
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@mambalabsdev/mcp-contact-classifier
Advanced tools
MCP server for the Mamba Labs Contact Classifier actor on Apify. Contact title in, department and seniority out, with an optional check on whether the person still holds the role.
MCP server for the Mamba Labs Contact Classifier actor on Apify.
Give it a job title and it returns the department and the seniority level. Give it a name and a company domain too, and it also checks whether that person is still listed on their employer's own website. The classification is a deterministic rule table, so it needs no API key and returns the same answer for the same title every time.
npx -y @mambalabsdev/mcp-contact-classifier
{
"mcpServers": {
"mamba-contact-classifier": {
"command": "npx",
"args": ["-y", "@mambalabsdev/mcp-contact-classifier"],
"env": { "APIFY_TOKEN": "your-apify-token" }
}
}
}
Get an Apify token at console.apify.com/account/integrations.
classify_contactOne contact in, one classified row out. Only the job title is required.
| Input | Type | Required | Notes |
|---|---|---|---|
job_title | string | yes | The contact's job title, exactly as you hold it. Classified by deterministic rules with no API key needed. |
full_name | string | no | Only needed for position verification. Classification works without it. This name is never sent to any language model. |
company_domain | string | no | Only needed for position verification. The company's website domain, with or without https. |
verify_position | boolean | no | Check whether the person is still listed on their employer's own website. Adds roughly 3 seconds and 9 requests per contact, and needs both the name and the domain. Default false. |
use_llm_fallback | boolean | no | Sends titles the rules cannot place to your own model, using the LLM_API_KEY secret environment variable on your own copy of the actor. Only the title is sent, never the person's name. Default false. |
llm_provider | enum | no | openai, anthropic or google. Which provider your LLM_API_KEY belongs to. Only read when the LLM fallback is on. Default openai. |
llm_model | string | no | Model id passed straight through to the provider. Only read when the LLM fallback is on. Default gpt-4o-mini. |
skipCache | enum | no | Set to true to ignore cached results and classify from scratch. Default false. |
21 flat snake_case fields, one row per contact. department is one of 12, seniority one of 12, and seniority_rank is 1 to 12 so a decision maker filter is a comparison rather than a list of strings. classification_rule names the rule that fired, which is what makes the decision auditable.
With no LLM_API_KEY set, titles the rules cannot place come back null. The row is still returned.
You are charged per contact classified, plus a small actor start fee. The deterministic classification calls no model and no third party API.
Pricing is on the actor's Apify page. Running this server consumes Apify credits.
It is a thin client for the Apify actor. It passes your input through and returns the actor's output unchanged. Every behavior described above lives in the actor, not here.
This actor does not discover people. The name and title come from you. It classifies a title and, optionally, checks a name against a page the employer published. To find people in the first place, use People Finder.
Errors are surfaced, never swallowed. An invalid input, an invalid token, an exhausted balance, a timeout, or a run that returns anything other than a dataset all come back as an explicit tool error rather than as an empty result.
The actor is on the Apify Store. This wrapper is MIT licensed.
Built by Mamba Labs
FAQs
MCP server for the Mamba Labs Contact Classifier actor on Apify. Contact title in, department and seniority out, with an optional check on whether the person still holds the role.
The npm package @mambalabsdev/mcp-contact-classifier receives a total of 29 weekly downloads. As such, @mambalabsdev/mcp-contact-classifier popularity was classified as not popular.
We found that @mambalabsdev/mcp-contact-classifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.