# GoAI Moat Supplier Sourcing & QC

> Supplier scoring, AQL sampling plans and factory audit checklists for cross-border sourcing.

- name: com.goaimoat/supplier-sourcing
- version: 1.0.0
- connection class: unknown (unknown)
- trust: 62/100 flags: duplicate-repo, unreachable
- quality: 83/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.goaimoat%2Fsupplier-sourcing
- tools: https://api.protogrid.dev/v1/servers/com.goaimoat%2Fsupplier-sourcing/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "supplier-sourcing": {
      "type": "http",
      "url": "https://supplier.mcp.goaimoat.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 0
- freshness: 100
- provenance: 85
- drivers: +repository +dns-namespace +website -unreachable(7 failures) +updated-26d-ago -duplicate-repo(9 names)
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 83/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: factory_audit_checklist (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); supplier_evaluation_scorecard (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); aql_sampling_plan (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 454 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 3 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 3, about 454 tokens to load them all
- tool set hash: 1e8f40ad61aeb4086ba33478472da134
- tools last changed: 2026-09-25T00:30:41.256Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.goaimoat/supplier-sourcing.svg)](https://protogrid.dev/servers/com.goaimoat/supplier-sourcing)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-09-25 `factory_audit_checklist` changed (inputSchema)
- 2026-09-25 `aql_sampling_plan` changed (inputSchema)
- 2026-09-25 `supplier_evaluation_scorecard` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/com.goaimoat%2Fsupplier-sourcing/changes

## Remotes

- https://supplier.mcp.goaimoat.com/mcp (streamable-http, auth none, reachable false, uptime30d 0.8333333)

## Packages

_none_

## Tools (3)

- `aql_sampling_plan`: 按 ISO 2859-1（一般检验水平 II·正常检验·单次抽样）计算 AQL 抽样计划。

输入整批数量 lot_size 与 AQL 值（支持 1.0 / 2.5 / 4.0），返回样本量、接受/拒收
判定值（Ac/Re）与按缺陷等级（致命/主要/次要）的常用 AQL 组合建议。
- `factory_audit_checklist`: 返回验厂核查清单（社会/质量/供应链安全）与出货前质检类型说明。

支持 audit_type: BSCI / SMETA / SA8000 / ISO9001 / C-TPAT / ALL（返回全部）。
- `supplier_evaluation_scorecard`: 供应商六维评估打分卡：输入各维度 1-5 分，输出加权总分、红黄绿评级与行动建议。

六维：quality(质量体系)、legitimacy(资质合法性)、capacity(产能与设备)、
price(价格竞争力)、delivery(交期信誉)、compliance(社会与环保合规)。