Model Context Protocol (MCP) server for Apollo.io API integration
Nothing to run from here
Funkel AI is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
tool-list score
51
tools declared
remote
at its publisher
—
calls last 7d
What it does
Run LinkedIn and email outreach: find leads, manage campaigns, and reply to prospects.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http funkel-ai-mcp https://api.funkel.ai/mcp
# 2 — ask your agent for something these tools do
# list_apps, get_product_context, list_lists and 48 more
Funkel AI costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
FUAll 1 server
funkel1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http funkel-ai-mcp https://api.funkel.ai/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
51 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
List the products/apps owned by the request scope's user. Returns a summary (count, brief one-liner, and a list of {id, name, description, url}) with no timestamps or internal flags. Use this for product inventory or explicit product-switch/disambiguation questions. A normal product-scoped request already carries an app_id in Scope; do not call this just to discover which product to use for produc
No parameter schema on file.
Read the selected product's name, site, description, ICP summary, language, Product Brain availability, and dashboard link. No provider credentials or raw unbounded configuration are returned.
No parameter schema on file.
List unarchived lead lists in the selected product. Returns exact total and bounded pages. A list's cached lead count is not used for the total.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Page size (default 20; max 50) |
| offset | integer | no | Page offset (default 0) |
Read one unarchived list in the selected product and its exact member count. Does not return contacts; use list_list_contacts.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| list_id | string | yes | List id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
List contacts in one unarchived list in the selected product. Returns exact total and bounded pages. Does not expose email or provider identifiers.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Page size (default 20; max 50) |
| list_id | string | yes | List id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| offset | integer | no | Page offset (default 0) |
List pending, approved, or failed scheduled actions in the selected product, optionally for one campaign. Returns one bounded page and its exact total. Completed actions are not included.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| campaign_id | string | no | Optional campaign id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| limit | integer | no | Page size (default 20; max 50) |
| offset | integer | no | Page offset (default 0) |
Read one action in the selected product: campaign, lead, type, state, scheduled and executed timestamps. Does not return provider metadata or a message body.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action_id | string | yes | Scheduled action id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
List open or done lead reminders in the selected product with exact total and bounded pages. Default is open. This read does not complete a reminder.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Page size (default 20; max 50) |
| offset | integer | no | Page offset (default 0) |
| status | string | no | Reminder state |
List account-scoped and selected-product-scoped open insights. Each item labels its actual scope; account insights are not product-only. Exact total and bounded pages.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Page size (default 20; max 50) |
| offset | integer | no | Page offset (default 0) |
Read one insight and its evidence for the selected product, or an explicitly account-scoped insight. Read-only; proposed changes never run here.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| insight_id | string | yes | Insight id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
List durable Operator tasks in the selected product. Returns bounded pages, exact total, task status, version, and links. Read-only.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Page size (default 20; max 50) |
| offset | integer | no | Page offset (default 0) |
Read one durable Operator task in the selected product with its step states, action states, safe summaries, version, and progress. Does not return executable arguments or raw provider errors.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| task_id | string | yes | Task id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
Read current account access for Operator and campaign actions in the selected product. Operator requires active paid or lifetime entitlement; campaign actions also accept active beta. Feature flags are account-wide. This snapshot is not an action authorization or credit quote.
No parameter schema on file.
