# Crosodo

> Cottage-food law by state and county, Crosodo products, checkout links, credential checks.

- name: com.crosodo/mcp
- version: 1.0.3
- connection class: R0 (autonomous)
- trust: 96/100
- quality: 89/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.crosodo%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/com.crosodo%2Fmcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "crosodo": {
      "type": "http",
      "url": "https://crosodo.com/api/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 100
- provenance: 85
- drivers: +repository +dns-namespace +website +reachable +uptime-100% +updated-4d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 89/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 11 of 11 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 2,074 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 6 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: deps.dev does not know crosodo-mcp@1.0.3

- tools: 11, about 2,074 tokens to load them all
- tool set hash: 4b4eb84bddc312ff3a82892df390404d
- tools last changed: 2026-11-06T02:41:58.135Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.crosodo/mcp.svg)](https://protogrid.dev/servers/com.crosodo/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-06 `set_permit_step` added
  - Check or uncheck one step on the signed-in baker's permit checklist (same check mark the Permits tab toggles). Get step ids from get_permit_checklist. Requires a Permit Guide purchase or full-library access, same as the dashboard. OAuth sign-in (crosodo:write).
- 2026-11-06 `get_permit_checklist` added
  - The signed-in baker's county permit checklist (active Permits workspace, or fips) with each step's requirement, official URL, and done flag. Requires OAuth sign-in (crosodo:read).
- 2026-11-06 `save_recipe` added
  - Save (or update, with id) a recipe in the signed-in baker's Foods Recipes library. Ingredient costs are the baker's own package costs — never invent prices. First saved recipe is free; the library beyond that is Cottage Pro (same rule as the dashboard). Requires OAuth sign-in (crosodo:write).
- 2026-11-06 `log_expense` added
  - Add one expense to the signed-in baker's Financials tab. Cottage Pro from the first entry (same rule as the dashboard). Amounts are the baker's own numbers. Requires OAuth sign-in (crosodo:write).
- 2026-11-06 `log_sale` added
  - Add one sale to the signed-in baker's sales log (same record the Financials tab creates). Free for every signed-in user. Requires OAuth sign-in (crosodo:write).
- 2026-11-06 `get_my_dashboard` added
  - The signed-in baker's dashboard at a glance: bakery place/level, access (Cottage Pro / Unlimited Pass), sales + expense totals with recent sales, saved recipe names, and permit workspaces with progress. Requires OAuth sign-in (crosodo:read). Start here to know whose dashboard you are acting on.
- 2026-11-03 `verify_certification` changed (description, inputSchema)
  - before: Public lookup of a Crosodo Certified credential (format CC-{ST}-{YY}-{XXXX}, e.g. CC-VA-26-1042). Returns public fields only (holder display name, dates, status). Unknown, expired, or revoked credentials return an error. No auth.
  - after: Public lookup of a Crosodo Certified credential (format CC-{ST}-{YY}-{XXXX}, for example CC-VA-26-1042; that ID only illustrates the format and is not a real credential, so looking it up returns Credential not found). Returns public fields only (holder display name, dates, status). Unknown, expired, or revoked credentials return an error. No auth.

Full history: https://api.protogrid.dev/v1/servers/com.crosodo%2Fmcp/changes

## Dependencies

- npm crosodo-mcp@1.0.3: unknown

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://crosodo.com/api/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

- npm crosodo-mcp@1.0.3

## Tools (11)

- `get_my_dashboard`: The signed-in baker's dashboard at a glance: bakery place/level, access (Cottage Pro / Unlimited Pass), sales + expense totals with recent sales, saved recipe names, and permit workspaces with progress. Requires OAuth sign-in (crosodo:read). Start here to know whose dashboard you are acting on.
- `get_permit_checklist`: The signed-in baker's county permit checklist (active Permits workspace, or fips) with each step's requirement, official URL, and done flag. Requires OAuth sign-in (crosodo:read).
- `list_products`: The Menu Frame catalog: free state-law report ($0) plus agent checkout SKUs. The public site sells Cottage Pro ($15 one time, lifetime access) at /cottage-pro. Notes the reusable 50%-off promotion code. Does not create a checkout session.
- `log_expense`: Add one expense to the signed-in baker's Financials tab. Cottage Pro from the first entry (same rule as the dashboard). Amounts are the baker's own numbers. Requires OAuth sign-in (crosodo:write).
- `log_sale`: Add one sale to the signed-in baker's sales log (same record the Financials tab creates). Free for every signed-in user. Requires OAuth sign-in (crosodo:write).
- `lookup_county`: County-level cottage-food requirements for a US state + county from Crosodo's structured county dataset (contacts, verification status, local URLs, state summaries). Unknown states or counties return an error — never invented data. Cottage food laws change. This summary is generated from Crosodo's hand-maintained dataset — it is not legal advice. Verify with your county before selling.
- `lookup_state_law`: Cottage-food / home-bakery requirements for a US state from Crosodo's hand-maintained dataset: sales cap, registration, allowed products, statute, and agency links. Accepts a 2-letter abbrev (VA) or slug (virginia). Unknown states return an error — never invented data. Cottage food laws change. This summary is generated from Crosodo's hand-maintained dataset — it is not legal advice. Verify with your county before selling.
- `save_recipe`: Save (or update, with id) a recipe in the signed-in baker's Foods Recipes library. Ingredient costs are the baker's own package costs — never invent prices. First saved recipe is free; the library beyond that is Cottage Pro (same rule as the dashboard). Requires OAuth sign-in (crosodo:write).
- `set_permit_step`: Check or uncheck one step on the signed-in baker's permit checklist (same check mark the Permits tab toggles). Get step ids from get_permit_checklist. Requires a Permit Guide purchase or full-library access, same as the dashboard. OAuth sign-in (crosodo:write).
- `start_checkout`: Creates a Stripe Checkout session server-side and returns { checkoutUrl, product, sessionId }. Hand the URL to the user; payment completes on Stripe's hosted page. This never charges. product: permit_guide | certified_exam | unlimited_pass. permit_guide and unlimited_pass are county-specific (state + county required). Pass idempotencyKey so agent retries cannot double-create sessions.
- `verify_certification`: Public lookup of a Crosodo Certified credential (format CC-{ST}-{YY}-{XXXX}, for example CC-VA-26-1042; that ID only illustrates the format and is not a real credential, so looking it up returns Credential not found). Returns public fields only (holder display name, dates, status). Unknown, expired, or revoked credentials return an error. No auth.