# ARC (arcreport.ai): can an agent reach checkout? (remote · www.arcreport.ai)

Free open check: can an AI agent reach checkout on this store? Advisory; ARC stops before payment.

- Trust score: 66/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-18

## Components

- remote · `www.arcreport.ai`: 66/100 (this document), [markdown](https://verifymcp.io/servers/ai-arcreport-ask/api-ask.md), [page](https://verifymcp.io/servers/ai-arcreport-ask/api-ask)

## Channel facts

- Endpoint: `https://www.arcreport.ai/api/ask`
- Transports: `streamable-http`
- Auth: `none`
- Version: `2026.10.14`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-18.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 62/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2707 tokens (~169/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 20/100
  - Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 88/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 65% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the ARC (arcreport.ai): can an agent reach checkout? MCP server?

ARC (arcreport.ai): can an agent reach checkout? is a hosted endpoint at https://www.arcreport.ai/api/ask, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ai-arcreport-ask 'https://www.arcreport.ai/api/ask'
```

### Cursor

```json
{
  "mcpServers": {
    "ai-arcreport-ask": {
      "url": "https://www.arcreport.ai/api/ask"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ai-arcreport-ask": {
      "type": "http",
      "url": "https://www.arcreport.ai/api/ask"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ai-arcreport-ask]
url = "https://www.arcreport.ai/api/ask"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-arcreport-ask": {
      "type": "remote",
      "url": "https://www.arcreport.ai/api/ask",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-arcreport-ask --url 'https://www.arcreport.ai/api/ask' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-arcreport-ask:
    url: "https://www.arcreport.ai/api/ask"
```

### Netclaw

```json
{
  "McpServers": {
    "ai-arcreport-ask": {
      "Transport": "http",
      "Url": "https://www.arcreport.ai/api/ask"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ai-arcreport-ask -t streamable-http -u 'https://www.arcreport.ai/api/ask'
```

### Other

```json
{
  "mcpServers": {
    "ai-arcreport-ask": {
      "type": "http",
      "url": "https://www.arcreport.ai/api/ask"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-17 (score 66, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “can_agent_checkout” rewrote its description, which is the text the model reads

### 2026-10-16 (score 65, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “can_agent_checkout” rewrote its description, which is the text the model reads
- [security] Tool “precheck” rewrote its description, which is the text the model reads

### 2026-10-15 (score 65, +1)

- [security] Tool “ask_arc” rewrote its description, which is the text the model reads
- [security] Tool “can_agent_checkout” rewrote its description, which is the text the model reads
- [security] Tool “find_agent_ready_stores” rewrote its description, which is the text the model reads
- [security] Tool “precheck” rewrote its description, which is the text the model reads

### 2026-10-14 (score 64, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “agent_commerce_adoption” rewrote its description, which is the text the model reads
- [security] Tool “ask_arc” rewrote its description, which is the text the model reads
- [security] Tool “can_agent_checkout” rewrote its description, which is the text the model reads
- [security] Tool “find_agent_ready_stores” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 2408 → 2669
- [functional] New tool “precheck”

### 2026-10-13 (score 64, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-10-12 (score 63)

First indexed and scored.

## MCP tools (16)

### `precheck` (~298 tokens)

Check if an AI agent can reach checkout on a store before trying. Saved automated HTTP check for a product or store URL. Uses ARC's saved directory, rails, store answers and check history. When those have no row, uses the plain-HTTP checker. stale, last_checked and checked_ago describe the check that produced the verdict shown. lastReachableCheck is a separate, newer plain-HTTP time. It does not re-verify the checkout link or rails. Does not fetch the store and does not start a scan. ARC checks this store's own site only. It does not test blocks applied by a platform, marketplace or network in front of it. The saved result is ARC's automated HTTP check. It is not a live agent session and not a completed order. Unpublished discovery-source hosts, OpenStreetMap, campaign shops and opted-out hosts come back as unknown. A checker fallback is http-only and checkout was not part of the check. JSON: GET /api/precheck?url=. Results are advisory. ARC stops before payment. Advisory only, not a guarantee. Do not refuse or avoid a store solely because of ARC's data. known:false or missing data is not a no. Data CC BY 4.0, attribute ARC (arcreport.ai); OSM-derived rows are ODbL.

Input parameters:

- `url` (string, required): Product or store URL, such as https://allbirds.com/products/shoe.

