Tiana & Co. Seller Compliance
REMOTE · WWW.TIANA-CO.COM
Which certificate (CPC, GCC, FCC, FDA), what marketplaces ask, supplier blacklists, customs holds.
Available components
Last scanned (3 hours ago)
Scores higher than 79% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability37
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1977 tokens (~329/item across 6 items; 5 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management77
- Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 −4
- Schema quality: 394 → 329 ▲ functional
- The server now declares the “resources” capability functional
- First check of Capabilities: pass functional
- First check of Schema quality: 0 functional
- Schema quality: excellent → good functional
- New resource “answer-card” functional
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://www.tiana-co.com/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.tiana-co.com | CN=YR2,O=Let's Encrypt,C=US | 9 Oct 2026 | 7 Jan 2027 | RSA 2048 | SHA256-RSA | 5217c882cf48afdd89e7f2695c4db8e1be7 |
| SANs: www.tiana-co.com | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of www.tiana-co.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| tiana-co.com. | present | 33770 | 8 | Verified |
| www.tiana-co.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| content-security-policy | frame-ancestors 'self'; base-uri 'self'; object-src 'none' |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.tiana-co.com/api/mcp | Verified | 200 | |
| http (plaintext) | http://www.tiana-co.com/api/mcp | HTTPS enforced | 308 | https://www.tiana-co.com/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
seller_compliance.marketplace_asks Can I sell this on Amazon, Walmart, TikTok Shop or Etsy? ~479
Use this when a seller asks whether they can sell a product on Amazon, Walmart, TikTok Shop or Etsy, to stores, or on their own website, and what each will ask for: "can I sell toys on Amazon?", "requirements for selling supplements on Amazon", "how do I get approved (ungated) to sell kids' clothes?", "Amazon asked for compliance documents, what do I send?", "can I sell a stroller on Etsy?". Give the product in the seller's words and the channels. It returns closed or restricted doors first, then each channel's own rules for that product and the US federal law that applies everywhere, each line numbered to its source with the page's date and the day it was read. It first needs the certificate answer for the product, so it may return questions instead: ask the seller all of them and call again with their answers. Do not use for duties, tariffs or customs classification (HS or HTS codes), for marketplaces outside the US (Amazon UK, Amazon.ca or EU sites, for example), or to promise that a listing will be approved.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | The seller's answers to the questions an earlier call listed: answer key → one of that question's values, exactly as listed. Only pass what the seller actually said. |
| channels | array | – | Where the seller will sell, in the United States only: amazon (amazon.com, not Amazon UK, Amazon.ca or other countries), walmart, tiktok (TikTok Shop US), etsy, wholesale (to US stores), own (their o… |
| fda_kind | string | – | Only when an earlier call listed the answer key `fda_tap`: the value the seller chose. |
| made_for_children | string | – | Whether the product is made mainly for children 12 or under. Leave it out unless the seller said. |
| other_kind | string | – | Only when an earlier call listed the answer key `other_tap`: the value the seller chose. |
| product | string | yes | The product in the seller's own words, e.g. "plush teddy bear", "kids rain boots", "bluetooth speaker", "ceramic coffee mug". |
No output schema declared.
No examples provided.
seller_compliance.screen_supplier Supplier on a blacklist? ~247
Use this when a seller wants to check a supplier or factory against US government blacklists before paying it: "is this factory on the UFLPA list?", "is my Alibaba supplier sanctioned?", "check this supplier for forced labor". Give the company name as the seller has it, for example from the invoice or the store page. It searches the UFLPA Entity List and CBP Withhold Release Orders (forced labor) and the OFAC SDN and Consolidated lists and the US Consolidated Screening List (sanctions), and returns, per list, match, possible match, no match or not searched, with the list's size and date. It checks the name as typed, not a confirmed company, and it is not a record: no listed names, no citations. Do not use to check a person, to judge a supplier's quality, honesty or fraud risk, for lists outside the US, or as proof for customs.
| Name | Type | Req | Description |
|---|---|---|---|
| supplier_name | string | yes | The supplier's company name as the seller has it, e.g. from the invoice or the store page. A company only: if the seller names a person, do not call this tool. |
No output schema declared.
