Home / MCP registry index / ai.funkel/funkel
Funkel AI
ai.funkel/funkel in the official MCP registry.
Endpoint https://api.funkel.ai/mcp.
The registry describes it as: Run LinkedIn and email outreach: find leads, manage campaigns, and reply to prospects.
We read its 51 tools on 2026-10-21 and our rules matched something worth a look. We show the rule and where it fired, not the flagged text, because that text may be written to instruct an agent. Read the server's tool descriptions yourself before you connect it.
pi.instruction_overridemedium | Contains instruction-override phrasing targeting the reading agent tool list_preferences, line 5 |
A rule matching is a signal, not a verdict on the people who run the server. If you run it and think this is wrong, write to contact@lazaretto.dev and we will look.
Tools it advertises
list_apps get_product_context list_lists get_list list_list_contacts get_schedule get_scheduled_action list_reminders list_insights get_insight list_operator_tasks get_operator_task get_access create_note create_reminder save_preference rename_list control_operator_task list_agents get_agent_sources set_agent_source_listening configure_agent_source list_campaigns get_campaign update_campaign_settings get_daily_priorities get_sender_health get_analytics find_leads get_lead get_conversation_context get_inbox_queue list_operator_files prepare_conversation_reply send_conversation_reply get_reply_attempt list_preferences search_external_leads import_search_leads_to_list create_campaign_draft update_campaign_workflow enable_campaign draft_message create_list draft_icp_edit pause_campaign enable_agent pause_agent approve_leads update_icp create_agent
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/ai-funkel-funkel)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.