KingMinos MCP server

KingMinos by OutboundSync — MCP

Streamable HTTP MCP server that wraps the live KingMinos enrichment API at https://api.kingminos.com. One tool per bearer-authenticated resource route. Session and cookie routes under /v1/auth/ and /v1/account/ are permanently out of scope. This is not the OutboundSync product MCP and does not expose OutboundSync account, source, or sync tools.

LeadMagic, Wiza, Findymail, and AI Ark are the approved house-key vendors. ZoomInfo, BuiltWith, Prospeo, Apollo, Company URL Finder, People Data Labs, HG Insights, Brandfetch, Enrich-CRM, Lemlist, and Snov.io are BYOK via put_credentials. Websearch is house-only and cannot be stored. Snov.io is OAuth (clientId/clientSecret) and is a credential vendor only. Cognism, Lusha, Starbridge, Clay, Databar, QuickEnrich, GetLeads, and BlitzAPI are API-key credential vendors only — no routing hop yet. The server never embeds vendor keys and never logs the tenant Bearer or credential bodies.

Say SFDC, never SF.

BYOK provider rollout: four-repo checklist and narrative live in docs/byok-provider-playbook.md; Cursor agents can load .cursor/skills/byok-provider-rollout/SKILL.md.

Production host

Admin tools (admin token only)

abusereport, partnerreport, partnerpayout, feedbackreport and partneradmin wrap /v1/admin/abuse/daily, /v1/admin/partners/analytics, /v1/admin/partners/payouts, /v1/admin/feedback and /v1/admin/partners (list, create partner + code, add/deactivate code). They are registered only when the MCP bearer is a KingMinos admin token (kmadm…, hashed in the API's D1, minted by Harris with scripts/mint-admin-token.ts in kingminos-application). Any other bearer never sees them in tools/list; an admin bearer sees only these admin tools. The API re-checks the token on every call. They are not OpenAPI resource operations, so check:surfaces ignores them.

Production is Cloudflare Worker kingminos-mcp-prod on the existing OutboundSync Cloudflare account. Janus deploys it with Wrangler:

npx wrangler deploy

Production MCP URL: https://mcp.kingminos.com/mcp. The custom domain mcp.kingminos.com is attached in Cloudflare and tracked in wrangler.jsonc (routes with customdomain: true) so Janus deploys keep the hostname. workersdev is false, so the Worker is not published on *.workers.dev (custom domain only).

This Worker must not bind D1 outboundsync-router, R2 outboundsync-router-raw, or Worker outboundsync-router. API base stays https://api.kingminos.com.

Fly is not the production host. fly.example.toml / Dockerfile are a local Node fallback sample only — not a production config.

Run it locally

Requires Node 22.

npm install
npm run build
npm start

The process listens on HOST (default 127.0.0.1) and PORT (default 8080) and serves the same paths as the Worker.

Dev (tsx, no build):

npm run dev

Contract check against the vendored inventory (inventory/openapi-surfaces.json). Deterministic; no live network. Default PR CI uses this pin — it does not fetch production OpenAPI.

npm run check:surfaces
npm run check:providers

Shortened. The full README is on GitHub.