# Tomba MCP Server (remote · mcp.tomba.io)

MCP server for Tomba email finder, verification, and contact enrichment API

- Trust score: 70/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-17

## Components

- remote · `mcp.tomba.io`: 70/100 (this document), [markdown](https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp.md), [page](https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp)
- npm · `@tomba-io/tomba-mcp-server`: 38/100, [markdown](https://verifymcp.io/servers/tomba-io-tomba-mcp-server/tomba-io-tomba-mcp-server.md), [page](https://verifymcp.io/servers/tomba-io-tomba-mcp-server/tomba-io-tomba-mcp-server)

## Channel facts

- Endpoint: `https://mcp.tomba.io/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `1.10.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-17.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 22 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 88/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1806 tokens (~72/item across 25 items; 22 tools + 3 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 33/100
  - Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http tomba-io-tomba-mcp-server https://mcp.tomba.io/mcp
```

### Codex

```toml
[mcp_servers.tomba-io-tomba-mcp-server]
url = "https://mcp.tomba.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tomba-io-tomba-mcp-server": {
      "type": "remote",
      "url": "https://mcp.tomba.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add tomba-io-tomba-mcp-server --url https://mcp.tomba.io/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  tomba-io-tomba-mcp-server:
    url: "https://mcp.tomba.io/mcp"
```

### Other

```json
{
  "mcpServers": {
    "tomba-io-tomba-mcp-server": {
      "type": "http",
      "url": "https://mcp.tomba.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-16 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-14 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-12 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-11 (score 67, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-08-09 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-08 (score 65, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-07 (score 65)

First indexed and scored.

## MCP tools (22)

### `author_finder` (~62 tokens)

Author Finder

Find the email address of an article's author from a given URL. Useful for outreach to content creators and journalists.

Input parameters:

- `url` (string, required): The URL of the article or blog post
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `companies_search` (~129 tokens)

Companies Search

Search for companies in the Tomba database. Filter by name, industry, country, and more to find target companies for outreach.

Input parameters:

- `filters` (object): Filter options with include/exclude arrays for: location_country, location_city, location_state, industry, size, type, keywords, founded, technologies, similar, revenue, sic, naics
- `page` (number): Page number for pagination (1-1000)
- `query` (string): Search query for company name or keywords (8-100 characters)
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `domain_search` (~179 tokens)

Domain Search

Search for all email addresses associated with a specific domain or company. Returns a list of email addresses found for the given company domain along with metadata about each contact.

Input parameters:

- `company` (string): The company name to search for
- `country` (string): Filter by country code (e.g., 'US', 'GB')
- `department` (string): Filter by department (e.g., 'executive', 'it', 'marketing')
- `domain` (string): The domain to search for emails (e.g., 'example.com')
- `enrich_mobile` (boolean): Whether to enrich with mobile phone data
- `limit` (string): Maximum number of results to return (10, 20, or 50)
- `page` (number): Page number for pagination
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `email_count` (~53 tokens)

Email Count

Get the count of email addresses available for a specific domain. Useful for estimating the potential reach before performing a full domain search.

Input parameters:

- `domain` (string, required): The domain to count emails for (e.g., 'example.com')

### `email_enrichment` (~46 tokens)

Email Enrichment

Enrich an email address with additional information about the person, including their name, position, company details, and social profiles.

Input parameters:

- `email` (string, required): The email address to enrich

### `email_finder` (~152 tokens)

Email Finder

Find the email address of a specific person given their name and company domain or company name. Uses various techniques to generate and verify the most likely email format.

Input parameters:

- `company` (string): The company name to search in
- `domain` (string): The domain of the company (e.g., 'example.com')
- `enrich_mobile` (boolean): Whether to enrich with mobile phone data
- `first_name` (string): The first name of the person
- `full_name` (string): The full name of the person (alternative to first_name/last_name)
- `last_name` (string): The last name of the person
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `email_verifier` (~78 tokens)

Email Verifier

Verify if an email address is valid and deliverable. Checks for proper format, domain validity, and mailbox existence without sending an email.

Input parameters:

- `email` (string, required): The email address to verify
- `enrich_mobile` (boolean): Whether to enrich with mobile phone data
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `linkedin_finder` (~72 tokens)

Linkedin Finder

Find the email address associated with a LinkedIn profile URL. Extracts contact information from LinkedIn profiles.

