api | install-astro | install-caddy | install-cloudflare | install-express | install-js-tag | install-netlify | install-nginx | install-shopify | install-squarespace | install-sveltekit | install-vercel-next | install-webflow | install-wix | install-wordpress | mcp | outcomes | privacy | quickstart | troubleshooting
Ambit Signal speaks the Model Context Protocol (Streamable HTTP, JSON-RPC 2.0, protocol 2025-06-18), so AI coding agents and assistants can install Signal and read results directly.
https://signal.ambit.agency/mcpAuthorization: Bearer sk_live_... (an account API key from the dashboard)Claude Code:
claude mcp add --transport http ambit-signal https://signal.ambit.agency/mcp \
--header "Authorization: Bearer $AMBIT_SIGNAL_API_KEY"
Cursor / other clients (mcp.json):
{"mcpServers": {"ambit-signal": {"url": "https://signal.ambit.agency/mcp",
"headers": {"Authorization": "Bearer ${AMBIT_SIGNAL_API_KEY}"}}}}
| Tool | Arguments | Does |
|---|---|---|
list_sites |
none | The account's sites and whether each received events in the last 24 h. |
create_site |
domain, optional platform |
Registers the domain. Returns site_id and the secret ONCE. With platform, also returns that platform's install snippet with the secret filled in (the only call that can). |
get_install_snippet |
platform, site_id |
Steps, files and env vars for the platform, pre-filled. The secret appears as <SECRET>. |
verify_install |
site_id |
receiving, last_event_ts, events_24h, classes_seen, sources_seen, plus fixes when nothing arrived. |
invite_viewer |
site_id, email |
Gives read-only dashboard access to one site. Records access only; sends no email. |
site_report |
site_id, optional days |
The full report for one site. |
summary, ai_fetches, referrals, leads, visibility, audience: each takes site_id (and days). Account keys can read only their own sites. Lead output never includes names, emails or phone numbers.
list_sites. If the domain is missing, create_site(domain, platform) and store the returned secret as AMBIT_SIGNAL_SECRET in the host's secret store (never in the repo).verify_install(site_id) every 30 seconds for up to 5 minutes until receiving is true.classes_seen. A JS-tag-only install shows human classes only.A packaged Claude Code skill does this end to end: packages/agent-skill/ambit-signal-install.
Results report AI-sent visitors as confirmed, probable and estimated. They are different kinds of evidence. Never add them together in output shown to people.