Always get the mutual contact's permission before name-dropping them. Fill in the specific context they gave you so the prospect knows this is a real referral, not a trick.