
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@gitdealflow/mcp-signal
Advanced tools
MCP server for VC Deal Flow Signal — search, shortlist, compare, and predict startup engineering acceleration across 15 sectors. Transparent, citable funding-likelihood scores with full evidence chains. Commit velocity, contributor growth, and repo-expans
MCP server for searching, shortlisting, comparing, and predicting startup engineering acceleration across 15 sectors. Tracks commit velocity, contributor growth, and repository expansion for 350+ GitHub orgs. Built for VCs, angels, scouts, and technical operators who need transparent, citable deal-flow signals before they show up in traditional channels.
One-click install for Claude Desktop / Cursor / Cline / Continue via Smithery — verified, 98/100 quality score.

# Run instantly — no install required
npx -y @gitdealflow/mcp-signal
Add to Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"vc-deal-flow-signal": {
"command": "npx",
"args": ["-y", "@gitdealflow/mcp-signal"]
}
}
}
Or streamable HTTP for ChatGPT, Mistral Le Chat, and HTTP MCP clients:
POST https://signals.gitdealflow.com/api/mcp/rpc
No API key required. All tools are free and read-only.
| Who | How they use it |
|---|---|
| VCs & Angel Investors | Screen Crunchbase profiles against live engineering velocity data. Use predict_funding for transparent, citable funding-likelihood scores with full evidence chains. |
| Startup Founders | Benchmark your own engineering velocity against 350+ tracked startups across your sector. Identify acquisition targets or partnership opportunities. |
| Recruiters & Hiring Teams | Find startups with accelerating engineering teams — the teams that are building fast and hiring. |
| Scouts & Syndicate Leads | Run shortlist_signals with sector/geography filters to surface the strongest deals in your thesis area. Use get_scout_receipts to validate your pattern recognition against 75+ unicorns. |
| Corp Dev & M&A Teams | Monitor competitor velocity trends and identify breakout acquisition targets 3–6 weeks before fundraise announcements. |
| AI Agents & Copilots | Integrate startup signals into agentic workflows — deal sourcing, company research, portfolio monitoring, and investment thesis generation. |
Add to claude_desktop_config.json:
{
"mcpServers": {
"vc-deal-flow-signal": {
"command": "npx",
"args": ["-y", "@gitdealflow/mcp-signal"]
}
}
}
.mcp.json in project root){
"mcpServers": {
"vc-deal-flow-signal": {
"command": "npx",
"args": ["-y", "@gitdealflow/mcp-signal"]
}
}
}
In Le Chat, open Settings → Connectors → + Add Connector → Custom MCP Connector, then paste:
| Field | Value |
|---|---|
| Connector name | vc-deal-flow-signal |
| Connection server | https://signals.gitdealflow.com/api/mcp/rpc |
| Authentication | No Authentication |
Workspace-admin only. Full step-by-step at signals.gitdealflow.com/integrations/mistral.
Same npx -y @gitdealflow/mcp-signal runs in every stdio runtime below. Per-runtime snippets and marketplace status: signals.gitdealflow.com/integrations/agent-runtimes.
| Client | Transport | Install path |
|---|---|---|
| Claude Desktop | stdio | claude_desktop_config.json (above) |
| Claude Code | stdio | .mcp.json (above) |
| Cursor | stdio | Settings → MCP → +Add new MCP server → paste the JSON above; cursor.directory listing (under review) |
| Cline (VS Code) | stdio | Cline panel → ⚙ → Edit Config → paste JSON; cline/mcp-marketplace#1491 (open, awaiting review) |
| Block Goose | stdio | goose session --with-extension "npx -y @gitdealflow/mcp-signal"; block/goose#8974 (closed — Goose registry moratorium 2026-05-12, pending new listing flow) |
| OpenHands | stdio | ~/.openhands/mcp.json paste-JSON, or openhands mcp add ... (no marketplace exists) |
| Aider | stdio | npx -y mcpm-aider add vc-deal-flow-signal --command "npx -y @gitdealflow/mcp-signal" (Aider native MCP not yet shipped — bridge required) |
| AiderDesk | stdio | Settings → Agent → MCP Servers → +Add → paste JSON |
| Raycast | stdio | Manage MCP Servers → +Add Server → paste JSON; raycast/extensions#28376 (open, Ready for Review; supersedes auto-stale'd #27618) |
| Smithery one-click | streamable-http or stdio | smithery.ai/server/kindrat86/vc-deal-flow-signal (Verified, 98/100) |
| Mistral Le Chat | Streamable HTTP | Custom Connector at https://signals.gitdealflow.com/api/mcp/rpc |
| ChatGPT GPT | OpenAPI Action | GitHub VC Signal GPT — no install, paid ChatGPT plan required |
| Any other Streamable HTTP client | Streamable HTTP | https://signals.gitdealflow.com/api/mcp/rpc |
| Any other stdio client | stdio | npx -y @gitdealflow/mcp-signal |
All tools are read-only, idempotent, and fetch live data from the public API (no auth required). Responses include both human-readable text and structured JSON (structuredContent) matching each tool's outputSchema.