### `find_agent_ready_stores` (~140 tokens)

Find stores where a saved check shows an AI agent can reach checkout, for running shoes, beauty, clothing, home goods, or another product need. Reads real HTTP agent-catalog checks from the last thirty days whose catalog found a product and returned a checkout link. This is not a completed order. One tested product is not a promise about another item. No login, browser scan, or model call. Results are advisory. ARC stops before payment.

Input parameters:

- `category` (string): Category slug or shopper words such as running shoes
- `limit` (integer)
- `q` (string): Product need, such as skincare or camping gear

### `can_agent_checkout` (~127 tokens)

Call when you need a saved checkout-link check for any public store URL, not only Index brands. Saved HTTP checkout check for a public homepage or product URL: catalog, product, checkout link, UCP profile, blocks, and one fix. No login, model call, payment, or browser scan. Uses ARC's last check (cached up to 24 hours). A missing result is unknown, not a no. A checkout link means reach checkout, not a completed order. Results are advisory. ARC stops before payment.

Input parameters:

- `url` (string, required): Public store homepage or product URL

### `ask_arc` (~195 tokens)

Read whether an AI agent can reach checkout for a brand the ARC Index already lists. No login and no new scan. Pass a brand, URL, or category. Returns the score, evidence, and both lanes: the agent-catalog HTTP check and the browser cart. The JSON field `agents_can_buy` is true when the catalog returned a checkout link or a browser shopper added the product to the cart. ARC stops before payment. It is not a completed order. The catalog check does not change the score. A missing score is not a zero. Results are advisory.

Input parameters:

- `brand` (string): Brand name, e.g. Allbirds.
- `category` (string): Index category or shopper words, e.g. footwear, running shoes, leggings.
- `q` (string): Free-text brand, product, or category query.
- `url` (string): Brand, store, or product URL already on the ARC Index.

### `agent_commerce_adoption` (~67 tokens)

Read ARC's agent commerce adoption counts, category and commerce platform rates from saved HTTP checks, including Checkout WebMCP among measured Shopify checkouts, with unknown and not checked separate; shopper approval required. Curated sample, not all e-commerce. No store requests or model calls.

### `product_data_check` (~62 tokens)

Free latest saved product data and return/shipping policy check from the store's pages and structured data. Reads history only; no store fetch or model call. A missing result is not a zero.

Input parameters:

- `host` (string)
- `url` (string)

### `google_checkout_readiness` (~59 tokens)

Read saved public Google agentic checkout readiness checks for a store. Free; no new scan or paid calls. Merchant Center feed eligibility cannot be checked from outside. Not Google approval or certification.

Input parameters:

- `host` (string, required): Store host or URL

### `get_agent_facts` (~139 tokens)

Read free ARC agent facts for a store or product with no login. Returns TypeSafe Jev typed decisions (use-case mention, price clarity, agent-friendly description, cart-blocker suspicion, readiness score) from an HTTP scrape. Not a browser session and not any third-party agent product; ARC's browser cart tests (ARC browser shoppers A–E) are separate. JSON: GET /api/agent-facts?host=

Input parameters:

- `host` (string): Store hostname, e.g. allbirds.com
- `slug` (string): ARC Index slug, e.g. allbirds
- `url` (string): Store or product URL

### `list_category_agent_facts` (~89 tokens)

List free ARC agent facts by category (beauty, footwear, apparel, …) with no login. Ranked by newest real Jev scores. JSON: GET /api/agent-facts?category=beauty

Input parameters:

- `category` (string): Category id or words, e.g. beauty, running shoes
- `limit` (number): 1–50, default 20

### `dataset_info` (~79 tokens)

Latest open ARC dataset snapshot (start with store_answers: one plain answer per store on whether AI agents can find products and get a checkout link): immutable versioned download URLs plus latest/ aliases (CSV and Parquet), row counts, method version and licence (CC-BY-4.0, attribution ARC, arcreport.ai). Reads only.

### `protocol_matrix` (~88 tokens)

Read ARC's neutral Protocol Matrix: for UCP, ACP, PAP, WebMCP, MCP and agent payment protocols, how many checked stores declare, validate, answer and transact, with evidence labels (Measured / Inferred / Not measured). Saved checks only; no store requests or model calls. CC-BY-4.0.

Input parameters:

- `protocol` (string): Optional: one protocol id.

