# Zambo

> Give your AI hands. One URL. Type a job. Get a receipt.

- name: io.github.zambodotdev/zambo
- version: 4.0.0
- connection class: R0 (autonomous)
- trust: 94/100
- quality: 76/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.zambodotdev%2Fzambo
- tools: https://api.protogrid.dev/v1/servers/io.github.zambodotdev%2Fzambo/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "zambo": {
      "type": "http",
      "url": "https://zambo.dev/api/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 85
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-39d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 76/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list carries no ttlMs, so clients re-fetch it

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 35 of 35 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- warn `tools.token_cost`: about 14,574 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 309 tool changes in 30 days
- fail `stability.rug_pull`: 7 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 35, about 14,574 tokens to load them all
- tool set hash: 6afa08cf81fc1326412a72ed0d8094f7
- tools last changed: 2026-10-19T23:54:05.779Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.zambodotdev/zambo.svg)](https://protogrid.dev/servers/io.github.zambodotdev/zambo)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-19 `handover` changed (inputSchema)
- 2026-10-19 `capability_search` changed (outputSchema)
- 2026-10-19 `pass_status` changed (outputSchema)
- 2026-10-19 `day_pass_status` changed (outputSchema)
- 2026-10-19 `day_pass_activate` changed (outputSchema)
- 2026-10-19 `day_pass_checkout_link` changed (outputSchema)
- 2026-10-19 `prompt_shield` changed (outputSchema)
- 2026-10-19 `credithunt` changed (outputSchema)
- 2026-10-19 `ghost_audit_report` changed (outputSchema)
- 2026-10-19 `ghost_audit_status` changed (outputSchema)

Full history: https://api.protogrid.dev/v1/servers/io.github.zambodotdev%2Fzambo/changes

## Remotes

- https://zambo.dev/api/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (35)

