An agent can connect on its own if it already holds X_API_KEY, X_API_KEY.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.schemasevery tool has an object input schema
pass
tools.annotations1 of 1 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_products (destructiveHint, idempotentHint)
pass
tools.token_costabout 258 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool history recorded for 2 of the 7 days needed
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
1 tools, about 258 tokens to load them all · tool set 3d1037dfb227 · checked 2026-11-07 18:01 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Endpoints
remote
auth
reachable
uptime 30d
p50
protocol
last ok
https://api.osmanth.com/mcpstreamable-http
api_key ${X_API_KEY}
yes
43%
258 ms
2025-11-25
2026-11-07
Tools (1)
search_productsread-only
Search live products across Shopify merchants (Shopify Global Catalog) and major retailers (Channel3). Returns normalized products with title, price, currency, merchant, buy_url, image_url, ships_to and source. Always show the `disclosure` text to the user near the links. Do not cache results.