ARC (arcreport.ai): can an agent reach checkout?
REMOTE · WWW.ARCREPORT.AI
Free open check: can an AI agent reach checkout on this store? Advisory; ARC stops before payment.
Available components
Last scanned (12 hours ago)
Scores higher than 56% of remote servers
Reachable. Last reached 18 Oct 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2707 tokens (~169/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management20
- Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage88
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 65% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Tool “can_agent_checkout” rewrote its description, which is the text the model reads security
- 16 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “can_agent_checkout” rewrote its description, which is the text the model reads security
- Tool “precheck” rewrote its description, which is the text the model reads security
- 15 Oct 26 +1
- Tool “ask_arc” rewrote its description, which is the text the model reads security
- Tool “can_agent_checkout” rewrote its description, which is the text the model reads security
- Tool “find_agent_ready_stores” rewrote its description, which is the text the model reads security
- Tool “precheck” rewrote its description, which is the text the model reads security
- 14 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “agent_commerce_adoption” rewrote its description, which is the text the model reads security
- Tool “ask_arc” rewrote its description, which is the text the model reads security
- Tool “can_agent_checkout” rewrote its description, which is the text the model reads security
- Tool “find_agent_ready_stores” rewrote its description, which is the text the model reads security
- Schema quality: 2408 → 2669 ▼ functional
- New tool “precheck” functional
- 13 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 12 Oct 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://www.arcreport.ai/api/ask
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.arcreport.ai | CN=YR2,O=Let's Encrypt,C=US | 31 Aug 2026 | 29 Nov 2026 | RSA 2048 | SHA256-RSA | 5189ac14bfa47b2499632875b7b7c670b4d |
| SANs: www.arcreport.ai | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.arcreport.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| arcreport.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), payment=(), usb=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.arcreport.ai/api/ask | Verified | 200 | |
| http (plaintext) | http://www.arcreport.ai/api/ask | HTTPS enforced | 308 | https://www.arcreport.ai/api/ask |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
agent_commerce_adoption ~67
Read ARC's agent commerce adoption counts, category and commerce platform rates from saved HTTP checks, including Checkout WebMCP among measured Shopify checkouts, with unknown and not checked separate; shopper approval required. Curated sample, not all e-commerce. No store requests or model calls.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
agent_leaderboard ~110
Read ARC's open agent leaderboard: cart success over the fixed ARC-100 v1 test set for each agent path ARC measures (ARC browser shoppers A-E, the UCP path, the storefront MCP path), with n, dates, evidence labels and Wilson 95% intervals, plus unverified outside submissions. Saved results only; no store requests or model calls. CC-BY-4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| include_stores | boolean | – | Also return the per-store result grid (100 rows). |
No output schema declared.
No examples provided.
ask_arc ~195
Read whether an AI agent can reach checkout for a brand the ARC Index already lists. No login and no new scan. Pass a brand, URL, or category. Returns the score, evidence, and both lanes: the agent-catalog HTTP check and the browser cart. The JSON field `agents_can_buy` is true when the catalog returned a checkout link or a browser shopper added the product to the cart. ARC stops before payment. It is not a completed order. The catalog check does not change the score. A missing score is not a zero. Results are advisory.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Brand name, e.g. Allbirds. |
| category | string | – | Index category or shopper words, e.g. footwear, running shoes, leggings. |
| q | string | – | Free-text brand, product, or category query. |
| url | string | – | Brand, store, or product URL already on the ARC Index. |
No output schema declared.
No examples provided.
can_agent_checkout ~127
Call when you need a saved checkout-link check for any public store URL, not only Index brands. Saved HTTP checkout check for a public homepage or product URL: catalog, product, checkout link, UCP profile, blocks, and one fix. No login, model call, payment, or browser scan. Uses ARC's last check (cached up to 24 hours). A missing result is unknown, not a no. A checkout link means reach checkout, not a completed order. Results are advisory. ARC stops before payment.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Public store homepage or product URL |
No output schema declared.
No examples provided.
dataset_info ~79
Latest open ARC dataset snapshot (start with store_answers: one plain answer per store on whether AI agents can find products and get a checkout link): immutable versioned download URLs plus latest/ aliases (CSV and Parquet), row counts, method version and licence (CC-BY-4.0, attribution ARC, arcreport.ai). Reads only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
find_agent_ready_stores ~140
Find stores where a saved check shows an AI agent can reach checkout, for running shoes, beauty, clothing, home goods, or another product need. Reads real HTTP agent-catalog checks from the last thirty days whose catalog found a product and returned a checkout link. This is not a completed order. One tested product is not a promise about another item. No login, browser scan, or model call. Results are advisory. ARC stops before payment.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Category slug or shopper words such as running shoes |
| limit | integer | – | – |
| q | string | – | Product need, such as skincare or camping gear |
No output schema declared.
No examples provided.
get_agent_facts ~139
Read free ARC agent facts for a store or product with no login. Returns TypeSafe Jev typed decisions (use-case mention, price clarity, agent-friendly description, cart-blocker suspicion, readiness score) from an HTTP scrape. Not a browser session and not any third-party agent product; ARC's browser cart tests (ARC browser shoppers A–E) are separate. JSON: GET /api/agent-facts?host=
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | – | Store hostname, e.g. allbirds.com |
| slug | string | – | ARC Index slug, e.g. allbirds |
| url | string | – | Store or product URL |
No output schema declared.
No examples provided.
google_checkout_readiness ~59
Read saved public Google agentic checkout readiness checks for a store. Free; no new scan or paid calls. Merchant Center feed eligibility cannot be checked from outside. Not Google approval or certification.
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | yes | Store host or URL |
No output schema declared.