| Tool | Input | Returns |
|---|---|---|
get_trending_startups | — | Top 20 startups ranked by engineering acceleration across all sectors. |
search_startups_by_sector | sector (enum of active slugs — currently 15) | All tracked startups in the sector, ranked by acceleration. |
get_startup_signal | name (case-insensitive) | Full signal profile for one startup: velocity, contributors, repos, classification. |
get_signals_summary | — | Dataset snapshot — period, counts, refresh date, format URLs, citation. |
get_methodology | — | How signals are sourced, computed, and classified, with known limitations. |
predict_funding | name | Transparent, scored funding-likelihood claim for one startup — score, full evidence chain, confidence, caveats, and methodology + SSRN provenance so the number is citable, not opaque. |
compare_signals | names (2–5) | Head-to-head scored comparison of named startups, ranked, with a diligence recommendation. |
shortlist_signals | sector?, geography?, signalType?, minAccelerationScore?, minVelocityChangePct?, limit? | The whole sourcing workflow in one call — "5 strongest signals in healthcare in the EU", ranked by acceleration score with a rationale each. |
get_diligence_dossier | name | Public-source diligence dossier for one company in a cited object — M&A history (acquirer, year, amount), funds that publicly backed it, and the published engineering-acceleration signal. |
get_scout_receipts | github_username | Scout Score (0–100) for a GitHub user from their public starring history vs. validated unicorns. |
Provenance, not opaque numbers. predict_funding, shortlist_signals, and compare_signals use one transparent, deterministic scoring engine (velocity ≤40 + contributor-growth ≤25 + new-repos ≤15 + signal-class ≤20 = 0–100). Every input and weight is returned in the response so a downstream agent can audit and cite the score. Geography is region-level only (US/EU/UK/APAC/LATAM/Canada); city/country aliases normalize up to the region. These are heuristics over public GitHub activity — not investment advice and not a guarantee of any financing event.
Three paid agent tools (
research_company,compose_thesis,deep_dive_scan) add enriched dossiers, thesis scaffolds, and multi-cohort sector scans for API-key holders — see /pricing.
Supported sectors (active, refreshed weekly): healthcare, edtech, ecommerce-infrastructure, supply-chain, web3, enterprise-saas, data-infrastructure, robotics, legal-tech, hr-tech, proptech, agtech, gaming, space-tech, social-community.
All data is sourced live from signals.gitdealflow.com public API. No API key required. Updated weekly on Mondays.
GET https://signals.gitdealflow.com/api/signals.jsonGET https://signals.gitdealflow.com/api/signals.csvGET https://signals.gitdealflow.com/api/openapi.jsonIf you want to put your own eye on the line, there's a prediction game on top of the same dataset at signals.gitdealflow.com/predict. Call which tracked startups raise a round in the next 6 months, earn points when your calls resolve, climb a public rank ladder from Curious to Oracle. Free tier: 3 predictions per month. Paid: 10 per month. Leaderboard: signals.gitdealflow.com/leaderboard.
io.github.kindrat86/vc-deal-flow-signalIf you ship something that calls this MCP server, the dataset, or the public signals JSON, drop the Built-With badge in your README — one line, permanent CDN-cached SVG, no signup:
[](https://signals.gitdealflow.com/built-with)
Three variants (default, compact, long) and copy-paste snippets for HTML / BBCode at signals.gitdealflow.com/built-with. Ping signals@gitdealflow.com once you embed and we'll feature you on /mirrors.
MIT
FAQs
MCP server for VC Deal Flow Signal — search, shortlist, compare, and predict startup engineering acceleration across 15 sectors. Transparent, citable funding-likelihood scores with full evidence chains. Commit velocity, contributor growth, and repo-expans
We found that @gitdealflow/mcp-signal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.