Create a scoped note or reminder after an explicit confirmation of the exact lead, body, and due date. One request_key can be applied only once; a changed intent with the same key fails. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| body | string | yes | Note or reminder text (max 5000 chars) |
| confirmation_token | string | no | One-use approval token; omit on first call |
| lead_id | string | yes | Lead id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| reminder_at | string | no | Optional RFC3339 reminder due date |
| reminder_body | string | no | Required when reminder_at is set |
| request_key | string | yes | Stable unique request identity (8-128 chars) |
Create a scoped note or reminder after an explicit confirmation of the exact lead, body, and due date. One request_key can be applied only once; a changed intent with the same key fails. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| body | string | yes | Note or reminder text (max 5000 chars) |
| confirmation_token | string | no | One-use approval token; omit on first call |
| lead_id | string | yes | Lead id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| reminder_at | string | yes | Required RFC3339 reminder due date |
| request_key | string | yes | Stable unique request identity (8-128 chars) |
Save one selected-product Operator preference after explicit approval. The value is bounded JSON data, not a system instruction. Existing keys update. No provider credentials or tokens are accepted. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| confirmation_token | string | no | Approval token; omit on first call |
| key | string | yes | Preference key (1-100 chars; no secret names) |
| reason | string | no | Why this preference should be saved |
| value | string | yes | JSON value (max 600 bytes) |
Rename one unarchived list in the selected product after explicit approval. Supply its current name to reject stale changes; include the full new description. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| confirmation_token | string | no | Approval token; omit on first call |
| description | string | yes | New full description |
| expected_name | string | yes | Current list name |
| list_id | string | yes | List id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| name | string | yes | New name (1-100 chars) |
Pause, resume, cancel, or retry a durable Operator task after exact approval. Supply its current version. Retry also requires one failed idempotent local-read step; completed effects cannot replay. A pause may not stop an already executing provider call. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| confirmation_token | string | no | One-use approval token; omit on first call |
| expected_version | integer | yes | Current task version |
| operation | string | yes | Task transition |
| step_id | string | no | Required failed step id for retry (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| task_id | string | yes | Task id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
List the specialist agents in the product/app the request is scoped to. Returns a summary (count, brief one-liner, and a list of {id, name, status, type, role, one-line icp_summary}). Internal agent types are mapped to product-facing roles such as lead_finder. Full ICP filters / config are collapsed to a one-liner — call get_agent (later) to load full detail. Use this to ground questions like 'how
No parameter schema on file.
Read X and Hacker News listening settings for one owned agent, including sources not configured yet. Use list_agents to identify the agent. If configured is false, use configure_agent_source to propose exact searches and enable listening after approval. If configured is true and searches exist, use set_agent_source_listening to toggle without changing searches. A draft or paused agent does not col
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Owned agent ID (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| app_id | string | no | Product ID; required for MCP accounts with multiple products (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
Pause or resume only an existing X or Hacker News source on an agent. First read get_agent_sources. If configured is false or searches are empty, use configure_agent_source instead. The first call shows exact approval; a second user-approved call commits. Saved searches, budgets, LinkedIn resolution and other sources stay unchanged. A draft or paused agent does not collect until activated. Over MC
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Owned agent ID (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| app_id | string | no | Product ID; required for MCP accounts with multiple products (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| confirmation_token | string | no | One-use approval token, omit before approval |
| enabled | boolean | yes | — |
| expected_updated_at | string | no | Version from get_agent_sources; optional on first call |
| source | string | yes | One source |
Configure X or Hacker News searches for one owned agent and set source listening. First call get_agent_sources. If no source exists, propose 1-10 precise searches from the user's request and saved ICP; do not invent a broad search without showing it. If a source exists, show its current searches and only replace them when the user asks to change them. This tool previews the exact searches, enabled
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Owned agent ID (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| app_id | string | no | Product ID; required for MCP accounts with multiple products (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| auto_resolve_linkedin | boolean | no | Hacker News only; automatically resolve high-confidence leads through LinkedIn, which may use credits |
| confirmation_token | string | no | One-use approval token; omit before approval |
| enabled | boolean | yes | Whether source listening should be enabled after approval |
| expected_updated_at | string | no | Version from get_agent_sources; optional on first call |
| queries | array | yes | Exact search phrases to save, 1-10 |
| source | string | yes | Source to configure |
List the campaigns in the app the request is scoped to (excludes archived). Returns a summary (count, brief one-liner, and a list of {id, name, status, agent_id, list_id}). Settings JSON is intentionally omitted; call get_campaign for current workflow, sender, and action detail. Status values: 'draft', 'active', 'paused'.
No parameter schema on file.