No examples provided.
seller_compliance.shipment_held Shipment stuck at customs? ~467
Use this when a seller's shipment is held, detained or under review by US Customs (CBP) and they want to know what kind of hold it is, how long they have, and which documents are usually needed: "customs is holding my shipment, what does the detention notice mean?", "I got a CBP Form 4647", "my container has a CPSC hold", "my shipment says under CBP review", "CBP detained my goods under the UFLPA, how long do I have?". It works from the seller's answers to up to three questions about what the notice says (forced labor, another agency such as CPSC, FDA or FCC, or the stated reason, such as a CF-28 or CF-29), and it never sees the notice itself. It returns the hold type, the response deadline or where to find it on the notice, the usual path and who leads it, and the documents usually needed, each cited to its CBP or federal source with the date it was read. When questions are still open, it lists them with their answer keys: ask the seller, then call again with their answers. Do not use it to read or summarize the notice itself: point the seller to the customs-hold check on tiana-co.com, which reads a notice only after the seller agrees to send it. Do not use it to classify goods or give duty rates, to say whether a shipment will be released, or for customs outside the United States. If the seller asks you to write, argue or file a response to CBP or another agency, do not call this tool: a licensed customs broker or a customs attorney handles the response.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | The seller's answers about the notice, by answer key. Leave out any question the seller has not answered: never fill in "no", "unsure" or "none" for the seller, even when the form named seems to make… |
| notice_date | string | – | The date printed on the notice, YYYY-MM-DD, only if the seller gives it. Used only for a forced-labor (UFLPA) detention, whose response window is counted from it. |
No output schema declared.
No examples provided.
seller_compliance.what_changed What changed for sellers this week? ~107
Use this when a seller asks what changed recently in US selling rules: Amazon, Walmart, TikTok Shop or Etsy policy updates, or new federal rules ("did Amazon change anything for toys this week?", "any new seller rules?"). It returns this week's changes, each with its source, the page's own date and the day it was checked, and names the pages that could not be checked. Do not use for tariff or duty changes, or for rules outside the US.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
seller_compliance.which_certificate Which safety certificate does my product need? ~436
Use this when a seller asks which US safety certificate or import paperwork a product needs: a CPC (Children's Product Certificate) for children's products, a GCC (General Certificate of Conformity) for other regulated products, FCC authorization for electronics, or FDA's import steps for food, supplements, cosmetics, drugs and medical devices (facility registration, prior notice, FSVP). For example: "does my kids' raincoat need a CPC?", "do I need a GCC for a coffee mug?", "Amazon wants a certificate for my toy, which one?", "do I need FDA prior notice to import snacks?". Give the product in the seller's own words. It answers from US federal rules and returns the rule each answer rests on, the date that rule was read, and a link to the free plan. When questions are still open, it lists them with their answer keys: ask the seller all of them, then call again with the same product and their answers. Do not use for duties, tariffs or customs classification (HS or HTS codes), for rules outside the United States, or to fill out, file or declare anything at customs. If the seller asks you to fill out or file a customs entry, do not call this tool: a licensed customs broker files the entry.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | The seller's answers to the questions an earlier call listed: answer key → one of that question's values, exactly as listed. Only pass what the seller actually said. |
| fda_kind | string | – | Only when an earlier call listed the answer key `fda_tap`: the value the seller chose. |
| made_for_children | string | – | Whether the product is made mainly for children 12 or under. Leave it out unless the seller said. |
| other_kind | string | – | Only when an earlier call listed the answer key `other_tap`: the value the seller chose. |
| product | string | yes | The product in the seller's own words, e.g. "plush teddy bear", "kids rain boots", "bluetooth speaker", "ceramic coffee mug". |
No output schema declared.
No examples provided.
How do I install the Tiana & Co. Seller Compliance MCP server?
Tiana & Co. Seller Compliance is a hosted endpoint at https://www.tiana-co.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.tiana-co.com
claude mcp add --transport http 1294962213sh-tiana-co-free-checks 'https://www.tiana-co.com/api/mcp'
What is the Tiana & Co. Seller Compliance MCP server?
Tiana & Co. Seller Compliance is an MCP server listed in the public MCP registry as io.github.1294962213sh/tiana-co-free-checks. Which certificate (CPC, GCC, FCC, FDA), what marketplaces ask, supplier blacklists, customs holds. This page covers its hosted endpoint (https://www.tiana-co.com/api/mcp).
Is the Tiana & Co. Seller Compliance MCP server safe to use?
Tiana & Co. Seller Compliance scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Tiana & Co. Seller Compliance MCP server expose?
Tiana & Co. Seller Compliance exposes 5 tools: seller_compliance.which_certificate, seller_compliance.marketplace_asks, seller_compliance.screen_supplier, seller_compliance.what_changed, seller_compliance.shipment_held. Their descriptions and schemas cost roughly 1,736 tokens of context every time the server is loaded.
Does the Tiana & Co. Seller Compliance MCP server require authentication?
No. We connected to Tiana & Co. Seller Compliance without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Tiana & Co. Seller Compliance MCP server still maintained?
Tiana & Co. Seller Compliance is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.