Lusha Mcp Plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Lusha Mcp Plugin (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Find and enrich B2B contacts and companies with verified emails, direct dials, mobile numbers, and real-time buying signals from Lusha — straight from inside your AI assistant.
Supports Codex (plugins), Claude Code (Claude Code CLI / Cowork), Cursor (plugins), VS Code Copilot (GitHub Copilot Chat with MCP), and Gemini CLI (extensions).
Find and enrich
| Skill | What it does |
|---|---|
enrich-contact | Look up any person and get their verified direct and mobile phone numbers, email, and company context |
prospect | Describe your ICP in plain English — get a filtered, enriched lead list with phone numbers revealed |
signal-prospect | Start from a buying signal (funding, hiring surge, job change) and get the right decision makers' phones |
lookalike-prospect | Give Lusha 5+ reference companies or contacts — get a matched list enriched with phone numbers |
Prioritise and follow up
| Skill | What it does |
|---|---|
work-my-accounts | Ask "who should I go after?" — get 10 recommended accounts with the reason each is listed, then a call list of decision makers at the ones you pick |
score-my-list | Bring a CSV, a list of domains or a Workspace table — get it scored by ICP fit and live buying signals and split into A, B and C tiers |
website-visitor-followup | Rank the companies visiting your website, keep the hot ones, and get the decision makers' phones |
set-up-my-icp | Set up your ICP Target Profile one question at a time, with each answer drafted for you, then preview 10 matching accounts |
save-or-export | Save any result to a Lusha Workspace table or export it to your CRM; checks the CRM connection first and offers to connect one |
Write outreach — a two-stage pair, run in order
| Skill | What it does |
|---|---|
outreach-research | Stage 1. Capture what you sell, to whom, with what proof, and how you differentiate as a portable positioning brief (lusha-outreach-brief.md). Text only — makes no Lusha API calls |
outreach-sequence | Stage 2. Turn that brief plus a contact list into short, signal-grounded Email 1 (optionally Emails 2–3 and LinkedIn messages), handoff-ready as flat CSV, with each draft's hook and personal-touch source alongside it |
The find-and-enrich skills each chain multiple Lusha API calls into a complete workflow, and surface verified phone numbers prominently — direct lines and mobile numbers are first-class outputs, not an afterthought.
The prioritise skills start from what you already have: your ICP profile, your own list, or your website traffic. Each one starts with the free calls (your ICP profiles, your CRM connection, your visit data) and branches on what it finds. Anything not set up yet gets a setup offer or a fallback, not an error.
Every skill that spends credits:
Some reveals finish in the background when third-party sources answer later. The skills wait for those reveals rather than charging twice. Each find, prioritise and enrich skill ends with the same two options, save to a Workspace table or export to your CRM (both through save-or-export), plus one related skill.
Every Lusha call a skill makes passes the conversation_id from the previous response and tags reason_for_invocation with the skill's name.
The outreach pair sits on top of them. outreach-research is pure conversation, producing a brief you save and reuse. outreach-sequence consumes that brief and never calls Lusha directly: it delegates signal discovery and harvest to signal-prospect, and contact enrichment to enrich-contact, so credit handling stays in one place. Every call it triggers is tagged with a reason_for_invocation starting outreach-sequence: , which is how skill-driven usage is attributed (each other skill tags its calls with its own name the same way).
All clients load the same skills/*/SKILL.md files and the same Lusha MCP server — only the per-client manifest and store endpoint differ:
| Client | Manifest | MCP endpoint | How to invoke |
|---|---|---|---|
| Codex | .codex-plugin/plugin.json + mcp.json | mcp.lusha.com/mcp/codex | Skills activate from natural language requests |
| Claude Code | .claude-plugin/plugin.json | mcp.lusha.com/mcp/claude | /enrich-contact, /prospect, etc. |
| Cursor | .cursor-plugin/plugin.json | mcp.lusha.com/mcp/cursor | Skills activate from natural language requests |
| VS Code Copilot | .github/plugin/plugin.json | mcp.lusha.com/mcp/copilot | /enrich-contact, /prospect, etc. |
| Gemini CLI | gemini-extension.json | mcp.lusha.com/mcp/gemini | Gemini activates the matching skill on demand |
Skills reference Lusha tools by their bare logical name (e.g. contacts_search), so a single skill source works identically across all clients. Gemini CLI auto-discovers the bundled skills/ directory as extension skills.
