# ProspectAPIs (npm · prospectapis-mcp)

Moved to com.prospectapis/prospectapis-mcp. Install prospectapis-mcp from npm for the latest.

- Trust score: 79/100 (medium)
- Change this week: +3
- Registry status: deprecated
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

> **Deprecated**: this server is marked deprecated in the MCP registry. The registry records this reason: "Moved to com.prospectapis/prospectapis-mcp."

## Components

- npm · `prospectapis-mcp`: 79/100 (this document), [markdown](https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp.md), [page](https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp)

## Channel facts

- Registry: `npm`
- Package: `prospectapis-mcp`
- Version: `0.2.4`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 30 of 92 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1718 tokens (~122/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 73/100
  - Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the ProspectAPIs MCP server?

ProspectAPIs runs locally as an npm package, launched with npx -y prospectapis-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add prospectapis-prospectapis-mcp -- npx -y prospectapis-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "prospectapis-prospectapis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "prospectapis-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "prospectapis-prospectapis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "prospectapis-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add prospectapis-prospectapis-mcp -- npx -y prospectapis-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "prospectapis-prospectapis-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "prospectapis-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add prospectapis-prospectapis-mcp --command npx --arg -y --arg prospectapis-mcp
```

### Hermes

```yaml
mcp_servers:
  prospectapis-prospectapis-mcp:
    command: "npx"
    args: ["-y", "prospectapis-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "prospectapis-prospectapis-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "prospectapis-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add prospectapis-prospectapis-mcp -t stdio -c npx -a -y prospectapis-mcp
```

### Other

```json
{
  "mcpServers": {
    "prospectapis-prospectapis-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "prospectapis-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-03 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-01 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-28 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-26 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-22 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-20 (score 72, +15)

- [security improvement] Malware scan: unverified → pass

## MCP tools (14)

### `funding_search` (~277 tokens)

Search Funding Rounds

Search funding rounds (venture rounds, debt, grants, IPOs), newest announcement first. Costs $0.02 per record returned, after 100 free records a month; a search that matches nothing is free. Page with `cursor`: pass back `next_cursor` exactly as returned; a null `next_cursor` means there are no more matches. Narrow with filters before raising `limit`.

Input parameters:

- `company` (string): Company name contains this text (case-insensitive).
- `country` (string): Headquarters country, case-insensitive.
- `cursor` (string): Opaque cursor from the previous page's `next_cursor`.
- `domain` (string): Exact company domain, for example `example.com`.
- `investor` (string): Exact investor name, case-insensitive.
- `limit` (integer): Records per page, 1 to 100 (default 25). Each record returned is billed.
- `max_amount_usd` (number): Largest round size in USD.
- `min_amount_usd` (number): Smallest round size in USD.
- `round` (string): Comma-separated round stages, for example `seed,series_a,series_b`.
- `since` (string): Earliest announcement date, inclusive (YYYY-MM-DD).
- `until` (string): Latest announcement date, inclusive (YYYY-MM-DD).

### `funding_get` (~54 tokens)

Get Funding Round

Read one funding record by id. Costs $0.02 when found (free records are used first); a missing id is free.

Input parameters:

- `id` (string, required): The funding record id from a `funding_search` result.

### `research_submit` (~387 tokens)

Start Prospect Research

Start a cited pre-call research brief on one prospect: company, funding, traction, competitors, news, people, risks, regions, social (their X account and Reddit mentions, when found), plus a `fit` section when you pass `context`. Give exactly ONE identifier (domain, website_url, company_name, company_linkedin_url, a work email, or linkedin_url), or person_name together with company_name. Returns `research_id` at once; the brief takes 20 to 90 seconds, so poll research_get every 10 to 15 seconds until `status` is `completed` or `failed`. Costs one research at the price account_balance reports as `research_price_usd`, held when you submit, charged only when the brief completes and refunded in full if it fails. Free records do not apply.

Input parameters:

- `company_linkedin_url` (string): The company's linkedin.com/company/... URL, used as a name hint only.
- `company_name` (string): The company's name. With person_name, the company that person works at.
- `context` (string): Your own product, at most 1,000 characters. Turns on the `fit` section.
- `domain` (string): The company's domain, for example `acme.com`.
- `email` (string): A work email; its domain identifies the company. Free-mail addresses are refused.
- `linkedin_url` (string): A person's linkedin.com/in/... URL, used as a name hint only.
- `person_name` (string): A person's name; needs company_name as well.
- `purpose` (string): What the brief is for: `account_research` (default), `pre_call` (objections, discovery questions) or `outreach` (sourced hooks with draft first lines).
- `website_url` (string): Any http(s) URL on the company's website.

### `research_get` (~156 tokens)

Get Research Brief

Read a research job by the `research_id` research_submit returned: `status` (queued, running, completed, failed), `input`, `result` (the brief, once completed) and `error` (once failed). Every brief field is {value, sources, confidence}. `result.social` holds `x` (handle, followers, bio, posting_cadence, recent_topics, notable_posts) and `reddit` (mention_count_90d, top_threads, communities, tone, tone_basis); a platform with nothing found is absent, and with neither `social` is absent. Free; only your own account's jobs are visible.

