GrowSurf MCP

Before you use GrowSurf MCP

100/100
Last tested 2026-11-08 (Fresh: tested within 30 days) Working (tool call tested 2026-11-08) No key needed for the tools we called

No advisories in range for tested 0.19.30 (checked 2026-11-09)

Security review: not tested

Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology

  • Install20/20
  • Handshake30/30
  • Maintenance25/25
  • Docs15/15
  • License10/10

Tested npm @growsurfteam/growsurf-mcp 0.19.30 (MIT; repo growsurf/growsurf-mcp, 0 GitHub stars when tested). Initialize and tools/list over stdio succeeded with no credentials and listed 66 tools (guidance plus campaign/participant/analytics wrappers). Real calls (no LLM, no API key): growsurf_program_design_advisor (empty args) returned documentation-based program-design advice and pointed at the hosted MCP for program-data insights; growsurf_integration_guide returned the happy-path integration Markdown; growsurf_client_snippets returned client-side JavaScript examples. Account/API tools were not called. Hosted remotes (not separately listed): https://growsurf.com/.well-known/mcp completed initialize anonymously and listed 1 tool (growsurf_program_design_advisor); https://mcp.growsurf.com and https://mcp.growsurf.com/mcp returned HTTP 401 with a proper OAuth challenge (WWW-Authenticate resource_metadata https://mcp.growsurf.com/.well-known/oauth-protected-resource; metadata authorization_servers https://mcp.growsurf.com). We did not sign in or set a GrowSurf API key. Vendor MCP docs at docs.growsurf.com/build-with-ai returned HTTP 401 from this tester environment, so we could not verify a vendor-site link to the npm package and did not record official_check. Already listed on Glama (not tagged New / early find).
Tool-call test (2026-11-08, direct MCP stdio client, no LLM): pass. 3 of 3 read-only guidance calls passed. No API key. Account/campaign mutation tools not called. Evidence: local test run, Nov 8, 2026.

Transport (tested 2026-11-08): stdio

Tested version: 0.19.30 · tested 2026-11-08

Token cost (estimate): approx. 24272 tokens, cl100k estimate (66 tools, measured 2026-11-11, version 0.19.30). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.

Permissions: 31 read, 35 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown

Auth: none. Rate limit: unknown. Pricing unit: unknown.

  • growsurf_add_participant — write (state-changing)
  • growsurf_agent_program_creation_eval — read
  • growsurf_api_library_snippets — read
  • growsurf_bulk_delete_participants — write (state-changing)
  • growsurf_cancel_delayed_referral — write (state-changing)
  • growsurf_capture_referral_flow_screenshots — write (state-changing)
  • growsurf_client_snippets — read
  • growsurf_clone_campaign — write (state-changing)
  • growsurf_create_campaign — write (state-changing)
  • growsurf_create_campaign_reward — write (state-changing)
  • growsurf_create_campaign_webhook — write (state-changing)
  • growsurf_create_mobile_participant_token — write (state-changing)
  • growsurf_create_program_resource — write (state-changing)
  • growsurf_delete_campaign_reward — write (state-changing)
  • growsurf_delete_campaign_webhook — write (state-changing)
  • growsurf_delete_program_resource — write (state-changing)
  • growsurf_email_participant — write (state-changing)
  • growsurf_embeddable_element_snippet — read
  • growsurf_get_campaign — read
  • growsurf_get_campaign_activation_analytics — read
  • growsurf_get_campaign_analytics — read
  • growsurf_get_campaign_custom_domain — read
  • growsurf_get_campaign_design — read
  • growsurf_get_campaign_emails — read
  • growsurf_get_campaign_installation — read
  • growsurf_get_campaign_options — read
  • growsurf_get_integration_connect_link — read
  • growsurf_get_participant — read
  • growsurf_get_participant_activity_logs — read
  • growsurf_get_participant_analytics — read
  • growsurf_get_participant_payout_destination — read
  • growsurf_get_team — read
  • growsurf_grsf_config_snippet — read
  • growsurf_integration_guide — read
  • growsurf_list_campaign_rewards — read
  • growsurf_list_campaign_webhooks — read
  • growsurf_list_campaigns — read
  • growsurf_list_integrations — read
  • growsurf_list_participants — read
  • growsurf_list_program_resources — read
  • growsurf_mobile_sdk_guide — read
  • growsurf_participant_auth_hash — read
  • growsurf_prepare_program_resource_file — write (state-changing)
  • growsurf_program_design_advisor — read
  • growsurf_record_sale — write (state-changing)
  • growsurf_refund_transaction — write (state-changing)
  • growsurf_remove_campaign_custom_domain — write (state-changing)
  • growsurf_request_participant_payout_destination_confirmation — write (state-changing)
  • growsurf_request_team_verification — write (state-changing)
  • growsurf_resend_team_owner_verification_email — write (state-changing)
  • growsurf_set_campaign_custom_domain — write (state-changing)
  • growsurf_test_campaign_webhook — write (state-changing)
  • growsurf_trigger_referral — write (state-changing)
  • growsurf_troubleshoot_referral_tracking — read
  • growsurf_update_campaign — write (state-changing)
  • growsurf_update_campaign_design — write (state-changing)
  • growsurf_update_campaign_emails — write (state-changing)
  • growsurf_update_campaign_installation — write (state-changing)
  • growsurf_update_campaign_options — write (state-changing)
  • growsurf_update_campaign_reward — write (state-changing)
  • growsurf_update_campaign_webhook — write (state-changing)
  • growsurf_update_participant — write (state-changing)
  • growsurf_update_program_resource — write (state-changing)
  • growsurf_update_team — write (state-changing)
  • growsurf_verify_campaign_custom_domain — write (state-changing)
  • growsurf_webhook_normalize — read

