Clutch.co
REMOTE · BOT.CLUTCH.CO · SCANNED SEP 25
Trusted B2B service providers with verified client reviews
Available components
Recent critical change
Authorization (5 Aug 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (send_message_to_provider). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability37
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1836 tokens (~204/item across 9 items; 5 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
How do I install the Clutch.co MCP server?
Clutch.co is a hosted endpoint at https://bot.clutch.co/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · bot.clutch.co
claude mcp add --transport http co-clutch-mcp 'https://bot.clutch.co/mcp'
{
"mcpServers": {
"co-clutch-mcp": {
"url": "https://bot.clutch.co/mcp"
}
}
} {
"servers": {
"co-clutch-mcp": {
"type": "http",
"url": "https://bot.clutch.co/mcp"
}
}
} [mcp_servers.co-clutch-mcp] url = "https://bot.clutch.co/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"co-clutch-mcp": {
"type": "remote",
"url": "https://bot.clutch.co/mcp",
"enabled": true
}
}
} openclaw mcp add co-clutch-mcp --url 'https://bot.clutch.co/mcp' --transport streamable-http
mcp_servers:
co-clutch-mcp:
url: "https://bot.clutch.co/mcp" {
"McpServers": {
"co-clutch-mcp": {
"Transport": "http",
"Url": "https://bot.clutch.co/mcp"
}
}
} assistant mcp add co-clutch-mcp -t streamable-http -u 'https://bot.clutch.co/mcp'
{
"mcpServers": {
"co-clutch-mcp": {
"type": "http",
"url": "https://bot.clutch.co/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 22 Sept 26 0
- Tool “recommend_service_providers” rewrote its description, which is the text the model reads security
- Tool “send_message_to_provider” rewrote its description, which is the text the model reads security
- Schema quality: 1474 → 1836 ▼ functional
- New resource “get_provider_info_widget” functional
- New tool “get_provider_info” functional
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 7 Aug 26 0
- The server no longer declares the “experimental” capability functional
- 5 Aug 26 0
- Authorization: partial → fail ▼ critical
- New tool “send_message_to_provider”, which the server declares destructive security
- Schema quality: 177 → 210 ▼ functional
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Probed https://bot.clutch.co/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=clutch.co | CN=WE1,O=Google Trust Services,C=US | 28 Aug 2026 | 26 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | b417528811e6121113d7ae39cc781301 |
| SANs: clutch.co, *.clutch.co | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of bot.clutch.co. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| co. | present | 7786 | 8 | Verified |
| clutch.co. | present | 2371 | 13 | Verified |
| bot.clutch.co. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=2592000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://bot.clutch.co/mcp | Verified | 200 | |
| http (plaintext) | http://bot.clutch.co/mcp | HTTPS enforced | 301 | https://bot.clutch.co/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_provider_info Get Provider Info ~242
Use this tool whenever the user names a specific company (agency, consultant, contractor, vendor) and asks anything about it: who they are, how good they are, their rating or how many reviews they have, whether they are Clutch verified or certified. Clutch profile data is not part of your general knowledge: call the tool even for companies you already know. Do not use it to find providers by criteria such as service, industry, location or budget: use `recommend_service_providers`. Do not use it to read individual reviews: use `get_service_provider_reviews`. Returns the provider's Clutch profile: rating and review counts, locations, description, pricing, Clutch Guarantee status, and Clutch Certifications. Examples: - "What do you know about Acme?" -> company_name="Acme" - "Tell me about Acme" -> company_name="Acme" - "What's Acme's rating?" -> company_name="Acme" - "Is Acme Clutch Certified?" -> company_name="Acme"
| Name | Type | Req | Description |
|---|---|---|---|
| company_name | string | yes | The name of the company to fetch the profile for |
| Name | Type | Req | Description |
|---|---|---|---|
| clutch_guarantee | – | – | Clutch Guarantee is a 14-day, no-questions-asked refund guarantee from participating providers on Clutch. Participating providers include a clause in all of their new client contracts offering the gu… |
| description | string | yes | AI-generated summary of the provider based on its client reviews. Empty when unavailable. |
| details | string | yes | Plain-text block of provider pricing model, hourly rate, rating, review highlights and other facts. Empty when no facts are available. |
| headquarters | string | yes | Headquarters, the provider's first listed office, as 'City, Country'. |
| id | integer | yes | Clutch provider id. |
| logo_url | string | yes | Company logo URL. Empty when the provider has no logo. |
| office_locations | array | yes | All other cities and countries the service provider has offices in. |
| rating | number | yes | Overall client review rating from 0 to 5, rounded to one decimal place. |
| reviews_number | integer | yes | Total number of published client reviews on Clutch. |
| scheduling_url | string | yes | URL to schedule a call with the provider. Empty when the provider offers no scheduling link. |
| title | string | yes | Company name. |
| url | string | yes | Provider profile URL on Clutch. |
| verification_level | string | yes | Clutch verification level: 'unverified', 'basic', or 'premier'. |
| verification_status | string | yes | Human-readable explanation of the Clutch verification level. |
| verified_reviews_number | integer | yes | How many of those reviews come from clients Clutch has verified. |
No examples provided.