Input parameters:

- `id` (string, required): The `research_id` from research_submit.

### `watchlist_create` (~165 tokens)

Create Funding Watchlist

Save a funding-signal alert: a set of funding_search filters plus an https webhook. Each NEW funding event that matches is POSTed to the webhook, signed with the returned `secret` (header Prospect-Signature: t=..,v1=HMAC-SHA256). Creating is free; each delivered event costs one record ($0.02, free records first), charged only when the webhook answers 2xx. The `secret` is shown once. Max 20 active per account.

Input parameters:

- `filters` (object, required): At least one funding_search filter; date windows and paging do not apply to alerts.
- `name` (string, required): A label, such as 'Series A robotics'.
- `webhook_url` (string, required): Your https endpoint on a public host.

### `watchlist_list` (~21 tokens)

List Watchlists

Your funding-signal alerts (without their secrets). Free.

### `watchlist_get` (~50 tokens)

Get Watchlist

One funding-signal alert: its name, filters, webhook URL, whether it is active and why it was paused (never its secret). Free.

Input parameters:

- `id` (string, required): The watchlist id.

### `watchlist_deliveries` (~46 tokens)

List Watchlist Deliveries

The last 50 deliveries of one alert and their outcome (delivered, retry, failed, no_credit). Free.

Input parameters:

- `id` (string, required): The watchlist id.

### `watchlist_test` (~46 tokens)

Send Watchlist Test Event

Send a signed sample event to the alert's webhook now, to build and verify the receiver. Free; 5 a minute.

Input parameters:

- `id` (string, required): The watchlist id.

### `watchlist_delete` (~33 tokens)

Delete Watchlist

Delete a funding-signal alert and its delivery history. Free.

Input parameters:

- `id` (string, required): The watchlist id.

### `account_balance` (~30 tokens)

Get Account Balance

Your credit balance and the free records left this month. Free. Check it before a large paged search.

### `feedback_send` (~189 tokens)

Send Feedback

Report a bug, a wrong or empty field, a missing capability or a question about ProspectAPIs to the team. Free; limited to 10 delivered reports an hour per account (a 429 means wait, do not retry in a loop). Before reporting that a field is wrong or a parameter is ignored, re-run the call with a value that could only match if it were honoured. Put the exact call, what came back and what you expected in `details`; never include secrets or API keys. Send only when the user agrees.

Input parameters:

- `details` (string, required): The exact call, what came back, what you expected, and ids such as research_id.
- `kind` (string): bug (default), feature or question.
- `title` (string, required): One line: what is wrong or missing.
- `tool` (string): The tool the report is about, such as research_get.

### `pricing_get` (~59 tokens)

Get Pricing

The live price list: funding records (price per record and free records a month), research (whether it is available and its price per brief) and watchlist deliveries. Free, needs no key. Use it to quote a cost before a large call.

### `api_version` (~22 tokens)

Get API Version

The API's version and deployed build. Free, needs no key.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp#diagnostics

## Score history

- 2026-11-05: 79
- 2026-11-04: 79
- 2026-11-03: 79
- 2026-11-02: 78
- 2026-11-01: 78
- 2026-10-31: 77
- 2026-10-30: 77
- 2026-10-29: 76
- 2026-10-28: 76
- 2026-10-27: 75
- 2026-10-26: 75
- 2026-10-25: 74
- 2026-10-24: 74
- 2026-10-23: 73
- 2026-10-22: 73
- 2026-10-21: 72
- 2026-10-20: 72
- 2026-10-19: 57
- 2026-10-18: 69
- 2026-10-17: 69
- 2026-10-16: 69
- 2026-10-15: 69
- 2026-10-14: 69
- 2026-10-13: 38
- 2026-10-12: 38

## Common questions

### What is the ProspectAPIs MCP server?

ProspectAPIs is an MCP server listed in the public MCP registry as io.github.ProspectAPIs/prospectapis-mcp. Moved to com.prospectapis/prospectapis-mcp. Install prospectapis-mcp from npm for the latest. This page covers its npm package (prospectapis-mcp).

### Is the ProspectAPIs MCP server safe to use?

ProspectAPIs scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the ProspectAPIs MCP server expose?

ProspectAPIs exposes 14 tools: funding_search, funding_get, research_submit, research_get, watchlist_create, and 9 more. Their descriptions and schemas cost roughly 1,535 tokens of context every time the server is loaded.

### Is the ProspectAPIs MCP server still maintained?

ProspectAPIs is marked deprecated in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the ProspectAPIs MCP server under?

ProspectAPIs declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/prospectapis-mcp
- Socket report: https://socket.dev/npm/package/prospectapis-mcp
- Repository: https://github.com/ProspectAPIs/prospectapis-mcp
- Website: https://prospectapis.com/mcp
- Changelog RSS feed: https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp.json
- HTML version of this page: https://verifymcp.io/servers/prospectapis-prospectapis-mcp/prospectapis-mcp