Zambo

Trust Layer for AI work.

CommunityOnlineNo sign-inGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    No: the server works without sign-in

    Trust Layer for AI work. Give your AI hands. Every run returns a verifiable receipt. No key needed.

    How to connect

    How to connect Zambo to Claude

    The server address to paste into Claude settings:

    https://zambo.dev/mcp

    1. Open Claude (claude.ai or the desktop app).
    2. Go to Settings → Connectors.
    3. Click Add custom connector.
    4. Paste the server address copied below into Remote MCP server URL and click Add.
    5. In a chat, click + → Connectors and switch the new connector on.

    Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

    Authorization

    After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

    How to connect Zambo to ChatGPT

    The server address to paste into ChatGPT settings:

    https://zambo.dev/mcp

    1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
    2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
    3. Open Settings → Connectors and click Create.
    4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
    5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
    6. In a new chat open + → Apps/Connectors and enable the connector.

    OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

    Authorization

    On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

    How to connect Zambo to Cursor

    The server address to paste into Cursor settings:

    https://zambo.dev/mcp

    Fastest: click Open in Cursor below and confirm the prompt.

    Manually:

    1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
    2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
    3. Save the file. The server appears in the MCP list; authorize it there if asked.

    Authorization

    If the service needs sign-in, an authorize button appears next to the server in the MCP list.

    Server tool list (24)

    Raw names from tools/list. Only developers need these.

    zambo_homeYour private Zambo starting point. Use when the user says 'zambo': welcome new users or resume the same caller-scoped job, show today's saved receipt links, actual per-tool free usage, and three practical next actions. Does not spend quota.
    workflow_closeCreate or return an immutable snapshot of this job's eligible receipts. Repeating the call with unchanged receipt data returns the same snapshot workflow_id; later calls after new receipts create a separate snapshot while session_workflow_id continues identifying the live ledger. Both identifiers are unbound metadata excluded from canonical receipt bytes. The first close returns a one-time private workflow_manage_token; retries do not rotate or reissue it. The workflow_close summary receipt is excluded from the step count. Records Zambo's claims, not issuer authentication.
    workflow_sealSeals a closed workflow for durable export. Requires the matching job session and an active pass. Never spends, captures, or starts a payment. The export remains a Zambo claim, not issuer authentication.
    zambo_universalUniversal Zambo entry point for routing natural-language requests across supported Zambo tools through one MCP connection. Covers strategy, code audits, lead generation, wallet intelligence, provenance certificates, swarm coordination, and live market data. Returns a route, execution state, downstream tool results when available, and receipt information.
    new_sessionStarts fresh session context and returns a new session_id. Reuse that ID on subsequent calls for continuity; changing or omitting it starts clean context.
    continuity_get_recentReads only the private receipt timeline for the supplied job or thread ID. Returns receipt links, has_more, and a cursor for the next page. Use since to filter by an inclusive RFC3339 timestamp. Optional AI client labels are self-reported, not verified.
    continuity_list_threadsLists named threads owned by the supplied job ID. Thread IDs can be used as _session_id by another AI client.
    continuity_open_threadOpens a named thread or thread ID and returns only events with stored Zambo receipts, including links to open and check each receipt.
    continuity_start_threadCreates or reuses a named thread under an existing job ID. Pass the returned thread_id as _session_id to append work from another AI client.
    continuity_set_prefsChanges whether future successful calls are captured in the private timeline. It does not remove or hide public receipts already created.
    journal_logFree anonymous or authenticated append-only log for an action performed outside Zambo. The entry is recorded as an agent-reported claim; Zambo does not claim it ran or observed the action. Limited to 20 calls per IP per day on the free tier.
    live_priceReal-time cryptocurrency price lookup for supported coins. Uses CoinGecko first, Coinbase as a secondary no-key provider, then the most recent cached verified value with its age if both live providers are unavailable. Returns live USD price, 24-hour percentage change, and market capitalization when verified.
    pdf_extractFetch and extract text content from any public URL - PDF documents, web pages, articles, docs. Returns the extracted text, word count, and a summary. Works on research papers, contracts, articles, reports. Use when user says 'read this PDF', 'extract from this URL', 'summarize this document', 'what does this say'.
    leadsignalAI lead generation for contractors and local service businesses. Accepts a trade type and city. Returns qualified local leads with available contact information.
    provibe_auditAI code audit for a public GitHub repository. Returns a Provibe score from 0 to 100, security vulnerabilities, a dead-code map, and an execution plan for addressing the findings.
    ghost_audit_siteAchilles 10-stage audit for a website. Returns SEO gaps, AI discoverability issues, conversion leaks, brand-presence gaps, competitor intelligence, a score from 0 to 100, stage findings, an audit ID, a live stream URL, and a report URL.
    ghost_audit_statusStatus report for a Ghost Audit identified by audit_id. Returns whether the audit is running or complete, along with elapsed-time information and report availability.
    ghost_audit_reportFull markdown report for a completed Ghost Audit. Returns the Achilles 10-stage score, severity-ranked findings, stage analysis, and recommended fixes.
    credithuntLive verified index of AI and cloud startup credit programs. Accepts optional stack, stage, and minimum value filters. Returns count, updated_at, opportunities, and api.
    prompt_shieldDetection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available.
    day_pass_checkout_linkCreate a 30-minute short link for a human-approved $0.99, 24-hour Day Pass by card or PayPal. Optional workflow_id targets a closed run; sponsor:true explicitly lets you pay to seal another team's run without transferring branding ownership. The link is not an order or charge.
    day_pass_activateAgent-native access activation endpoint. Accepts an optional payment envelope or existing access key and returns a payment challenge or verified activation result. Activation results include receipt URL, run ID, access key, expiration, usage guidance, and a spend receipt. Activation occurs only after a verified transfer.
    day_pass_statusCheck a Day Pass using _zambo_key, X-Zambo-Key, or the same _session_id used at card checkout or x402 payment. Returns active, expires_at, and calls_left without spending quota. Gateway calls are unmetered while active; product/provider limits may still apply. Never returns the key.
    capability_searchSearch across the supported Zambo tool catalog for a use case. Returns relevant tools with relevance scores, descriptions, taglines, and callable API endpoints.