Read one campaign in the selected product. Returns updated_at for exact approved settings changes, plus workflow, sender assignments, schedule, review mode, observed action state, and readiness blockers. Empty templates are not claimed as generated messages. No sending or activation occurs.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| campaign_id | string | yes | Campaign id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
Change a campaign's manual review, send window, or sender assignments in the selected product. Read get_campaign first and copy its updated_at as expected_updated_at. Omitted settings remain unchanged. Explicit null sender clears one platform. First call returns an exact approval preview; approved execution saves all changes atomically. It never activates, enrolls, or sends. Over MCP: call this to
| Parameter | Type | Required | Notes |
|---|---|---|---|
| account_assignments | object | no | Only supplied platforms change |
| campaign_id | string | yes | Owned campaign id from get_campaign (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| confirmation_token | string | no | One-use approval token; omit on first call |
| expected_updated_at | string | no | Exact updated_at from get_campaign; may be omitted for a server-filled first preview |
| review_mode | boolean | no | Require manual review before outreach |
| schedule | object | no | Full send window; all fields required when supplied |
Rank up to four live operational starting points with source IDs and links. Connected senders and insights count across the account; leads, actions, campaigns, and unread messages count within the selected product. Read only.
No parameter schema on file.
Show account-wide connected sender health and separate readiness for campaign assignments in the selected product. An account-wide connection does not prove a campaign has a usable sender.
No parameter schema on file.
Return product- or campaign-scoped activity in a UTC lookback interval. Completed actions and invitations use executed_at; connections and recorded replies use lead event timestamps. These are separate event counts, not one conversion cohort. Default 7 days, max 90.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| campaign_id | string | no | Campaign id (required when scope='campaign') (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| days_back | integer | no | Lookback window in days (default 7) |
| scope | string | no | Aggregation level. Default 'app'. |
Search leads in the app the request is scoped to. Returns bounded named summaries and IDs, never full rows. Use get_lead to load full detail for a specific id. Default source is 'discovered' (agent-found, awaiting approval); pass source='approved' to search leads already in campaigns. Optional 'search' keyword runs an ILIKE across name/company/headline; optional 'status' narrows by lead status. If
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | yes | Max number of leads to return (1..50) |
| search | string | no | Optional keyword (matches name, company, or headline) |
| source | string | no | Lead source. Default 'discovered'. |
| status | string | no | Optional status filter (e.g. 'pending', 'approved', 'rejected') |
Return full detail for a single lead by id, INCLUDING the derived reply_state and opt_out flags. Always call this before drafting or sending a message — a lead whose reply_state is 'replied', 'rejected', or 'opted_out', or whose opt_out is true, must NEVER be drafted to or messaged. Use source='approved' for leads in active campaigns; default 'discovered' is for agent-found leads awaiting approval
| Parameter | Type | Required | Notes |
|---|---|---|---|
| lead_id | string | yes | Lead id (from a prior find_leads result) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| source | string | no | Lead source. Default 'discovered'. |
Return bounded conversation context for one lead or conversation in the request scope: lead profile, product/campaign context, last real messages, recent notes, open reminders, and Reply Assistant follow-up suggestions. Use this before meeting prep, reply planning, or questions about what happened with a lead. Read-only; does not draft or send messages.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| conversation_id | string | no | Conversation id from inbox/follow-up context (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| lead_id | string | no | Lead id from find_leads/get_lead or a follow-up result (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| limit | integer | no | Number of recent messages to return (default 12, max 20) |
List reply-needed conversations or due follow-ups in the selected product. One predicate determines both the total and page. AI drafts are not counted as sent replies. Limit 50; use offset for later pages.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Maximum rows (default 20, max 50) |
| mode | string | yes | Queue type |
| offset | integer | no | Pagination offset (default 0) |
List up to 20 files uploaded to any of your Operator threads in the selected product. Returns file IDs and metadata only, never bytes or extracted text. A file can be used for a same-product LinkedIn reply, not another product or email reply.
No parameter schema on file.
