Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "zambo": {
      "type": "http",
      "url": "https://zambo.dev/mcp"
    }
  }
}

claude mcp add --transport http zambo https://zambo.dev/mcp

[mcp_servers.zambo]
url = "https://zambo.dev/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "zambo": {
      "type": "remote",
      "url": "https://zambo.dev/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "zambo": {
      "type": "http",
      "url": "https://zambo.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=zambo&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vemFtYm8uZGV2L21jcCJ9"
}

{
  "servers": {
    "zambo": {
      "type": "http",
      "url": "https://zambo.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "zambo": {
      "httpUrl": "https://zambo.dev/mcp"
    }
  }
}

extensions:
  "zambo":
    enabled: true
    name: "zambo"
    type: streamable_http
    uri: "https://zambo.dev/mcp"
    timeout: 300

Quality 76 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list carries no ttlMs, so clients re-fetch it

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations35 of 35 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
warn
tools.token_costabout 14,538 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes257 tool changes in 30 days
fail
stability.rug_pull7 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

35 tools, about 14,538 tokens to load them all · tool set 2484ea0adc95 · tools last changed 2026-10-18 · checked 2026-10-19 15:48 UTC

Tool changes

2026-10-18capability_searchchangedoutput schema
2026-10-18pass_statuschangedoutput schema
2026-10-18day_pass_statuschangedoutput schema
2026-10-18day_pass_activatechangedoutput schema
2026-10-18day_pass_checkout_linkchangedoutput schema
2026-10-18prompt_shieldchangedoutput schema
2026-10-18credithuntchangedoutput schema
2026-10-18ghost_audit_reportchangedoutput schema
2026-10-18ghost_audit_statuschangedoutput schema
2026-10-18ghost_audit_sitechangedoutput schema

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance85

liveness100

freshness100

hygiene100

+repository +dns-namespace +website +reachable +uptime-100% +updated-23d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://zambo.dev/mcp` streamable-http	none	yes	100%	263 ms	2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05	2026-10-19

Tools (35)

