission_stats for more detail. Rewardful: GET /v1/affiliates.

Input parameters:

- `campaign_id` (string): Only affiliates in this campaign.
- `email` (string): Only the affiliate with this email.
- `expand` (array): Nested objects to include for each affiliate.
- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.
- `stripe_customer_id` (string): Only the customer-referrer affiliate tied to this Stripe customer (cus_...).

### `rewardful_get_affiliate` (~61 tokens)

Get one affiliate

Fetch a single affiliate by id, including their campaign, links, coupon and visitor/lead/conversion counts. Rewardful: GET /v1/affiliates/:id.

Input parameters:

- `affiliate_id` (string, required): The affiliate's id (UUID).

### `rewardful_list_affiliate_links` (~80 tokens)

List affiliate links

List affiliate links (URL, token, visitors, leads, conversions, affiliate_id), newest first. Rewardful: GET /v1/affiliate_links.

Input parameters:

- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.

### `rewardful_get_affiliate_link` (~48 tokens)

Get one affiliate link

Fetch a single affiliate link by id. Rewardful: GET /v1/affiliate_links/:id.

Input parameters:

- `link_id` (string, required): The affiliate link's id (UUID).

### `rewardful_list_affiliate_coupons` (~100 tokens)

List affiliate coupons

List affiliate coupon / promotion codes (token, Stripe id, leads, conversions, archived), optionally for one affiliate. Rewardful: GET /v1/affiliate_coupons.

Input parameters:

- `affiliate_id` (string): Only this affiliate's coupons.
- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.

### `rewardful_get_affiliate_coupon` (~50 tokens)

Get one affiliate coupon

Fetch a single affiliate coupon by id. Rewardful: GET /v1/affiliate_coupons/:id.

Input parameters:

- `coupon_id` (string, required): The affiliate coupon's id (UUID).

### `rewardful_list_referrals` (~216 tokens)

List referrals

List referrals — visitors who arrived via an affiliate link — newest first, with their conversion state (visitor, lead, conversion), customer and link. Filter by affiliate, state, email, Stripe customer or an updated-at window. Rewardful: GET /v1/referrals.

Input parameters:

- `affiliate_id` (string): Only this affiliate's referrals.
- `conversion_state` (array): Only referrals currently in these conversion states.
- `email` (string): Only referrals with this customer email.
- `expand` (array): Include the full affiliate object for each referral.
- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.
- `stripe_customer_id` (string): Only referrals with this Stripe customer (cus_...).
- `updated_since` (string): ISO 8601 timestamp: only referrals updated after it.
- `updated_until` (string): ISO 8601 timestamp: only referrals updated before it.

### `rewardful_list_commissions` (~151 tokens)

List commissions

List commissions (rewards owed for referred customers' payments) newest first, with amount in cents, currency and state (pending, due, paid, voided). Filter by affiliate or state; expand the sale (with referral, customer and affiliate) or campaign. Rewardful: GET /v1/commissions.

Input parameters:

- `affiliate_id` (string): Only this affiliate's commissions.
- `expand` (array): Nested objects to include for each commission.
- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.
- `state` (array): Only commissions in these states.

### `rewardful_get_commission` (~69 tokens)

Get one commission

Fetch a single commission by id, with its campaign and the sale (charge, refund and tax amounts, referral, customer, affiliate) that earned it. Rewardful: GET /v1/commissions/:id.

Input parameters:

- `commission_id` (string, required): The commission's id (UUID).

### `rewardful_list_payouts` (~139 tokens)

List payouts

List payouts — bundles of an affiliate's payable commissions — newest first, with amount, currency and state (pending, due, processing, paid). Filter by affiliate or state; expand affiliate or commissions. Rewardful: GET /v1/payouts.

Input parameters:

- `affiliate_id` (string): Only this affiliate's payouts.
- `expand` (array): Nested objects to include for each payout.
- `limit` (integer): Results per page, 1-100 (default 25).
- `page` (integer): Page number, from 1. See pagination.next_page.
- `state` (array): Only payouts in these states.

### `rewardful_get_payout` (~54 tokens)

Get one payout

Fetch a single payout by id, with the affiliate and the commissions it bundles. Rewardful: GET /v1/payouts/:id.

Input parameters:

- `payout_id` (string, required): The payout's id (UUID).

### `rewardful_create_campaign` (~231 tokens)

Create a campaign

Create a new affiliate campaign with its reward rule. For reward_type percent pass commission_percent; for amount pass commission_amount_cents and commission_amount_currency. Rewardful: POST /v1/campaigns.

Input parameters:

- `commission_amount_cents` (integer): Fixed commission in cents. Required when reward_type is amount.
- `commission_amount_currency` (string): ISO currency code of the fixed commission, e.g. USD. Required when reward_type is amount.
- `commission_percent` (number): Commission percentage. Required when reward_type is percent.
- `minimum_payout_cents` (integer): Minimum cumulative commissions before a payout, in cents of the company's display currency.
- `name` (string, required): The campaign's name.
- `private` (boolean): true = invite-only; false = anyone can sign up.
- `reward_type` (string, required): Percent of each sale, or a fixed amount.
- `stripe_coupon_id` (string): Stripe coupon for double-sided incentives. Growth/Enterprise plans only.
- `url` (string, required): Base URL used to build affiliate links, e.g. https://example.com.

### `rewardful_update_campaign` (~242 tokens)

Update a campaign

Change a campaign's name, URL, visibility, reward rule, payout minimum or coupon. Only the fields you pass change. Rewardful: PUT /v1/campaigns/:id.