The Codex plugin lives at the repo root — .codex-plugin/plugin.json (manifest) and mcp.json (MCP server), with skills: "./skills/" pointing at the shared root skills/. Codex discovers it through the repo marketplace catalog at .agents/plugins/marketplace.json, which uses a url source pinned to a branch/tag. That catalog is read only by Codex/OpenAI tooling — Claude, Copilot, and Gemini keep using their own provider-specific manifests.
Aurlsource is used instead of alocalpath because Codex rejects a local plugin path that resolves to the repo root (codex#17066) and silently drops symlinks during install (codex#18863). Cloning the repo overurlkeepsskills/as real files at the plugin root, so no copy or symlink is needed.
Add the marketplace and install:
codex plugin marketplace add lusha-oss/lusha-mcp-plugin
codex
/pluginsSelect Lusha Plugins, install the Lusha plugin, then start a new Codex thread so the skills and MCP tools are loaded. The url source installs from the ref pinned in .agents/plugins/marketplace.json, so changes take effect once they land on that ref.
/plugin marketplace add lusha-oss/lusha-mcp-plugin
/plugin install lushaCursor reads the plugin manifest at .cursor-plugin/plugin.json and discovers the bundled skills/ automatically. Add the repo as a plugin marketplace, then install the Lusha plugin from .cursor-plugin/marketplace.json (catalog lusha-plugins, plugin lusha). All skills activate from natural-language requests once the MCP server connects.
Requires a VS Code version with agent-plugin support and the GitHub Copilot extension. The plugin bundles the MCP server and all skills together via .github/plugin/plugin.json.
Cmd+Shift+P / Ctrl+Shift+P).lusha-oss/lusha-mcp-plugin.The Lusha MCP server and all skills load automatically. Invoke a skill from Copilot Chat with its name, e.g. /enrich-contact, /prospect, /work-my-accounts, /score-my-list, or /outreach-sequence.
The repo ships a gemini-extension.json manifest at its root, so Gemini CLI wires up the Lusha MCP server and discovers the bundled skills automatically.
gemini extensions install https://github.com/lusha-oss/lusha-mcp-pluginAll skills are registered as extension skills — Gemini activates the matching one on demand (e.g. when you ask it to find a contact's phone number, build a prospect list, or draft outreach). Run gemini skills list to confirm they loaded.
The Lusha MCP server uses OAuth. The first time you invoke a Lusha skill or tool, you'll be prompted to sign in with your Lusha account. Subsequent calls reuse the authenticated session.
Skills are designed to feed into each other:
prospect → signal-prospect: build a list, then filter it to companies showing buying signalslookalike-prospect → signal-prospect: find lookalikes, then prioritize by signalenrich-contact → lookalike-prospect: enrich a single contact, then find similar peopleprospect / lookalike-prospect → score-my-list: rank the list you just built by ICP fit and buying signalswork-my-accounts ↔ set-up-my-icp: recommendations run on a calculated profile until you set up your own; a new profile previews its top accountsscore-my-list → work-my-accounts: find the decision makers at your A tiersave-or-export: save the result to a Workspace table or export it to your CRMoutreach-research → outreach-sequence: capture positioning once, then draft against itprospect → outreach-sequence: hand a lead list straight into drafting (optional — any CSV with full_name, company, and title works)outreach-sequence requires a brief from outreach-research; without one it refuses to draft rather than inventing positioning. An audience is required too, but it can come from anywhere: a pasted CSV, an attached file, a single named contact, or a prospect handoff.
outreach-sequence runs in two modes, set out in its Execution Mode section:
"non-interactive", "headless", "automated run", or "no user is available to answer"), as an automation runner or scheduled job would. Every question resolves from a supplied value or a documented default and execution continues, because an emitted question would become the final output and the run would produce nothing.Automated mode never relaxes the data rules: the brief and audience stay hard-required, signal and enrichment work still delegates to the other skills, and nothing may be fabricated to fill a gap.
linkedin_message (the message for once they accept) and linkedin_connection_note replace linkedin_message_1–linkedin_message_3, and every drafted row gains hook_source and personal_touch_source. Update any Braze, Outreach or Salesloft template that used the old LinkedIn columns.
outreach-research writes brief v2 (<!-- lusha-outreach-brief v2 -->): it adds proof points (each marked OK to name in email), titles to match per persona, an optional email style, and an (unconfirmed) marker for values from a web search that you have not confirmed. Both skills still read a v1 brief.
Root skills/ is the single source of truth — every client (Codex, Claude, Copilot, Gemini) reads these same files, so edit skills only under skills/.
When releasing, update the ref in .agents/plugins/marketplace.json to the branch or tag Codex users should install from (e.g. master for production, or a feature branch while testing).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.