Prepare one exact local inbound reply. Returns recipient, sender, channel, inbound revision, final signed body, and optional owned file identity. Never sends. Files are available only for supported connected LinkedIn conversations in the selected product.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| attachment_id | string | no | Optional file ID from list_operator_files. LinkedIn replies only (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| body | string | yes | Full proposed body. A configured booking link is tracked in the final preview |
| conversation_id | string | yes | Local conversation id (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
Send one exact prepared reply to the latest inbound message after explicit human approval. Provide the complete prepare_conversation_reply result, its attachment_id when present, and a stable request_key. A timeout is uncertain and cannot be retried automatically. LinkedIn files are supported; email files are unavailable. Over MCP: call this tool once, without confirmation_token. It runs right awa
| Parameter | Type | Required | Notes |
|---|---|---|---|
| attachment_id | string | no | Exact prepared file ID when present (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| confirmation_token | string | no | One-use approval token; omit on first call |
| prepared | object | yes | Exact prepare_conversation_reply result; all fields required by server validation |
| reply_as_confirmed | boolean | no | Explicitly confirm using another rep's sender |
| request_key | string | yes | Stable unique request identity, 8-128 chars |
Read one reply attempt by its stable request_key in the selected product. Returns actual delivery evidence and next_action. Uncertain delivery requires manual provider review unless an exact outgoing provider message is confirmed. Never retries or sends.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| request_key | string | yes | Stable request identity from send_conversation_reply, 8-128 characters |
List up to 20 saved Operator preferences for the user and product in the request scope. Values are bounded, labeled customer data, and never override user instructions or system rules. Returns key, value, and source only. No provider credentials or tokens are returned.
No parameter schema on file.
Search LinkedIn for fresh people leads from the request user's connected account. Use this when the user describes leads to find by words, roles, companies, or market terms, rather than asking to search existing saved leads. Returns a server-owned session_id and up to 10 lead previews. To import the results, call import_search_leads_to_list with that session_id after the user asks to import all or
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Max results to return (1..10). Default 10. |
| query | string | yes | Free-text people search, e.g. 'YC founders building AI devtools' |
| role | string | no | Optional job-title filter, e.g. 'Founder OR CEO' |
Import lead rows from a prior search_external_leads session into a lead list. Two-phase: first call returns a confirmation token + preview; the user reviews an inline card and confirms; second call with confirmation_token commits. provider_ids omitted means import every lead in the search session. Supply list_id for an existing list, or list_name to create a new list during the confirmed commit. A
| Parameter | Type | Required | Notes |
|---|---|---|---|
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| list_id | string | no | Existing lead list id to import into (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| list_name | string | no | Name for a new list to create during the confirmed import when list_id is omitted |
| provider_ids | array | no | Optional selected provider ids from the search result. Omit to import all search results. |
| session_id | string | yes | Lead search session id returned by search_external_leads (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
Create a draft campaign in the selected product. First show the exact campaign, agent, destination list, and any agent retargeting for approval. With agent_id and no list_id, use the agent's destination list; if absent, assign the product default list to both. An explicit different list retargets a draft agent only after approval. Never activate, discover, enroll, or send. If workflow_steps are om
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | no | Optional agent id (from a prior list_agents) that supplies leads to this campaign (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| app_name | string | no | App name (used in the confirm preview) |
| cold_outreach_mode | string | no | Cold outreach mode (default 'invite') |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| list_id | string | no | Optional owned lead list id. With an agent, omitted means its destination list. Otherwise the product default list is used or created. (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| name | string | yes | Campaign name (1-100 chars) |
| workflow_steps | array | no | Optional custom workflow steps |
Update message content on existing steps in a draft or paused campaign. Prefer one-based message_order, which counts only message-bearing steps and automatically skips invite/follow steps: message_order 1, 2, 3 targets the first, second, and third messages even when raw workflow step 1 is an invite. step_order remains available only when an exact raw workflow order is already known. Provide exactl
| Parameter | Type | Required | Notes |
|---|---|---|---|
| app_name | string | yes | App name used in the confirmation preview |
| campaign_id | string | yes | Campaign id from a prior list_campaigns result (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| campaign_name | string | yes | Campaign name used in the confirmation preview |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| workflow_messages | array | yes | Exact message content to persist; prefer message_order 1..N for ordinary campaign copy |
