{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:52:44.530Z","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www","markdownUrl":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www.md","server":{"slug":"ca-mescolis-shipsmarter","name":"ShipSmarter Shipping","registryName":"ca.mescolis/shipsmarter","description":"Track parcels, compare live carrier rates and find drop-off points for online sellers.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"www","type":"remote","identifier":"https://www.shipsmarter.ca/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T01:02:26.925Z"},"score":{"total":72,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":72},{"date":"2026-11-04","total":71},{"date":"2026-11-03","total":71},{"date":"2026-11-02","total":70},{"date":"2026-11-01","total":70},{"date":"2026-10-31","total":69}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":69,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1432 tokens (~179/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"179","items":"8","tools":"8","tokens":"1432","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":17,"verdict":"partial","reasons":["Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"5"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"find_drop_off_points\" implies \"drop\" and declares readOnlyHint instead, contradicting what its own name says it does.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"find_drop_off_points","verb":"drop","declared":"read_only","annotated":"0","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"www","type":"remote","identifier":"https://www.shipsmarter.ca/mcp","withdrawn":false,"score":72,"current":true,"url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www","markdownUrl":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www.md"}],"facts":[{"label":"Endpoint","value":"https://www.shipsmarter.ca/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"track_package","title":"Track a package","description":"Track any parcel by its tracking number. No account needed. Works for parcels shipped through this service with any carrier, and for most Canadian carrier numbers (Canada Post, UPS, FedEx, Purolator, Nationex, GLS). Returns the current status, the estimated or actual delivery date and the carrier's latest scans, plus a link to the full tracking page. Use this whenever someone asks where a parcel is.","inputs":[{"name":"lang","type":"string","required":false,"description":"Language of the answer. Defaults to the user's locale, then to the site's language."},{"name":"tracking_number","type":"string","required":true,"description":"The carrier tracking number, e.g. \"1Z999AA10123456784\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":140},{"name":"get_shipping_quote","title":"Get a shipping quote","description":"Get live shipping prices for one parcel from several carriers (Canada Post, UPS, FedEx and others). No account needed. Give the origin and destination postal or ZIP codes and the weight in kilograms (convert pounds and inches first); the box size is optional and a 30 x 20 x 10 cm box is assumed when it is missing. Returns up to 6 of the cheapest services with price and estimated transit time, and a link that opens the same quote on the website, where the label can be bought. Prices are the public rates at the moment of the quote. If the user is signed in, compare_shipping_rates returns their own account prices instead.","inputs":[{"name":"from_country","type":"string","required":false,"description":"Origin country, ISO alpha-2. Defaults to \"CA\"."},{"name":"from_postal","type":"string","required":true,"description":"Origin postal or ZIP code, e.g. \"H2X 1Y1\"."},{"name":"height_cm","type":"number","required":false,"description":"Optional. Box height in centimetres."},{"name":"lang","type":"string","required":false,"description":"Language of the answer. Defaults to the user's locale, then to the site's language."},{"name":"length_cm","type":"number","required":false,"description":"Optional. Box length in centimetres."},{"name":"to_country","type":"string","required":false,"description":"Destination country, ISO alpha-2. Defaults to \"CA\"."},{"name":"to_postal","type":"string","required":true,"description":"Destination postal or ZIP code, e.g. \"M5V 2T6\"."},{"name":"weight_kg","type":"number","required":true,"description":"Parcel weight in kilograms. Must be greater than 0."},{"name":"width_cm","type":"number","required":false,"description":"Optional. Box width in centimetres."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":323},{"name":"find_drop_off_points","title":"Find drop-off and pick-up points","description":"Find places near a Canadian postal code where a parcel can be dropped off or picked up. No account needed. Covers Canada Post outlets, FedEx locations, UniUni drop-off points and MesColis counters, nearest first, with the address, distance, what can be done there and a map link. Optionally limit the search to one network. Opening hours vary, so suggest checking the map link before going.","inputs":[{"name":"lang","type":"string","required":false,"description":"Language of the answer. Defaults to the user's locale, then to the site's language."},{"name":"max_per_network","type":"integer","required":false,"description":"Points per network, 1 to 5. Default 3."},{"name":"network","type":"string","required":false,"description":"Limit to one network: canada_post, fedex, uniuni or mescolis. Defaults to \"any\"."