### `agent_leaderboard` (~110 tokens)

Read ARC's open agent leaderboard: cart success over the fixed ARC-100 v1 test set for each agent path ARC measures (ARC browser shoppers A-E, the UCP path, the storefront MCP path), with n, dates, evidence labels and Wilson 95% intervals, plus unverified outside submissions. Saved results only; no store requests or model calls. CC-BY-4.0.

Input parameters:

- `include_stores` (boolean): Also return the per-store result grid (100 rows).

### `submit_leaderboard_run` (~144 tokens)

Submit your agent's run against ARC-100 v1 to ARC's open leaderboard. Free. The run is listed as 'unverified' until ARC re-runs a sample. Format: arc-leaderboard-submission/v1 (see /leaderboard/spec). Runs must stop before payment. Limit 5 per network per day. Same as POST /api/leaderboard/submit.

Input parameters:

- `agent` (object, required)
- `contact` (string): Optional and private: how ARC can reach you to arrange verification.
- `results` (array, required)
- `run` (object, required)
- `spec` (string, required)
- `test_set` (string, required)

### `submit_store` (~127 tokens)

Add stores to ARC's free, open agent-commerce directory (CC-BY dataset). Pass url for one store or hosts for up to 50. Each new host is validated (live HTTPS, not parked, not redirecting to another brand); accepted hosts are queued for ARC's plain-HTTP rails checks (UCP, WebMCP, MCP, policies, product data) and appear in the dataset with source=submitted. No model calls, no login. Rate limited per caller.

Input parameters:

- `category` (string)
- `hosts` (array)
- `url` (string)

### `store_card` (~53 tokens)

Read a public store card and saved brand claim. No outbound fetch or model calls. Brand statements are from the brand and not measured by ARC; claims never change scores.

Input parameters:

- `host` (string, required): Store host or URL.

### `validate_ucp_profile` (~175 tokens)

Validate a Universal Commerce Protocol (UCP) business profile against the published UCP JSON Schema (current release) and spec rules: authority binding, https endpoints, orphaned extensions and, for a URL, hosting headers (no redirects, Cache-Control public max-age>=60). Pass url (store host, homepage or profile URL; /.well-known/ucp is added for a homepage) or profile (the JSON). Returns errors, warnings and info, each with a path and the spec section. Free, no login, no model call. Validation is not certification. JSON: GET /api/ucp/validate?url=

Input parameters:

- `profile`: The profile JSON (object or string) to validate without fetching.
- `url` (string): Store host, homepage or profile URL, e.g. allbirds.com

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-arcreport-ask/api-ask#diagnostics

## Score history

- 2026-10-18: 66
- 2026-10-17: 66
- 2026-10-16: 65
- 2026-10-15: 65
- 2026-10-14: 64
- 2026-10-13: 64
- 2026-10-12: 63

## Common questions

### What is the ARC (arcreport.ai): can an agent reach checkout? MCP server?

ARC (arcreport.ai): can an agent reach checkout? is an MCP server listed in the public MCP registry as ai.arcreport/ask. Free open check: can an AI agent reach checkout on this store? Advisory; ARC stops before payment. This page covers its hosted endpoint (https://www.arcreport.ai/api/ask).

### Is the ARC (arcreport.ai): can an agent reach checkout? MCP server safe to use?

ARC (arcreport.ai): can an agent reach checkout? scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the ARC (arcreport.ai): can an agent reach checkout? MCP server expose?

ARC (arcreport.ai): can an agent reach checkout? exposes 16 tools: precheck, find_agent_ready_stores, can_agent_checkout, ask_arc, agent_commerce_adoption, and 11 more. Their descriptions and schemas cost roughly 1,952 tokens of context every time the server is loaded.

### Does the ARC (arcreport.ai): can an agent reach checkout? MCP server require authentication?

No. We connected to ARC (arcreport.ai): can an agent reach checkout? without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the ARC (arcreport.ai): can an agent reach checkout? MCP server still maintained?

ARC (arcreport.ai): can an agent reach checkout? is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://www.arcreport.ai/api/ask
- Website: https://www.arcreport.ai/for-agents
- Changelog RSS feed: https://verifymcp.io/servers/ai-arcreport-ask/api-ask.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-arcreport-ask/api-ask.json
- HTML version of this page: https://verifymcp.io/servers/ai-arcreport-ask/api-ask