Enable (resume) a paused or draft campaign. The campaign engine starts scheduling actions per the campaign's workflow. Two-phase: first call returns a confirmation token + preview; the user reviews and confirms; second call (with confirmation_token) commits. Activation pre-conditions (workflow steps, connected accounts) are validated by the underlying campaign service — the tool surfaces any failu
| Parameter | Type | Required | Notes |
|---|---|---|---|
| app_name | string | yes | App name (used in the confirm preview) |
| campaign_id | string | yes | Campaign id (from a prior list_campaigns) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| campaign_name | string | yes | Campaign name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
Generate a personalised draft for one lead. Reads the lead's profile (industry, role, headline, optional reference hook) and returns a single message body. Does NOT send. After the user reviews and approves, call send_message to actually deliver. ALWAYS call get_lead first to inspect reply_state — refuse to draft for opted-out / replied / rejected leads. Over MCP: call this tool once, without conf
| Parameter | Type | Required | Notes |
|---|---|---|---|
| lead_id | string | yes | Lead id (from a prior find_leads / get_lead) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| reference | string | no | Optional specific hook (recent post, role transition, milestone) the user wants referenced |
| tone | string | no | Voice register |
Create a new lead list scoped to the request's app. Use this when the user wants to organise leads into a named bucket (e.g. 'Q4 Targets', 'Hot Founders'). The new list starts empty; populate it later via approve_leads with action='approve' and the new list_id, or by editing the list manually. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| description | string | no | Optional one-sentence description of what the list is for |
| name | string | yes | Display name for the list (1-100 chars) |
Stage a proposed ICP edit for one agent. Returns a diff envelope (current vs proposed, fields_changed) so the user can review the change inline before applying it. Does NOT write — to actually apply the edit, call update_icp (confirm-tier) with the same agent_id and proposed fields. Use this when the user describes a change in plain language ('target Series A founders in EU' etc.); never call upda
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Agent id (from a prior list_agents) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| proposed_icp_description | string | no | Free-text description of the new ICP |
| proposed_icp_filters | string | no | Optional structured filters JSON (job_titles, industries, regions, etc.) |
Pause an active campaign. The campaign engine stops scheduling actions. Two-phase: first call returns a confirmation token + preview; the user reviews an inline card and confirms or cancels; second call (with confirmation_token) commits the pause. Always include campaign_name + app_name so the preview is human-readable. Over MCP: call this tool once, without confirmation_token. It runs right away
| Parameter | Type | Required | Notes |
|---|---|---|---|
| app_name | string | yes | App name (used in the confirm preview) |
| campaign_id | string | yes | Campaign id (from a prior list_campaigns) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| campaign_name | string | yes | Campaign name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
Enable (activate) a paused or draft agent so it begins discovering leads on its schedule. Two-phase: first call returns a confirmation token + preview; the user reviews and confirms; second call (with confirmation_token) commits. Over MCP: call this tool once, without confirmation_token. It runs right away and returns the result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Agent id (from a prior list_agents) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| agent_name | string | yes | Agent name (used in the confirm preview) |
| app_name | string | yes | App name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
Pause an active agent so it stops discovering new leads. The agent's existing leads remain in the list. Two-phase: first call returns a confirmation token + preview; the user reviews an inline card and confirms or cancels; second call (with confirmation_token) commits the pause. Always include agent_name + app_name so the preview is human-readable. Over MCP: call this tool once, without confirmati
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Agent id (from a prior list_agents) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| agent_name | string | yes | Agent name (used in the confirm preview) |
| app_name | string | yes | App name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
Approve or reject one or more discovered leads. Two-phase: first call returns a confirmation token + preview; the user reviews an inline card and confirms; second call (with confirmation_token) commits the status flip. action='approve' requires campaign_id (the campaign the leads will be associated with); action='reject' does not. The tool stamps each lead's status + reviewed_at + campaign_id; dow
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action | string | yes | Decision applied to every lead in lead_ids |
| campaign_id | string | no | Required for action=approve; omitted for action=reject (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| campaign_name | string | no | Campaign name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| count | integer | no | Number of leads in the batch (used in the confirm preview; mirrors len(lead_ids)) |
| lead_ids | array | yes | Discovered lead ids (from a prior find_leads result) |