`activity_today`read-only	Read the private, receipt-backed work ledger for this job and return its Today link. Always free and does not use the daily call allowance.
`capability_search`read-only	Search across the supported Zambo tool catalog for a use case. Returns relevant tools with relevance scores, descriptions, taglines, and callable API endpoints.
`continuity_get_recent`read-only	Reads only the private receipt timeline for the supplied job or thread ID. Returns receipt links, has_more, and a cursor for the next page. Use since to filter by an inclusive RFC3339 timestamp. Optional AI client labels are self-reported, not verified.
`continuity_list_threads`read-only	Lists named threads owned by the supplied job ID. Thread IDs can be used as _session_id by another AI client.
`continuity_open_thread`read-only	Opens a named thread or thread ID and returns only events with stored Zambo receipts, including links to open and check each receipt.
`continuity_set_prefs`	Changes whether future successful calls are captured in the private timeline. It does not remove or hide public receipts already created.
`continuity_start_thread`destructive	Creates or reuses a named thread under an existing job ID. Pass the returned thread_id as _session_id to append work from another AI client. Required arguments: name.
`credithunt`read-only	Live verified index of AI and cloud startup credit programs. Accepts optional stack, stage, and minimum value filters. Returns count, updated_at, opportunities, and api.
`day_pass_activate`destructive	Agent-native access activation endpoint. Accepts an optional payment envelope or existing access key and returns a payment challenge or verified activation result. Activation results include receipt URL, run ID, access key, expiration, usage guidance, and a spend receipt. Activation occurs only after a verified transfer.
`day_pass_checkout_link`	Get a checkout link for the $0.99, 24-hour Day Pass by card or PayPal, including in a fresh session. Creating the link never charges anyone; payment requires completing checkout. Optional workflow_id targets a closed run; sponsor:true explicitly sponsors another team's run without transferring branding ownership. Required arguments: .
`day_pass_redeem`read-only	Unlock this AI with your private Day Pass link. No headers needed. The link expires with the original pass.
`day_pass_status`read-only	Check your current pass, also available as pass_status. All arguments are optional: current session, token_or_link, thread_id, or _zambo_key. Returns a plain status line, active, tier, expires_at, seconds_left and a private unlock link without spending quota. Product/provider limits may still apply.
`ghost_audit_report`read-only	Full markdown report for a completed Ghost Audit. Returns the website score, severity-ranked findings, stage analysis, and recommended fixes. Required arguments: audit_id.
`ghost_audit_site`destructive	website audit for a website. Returns SEO gaps, AI discoverability issues, conversion leaks, brand-presence gaps, competitor intelligence, a score from 0 to 100, stage findings, an audit ID, a live stream URL, and a report URL. Required arguments: url.
`ghost_audit_status`read-only	Status report for a Ghost Audit identified by audit_id. Returns whether the audit is running or complete, along with elapsed-time information and report availability. Required arguments: audit_id.
`handover`	Call this after any multi-step job, or when the user says "use zambo to hand this over to <client>". It returns one proof link with verifiable receipts. Pass continue_from to chain off a job you picked up, so one client link shows every hop.
`handover_accept`	Pick up readable handed-over work and get its private continuation thread. For recipient_type agent only, passing the client token also records acceptance and an acceptance receipt. Otherwise this only picks up work; the client decision remains pending. Creator authority is rejected even with a client token. Free, no quota. Private handovers require their access token. Required arguments: handover_id.
`handover_list`read-only	List your Zambo Handovers using Zambo Pass and the same _session_id. Returns real statuses and client-ready links. Required arguments: _session_id.
`handover_status`read-only	Check a Zambo Handover's status, acceptance and release_hint without spending execution quota. Paying another agent? Check the handover first. Release payment when status is accepted. Zambo never holds funds. Supply the owning _session_id for private deliveries. Required arguments: handover_id.
`journal_log`	Free anonymous or authenticated append-only log for an action performed outside Zambo. The entry is recorded as an agent-reported claim; Zambo does not claim it ran or observed the action. Limited to 20 calls per IP per day on the free tier. Required arguments: job_id, tool_name, executor_identity.
`leadsignal`read-only	AI lead generation for contractors and local service businesses. Accepts a trade type and city. Returns qualified local leads with available contact information. Required arguments: trade, city.
`live_price`read-only	Real-time cryptocurrency price lookup for supported coins. Uses CoinGecko first, Coinbase as a secondary no-key provider, then the most recent cached verified value with its age if both live providers are unavailable. Returns live USD price, 24-hour percentage change, and market capitalization when verified.
`memory_recall`read-only	Read private saved facts for this work connection, optionally matching a query. Free, no quota. Required arguments: _session_id.
`memory_remember`	Save a private fact for this work connection. Respects Memory capture settings. Free, no quota. Required arguments: _session_id, fact.
`new_session`read-only	Starts fresh session context and returns a new session_id. Reuse that ID on subsequent calls for continuity; changing or omitting it starts clean context. Required arguments: .
`pass_status`read-only	Exact alias of day_pass_status. Free and uncapped. Returns the same plain status line and top-level pass fields; no arguments required.
`pdf_extract`read-only	Fetch and extract text content from any public URL - PDF documents, web pages, articles, docs. Returns the extracted text, word count, and a summary. Works on research papers, contracts, articles, reports. Use when user says 'read this PDF', 'extract from this URL', 'summarize this document', 'what does this say'. Required arguments: url.
`prompt_shield`read-only	Detection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available. Required arguments: prompt.
`provibe_audit`read-only	AI code audit for a public GitHub repository. Returns a Provibe score from 0 to 100, security vulnerabilities, a dead-code map, and an execution plan for addressing the findings. Required arguments: repo_url.
`spend_limit_set`	Set this work connection's daily and optional monthly dollar cap before further Day Pass payments. Free, no quota. Required arguments: _session_id, daily_usd.
`spend_limit_status`read-only	Read this work connection's spending cap, paid charges and remaining budget. Free, no quota. Required arguments: _session_id.
`workflow_close`	Create or return a fixed snapshot with a verifiable receipt of this job's eligible receipts. Repeating the call with unchanged receipt data returns the same snapshot workflow_id; later calls after new receipts create a separate snapshot while session_workflow_id continues identifying the live ledger. Both identifiers are unbound metadata excluded from canonical receipt bytes. The first close returns a one-time private workflow_manage_token; retries do not rotate or reissue it. The workflow_close summary receipt is excluded from the step count. Records Zambo's claims, not issuer authentication. Required arguments: _session_id.
`workflow_seal`	Seals a closed workflow for durable export. Requires the matching job session and an active pass. Never spends, captures, or starts a payment. The export remains a Zambo claim, not issuer authentication. Required arguments: workflow_id, _session_id.
`zambo_home`read-only	Your private Zambo starting point: six ready-to-say goals, today's receipts and actual usage. Ask what Zambo can do for your business, site, code or money. Free.
`zambo_universal`	Universal Zambo entry point for routing natural-language requests across supported Zambo tools through one MCP connection. Covers strategy, code audits, lead generation, wallet intelligence, provenance certificates, parallel work coordination, and live market data. Returns a route, execution state, downstream tool results when available, and receipt information. Required arguments: need.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "dev.zambo/zambo",
  "title": "Zambo",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://zambo.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "4.1.0",
  "repository": {
    "id": "86745288",
    "url": "https://gitlab.com/rambozambodotdev/zambo",
    "source": "gitlab"
  },
  "websiteUrl": "https://zambo.dev",
  "description": "Trust Layer for AI work. Give your AI hands. Every run returns a verifiable receipt. No key needed."
}