listsignal-mcpSAFE
B2B sales intelligence MCP server: tech stack lookup, Shopify app detection, company enrichment, revenue estimates, hiring signals, and contact data for 16M+ online businesses. Free tier: 1,000 calls/month.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://listsignal.com/developers) [](https://listsignal.com/openapi.json) [](https://listsignal.com/signup)
B2B data intelligence for AI agents. ListSignal is a business intelligence / sales intelligence MCP server: technographics, technology detection, Shopify app detection, company and domain enrichment, firmographics (revenue and employee estimates), hiring signals with posting dates, SEO scores, and contact data for 16M+ online businesses. Discovery runs on Certificate Transparency (CT) logs, so new companies appear within hours of going live.
Questions this server answers directly:
- What technology does a website use? (tech stack lookup for any domain)
- Find companies using [technology] (Shopify, Klaviyo, HubSpot, 230+ more)
- Detect Shopify apps on a store (260+ apps tracked)
- Domain to company data (revenue bracket, employees, industry, country)
- Which companies matching my ICP are hiring right now?
This is the official, first-party MCP server for ListSignal, hosted at https://listsignal.com/mcp (remote Streamable HTTP, no install needed).
Free tier: 1,000 calls/month. No card, no sales call. Get a key (Settings → API Key).
Tools
9e1e7d120b18OBSERVED · 2026-10-11Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
streamable-http
Gates applied: no_behavioural_pass.
9e1e7d120b18full audit observations/trust-audit/mcp-server/giushansen__listsignal-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 9e1e7d120b18 | SAFE | B | 89 | first audit |
Questions
What is the listsignal-mcp MCP server?
B2B sales intelligence MCP server: tech stack lookup, Shopify app detection, company enrichment, revenue estimates, hiring signals, and contact data for 16M+ online businesses. Free tier: 1,000 calls/month.
Is listsignal-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does listsignal-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does listsignal-mcp run?
It speaks streamable-http, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (9e1e7d120b18), read on 2026-10-11. The repository is watched and re-audited when it changes.