handshake and tools listed without a recorded key or OAuth

Score 100/100 · Tools 66 · Token cost approx. 24,272 tokens · Compare · Last tested 2026-11-08 · Version tested 0.19.30 · Package @growsurfteam/growsurf-mcp · Repo growsurf/growsurf-mcp

Summary: GrowSurf MCP completed an MCP handshake without credentials and exposed 66 tools.

Evidence summary

Handshake
pass
Tools listed
66
Context cost
approx. 24272 tokens, cl100k estimate (66 tools, measured 2026-11-11, version 0.19.30; an estimate) ranking · add up your servers' context cost
API key
No key needed for the tools we called
Tested
2026-11-08

Test results

TestResultPointsEvidence
installpass20npm install @growsurfteam/growsurf-mcp (Node 20, Linux) succeeded in 1s.
handshakepass30MCP initialize + tools/list over stdio succeeded with no credentials; 66 tools listed in 0.1s.
maintenancepass25Repo pushed 0 days before test; 0 GitHub stars.
docspass15README over 3,000 chars; install instructions present; mcpServers config example present. Check of the package's own README (README shipped in npm package).
licensepass10MIT (OSI-approved).

Local-model readiness

Token cost (estimate): approx. 24272 tokens, cl100k estimate for 66 tools · about 296% of an 8k context. This is an estimate from our testing (counted with cl100k_base).

Small-model friendly (schema heuristic, not a model result): unknown.

Not tested

Small-model task runs: Not yet tested.

What we tested and what we didn't

Tested on 2026-11-08

  • Install from the registry
  • We connected with no credentials and asked for its tool list: it listed 66 tools (Method details: MCP initialize then tools/list)
  • Maintenance signals (last push, archived/deprecated status)
  • Docs (README length, install and config example)
  • License (OSI-approved or not)
  • Token cost (estimate)

Not tested

  • Security: not audited (no code review, no permission or data-flow analysis)
  • Real tasks (no functional task runs yet)
  • Behaviour with real credentials or a real account
  • Performance, rate limits or load
  • Correctness of results beyond the listed tasks

Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.

Known security issues

Checked on 2026-11-09 for version 0.19.30 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.

No published advisories found in OSV and GitHub advisories for @growsurfteam/growsurf-mcp 0.19.30 as of 2026-11-09. This is not a security audit.

Monthly roundup: MCP security issues, October 2026.

