Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Find parent companies, PE backers, corporate families, and portfolio siblings for any company.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
AuthorizationValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http spotlight https://spotlight-mcp.magellandata.io/mcp --header 'Authorization: your-value'Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"spotlight": {
"url": "https://spotlight-mcp.magellandata.io/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"spotlight": {
"type": "http",
"url": "https://spotlight-mcp.magellandata.io/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
Authorization secret required HTTP headerThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The publisher (magellandata.io) is not the repo owner (sorrek); someone else may have listed it
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 0 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: Authorization
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.0.0) reached the registry 3 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, Draugr
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Corporate ownership intelligence for AI agents. Connect Claude, Cursor, or any MCP-compatible client to Magellan Data's Spotlight platform and ask who owns whom — parent companies, PE backing, corporate families, and portfolio siblings — over lists of thousands of companies at a time.
Hosted server. No install. Connect with an API key, or via OAuth from hosted connectors like claude.ai.
https://spotlight-mcp.magellandata.io/mcp
That's an MCP endpoint, not a web page — paste it into your client's config, not your browser. Opening it directly returns an error, which is the correct behaviour for every hosted MCP server.
Once connected, these all work in plain language:
"Read
accounts.xlsxand tell me which of these companies are PE-backed, and by whom."
"We just closed Moosend. Find every other company owned by the same PE firm — those are
our warm expansion targets."
"Which of my 200 accounts are subsidiaries of a larger parent? Append the parent company
to the spreadsheet and save it."
"Map the full corporate family under Constant Contact's parent so I can see the sister
companies I'm not covering."
The agent handles the whole pipeline — submitting the batch, polling until the runs finish, checking the price, and joining results back to your original file by input_url.
1. Get an API key. Sign up at magellandata.io and generate a key from the Spotlight dashboard. Keys look like mgln_sk_live_…. Every key carries its own credit balance, and usage is billed to the key that made the call.
2. Connect your client.
Claude Code
claude mcp add --transport http magellan-data https://spotlight-mcp.magellandata.io/mcp \
--header "Authorization: Bearer mgln_sk_live_YOUR_KEY"
claude mcp list # expect: magellan-data ... ✓ Connected
</details>
Cursor
Add to ~/.cursor/mcp.json (or .cursor/mcp.json in a project):
{
"mcpServers": { "magellan-data": { "url": "https://spotlight-mcp.magellandata.io/mcp", "headers": { "Authorization": "Bearer mgln_sk_live_YOUR_KEY" } } } }
</details>
VS Code
Add to .vscode/mcp.json — this prompts for the key rather than storing it in the file:
{
"inputs": [ { "type": "promptString", "id": "magellanKey", "description": "Magellan Data API key (mgln_sk_live_...)", "password": true } ], "servers": { "magellan-data": { "type": "http", "url": "https://spotlight-mcp.magellandata.io/mcp", "headers": { "Authorization": "Bearer ${input:magellanKey}" } } } }
</details>
Any other MCP client
The server speaks Streamable HTTP and is stateless. Point any compliant client at https://spotlight-mcp.magellandata.io/mcp with an Authorization: Bearer header.
3. Verify. Ask your agent: *"Check my Magellan Data credit balance."* If it comes back with a number, you're connected. That call is free.
Two methods are supported; use whichever fits how you're connecting.
API keys (mgln_sk_live_…) — for local and CLI clients like Claude Code, Cursor, or anything you configure by hand. Generate a key in the Spotlight dashboard and pass it as a Bearer token in the Authorization header, as shown in the quick start above. Usage is billed to the key that made the call.
OAuth 2.1 — for hosted connectors such as claude.ai and ChatGPT. There's nothing OAuth-specific to set up on your side: when you add the connector (from the directory, or as a custom connector where the platform holds the client credentials), you'll be sent to Spotlight to sign in and approve access — the usual "connect, sign in, allow" flow — and the client handles tokens from there. Usage is billed to the Spotlight account you approved with.
Either way, every request is authenticated and attributed to one Spotlight account — the two methods differ only in how the credential reaches the server.
| Output type | Answers | Cost |
|---|---|---|
parent_companies | Is this company a subsidiary, and of whom? | 70 credits per URL where a parent is found — no match, no charge |
pe_ownership | Is it PE-backed, by which firm, and what deal type? | 70 credits per URL found to be PE-backed — no match, no charge |
corporate_families | Every subsidiary and sister company under a shared parent | 20 credits per record returned (min. 1 per URL) |
pe_portfolios | Every company held by the same PE firm | 20 credits per record returned (min. 1 per URL) |
For parent_companies and pe_ownership you pay only for hits: a URL where nothing is discovered costs nothing, so 70 credits × your URL count is the *ceiling*, not the bill. The other two are priced per output record. Either way the exact price is known once a run completes — the agent reads it off the run and tells you before downloading.
