# Recall Kitchen

> US recalls MCP: free API key/signup or x402 $0.025 Base; some tools need key; verify↑limits

- name: io.github.adamdecaf/recall-kitchen
- version: 1.0.1
- connection class: R0 (autonomous)
- trust: 90/100
- quality: 96/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.adamdecaf%2Frecall-kitchen
- tools: https://api.protogrid.dev/v1/servers/io.github.adamdecaf%2Frecall-kitchen/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "recall-kitchen": {
      "type": "http",
      "url": "https://app.recallkitchen.com/mcp",
      "headers": {
        "X-API-Key": "${X_API_KEY}",
        "Authorization": "Bearer ${RECALL_KITCHEN_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${X_API_KEY}`, `${RECALL_KITCHEN_TOKEN}`.

## Trust

- hygiene: 100
- liveness: 100
- freshness: 85
- provenance: 75
- drivers: +repository +website +reachable +uptime-100% ~updated-47d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 96/100 (strong)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 20 of 20 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 3,554 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 2 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 20, about 3,554 tokens to load them all
- tool set hash: 6473550fe205cc6c5e148ebda007ed81
- tools last changed: 2026-09-29T03:51:19.738Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.adamdecaf/recall-kitchen.svg)](https://protogrid.dev/servers/io.github.adamdecaf/recall-kitchen)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-09-29 `give_feedback` added
  - Report a bug, missing capability, bad search result, or confusing schema to the Recall Kitchen team. Use this instead of silently working around a problem. message is required and should include the MCP tool names you called, the actions you took, the query or identifiers, and any recall_id. Do not send API keys, photos, or PII. Optional category: bad_result, tool_error, missing_capability, confusing_schema, docs, other. Optional severity: blocked, workaround, annoyance. No API key or x402 required. Does not count against search quotas.
- 2026-09-29 `add_inventory_product` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/io.github.adamdecaf%2Frecall-kitchen/changes

## Remotes

- https://app.recallkitchen.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (20)

- `add_inventory_product`: Add a product to this API key's inventory. Requires a verified account (sign in at https://app.recallkitchen.com with the signup email). Unverified signup keys cannot add inventory.
- `add_watch_pattern`: Add a recall watch pattern for this API key. Same websearch syntax as search_product_recalls (AND, OR, -exclude, quoted phrases). Requires an API key.
- `check_tracked_products`: Check this API key's watch patterns and inventory against current indexed recalls (including historical notices). Does not create notifications. Generic patterns such as food or hazard only match in titles. Requires an API key.
- `create_api_key`: Create an additional API key for this account. Requires an existing API key. Unverified accounts may have only one key; verified accounts may have three. Usage is counted per account, not per key.
- `get_product_recall`: Get a recall by id, including extracted lots, UPCs, model numbers, locations, contact info, and product photo URLs
- `give_feedback`: Report a bug, missing capability, bad search result, or confusing schema to the Recall Kitchen team. Use this instead of silently working around a problem. message is required and should include the MCP tool names you called, the actions you took, the query or identifiers, and any recall_id. Do not send API keys, photos, or PII. Optional category: bad_result, tool_error, missing_capability, confusing_schema, docs, other. Optional severity: blocked, workaround, annoyance. No API key or x402 required. Does not count against search quotas.
- `list_api_keys`: List this account's API keys (id, name, prefix, created). Secrets are not shown. Requires an API key.
- `list_inventory`: List this API key's tracked inventory products. Requires an API key.
- `list_recall_notifications`: List recall notifications for this API key. unread defaults to true (unread only); pass false for all. Empty for new accounts until a new matching recall is published; not a backfill of check_tracked_products. message is a short plain-text summary. Requires an API key.
- `list_watch_patterns`: List this API key's recall watch patterns. Requires an API key.
- `lookup_product`: Look up a product by UPC/EAN. Returns found=false when unknown. Does not search recalls.
- `mark_notification_read`: Mark a recall notification as read (default) or unread. Requires an API key.
- `remove_inventory_product`: Remove a product from this API key's inventory by id. Requires an API key.
- `remove_watch_pattern`: Remove a recall watch pattern for this API key. Requires an API key.
- `revoke_api_key`: Revoke an API key by key_id from list_api_keys. Requires an API key. Revoking the current key will fail subsequent calls.
- `search_product_recalls`: Search product recalls by query. Query uses websearch syntax: unquoted words are AND, OR is or, -term excludes, quoted phrases match as a unit (example: Generac Generator -Portable). Optional filters: source (cpsc, fdafoodsafety, FDAMedWatch, usda, nhtsa, canada, costco, target, walmart, openfda), since/until (YYYY-MM-DD), location (country, region, or place, ANDed with the query), offset, limit. Descriptions are truncated and extracted products are capped; use get_product_recall for the full text.
- `search_product_recalls_by_upc`: Search recalls by UPC/EAN or a barcode image URL/data URI/MCP image content. Matches extracted recall UPCs first. Returns found=false when the UPC is unknown.
- `search_product_recalls_from_image`: Identify products in a public HTTPS image URL, data:image/...;base64 URI, or MCP image content part. Local files are not supported. Each product includes match (upc, model, text, category) and confidence. Category matches omit recalls unless include_category_matches=true. Requires an API key or x402; not included in the free anonymous per-IP quota.
- `search_recalls_by_identifier`: Search recalls by extracted UPC, lot code, model number, product name, or VIN. VIN is decoded locally to year and make and matched against NHTSA campaigns (not a live NHTSA VIN API). Multiple identifiers are AND-matched on the same product.
- `signup`: Create a Recall Kitchen account and API key from an email. No API key or x402 payment required. Requires accept_terms true (Terms of Service, Privacy Policy, and API Terms at https://recallkitchen.com/terms and https://recallkitchen.com/api-terms). The key is returned once. Unverified accounts have lower rate limits (60 tool calls/hour, 400/day, one key) and can add a few watch patterns. Sign in at https://app.recallkitchen.com with the same email to verify, raise limits, and add inventory. Does not re-issue a key if the email already has an account.