Connect
8 clients · secrets stay placeholdersQuality 92 / 100strong
protocol88 · weight 25
- pass
protocol.modernsupports 2026-07-28 (server/discover)
- pass
protocol.statelessanswers without a session
- pass
protocol.transportstreamable HTTP
- warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- pass
tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
- warn
tools.directory_hints2 of 4 tools declare all four hints; missing: search_products (destructiveHint, idempotentHint); get_product (destructiveHint, idempotentHint)
- pass
tools.token_costabout 703 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependenciesn/a · weight 15
- n/a
deps.known_vulns,
deps.mcp_sdk_version,
deps.resolvabledeps.dev does not know @apitoagents/[email protected]
4 tools, about 703 tokens to load them all · tool set 4ac0e1022ff3 · checked 2026-10-19 10:20 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 97 / 100
+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-12d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
@apitoagents/[email protected] npmthis version is not known to the dependency resolver
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Official server.json
{
"name": "io.github.apitoagents/sample-shop-mcp",
"title": "Sample Shop MCP server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://demo.apitoagents.com/mcp",
"type": "streamable-http"
}
],
"version": "1.0.1",
"packages": [
{
"version": "1.0.1",
"transport": {
"type": "stdio"
},
"identifier": "@apitoagents/sample-shop-mcp",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org"
}
],
"repository": {
"url": "https://github.com/apitoagents/mcp-examples",
"source": "github",
"subfolder": "typescript"
},
"websiteUrl": "https://apitoagents.com/docs",
"description": "Sample shop MCP server: paginated search, idempotent orders, guarded cancellation. Four languages."
}