Input parameters:

- `enrich_mobile` (boolean): Whether to enrich with mobile phone data
- `url` (string, required): The LinkedIn profile URL
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `mpp_author_finder` (~56 tokens)

Mpp Author Finder

Find the email address of the author of a blog post or article using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `url` (string, required): The URL of the article or blog post

### `mpp_domain_search` (~144 tokens)

Mpp Domain Search

Search for all email addresses associated with a specific domain using MPP (Machine Payments Protocol). Pay-per-request, no API key required — only an InFlow buyer key.

Input parameters:

- `company` (string): The company name to search for
- `country` (string): Filter by country code (e.g., 'US', 'GB')
- `department` (string): Filter by department (e.g., 'executive', 'it', 'marketing')
- `domain` (string): The domain to search for emails (e.g., 'example.com')
- `limit` (string): Maximum number of results to return
- `page` (number): Page number for pagination

### `mpp_email_count` (~51 tokens)

Mpp Email Count

Get the count of email addresses available for a specific domain using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `domain` (string, required): The domain to count emails for

### `mpp_email_enrichment` (~51 tokens)

Mpp Email Enrichment

Enrich an email address with detailed contact and company information using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `email` (string, required): The email address to enrich

### `mpp_email_finder` (~97 tokens)

Mpp Email Finder

Find a person's email address given their name and company domain using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `company` (string): The company name
- `domain` (string): The domain of the company
- `first_name` (string): The first name
- `full_name` (string): The full name of the person
- `last_name` (string): The last name

### `mpp_email_verifier` (~50 tokens)

Mpp Email Verifier

Verify if an email address is valid and deliverable using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `email` (string, required): The email address to verify

### `mpp_linkedin_finder` (~52 tokens)

Mpp Linkedin Finder

Find a person's email address from their LinkedIn profile URL using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `url` (string, required): The LinkedIn profile URL

### `mpp_phone_finder` (~93 tokens)

Mpp Phone Finder

Find phone numbers associated with an email address, domain, or LinkedIn profile using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `domain` (string): The domain to look up
- `email` (string): The email address to look up
- `full` (boolean): Whether to return full phone details
- `linkedin` (string): The LinkedIn profile URL

### `mpp_phone_validator` (~54 tokens)

Mpp Phone Validator

Validate a phone number and get carrier and location details using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `phone` (string, required): The phone number to validate in E.164 format

### `mpp_similar_finder` (~50 tokens)

Mpp Similar Finder

Find domains similar to a given domain using MPP (Machine Payments Protocol). Pay-per-request, no API key required.

Input parameters:

- `domain` (string, required): The domain to find similar domains for

### `phone_finder` (~104 tokens)

Phone Finder

Find phone numbers associated with an email address, domain, or LinkedIn profile. Returns direct and company phone numbers when available.

Input parameters:

- `domain` (string): Domain to search for phone numbers
- `email` (string): Email address to search for phone numbers
- `full` (boolean): Whether to return full phone details
- `linkedin` (string): LinkedIn URL to search for phone numbers
- `webhook_url` (string): Optional webhook URL to receive results asynchronously

### `phone_validator` (~60 tokens)

Phone Validator

Validate and get information about a phone number. Returns the carrier, line type, country, and whether the number is valid.

Input parameters:

- `phone` (string, required): The phone number to validate (E.164 format recommended, e.g., +14155552671)

### `similar_finder` (~56 tokens)

Similar Finder

Find companies similar to a given domain. Returns a list of competitor or similar businesses based on industry, size, and other factors.

Input parameters:

- `domain` (string, required): The domain to find similar companies for (e.g., 'example.com')

### `technology_finder` (~53 tokens)

Technology Finder

Discover the technologies used by a website. Returns information about the tech stack including CMS, frameworks, analytics, and more.

Input parameters:

- `domain` (string, required): The domain to analyze for technologies (e.g., 'example.com')

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp#diagnostics

## Score history

- 2026-08-17: 70
- 2026-08-16: 70
- 2026-08-15: 69
- 2026-08-14: 69
- 2026-08-13: 68
- 2026-08-12: 68
- 2026-08-11: 67
- 2026-08-10: 66
- 2026-08-09: 66
- 2026-08-08: 65
- 2026-08-07: 65

## Links

- Remote endpoint: https://mcp.tomba.io/mcp
- Authorisation metadata: https://mcp.tomba.io/.well-known/oauth-protected-resource/mcp
- Repository: https://github.com/tomba-io/tomba-mcp-server
- Website: https://tomba.io/
- Changelog RSS feed: https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp.json
- HTML version of this page: https://verifymcp.io/servers/tomba-io-tomba-mcp-server/mcp