Tomba MCP server for AI agents

Live

API KEY

EMAIL FINDING

CRM & Sales

Tomba gives your agent email finding for prospecting: list a company's email addresses, find one person's email from a name or LinkedIn profile, verify addresses, find phone numbers, and search companies.

  • Per-user credentials: each call uses the actual user's API key, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
Tomba
agent · Acme Q3
Run
List the email addresses Tomba has for northwind.io.
S
tomba_domain_search
108ms
Prospecting agent
Tomba has 34 addresses for northwind.io. 12 are in sales and marketing, and 20 are verified.
Sources: Tomba domain search
tomba
34 emails
18:29
Message Claude...

Tools your prospecting agent reaches for on Tomba, scoped per user.

CALL ANY TOOL
29 tools for email finding in Tomba: search a domain's addresses, find emails from names, LinkedIn profiles, or article URLs, verify emails and phones, enrich people and companies, and search companies.
tomba_domain_search
Search domain
List the email addresses Tomba has for a company, with each person's name, job title, department and verification status. Returns data.organization (the company profile) and data.emails (one page of addresses), with paging in meta. Use tomba_domain_search to discover people at a company. Use tomba_find_email when you know the person's name, and tomba_get_email_count to size a domain before paging through it. Send domain or company. tomba_suggest_domains turns a company name into a domain.
Parameters
Name
Type
Required
Description
company
string
Optional
Company name, 3 to 75 characters, used instead of domain. When Tomba knows the company, its domain is searched even if domain is also sent; an unknown company fails with 422 unless domain is also sent. Example: Stripe.
country
string
Optional
Two-letter ISO 3166-1 country code to return only people in that country. tomba_get_email_locations lists the countries that have addresses. Example: US.
department
string
Optional
Comma-separated departments to keep, such as engineering,sales. Values: accounting, administrative, communication, diversity, education, engineering, executive, facilities, finance, healthcare, hr, it, legal, management, marketing, operations, pr, sales, security, software, support, warehouse. Unknown values are ignored.
domain
string
Optional
Company domain to search. Send domain or company. Example: stripe.com.
enrich_mobile
boolean
Optional
Set to true to also return the person's phone numbers in phone_data. Phone numbers cost extra Tomba credits. Default false. Default: `false`.
limit
integer
Optional
Addresses per page. One of 1, 5, 10, 20, 50, 100, 150, 200, 250, 300, 350, 400, 450, 500 or 5000. The credit cost depends on limit, not on how many addresses come back. Free plans allow at most 10. Default 10. One of: `1`, `5`, `10`, `20`, `50`, `100`, `150`, `200`, `250`, `300`, `350`, `400`, `450`, `500`, `5000`. Default: `10`.
page
integer
Optional
Page number, starting at 1. Default 1. Default: `1`.
type
string
Optional
Which addresses to return: all, personal (addresses that belong to one person) or generic (role addresses such as support@). Default all. One of: `all`, `personal`, `generic`. Default: `all`.
tomba_enrich_email
Enrich email
tomba_find_author_email
Find author email
tomba_find_email
Find email
tomba_find_email_by_linkedin
Find email by linkedin
tomba_find_phone
Find phone
tomba_find_similar_domains
Find similar domains
tomba_get_combined_profile
Get combined profile
tomba_get_company
Get company
tomba_get_domain_status
Get domain status
tomba_get_email_count
Count get email
tomba_get_email_format
Get email format
tomba_get_email_locations
Get email locations
tomba_get_email_sources
Get email sources
tomba_get_lead
Get lead
tomba_get_lead_list
List get lead
tomba_get_log
Log get
tomba_get_person
Get person
tomba_get_rate_limits
Get rate limits
tomba_get_technologies
Get technologies
tomba_get_usage
Get usage
tomba_list_lead_attributes
List lead attributes
tomba_list_lead_lists
List lead lists
tomba_list_leads
List leads
tomba_list_logs
List logs
tomba_search_companies
Search companies
tomba_suggest_domains
Suggest domains
tomba_validate_phone
Validate phone
tomba_verify_email
Verify email
Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Tomba tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["tomba"], toolNames: [
    "tomba_domain_search",
    "tomba_find_email",
    "tomba_verify_email"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Find and verify the email of Ana Silva at contoso.com" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["tomba"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Find and verify the email of Ana Silva at contoso.com" }],
  tools,
});

// Execute the tool call with the user's vaulted Tomba API key
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["tomba"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Find and verify the email of Ana Silva at contoso.com" }],
  tools,
});

// Tool call runs with the user's vaulted Tomba API key
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["tomba"] }, pageSize: 100,
});

const agent = new Agent({
  name: "prospecting_agent",
  model: "gemini-2.5-pro",
  instruction: "Tomba tools scoped to this user",
  tools,
});

await agent.run("Find and verify the email of Ana Silva at contoso.com");
Try these prompts
Copy any prompt into your agent. Each maps directly to a Tomba tool. Click to copy, paste into your agent, done.
Find emails
Copy the prompt
Copied
List the email addresses Tomba has for northwind.io.
Copy the prompt
Copied
Find the email of Ana Silva at contoso.com.
Copy the prompt
Copied
Find the email behind this LinkedIn profile.
Verify and enrich
Copy the prompt
Copied
Verify whether jordan@fabrikam.com can receive mail.
Copy the prompt
Copied
Get the person and company behind sam@northwind.io.
Copy the prompt
Copied
Find phone numbers for contoso.com.
Companies and usage
Copy the prompt
Copied
Search for cybersecurity companies in Spain with 50 to 200 employees.
Copy the prompt
Copied
List companies similar to northwind.io.
Copy the prompt
Copied
How many credits did I use this week?
SEE HOW AUTH WORKS
Each user connects their own Tomba API key once, and Scalekit sends it with every call. Keys stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
Tomba
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Tomba
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Tomba
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Tomba
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other sales and marketing connectors.
GTM and RevOps Teams
Outbound prospecting agent
Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.
GTM and RevOps Teams
CRM AI agent
Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.
Test other agents
See the same per-user auth pattern across other sales and marketing connectors.
SALES
Outbound prospecting agent
Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.
GTM
CRM AI agent
Turn each Granola call transcript into a HubSpot record update, a drafted Gmail follow-up, and a Slack recap.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared Tomba API key looks fine in a demo. In production every email lookup looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared key
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Tomba today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Tomba as the user or through a shared API key?
As the user. Each user connects their own Tomba API key once, and Scalekit sends it with every call. Audit logs attribute every lookup and verification to that user, not a shared service account.
Where is the Tomba API key stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new API key. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in Tomba?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example the finder and verifier tools without the usage and log tools. Tomba has no delete tools, and its lead tools only read saved leads and lists. Scalekit also enforces scope checks before every API call.
What happens when a user revokes Tomba access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Can the agent check a domain's email format with Tomba?
Yes. tomba_get_email_format returns the formats a domain's addresses follow, such as {first}.{last}, and tomba_get_email_count counts the addresses by type, department, and seniority before the agent pages through tomba_domain_search.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""tomba"": {
""url"": ""https://mcp.scalekit.com/tomba"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.tomba]
url = ""https://mcp.scalekit.com/tomba""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""tomba"": {
""url"": ""https://mcp.scalekit.com/tomba"",
""type"": ""http""
}
}
}