# io.github.sai4447/agentfuse-mcp (npm · agentfuse-mcp)

Affiliate API for AI agents -- browse programs, generate tracked links, record conversions.

- Trust score: 65/100 (medium)
- Change this week: +40
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `agentfuse-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp.md), [page](https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp)

## Channel facts

- Registry: `npm`
- Package: `agentfuse-mcp`
- Version: `1.1.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 103 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 74/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1078 tokens (~154/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add sai4447-agentfuse-mcp -- npx -y agentfuse-mcp
```

### Codex

```bash
codex mcp add sai4447-agentfuse-mcp -- npx -y agentfuse-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sai4447-agentfuse-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "agentfuse-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add sai4447-agentfuse-mcp --command npx --arg -y --arg agentfuse-mcp
```

### Hermes

```yaml
mcp_servers:
  sai4447-agentfuse-mcp:
    command: "npx"
    args: ["-y", "agentfuse-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "sai4447-agentfuse-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "agentfuse-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 65, +30)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional] Licence: MIT

### 2026-07-31 (score 35, −14)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 49, −30)

- [security regression] Malware scan: pass → unverified
- [security regression] Known CVEs: partial → unverified
- [functional regression] Dependency health: partial → unverified

### 2026-07-28 (score 79, +54)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] License: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] Licence: MIT

### 2026-07-27 (score 25)

First indexed and scored.

## MCP tools (7)

### `list_affiliate_programs` (~143 tokens)

Browse available affiliate programs in the AgentFuse catalog. Returns each program's name, slug, category, commission rate, and network. Use this to discover programs before generating tracked links.

Input parameters:

- `category` (string): Filter by category slug. Examples: productivity, marketing, ai-voice, ai-writing, email-marketing, newsletter, automation, marketing-automation, seo-analytics, design, developer-tools. Omit to return…
- `cursor` (string): Pagination cursor returned from a previous call. Pass this to get the next page.
- `limit` (number): Number of programs to return (default: 50, max: 100).

### `get_affiliate_program` (~89 tokens)

Get full details for a single affiliate program by its slug. Returns the program's UUID (needed for generate_tracked_link), commission structure, payout terms, description, and network info.

Input parameters:

- `slug` (string, required): The program slug (e.g. 'webflow', 'elevenlabs', 'notion', 'zapier'). Use list_affiliate_programs to discover available slugs.

### `generate_tracked_link` (~196 tokens)

Generate a tracked affiliate link for a program and an end user. Pass the human-readable program slug (e.g. 'webflow') -- the tool resolves the UUID automatically. The link records clicks and attributes any resulting signups or commissions back to the specified end user. Returns a short redirect URL and a tracking_code you should save -- it is needed for record_signup and record_commission.

Input parameters:

- `end_user_id` (string, required): Your internal ID for the end user who will receive credit for this referral. Can be any stable unique string (UUID, email, username, etc.).
- `metadata` (object): Optional key-value metadata to attach to the link (e.g. { campaign: 'onboarding', source: 'chat' }).
- `program_slug` (string, required): Slug of the affiliate program (e.g. 'webflow', 'notion'). Use list_affiliate_programs to find available slugs.

### `get_stats` (~39 tokens)

Retrieve AgentFuse dashboard summary stats: total clicks, signups, commissions, and top-performing programs. Useful for reporting to users or surfacing revenue data.

### `list_tracked_links` (~161 tokens)

List tracked affiliate links previously generated by this API key. Returns each link's tracked URL, tracking_code, click count, program, and end user. Use this to look up existing links before generating a new one, or to show a user their active referral links.

Input parameters:

- `cursor` (string): Pagination cursor from a previous call to get the next page.
- `end_user_id` (string): Filter links by end user ID. Use this to fetch all links for a specific user.
- `limit` (number): Number of links to return (default: 20, max: 100).
- `program_slug` (string): Filter links by program slug (e.g. 'webflow'). The tool resolves the slug to a UUID automatically before querying.

### `record_signup` (~192 tokens)

Record an affiliate signup conversion event. Call this when one of your end users successfully signs up for a referred product. Requires the tracking_code returned by generate_tracked_link. Idempotent -- safe to call multiple times with the same network + network_event_id.

Input parameters:

- `metadata` (object): Optional extra data to attach to this event.
- `network` (string, required): The affiliate network that reported this event. One of: 'partnerstack', 'impact', 'direct'.
- `network_event_id` (string, required): Unique event ID from the affiliate network (or any unique string for 'direct'). Used for idempotency -- duplicate calls with the same ID are ignored.
- `signup_email` (string): Email address the user signed up with (optional but recommended).
- `tracking_code` (string, required): The tracking code from the affiliate link (returned by generate_tracked_link). This ties the signup back to the original referral.

### `record_commission` (~258 tokens)

Record an affiliate commission event (e.g. when a referred user makes a purchase or renews a subscription). Requires the tracking_code from the original affiliate link. Idempotent -- safe to call multiple times with the same network + network_event_id.

Input parameters:

- `amount` (number, required): Commission amount in dollars (e.g. 29.99).
- `commission_type` (string): Type of commission. One of: 'initial', 'recurring', 'one_time'. Defaults to 'recurring'.
- `currency` (string): ISO 4217 currency code (default: 'USD').
- `metadata` (object): Optional extra data (e.g. order ID, plan name).
- `network` (string, required): The affiliate network that reported this event. One of: 'partnerstack', 'impact', 'direct'.
- `network_event_id` (string, required): Unique commission event ID from the affiliate network. Used for idempotency.
- `period_end` (string): Billing period end date in ISO 8601 format (optional).
- `period_start` (string): Billing period start date in ISO 8601 format (optional).
- `tracking_code` (string, required): The tracking code from the affiliate link (returned by generate_tracked_link).

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 65
- 2026-08-01: 35
- 2026-07-31: 35
- 2026-07-30: 49
- 2026-07-29: 79
- 2026-07-28: 79
- 2026-07-27: 25

## Links

- npm package: https://www.npmjs.com/package/agentfuse-mcp
- Socket report: https://socket.dev/npm/package/agentfuse-mcp
- Repository: https://github.com/sai4447/agentfuse-mcp
- Changelog RSS feed: https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/sai4447-agentfuse-mcp/agentfuse-mcp