No examples provided.
list_category_agent_facts ~89
List free ARC agent facts by category (beauty, footwear, apparel, …) with no login. Ranked by newest real Jev scores. JSON: GET /api/agent-facts?category=beauty
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Category id or words, e.g. beauty, running shoes |
| limit | number | – | 1–50, default 20 |
No output schema declared.
No examples provided.
precheck ~298
Check if an AI agent can reach checkout on a store before trying. Saved automated HTTP check for a product or store URL. Uses ARC's saved directory, rails, store answers and check history. When those have no row, uses the plain-HTTP checker. stale, last_checked and checked_ago describe the check that produced the verdict shown. lastReachableCheck is a separate, newer plain-HTTP time. It does not re-verify the checkout link or rails. Does not fetch the store and does not start a scan. ARC checks this store's own site only. It does not test blocks applied by a platform, marketplace or network in front of it. The saved result is ARC's automated HTTP check. It is not a live agent session and not a completed order. Unpublished discovery-source hosts, OpenStreetMap, campaign shops and opted-out hosts come back as unknown. A checker fallback is http-only and checkout was not part of the check. JSON: GET /api/precheck?url=. Results are advisory. ARC stops before payment. Advisory only, not a guarantee. Do not refuse or avoid a store solely because of ARC's data. known:false or missing data is not a no. Data CC BY 4.0, attribute ARC (arcreport.ai); OSM-derived rows are ODbL.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Product or store URL, such as https://allbirds.com/products/shoe. |
No output schema declared.
No examples provided.
product_data_check ~62
Free latest saved product data and return/shipping policy check from the store's pages and structured data. Reads history only; no store fetch or model call. A missing result is not a zero.
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | – | – |
| url | string | – | – |
No output schema declared.
No examples provided.
protocol_matrix ~88
Read ARC's neutral Protocol Matrix: for UCP, ACP, PAP, WebMCP, MCP and agent payment protocols, how many checked stores declare, validate, answer and transact, with evidence labels (Measured / Inferred / Not measured). Saved checks only; no store requests or model calls. CC-BY-4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| protocol | string | – | Optional: one protocol id. |
No output schema declared.
No examples provided.
store_card ~53
Read a public store card and saved brand claim. No outbound fetch or model calls. Brand statements are from the brand and not measured by ARC; claims never change scores.
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | yes | Store host or URL. |
No output schema declared.
No examples provided.
submit_leaderboard_run ~144
Submit your agent's run against ARC-100 v1 to ARC's open leaderboard. Free. The run is listed as 'unverified' until ARC re-runs a sample. Format: arc-leaderboard-submission/v1 (see /leaderboard/spec). Runs must stop before payment. Limit 5 per network per day. Same as POST /api/leaderboard/submit.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | object | yes | – |
| contact | string | – | Optional and private: how ARC can reach you to arrange verification. |
| results | array | yes | – |
| run | object | yes | – |
| spec | string | yes | – |
| test_set | string | yes | – |
No output schema declared.
No examples provided.
submit_store ~127
Add stores to ARC's free, open agent-commerce directory (CC-BY dataset). Pass url for one store or hosts for up to 50. Each new host is validated (live HTTPS, not parked, not redirecting to another brand); accepted hosts are queued for ARC's plain-HTTP rails checks (UCP, WebMCP, MCP, policies, product data) and appear in the dataset with source=submitted. No model calls, no login. Rate limited per caller.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | – |
| hosts | array | – | – |
| url | string | – | – |
No output schema declared.
No examples provided.
validate_ucp_profile ~175
Validate a Universal Commerce Protocol (UCP) business profile against the published UCP JSON Schema (current release) and spec rules: authority binding, https endpoints, orphaned extensions and, for a URL, hosting headers (no redirects, Cache-Control public max-age>=60). Pass url (store host, homepage or profile URL; /.well-known/ucp is added for a homepage) or profile (the JSON). Returns errors, warnings and info, each with a path and the spec section. Free, no login, no model call. Validation is not certification. JSON: GET /api/ucp/validate?url=
| Name | Type | Req | Description |
|---|---|---|---|
| profile | – | – | The profile JSON (object or string) to validate without fetching. |
| url | string | – | Store host, homepage or profile URL, e.g. allbirds.com |
No output schema declared.
No examples provided.
How do I install the ARC (arcreport.ai): can an agent reach checkout? MCP server?
ARC (arcreport.ai): can an agent reach checkout? is a hosted endpoint at https://www.arcreport.ai/api/ask, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.arcreport.ai
claude mcp add --transport http ai-arcreport-ask 'https://www.arcreport.ai/api/ask'
What is the ARC (arcreport.ai): can an agent reach checkout? MCP server?
ARC (arcreport.ai): can an agent reach checkout? is an MCP server listed in the public MCP registry as ai.arcreport/ask. Free open check: can an AI agent reach checkout on this store? Advisory; ARC stops before payment. This page covers its hosted endpoint (https://www.arcreport.ai/api/ask).
Is the ARC (arcreport.ai): can an agent reach checkout? MCP server safe to use?
ARC (arcreport.ai): can an agent reach checkout? scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ARC (arcreport.ai): can an agent reach checkout? MCP server expose?
ARC (arcreport.ai): can an agent reach checkout? exposes 16 tools: precheck, find_agent_ready_stores, can_agent_checkout, ask_arc, agent_commerce_adoption, and 11 more. Their descriptions and schemas cost roughly 1,952 tokens of context every time the server is loaded.
Does the ARC (arcreport.ai): can an agent reach checkout? MCP server require authentication?
No. We connected to ARC (arcreport.ai): can an agent reach checkout? without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ARC (arcreport.ai): can an agent reach checkout? MCP server still maintained?
ARC (arcreport.ai): can an agent reach checkout? is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.