- `activity_today`: Read the private, receipt-backed work ledger for this job and return its Today link. Always free and does not use the daily call allowance.
- `capability_search`: Search across the supported Zambo tool catalog for a use case. Returns relevant tools with relevance scores, descriptions, taglines, and callable API endpoints.
- `continuity_get_recent`: Reads only the private receipt timeline for the supplied job or thread ID. Returns receipt links, has_more, and a cursor for the next page. Use since to filter by an inclusive RFC3339 timestamp. Optional AI client labels are self-reported, not verified.
- `continuity_list_threads`: Lists named threads owned by the supplied job ID. Thread IDs can be used as _session_id by another AI client.
- `continuity_open_thread`: Opens a named thread or thread ID and returns only events with stored Zambo receipts, including links to open and check each receipt.
- `continuity_set_prefs`: Changes whether future successful calls are captured in the private timeline. It does not remove or hide public receipts already created.
- `continuity_start_thread`: Creates or reuses a named thread under an existing job ID. Pass the returned thread_id as _session_id to append work from another AI client. Required arguments: name.
- `credithunt`: Live verified index of AI and cloud startup credit programs. Accepts optional stack, stage, and minimum value filters. Returns count, updated_at, opportunities, and api.
- `day_pass_activate`: Agent-native access activation endpoint. Accepts an optional payment envelope or existing access key and returns a payment challenge or verified activation result. Activation results include receipt URL, run ID, access key, expiration, usage guidance, and a spend receipt. Activation occurs only after a verified transfer.
- `day_pass_checkout_link`: Get a checkout link for the $0.99, 24-hour Day Pass by card or PayPal, including in a fresh session. Creating the link never charges anyone; payment requires completing checkout. Optional workflow_id targets a closed run; sponsor:true explicitly sponsors another team's run without transferring branding ownership. Required arguments: .
- `day_pass_redeem`: Unlock this AI with your private Day Pass link. No headers needed. The link expires with the original pass.
- `day_pass_status`: Check your current pass, also available as pass_status. All arguments are optional: current session, token_or_link, thread_id, or _zambo_key. Returns a plain status line, active, tier, expires_at, seconds_left and a private unlock link without spending quota. Product/provider limits may still apply.
- `ghost_audit_report`: Full markdown report for a completed Ghost Audit. Returns the website score, severity-ranked findings, stage analysis, and recommended fixes. Required arguments: audit_id.
- `ghost_audit_site`: website audit for a website. Returns SEO gaps, AI discoverability issues, conversion leaks, brand-presence gaps, competitor intelligence, a score from 0 to 100, stage findings, an audit ID, a live stream URL, and a report URL. Required arguments: url.
- `ghost_audit_status`: Status report for a Ghost Audit identified by audit_id. Returns whether the audit is running or complete, along with elapsed-time information and report availability. Required arguments: audit_id.
- `handover`: Call this after any multi-step job, or when the user says "use zambo to hand this over to <client>". It returns one proof link with verifiable receipts. Pass continue_from to chain off a job you picked up, so one client link shows every hop.
- `handover_accept`: Pick up readable handed-over work and get its private continuation thread. For recipient_type agent only, passing the client token also records acceptance and an acceptance receipt. Otherwise this only picks up work; the client decision remains pending. Creator authority is rejected even with a client token. Free, no quota. Private handovers require their access token. Required arguments: handover_id.
- `handover_list`: List your Zambo Handovers using Zambo Pass and the same _session_id. Returns real statuses and client-ready links. Required arguments: _session_id.
- `handover_status`: Check a Zambo Handover's status, acceptance and release_hint without spending execution quota. Paying another agent? Check the handover first. Release payment when status is accepted. Zambo never holds funds. Supply the owning _session_id for private deliveries. Required arguments: handover_id.
- `journal_log`: Free anonymous or authenticated append-only log for an action performed outside Zambo. The entry is recorded as an agent-reported claim; Zambo does not claim it ran or observed the action. Limited to 20 calls per IP per day on the free tier. Required arguments: job_id, tool_name, executor_identity.
- `leadsignal`: AI lead generation for contractors and local service businesses. Accepts a trade type and city. Returns qualified local leads with available contact information. Required arguments: trade, city.
- `live_price`: Real-time cryptocurrency price lookup for supported coins. Uses CoinGecko first, Coinbase as a secondary no-key provider, then the most recent cached verified value with its age if both live providers are unavailable. Returns live USD price, 24-hour percentage change, and market capitalization when verified.
- `memory_recall`: Read private saved facts for this work connection, optionally matching a query. Free, no quota. Required arguments: _session_id.
- `memory_remember`: Save a private fact for this work connection. Respects Memory capture settings. Free, no quota. Required arguments: _session_id, fact.
- `new_session`: Starts fresh session context and returns a new session_id. Reuse that ID on subsequent calls for continuity; changing or omitting it starts clean context. Required arguments: .
- `pass_status`: Exact alias of day_pass_status. Free and uncapped. Returns the same plain status line and top-level pass fields; no arguments required.
- `pdf_extract`: Fetch and extract text content from any public URL - PDF documents, web pages, articles, docs. Returns the extracted text, word count, and a summary. Works on research papers, contracts, articles, reports. Use when user says 'read this PDF', 'extract from this URL', 'summarize this document', 'what does this say'. Required arguments: url.
- `prompt_shield`: Detection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available. Required arguments: prompt.
- `provibe_audit`: AI code audit for a public GitHub repository. Returns a Provibe score from 0 to 100, security vulnerabilities, a dead-code map, and an execution plan for addressing the findings. Required arguments: repo_url.
- `spend_limit_set`: Set this work connection's daily and optional monthly dollar cap before further Day Pass payments. Free, no quota. Required arguments: _session_id, daily_usd.
- `spend_limit_status`: Read this work connection's spending cap, paid charges and remaining budget. Free, no quota. Required arguments: _session_id.
- `workflow_close`: Create or return a fixed snapshot with a verifiable receipt of this job's eligible receipts. Repeating the call with unchanged receipt data returns the same snapshot workflow_id; later calls after new receipts create a separate snapshot while session_workflow_id continues identifying the live ledger. Both identifiers are unbound metadata excluded from canonical receipt bytes. The first close returns a one-time private workflow_manage_token; retries do not rotate or reissue it. The workflow_close summary receipt is excluded from the step count. Records Zambo's claims, not issuer authentication. Required arguments: _session_id.
- `workflow_seal`: Seals a closed workflow for durable export. Requires the matching job session and an active pass. Never spends, captures, or starts a payment. The export remains a Zambo claim, not issuer authentication. Required arguments: workflow_id, _session_id.
- `zambo_home`: Your private Zambo starting point: six ready-to-say goals, today's receipts and actual usage. Ask what Zambo can do for your business, site, code or money. Free.
- `zambo_universal`: Universal Zambo entry point for routing natural-language requests across supported Zambo tools through one MCP connection. Covers strategy, code audits, lead generation, wallet intelligence, provenance certificates, parallel work coordination, and live market data. Returns a route, execution state, downstream tool results when available, and receipt information. Required arguments: need.