Signaliz MCP Server
@signaliz/mcp-server
npm
v3.0.38
Published by @signaliz — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Signaliz MCP server for Signals Everything, Signaliz Flow, Signal Awareness, Find Email, Verify Email, Company Signal Enrichment, and Signal to Copy AI.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 8 = 92. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: campaign_memory_get_receipt → campaign_os_preflight_source_binding → signal_monitor_send_export. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow campaign_memory_get_receipt → campaign_os_preflight_source_binding → signal_monitor_send_export
Tools 80
Each tool and what it can reach — statically extracted from the published source.
campaign_os_preflight_source_bindingingests untrusted inputreads sensitive datacampaign_memory_get_receiptingests untrusted inputcampaign_os_plan_alphaingests untrusted inputsignal_monitor_send_exportnetwork egresssignal_monitor_set_outputnetwork egresssignal_monitor_settingsnetwork egresssignal_monitor_test_webhooknetwork egresscampaign_learning_memory_statusno sensitive capabilitycampaign_memory_gate_statusno sensitive capabilitycampaign_memory_import_cmm_receiptno sensitive capability
Show 70 more tools ↓
campaign_memory_searchno sensitive capabilitycampaign_os_agentmemory_statusno sensitive capabilitycampaign_os_analyze_campaignno sensitive capabilitycampaign_os_append_clay_native_sync_pageno sensitive capabilitycampaign_os_apply_validated_alphano sensitive capabilitycampaign_os_assign_alpha_experimentno sensitive capabilitycampaign_os_build_agentmemory_learning_exportno sensitive capabilitycampaign_os_compile_alpha_experimentno sensitive capabilitycampaign_os_compile_previewno sensitive capabilitycampaign_os_complete_clay_native_audienceno sensitive capabilitycampaign_os_complete_clay_native_syncno sensitive capabilitycampaign_os_confirm_operator_approvalno sensitive capabilitycampaign_os_create_audience_draftno sensitive capabilitycampaign_os_create_draftno sensitive capabilitycampaign_os_create_source_bindingno sensitive capabilitycampaign_os_execute_providerno sensitive capabilitycampaign_os_execute_source_expansionno sensitive capabilitycampaign_os_get_agentmemory_packetno sensitive capabilitycampaign_os_get_alpha_experimentno sensitive capabilitycampaign_os_get_alpha_materializationno sensitive capabilitycampaign_os_get_alpha_runno sensitive capabilitycampaign_os_get_alpha_validation_runno sensitive capabilitycampaign_os_get_buildno sensitive capabilitycampaign_os_get_campaign_analysisno sensitive capabilitycampaign_os_get_client_contextno sensitive capabilitycampaign_os_get_operator_approval_receiptno sensitive capabilitycampaign_os_get_provider_runtimeno sensitive capabilitycampaign_os_import_agentmemory_packetno sensitive capabilitycampaign_os_list_clientsno sensitive capabilitycampaign_os_list_connectionsno sensitive capabilitycampaign_os_list_provider_campaignsno sensitive capabilitycampaign_os_list_receiptsno sensitive capabilitycampaign_os_materialize_cache_audienceno sensitive capabilitycampaign_os_operator_authority_statusno sensitive capabilitycampaign_os_plan_clay_native_audienceno sensitive capabilitycampaign_os_preflight_alpha_materializationno sensitive capabilitycampaign_os_prepare_action_preflightno sensitive capabilitycampaign_os_prepare_clay_native_audienceno sensitive capabilitycampaign_os_prepare_operator_approvalno sensitive capabilitycampaign_os_prepare_provider_loadno sensitive capabilitycampaign_os_preview_audienceno sensitive capabilitycampaign_os_preview_source_expansionno sensitive capabilitycampaign_os_refine_campaignno sensitive capabilitycampaign_os_reserve_source_expansionno sensitive capabilitycampaign_os_search_knowledgeno sensitive capabilitycampaign_os_start_alpha_discoveryno sensitive capabilitycampaign_os_start_alpha_materializationno sensitive capabilitycampaign_os_start_alpha_validationno sensitive capabilitycampaign_os_start_buildno sensitive capabilitycampaign_os_start_clay_native_syncno sensitive capabilitycampaign_os_submit_action_requestno sensitive capabilitycampaign_os_sync_campaign_learningno sensitive capabilitycampaign_os_upsert_audience_scheduleno sensitive capabilitycheck_job_statusno sensitive capabilitycompany_signal_enrichmentno sensitive capabilityfind_emailno sensitive capabilityget_signaliz_flowno sensitive capabilityrun_signaliz_flowno sensitive capabilitysignal_monitor_bulk_createno sensitive capabilitysignal_monitor_createno sensitive capabilitysignal_monitor_deleteno sensitive capabilitysignal_monitor_exportno sensitive capabilitysignal_monitor_listno sensitive capabilitysignal_monitor_runno sensitive capabilitysignal_monitor_signalsno sensitive capabilitysignal_monitor_updateno sensitive capabilitysignal_to_copyno sensitive capabilitysignals_everythingno sensitive capabilitysignals_firstno sensitive capabilityverify_emailno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (80 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v3.0.38 latest |
A 92/100 | 1 | 1.13.0 | 2026-09-07 |
v3.0.37 |
A 92/100 | 1 | 1.13.0 | 2026-08-29 |
v3.0.35 |
A 92/100 | 1 | 1.13.0 | 2026-08-25 |
v3.0.32 |
A 95/100 | 0 | 1.12.1 | 2026-08-24 |
v3.0.29 |
A 95/100 | 0 | 1.12.1 | 2026-08-23 |
Show 5 more versions ↓
v3.0.27 |
A 95/100 | 0 | 1.12.1 | 2026-08-22 |
v3.0.26 |
A 95/100 | 0 | 1.12.1 | 2026-08-02 |
v3.0.23 |
A 95/100 | 0 | 1.12.1 | 2026-07-31 |
v3.0.22 |
A 95/100 | 0 | 1.12.1 | 2026-07-29 |
v3.0.21 |
A 95/100 | 0 | 1.12.1 | 2026-07-28 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @signaliz/mcp-server --onlineMore in Marketing & Social
Official Abyssfall game info, newsletter double opt-in, and merch reservation tools.
AdCritter ads platform: docs, API reference, app scaffolding, and white-label integration.
Google AdSense MCP Server - Monitor earnings, reports, and account health via Claude/AI
Operational empathy for technical founders + PE/VC operators navigating high-stakes B2B interactions. 28 MCP tools + CLI: ICP scoring, persona simulation, battlecards, deal classification, prospect discovery, investor matching, founder wellness, plus mark
MCP server for Bing Webmaster Tools — SEO site management, URL submission, sitemaps, stats, keywords
MCP (Model Context Protocol) server that helps AI agents use Primer Brand (@primer/react-brand) correctly when building GitHub marketing and landing pages.