This is the part worth understanding, because it's what keeps an autonomous agent from quietly burning your balance:
download_run. Nothing before it costs anything.price field, and the server instructs connected clients to state that number and wait for you before downloading.If you'd rather not think about it: everything up to and including "how much will this cost" is free, and the agent will ask.
| Tool | Charges credits? | What it does |
|---|---|---|
check_credits | No | Your available balance. Doubles as a connection check. |
submit_batch | No | Create a batch from 1–5,000 company URLs. Returns a batch_id. |
process_batch | No | Start async runs — one per output type. Returns immediately. |
list_runs | No | Every run for a batch: status, price, purchase state. |
get_run_status | No | One run's status and price. Poll this until completed. |
download_run | Yes | Buys the results. Returns a short download link plus a preview. |
The flow is always submit → process → poll → download. Results come back as a short download link (https://api.magellandata.io/dl/…, valid for 1 hour) rather than inline, so a 2-million-row result set never touches your agent's context window. The link needs no auth header — hand it straight to curl, pandas.read_csv, or a browser. In hosted chat environments without general internet access (like the claude.ai connector), the assistant presents it as a clickable link for you to open rather than fetching it itself.
There's also a `magellan_playbook` prompt — a GTM strategy guide covering expansion- target ranking, deal_type interpretation, and MSA-timing triggers. In Claude Code it shows up as a slash command under the magellan-data server.
examples/quickstart.py runs the full pipeline against the REST API directly — useful for understanding what the agent is doing under the hood, or for wiring Magellan Data into a non-agentic pipeline.
export MAGELLAN_API_KEY=mgln_sk_live_YOUR_KEY
python examples/quickstart.py --urls moosend.com constantcontact.com --type pe_ownership
examples/accounts.csv and accounts.xlsx are a 12-row fixture you can point an agent at without supplying your own data. The companies span independents, acquired subsidiaries, and PE-backed businesses, so each output type returns something. Enriching all twelve costs at most 840 credits per match-based output type (only the companies where something is found are charged) — cheap enough to validate the pipeline for real.
It stops and asks before the download step, so you can run it end to end without spending credits until you mean to.
examples/PROMPTS.md has a walkthrough of agent prompts in increasing order of ambition, with the expected cost of each noted up front.
The skills/ directory holds task-focused playbooks that turn raw tool output into a finished deliverable — a ranked target list, a coverage map, an enriched spreadsheet — instead of JSON. Clients that support skills can load them from this repo; clients that don't can still be pointed at the markdown directly.
| Skill | Produces |
|---|---|
account-expansion | Ranked warm-intro targets from a closed-won account's ownership graph |
pe-portfolio-map | Coverage map of a PE firm's portfolio against your existing accounts |
ownership-enrichment | Your account list, enriched in place with parent and PE-backing columns |
.mcp.json MCP registration (Claude Code, Codex)
mcp.json MCP registration (Cursor) .vscode/mcp.json MCP registration (VS Code, prompts for key) .claude-plugin/ plugin.json Claude plugin metadata marketplace.json Claude marketplace metadata server.json Official MCP Registry metadata skills/*/SKILL.md Task playbooks examples/ quickstart.py Full pipeline against the REST API PROMPTS.md Agent prompt walkthrough accounts.csv 12-row test fixture accounts.xlsx Same fixture, spreadsheet form assets/ logo.png Wordmark, navy (for light backgrounds) logo-light.png Wordmark, white (for dark backgrounds) social-preview.png 1280x640 social card — upload under Settings > Social preview social-preview-light.png Light-background alternate
To use the manifests locally:
git clone https://github.com/sorrek/mcp.git
Then point your client at the repo root or the specific manifest path.
The endpoint URL shows an error in my browser. Expected. /mcp speaks JSON-RPC over POST; the transport spec reserves GET on that path for opening an event stream, so a server like this one that doesn't offer streams answers with
call check_credits — that's free and exercises the whole auth path.
My client connects but lists no tools. Almost always an auth problem rather than a transport one. Confirm the header is Authorization: Bearer mgln_sk_live_... with the Bearer prefix, and that the key is active in the Spotlight dashboard.
A download link says it has expired (HTTP 410). Download links last an hour. Call download_run again for a fresh one — re-downloads are free.
A run has been `processing` for a long time. Large batches take minutes, not seconds. Poll every 10–30 seconds rather than in a tight loop. If a run sits past 20 minutes, open an issue with the run_id.
Only the beginning is shown; read the rest in the repo