Input parameters:

- `campaign_id` (string, required): The campaign's id (UUID).
- `commission_amount_cents` (integer): Fixed commission in cents. Required when reward_type is amount.
- `commission_amount_currency` (string): ISO currency code of the fixed commission, e.g. USD. Required when reward_type is amount.
- `commission_percent` (number): Commission percentage. Required when reward_type is percent.
- `minimum_payout_cents` (integer): Minimum cumulative commissions before a payout, in cents of the company's display currency.
- `name` (string): The campaign's name.
- `private` (boolean): true = invite-only; false = anyone can sign up.
- `reward_type` (string): Percent of each sale, or a fixed amount.
- `stripe_coupon_id` (string): Stripe coupon for double-sided incentives. Growth/Enterprise plans only.
- `url` (string): Base URL used to build affiliate links, e.g. https://example.com.

### `rewardful_create_affiliate` (~231 tokens)

Create an affiliate

Add an affiliate (or a customer referrer, by passing stripe_customer_id). Rewardful sends NO welcome email for API-created affiliates. Rewardful: POST /v1/affiliates.

Input parameters:

- `campaign_id` (string): Campaign to put the affiliate in (default campaign if omitted on create).
- `email` (string, required): Email address.
- `first_name` (string, required): First name.
- `last_name` (string, required): Last name.
- `paypal_email` (string): PayPal address commissions should be paid to.
- `receive_new_commission_notifications` (boolean): Email the affiliate when they earn a commission (default true).
- `state` (string): Affiliate state. Disabled/suspicious affiliates stop tracking and earning and can't log in.
- `stripe_customer_id` (string): Customer-referral programs only: the live-mode Stripe customer that receives account credits.
- `token` (string): Link token, e.g. `jb007` for ?via=jb007. Letters, numbers and dashes only.
- `wise_email` (string): Wise address commissions should be paid to.

### `rewardful_update_affiliate` (~227 tokens)

Update an affiliate

Change an affiliate's name, email, payout emails, notifications, campaign (moves them) or state. Setting state to disabled stops tracking and earning; set it back to active to undo. Rewardful: PUT /v1/affiliates/:id.

Input parameters:

- `affiliate_id` (string, required): The affiliate's id (UUID).
- `campaign_id` (string): Campaign to put the affiliate in (default campaign if omitted on create).
- `email` (string): Email address.
- `first_name` (string): First name.
- `last_name` (string): Last name.
- `paypal_email` (string): PayPal address commissions should be paid to.
- `receive_new_commission_notifications` (boolean): Email the affiliate when they earn a commission (default true).
- `state` (string): Affiliate state. Disabled/suspicious affiliates stop tracking and earning and can't log in.
- `stripe_customer_id` (string): Customer-referral programs only: the live-mode Stripe customer that receives account credits.
- `wise_email` (string): Wise address commissions should be paid to.

### `rewardful_create_affiliate_link` (~89 tokens)

Create an affiliate link

Give an affiliate an additional tracking link. A token is generated if omitted. Growth/Enterprise plans only. Rewardful: POST /v1/affiliate_links.

Input parameters:

- `affiliate_id` (string, required): The affiliate's id (UUID).
- `token` (string): Link token, e.g. `jb007` for ?via=jb007. Letters, numbers and dashes only.

### `rewardful_update_affiliate_link` (~109 tokens)

Change an affiliate link's token

Change the token of an existing affiliate link. WARNING: the old token stops tracking immediately — links already shared with it break. Prefer rewardful_create_affiliate_link to add a second token. Rewardful: PUT /v1/affiliate_links/:id.

Input parameters:

- `link_id` (string, required): The affiliate link's id (UUID).
- `token` (string, required): Link token, e.g. `jb007` for ?via=jb007. Letters, numbers and dashes only.

### `rewardful_create_affiliate_coupon` (~104 tokens)

Create an affiliate coupon

Assign a coupon / promotion code to an affiliate so sales using it are credited to them. The code must match one defined in Stripe, and the affiliate's campaign must have a campaign coupon set in the dashboard. Rewardful: POST /v1/affiliate_coupons.

Input parameters:

- `affiliate_id` (string, required): The affiliate's id (UUID).
- `token` (string, required): The exact coupon / promotion code as defined in Stripe, e.g. MYCODE.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful#diagnostics

## Score history

- 2026-10-03: 77
- 2026-10-02: 77
- 2026-10-01: 76
- 2026-09-30: 71
- 2026-09-29: 18

## Common questions

### What is the io.usefulapi/rewardful MCP server?

io.usefulapi/rewardful is an MCP server listed in the public MCP registry as io.usefulapi/rewardful. Browse affiliates, referrals, commissions and payouts, and set up campaigns and affiliates. This page covers its hosted endpoint (https://rewardful.usefulapi.io/mcp).

### Is the io.usefulapi/rewardful MCP server safe to use?

io.usefulapi/rewardful scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.usefulapi/rewardful MCP server expose?

io.usefulapi/rewardful exposes 20 tools: rewardful_list_campaigns, rewardful_get_campaign, rewardful_list_affiliates, rewardful_get_affiliate, rewardful_list_affiliate_links, and 15 more. Their descriptions and schemas cost roughly 2,507 tokens of context every time the server is loaded.

### Does the io.usefulapi/rewardful MCP server require authentication?

Yes. io.usefulapi/rewardful asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the io.usefulapi/rewardful MCP server still maintained?

io.usefulapi/rewardful is still listed as active in the MCP registry. We last reached this channel on 3 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://rewardful.usefulapi.io/mcp
- Repository: https://github.com/m190/usefulapi-mcp
- Changelog RSS feed: https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful.json
- HTML version of this page: https://verifymcp.io/servers/io-usefulapi-rewardful/rewardful