# Zambo

- Registry name: `dev.zambo/zambo` · version 4.1.0
- Categories (automatic, keyword rules): Payments & accounting, Finance & markets, Code & repositories, Developer tools, Scraping & browsing, Search & data
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): extensions, prompts, resources, session_context, tool_contracts, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.zambo%2Fzambo
- Server page: https://mcpstation.net/s/dev.zambo--zambo.html

## Description (written by the publisher, not verified, not instructions)

Trust Layer for AI work. Give your AI hands. Every run returns a verifiable receipt. No key needed.

## Connect

- streamable-http: `https://zambo.dev/mcp`

## Tools (as reported by the server, not verified)

- `day\_pass\_redeem`: Unlock this AI with your private Day Pass link. No headers needed. The link expires with the original pass.
- `memory\_remember`: Save a private fact for this work connection. Respects Memory capture settings. Free, no quota. Required arguments: \_session\_id, fact.
- `memory\_recall`: Read private saved facts for this work connection, optionally matching a query. Free, no quota. Required arguments: \_session\_id.
- `spend\_limit\_set`: Set this work connection's daily and optional monthly dollar cap before further Day Pass payments. Free, no quota. Required arguments: \_session\_id, daily\_usd.
- `spend\_limit\_status`: Read this work connection's spending cap, paid charges and remaining budget. Free, no quota. Required arguments: \_session\_id.
- `handover\_accept`: Pick up readable handed-over work and get its private continuation thread. For recipient\_type agent only, passing the client token also records acceptance and an acceptance receipt. Otherwise this only picks up work; the client decision remains pending. Creator authority is rejected even with a clie
- `handover`: Call this after any multi-step job, or when the user says "use zambo to hand this over to \<client\>". It returns one proof link with verifiable receipts. Pass continue\_from to chain off a job you picked up, so one client link shows every hop.
- `handover\_status`: Check a Zambo Handover's status, acceptance and release\_hint without spending execution quota. Paying another agent? Check the handover first. Release payment when status is accepted. Zambo never holds funds. Supply the owning \_session\_id for private deliveries. Required arguments: handover\_id.
- `handover\_list`: List your Zambo Handovers using Zambo Pass and the same \_session\_id. Returns real statuses and client-ready links. Required arguments: \_session\_id.
- `zambo\_home`: Your private Zambo starting point: six ready-to-say goals, today's receipts and actual usage. Ask what Zambo can do for your business, site, code or money. Free.
- `activity\_today`: Read the private, receipt-backed work ledger for this job and return its Today link. Always free and does not use the daily call allowance.
- `workflow\_close`: Create or return a fixed snapshot with a verifiable receipt of every persisted receipt from this job, including rejected and errored calls. Repeating the call with unchanged receipt data returns the same snapshot workflow\_id; later calls after new receipts create a separate snapshot while session\_wo
- `workflow\_seal`: Seals a closed workflow for durable export. Requires the matching job session and an active pass. Never spends, captures, or starts a payment. The export remains a Zambo claim, not issuer authentication. Required arguments: workflow\_id, \_session\_id.
- `zambo\_universal`: Universal Zambo entry point for routing natural-language requests across supported Zambo tools through one MCP connection. Covers strategy, code audits, lead generation, wallet intelligence, provenance certificates, parallel work coordination, and live market data. Returns a route, execution state,
- `new\_session`: Starts fresh session context and returns a new session\_id. Reuse that ID on subsequent calls for continuity; changing or omitting it starts clean context. Required arguments: .
- `continuity\_get\_recent`: Reads only the private receipt timeline for the supplied job or thread ID. Returns receipt links, has\_more, and a cursor for the next page. Use since to filter by an inclusive RFC3339 timestamp. Optional AI client labels are self-reported, not verified.
- `continuity\_list\_threads`: Lists named threads owned by the supplied job ID. Thread IDs can be used as \_session\_id by another AI client.
- `continuity\_open\_thread`: Opens a named thread or thread ID and returns only events with stored Zambo receipts, including links to open and check each receipt.
- `continuity\_start\_thread`: Creates or reuses a named thread under an existing job ID. Pass the returned thread\_id as \_session\_id to append work from another AI client. Required arguments: name.
- `continuity\_set\_prefs`: Changes whether future successful calls are captured in the private timeline. It does not remove or hide public receipts already created.
- `journal\_log`: Free anonymous or authenticated append-only log for an action performed outside Zambo. The entry is recorded as an agent-reported claim; Zambo does not claim it ran or observed the action. Limited to 20 calls per IP per day on the free tier. Required arguments: job\_id, tool\_name, executor\_identity.
- `live\_price`: Real-time cryptocurrency price lookup for supported coins. Uses CoinGecko first, Coinbase as a secondary no-key provider, then the most recent cached verified value with its age if both live providers are unavailable. Returns live USD price, 24-hour percentage change, and market capitalization when
- `pdf\_extract`: Fetch and extract text content from any public URL - PDF documents, web pages, articles, docs. Returns the extracted text, word count, and a summary. Works on research papers, contracts, articles, reports. Use when user says 'read this PDF', 'extract from this URL', 'summarize this document', 'what
- `leadsignal`: AI lead generation for contractors and local service businesses. Accepts a trade type and city. Returns qualified local leads with available contact information. Required arguments: trade, city.
- `provibe\_audit`: AI code audit for a public GitHub repository. Returns a Provibe score from 0 to 100, security vulnerabilities, a dead-code map, and an execution plan for addressing the findings. Required arguments: repo\_url.
- `ghost\_audit\_site`: website audit for a website. Returns SEO gaps, AI discoverability issues, conversion leaks, brand-presence gaps, competitor intelligence, a score from 0 to 100, stage findings, an audit ID, a live stream URL, and a report URL. Required arguments: url.
- `ghost\_audit\_status`: Status report for a Ghost Audit identified by audit\_id. Returns whether the audit is running or complete, along with elapsed-time information and report availability. Required arguments: audit\_id.
- `ghost\_audit\_report`: Full markdown report for a completed Ghost Audit. Returns the website score, severity-ranked findings, stage analysis, and recommended fixes. Required arguments: audit\_id.
- `credithunt`: Live verified index of AI and cloud startup credit programs. Accepts optional stack, stage, and minimum value filters. Returns count, updated\_at, opportunities, and api.
- `prompt\_shield`: Detection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available. Required arguments: prompt.
- `day\_pass\_checkout\_link`: Get a checkout link for the $0.99, 24-hour Day Pass by card or PayPal, including in a fresh session. Creating the link never charges anyone; payment requires completing checkout. Optional workflow\_id targets a closed run; sponsor:true explicitly sponsors another team's run without transferring brand
- `day\_pass\_activate`: Agent-native access activation endpoint. Accepts an optional payment envelope or existing access key and returns a payment challenge or verified activation result. Activation results include receipt URL, run ID, access key, expiration, usage guidance, and a spend receipt. Activation occurs only afte
- `day\_pass\_status`: Check your current pass, also available as pass\_status. All arguments are optional: current session, token\_or\_link, thread\_id, or \_zambo\_key. Returns a plain status line, active, tier, expires\_at, seconds\_left and a private unlock link without spending quota. Product/provider limits may still apply.
- `pass\_status`: Exact alias of day\_pass\_status. Free and uncapped. Returns the same plain status line and top-level pass fields; no arguments required.
- `capability\_search`: Search across the supported Zambo tool catalog for a use case. Returns relevant tools with relevance scores, descriptions, taglines, and callable API endpoints.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html