Apply an ICP edit (description and/or filters JSON) to one agent. Two-phase: first call returns a confirmation token + preview; the user reviews the diff inline and confirms; second call (with confirmation_token) commits. ALWAYS call draft_icp_edit first so the user sees a before/after; never call update_icp directly without staging a diff. Pre-populate agent_name in the schema args so the preview
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent_id | string | yes | Agent id (from a prior list_agents) (UUID format, e.g. 550e8400-e29b-41d4-a716-446655440000) |
| agent_name | string | no | Agent name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| icp_description | string | no | New free-text ICP description (omit to leave unchanged) |
| icp_filters | object | no | New structured filters object. Use company_sizes and exclude_service_providers. excluded_companies accepts exact employer names or LinkedIn company URLs. URLs become slug names and remain separately i |
| industry_inputs | array | no | Explicit raw industry intent from draft_icp_edit ready_to_execute_args. Omit for canonical-only edits. Nested old metadata cannot restore removed raw intent. |
Create a new draft agent under the request's scoped app. Two-phase: first call previews every setting; second call after user confirmation creates it. The agent's ICP starts from the app's saved ICP; icp_filters keys you supply override only those keys, every other saved field (job_titles, mandatory_keywords, excluded_companies, company_sizes, ...) is kept as-is. Do not restate the full ICP from m
| Parameter | Type | Required | Notes |
|---|---|---|---|
| app_name | string | no | App name (used in the confirm preview) |
| confirmation_token | string | no | Phase-2 token (omit on phase-1) |
| icp_description | string | no | Free-text ICP description for the new agent |
| icp_filters | object | no | Optional structured ICP filters. Use job_titles, industries, regions, company_sizes, excluded_keywords, and exclude_service_providers. excluded_companies accepts exact employer names or LinkedIn compa |
| linkedin_account_ids | array | no | Local UUIDs of the workspace LinkedIn accounts selected for searches. Use [] for none. |
| max_signals | integer | no | Cap on enabled signals (default 15) |
| name | string | yes | Display name for the new agent (1-100 chars) |
| signals | array | no | Exact agent discovery signals. Omit to seed from ICP; use [] for none. |
| type | string | no | Agent type (default 'signal') |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Funkel AI or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 93 / 100
Release 1.0.0 · scanned 20 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings0 threat · 1 capability
Capabilitymoderate
Coveragemanifest
Verificationnot in this report
Surface digestbe55dd781c57a0ec59ee949a0dc5f2dc8e77d1ce67d35b5330b6d2f3d009104b
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| list_apps | no tags | |
| get_product_context | no tags | |
| list_lists | no tags | |
| get_list | no tags | |
| list_list_contacts | no tags | |
| get_schedule | no tags | |
| get_scheduled_action | no tags | |
| list_reminders | no tags | |
| list_insights | no tags | |
| get_insight | no tags | |
| list_operator_tasks | no tags | |
| get_operator_task | no tags | |
| get_access | no tags | |
| create_note | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| create_reminder | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| save_preference | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| rename_list | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| control_operator_task | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| list_agents | no tags | |
| get_agent_sources | no tags | |
| set_agent_source_listening | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| configure_agent_source | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| list_campaigns | no tags | |
| get_campaign | no tags | |
| update_campaign_settings | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| get_daily_priorities | untrusted-input | untrusted-input: keyword "read_message" |
| get_sender_health | no tags | |
| get_analytics | no tags | |
| find_leads | no tags | |
| get_lead | no tags | |
| get_conversation_context | no tags | |
| get_inbox_queue | no tags | |
| list_operator_files | no tags | |
| prepare_conversation_reply | no tags | |
| send_conversation_reply | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| get_reply_attempt | no tags | |
| list_preferences | no tags | |
| search_external_leads | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| import_search_leads_to_list | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| create_campaign_draft | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| update_campaign_workflow | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| enable_campaign | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| draft_message | external-sink | external-sink: keyword "send_message", declares readOnlyHint: false, openWorldHint: true |
| create_list | state-write | state-write: declares readOnlyHint: false |
| draft_icp_edit | no tags | |
| pause_campaign | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| enable_agent | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| pause_agent | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| approve_leads | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| update_icp | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
| create_agent | state-write | state-write: declares readOnlyHint: false, destructiveHint: true |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
flow-1
Untrusted input can drive an external action even though no sensitive source is exposed.
Supply chain and provenance
Integrityfirst-seen
Surface digestbe55dd781c57a0ec
Scanned2026-10-20
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
1.0.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Funkel AI can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.