Tool list changes

Unchanged since the previous snapshot (latest 2026-11-11).

Snapshot hash (fingerprint of the tool list)

62c0d43abcbc: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.

Feeds: RSS · JSON.

Raw test record (JSON)
{
  "name": "@growsurfteam/growsurf-mcp",
  "version": "0.19.30",
  "registry": "npm",
  "status": "working",
  "tested": "2026-11-08",
  "tools_count": 66,
  "deprecated": false,
  "archived": false,
  "tests": {
    "install": [
      "pass",
      20,
      "`npm install @growsurfteam/growsurf-mcp` (Node 20, Linux) succeeded in 1s."
    ],
    "handshake": [
      "pass",
      30,
      "MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 66 tools listed in 0.1s."
    ],
    "maintenance": [
      "pass",
      25,
      "Repo pushed 0 days before test; 0 GitHub stars."
    ],
    "docs": [
      "pass",
      15,
      "README over 3,000 chars; install instructions present; `mcpServers` config example present. Check of the package's own README (README shipped in npm package)."
    ],
    "license": [
      "pass",
      10,
      "MIT (OSI-approved)."
    ]
  }
}

Install

npx -y @growsurfteam/growsurf-mcp

Pin the version we tested

npx -y @growsurfteam/growsurf-mcp@0.19.30

tested 2026-11-08. Newer versions may differ and were not tested by us.

{
  "mcpServers": {
    "growsurf-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@growsurfteam/growsurf-mcp@0.19.30"
      ]
    }
  }
}

Tools listed

growsurf_add_participant, growsurf_agent_program_creation_eval, growsurf_api_library_snippets, growsurf_bulk_delete_participants, growsurf_cancel_delayed_referral, growsurf_capture_referral_flow_screenshots, growsurf_client_snippets, growsurf_clone_campaign, growsurf_create_campaign, growsurf_create_campaign_reward, growsurf_create_campaign_webhook, growsurf_create_mobile_participant_token, growsurf_create_program_resource, growsurf_delete_campaign_reward, growsurf_delete_campaign_webhook, growsurf_delete_program_resource, growsurf_email_participant, growsurf_embeddable_element_snippet, growsurf_get_campaign, growsurf_get_campaign_activation_analytics, growsurf_get_campaign_analytics, growsurf_get_campaign_custom_domain, growsurf_get_campaign_design, growsurf_get_campaign_emails, growsurf_get_campaign_installation, growsurf_get_campaign_options, growsurf_get_integration_connect_link, growsurf_get_participant, growsurf_get_participant_activity_logs, growsurf_get_participant_analytics, growsurf_get_participant_payout_destination, growsurf_get_team, growsurf_grsf_config_snippet, growsurf_integration_guide, growsurf_list_campaign_rewards, growsurf_list_campaign_webhooks, growsurf_list_campaigns, growsurf_list_integrations, growsurf_list_participants, growsurf_list_program_resources

Tool history: captured Nov 11, 2026. All tool history.

Quick config

{
  "mcpServers": {
    "growsurf-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@growsurfteam/growsurf-mcp"
      ]
    }
  }
}

Add to config Opens the config generator with this server selected.

Setup

  1. Install. Run npm install @growsurfteam/growsurf-mcp (Node 20). This is the exact command we ran on 2026-11-08.
  2. Configure. Add the mcpServers entry below to your MCP client config.
  3. Verify. Restart the client and check that tools/list returns tools (66 in our test).
{
  "mcpServers": {
    "growsurf-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@growsurfteam/growsurf-mcp"
      ]
    }
  }
}

Test history

Follow this server (RSS) · Monthly changelog

FAQ

Is GrowSurf MCP deprecated?

No. @growsurfteam/growsurf-mcp was not deprecated or archived when we last tested it on 2026-11-08.

What replaces GrowSurf MCP?

Nothing; GrowSurf MCP is not deprecated as of 2026-11-08.

Does GrowSurf MCP need an API key?

No. It completed an MCP handshake with no credentials and listed 66 tools.

Embed the badge

TestedMCP: 100/100, tested 2026-11-08

Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.

Claim this listing · Report an issue