},{"name":"postal_code","type":"string","required":true,"description":"A full Canadian postal code, e.g. \"H2X 1Y1\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":192},{"name":"compare_shipping_rates","title":"Compare shipping rates","description":"Compare live shipping rates for one parcel across every carrier available on the SIGNED-IN account (Canada Post, Purolator, UPS, FedEx and others), at the prices of that account. Returns each carrier and service with its total price, currency and estimated transit days. Requires the user to connect their account; for someone without an account use get_shipping_quote, which needs no sign-in. Prices are live and account-specific; do not cache them.","inputs":[{"name":"from_country","type":"string","required":false,"description":"Origin country, ISO alpha-2. Defaults to \"CA\"."},{"name":"from_postal","type":"string","required":true,"description":"Origin postal or ZIP code, e.g. \"H2X 1Y1\"."},{"name":"height_cm","type":"number","required":true,"description":"Parcel height in centimetres."},{"name":"length_cm","type":"number","required":true,"description":"Parcel length in centimetres."},{"name":"residential","type":"boolean","required":false,"description":"True if delivering to a home address. Affects price on some carriers."},{"name":"to_country","type":"string","required":false,"description":"Destination country, ISO alpha-2. Defaults to \"CA\"."},{"name":"to_postal","type":"string","required":true,"description":"Destination postal or ZIP code, e.g. \"M5V 2T6\"."},{"name":"weight_kg","type":"number","required":true,"description":"Parcel weight in kilograms. Must be greater than 0."},{"name":"width_cm","type":"number","required":true,"description":"Parcel width in centimetres."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":272},{"name":"track_parcel","title":"Track a parcel","description":"Look up the live status and checkpoint history of a parcel on the SIGNED-IN account by its tracking number. Returns the current status, estimated delivery date, the shipment id and the full checkpoint list. Requires the user to connect their account; to track any parcel without signing in, use track_package. Supplying the carrier is optional but makes the lookup faster.","inputs":[{"name":"carrier","type":"string","required":false,"description":"Optional carrier slug, e.g. \"ups\", \"purolator\", \"canada_post\"."},{"name":"tracking_number","type":"string","required":true,"description":"The carrier tracking number."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":119},{"name":"list_shipments","title":"List shipments","description":"List shipments on the authenticated account, newest first. Supports paging and filtering by status (for example \"Delivered\" or \"In Transit\"). Use get_shipment for the full record of one shipment.","inputs":[{"name":"limit","type":"integer","required":false,"description":"How many to return. Max 100, default 20."},{"name":"offset","type":"integer","required":false,"description":"How many to skip, for paging. Default 0."},{"name":"status","type":"string","required":false,"description":"Optional status filter, e.g. \"Delivered\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":101},{"name":"get_shipment","title":"Get one shipment","description":"Retrieve the full record of a single shipment by its ID, including addresses, carrier, service, cost and current status.","inputs":[{"name":"id","type":"string","required":true,"description":"The shipment ID, e.g. \"SHP-9FD8D9B5\"."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":58},{"name":"list_addresses","title":"List saved addresses","description":"List saved addresses from the account address book. Read-only — this server cannot create, change or delete addresses.","inputs":[{"name":"limit","type":"integer","required":false,"description":"How many to return. Max 100, default 50."},{"name":"offset","type":"integer","required":false,"description":"How many to skip, for paging. Default 0."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":67}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T01:02:26.000Z","track":"remote","endpoint":"https://www.shipsmarter.ca/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=shipsmarter.ca","issuer":"CN=YE2,O=Let's Encrypt,C=US","notBefore":"2026-09-16T23:03:23Z","notAfter":"2026-12-15T23:03:22Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"www.shipsmarter.ca.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"ca.","outcome":"verified","label":"Verified"},{"zone":"shipsmarter.ca.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-31","recent":[{"id":"chg_01a1a93a-8489-7772-99c1-597eefce9161","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www#chg-chg_01a1a93a-8489-7772-99c1-597eefce9161"},{"id":"chg_01a19eed-a543-782b-afb9-ef6c1185c714","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www#chg-chg_01a19eed-a543-782b-afb9-ef6c1185c714"},{"id":"chg_01a194a0-a1ed-7547-ab53-f8704ea574f1","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www#chg-chg_01a194a0-a1ed-7547-ab53-f8704ea574f1"},{"id":"chg_01a194a0-a1ee-70ee-8c91-68dc50e66c5b","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www#chg-chg_01a194a0-a1ee-70ee-8c91-68dc50e66c5b"},{"id":"chg_01a19056-6c55-7f33-8bda-8a9f4289041b","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www#chg-chg_01a19056-6c55-7f33-8bda-8a9f4289041b"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www/changelog.json"},"links":{"html":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www","markdown":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www.md","changelogJson":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www/changelog.json","changelogRss":"https://verifymcp.io/servers/ca-mescolis-shipsmarter/www.xml","external":[{"label":"Remote endpoint","href":"https://www.shipsmarter.ca/mcp"},{"label":"Website","href":"https://www.shipsmarter.ca/"}]}}