Back to MCP servers

Cromanion

https://server.smithery.ai/cromanion/cromanion/mcp
● healthy

**You can start right now, alone.** No API key to fetch, no human to wake, no consent screen in a browser. The first call — `cromanion_open_claim` — takes no credential and creates nothing: no account, no key, no charge. It hands you a challenge to publish on the site you manage, and that proof is what mints your key. Your human only has to appear if they later want a paid plan, and you can never spend their money. ## What it does once it is running Cromanion is a conversion agent that runs itself. The site pastes one tag; an AI that has read the site watches every session live, predicts the visitor's next move, and intervenes at the right moment to push toward conversion. Then it is **your** job, not a dashboard theirs to babysit. You rule on what may be rewritten, define what counts as a conversion, set what the agent may say, seed the crawl, and take the site live — as far as your human allowed, which `cromanion_grants` tells you *before* you try rather than after you fail. ## What you get to report back `cromanion_impact` returns lift measured against a **permanent 10% holdout**. What you tell your human is causal, not a correlation you would have to hedge — and it is written back into the tools they already use (GA4, Plausible) rather than into one more screen. Cromanion states no fact it cannot trace to their own pages or their own words. You will not be the reason it told a visitor something untrue. ## Why there is no API key We cannot take your word for an email address. Anybody can type any address, and if that were enough, an agent could be handed a live key inside a stranger's account. So we ask for the one thing you can prove and a stranger cannot: **that you control the site.** Publish any one of three, whichever your hosting lets you write: | Method | Where | | --- | --- | | `well_known` | `/.well-known/cromanion-challenge.txt`, containing the challenge | | `meta_tag` | `<meta name="cromanion-site-verification" content="…">` in the page `<head>` | | `dns_txt` | a TXT record on the apex reading `cromanion-site-verification=…` | The claim is redeemable for 24 hours, and opening one commits your human to nothing. ## Two things you cannot do **You cannot pay.** `cromanion_upgrade_link` returns a Stripe link and nothing else — your human opens it and enters their own card. Everything else works on the free plan meanwhile. **You cannot switch the site from `learn` to `act` on your own initiative.** A new site watches real sessions and shows visitors nothing; letting an AI speak to visitors in your human's name is their decision. They can delegate it to you explicitly, and then you may. ## The order to call things in 1. `cromanion_open_claim` — keep the secret; it is shown once and authenticates every later call in the `Authorization` header, never in a tool argument. 2. Publish one of the three proofs it lists. Each comes back with the exact URL and the exact string. 3. `cromanion_verify_claim` — creates the account and the site, returns the tracking snippet. Safe to retry: a repeat gives you the same account, never a second one. 4. Install the returned snippet before `</body>` on every page. 5. `cromanion_site_status` — poll until `install.verified` is true. That is not "we gave you a snippet"; it means a beacon reached us from your human's own domain. If it stays false, `cromanion_install_check` tells you *why* — a CSP blocking the script, a consent manager holding it, the tag on some pages and not others, or beacons arriving from a host the site was not claimed under. Each with the fix. Then read `cromanion_grants` for what you may do, `cromanion_config` for what is already in force, and `cromanion_pending` for what is waiting on a decision. Read `cromanion_errors` once and you will never have to guess whether a refusal is worth retrying. Full reference: [cromanion.com/agents](https://cromanion.com/agents)

Transport
streamable-http
Auth
smithery_api_key
Cost
—
Protocol revision
2025-06-18
negotiated, not declared

MCP readiness

B · 84/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here C+, 70.0/100), which weighs availability, conformance, p95 speed and descriptor. How the two differ

Valid MCP handshake 10/10 initialize and tools/list both answered.
Live MCP endpoint 24/25 Endpoint answers the MCP initialize handshake (4125 ms); slow response -1.
Protocol revision 6/10 Speaks MCP 2025-06-18, 2 revision(s) behind 2026-07-28.
Signed descriptor n/a No MCP standard defines a signed server descriptor.
Uptime (30 days) 15/15 30/30 probes succeeded over 30 days (100%).
Tool declaration 10/10 Lists 29 tool(s) with descriptions.
Verified identity 5/10 Publisher declared (repository, package or homepage); claim this listing to verify domain control.
Freshness + modern flags 4/5 seen in a source within 7 days.
Auth declaration 2/5 Declares credential scheme: smithery_api_key.
Applicable criteria total 90 points, scaled to 100.
Responsiveness: Slow (4125 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).
Measured 2026-11-11.
Nine criteria, the same as the A2A readiness score, read from our daily MCP probe (initialize + tools/list) and 30-day probe history. No MCP standard defines a signed server descriptor, so that criterion is n/a and the other 90 points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. Display only: search order uses the quality grade.

Compared with peers

Against 53,039 reachable MCP servers in our daily snapshot (2026-11-12 06:46 UTC). Display only; it does not change search order.

Readiness
Higher than 75% of peers
This listing 84 · peer median 81
Latency
Faster than 34% of peers
This listing 468 ms · peer median 326 ms

Where it loses the most points, and how to win them back

  • Verified identity −5 — Claim the listing and prove control of its domain.
    Now: Publisher declared (repository, package or homepage); claim this listing to verify domain control.
  • Protocol revision −4 — Support the current protocol revision.
    Now: Speaks MCP 2025-06-18, 2 revision(s) behind 2026-07-28.
  • Auth declaration −3 — State how to authenticate (an auth scheme, or that none is needed).
    Now: Declares credential scheme: smithery_api_key.

How many agent tools actually work · All statistics

Listed in

Directories this entry was found in.

How to connect

MCP endpoint (streamable-http)
https://server.smithery.ai/cromanion/cromanion/mcp
JSON-RPC initialize probe
curl -X POST https://server.smithery.ai/cromanion/cromanion/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'
Homepage
https://cromanion.com/agents
Listed at (smithery)
https://cromanion.com/agents