get_service_packages List Service Packages ~251
Use this tool when the user wants to see service packages with fixed pricing and scope for a specific type of service. This tool returns standardized packages offered by service providers, including pricing tiers, deliverables, and delivery timelines. Do NOT use this tool for custom project questions (e.g. "How much would it cost to build a custom app?"). It only returns providers' pre-defined, fixed-price packages, not a quote tailored to a specific project; use recommend_service_providers for those needs instead. Examples: - "Show me SEO packages" -> service="SEO" - "What web design packages can I get for $5,000?" -> service="Web Design", budget=5000 - "Marketing packages from agencies in New York" -> service="Digital Marketing", location="New York" Use `page`/`limit` for pagination.
| Name | Type | Req | Description |
|---|---|---|---|
| budget | – | – | The client's budget to filter packages |
| limit | integer | – | The number of packages to return per page. |
| location | – | – | The location to filter packages |
| page | integer | – | The page number (zero-based) for pagination. |
| service | string | yes | The type of service for which to retrieve packages |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
get_service_provider_reviews Get Service Provider's Reviews ~118
Use this tool when the user asks to see client reviews for a specific service provider (company). It returns detailed reviews that include project information, pricing, scope, client feedback, ratings, and more. Optionally filter reviews by a specific service.
| Name | Type | Req | Description |
|---|---|---|---|
| company_name | string | yes | The name of the company to get reviews for |
| limit | integer | – | The maximum number of reviews to return |
| offset | integer | – | The number of reviews to skip for pagination |
| service | – | – | The specific service to filter reviews by |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
recommend_service_providers Recommend Service Providers ~517
Use this tool when the user is looking for service providers (companies, agencies, consultants, contractors, vendors) and describes requirements such as service type, industry, location, budget and pricing, company size, or specific focus areas (technologies/specialties). The tool returns a ranked list of providers that best match the criteria, including basic profile info and review/rating signals for comparison. Use `offset`/`limit` for pagination. Only the top 20 providers of a query are available: `offset` and `limit` that reach past them are trimmed, and an `offset` at or beyond that point returns no providers. Examples: - "Give me top web development companies for small businesses in the healthcare industry" -> service="Web Development", industry="Healthcare", client_type="Small Business( <$10M)" - "I need to improve SEO of my online store" -> service="SEO" - "I need SEO agencies that specialize in Shopify and have at least 10 reviews" -> service="SEO", focus_areas=["Shopify"], min_reviews=10
| Name | Type | Req | Description |
|---|---|---|---|
| client_budget | – | – | The dollar amount the user is willing to spend on the project. |
| client_type | – | – | The type of client the user represents (e.g., 'small business', 'enterprise'). Only set client_type if the user explicitly specifies their business type. |
| company_size | – | – | The size of the company the user is looking for. This parameter is not budget-dependent, only set if the user explicitly requests it. |
| find_near_me | boolean | – | Takes user location into account if set to true, but that must be explicitly requested by the user. In that case the location parameter will be ignored. |
| focus_areas | – | – | – |
| hourly_rate | – | – | The service company's minimum hourly rate. This parameter is not budget-dependent, only set if the user explicitly requests it. |
| industry | – | – | The industry the user is in or the project is related to (e.g., 'Medical', 'eCommerce'). |
| limit | integer | – | The number of providers to return. |
| location | – | – | – |
| min_reviews | integer | – | Minimum number of reviews a provider must have to be considered. Only set min_reviews if the user explicitly requests a minimum review count. |
| offset | integer | – | The number of providers to skip (for pagination). |
| service | string | yes | The type of service the user is looking for (e.g., 'Web Development', 'Digital Marketing'). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | – | yes | – |
No examples provided.
send_message_to_provider Send message to service providers ~482
Reach out to a service provider to get a quote, discuss project needs, explore a partnership, find a job, etc. This tool sends the SAME message to one or more providers via `provider_ids` in a SINGLE call - do not call it multiple times. Never invent provider IDs and never ask the user to supply them. Message composition: - If the user provides a ready-made message, send it as-is without modifications. - If the user describes their intent without providing a message, compose one on their behalf based on their requirements and the conversation context. Keep the composed message concise and grounded strictly in the information provided by the user — do not add details that were not mentioned. - The same message and subject are sent to every provider in the call, so do not include any provider-specific information. Before calling with a composed message: - Show the user the recipients (provider names) and the full message text, and wait for their explicit confirmation. Call this tool only after the user confirms. - If the user asks for changes, show the revised message and wait for confirmation again. - Pass the confirmed message exactly as shown to the user, without modifications. Examples: - "Message the top 3 about my web development project" -> provider_ids=[<id_1>, <id_2>, <id_3>] (IDs of the top 3 providers shown earlier), compose message based on context, subject="Get a quote / discuss my project needs" - "Request a quote from all of these providers" -> provider_ids=[<all provider IDs shown above>], subject="Get a quote / discuss my project needs" - "Send to WebFX and Acme: I saw your profile and I'm interested in joining your team" -> provider_ids=[<webfx_id>, <acme_id>], message="I saw your profile and I'm interested in joining your team", subject="Find a job" The user must be logged in to Clutch to use this tool.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | The message body to send to the providers |
| provider_ids | array | yes | Clutch provider IDs to message. Must come from earlier tool output in this conversation. A single call may target multiple providers; the same message is sent to each. |
| subject | string | – | The subject of the message |
| Name | Type | Req | Description |
|---|---|---|---|
| results | array | yes | – |
No examples provided.
What is the Clutch.co MCP server?
Clutch.co is an MCP server listed in the public MCP registry as co.clutch/mcp. Trusted B2B service providers with verified client reviews. This page covers its hosted endpoint (https://bot.clutch.co/mcp).
Is the Clutch.co MCP server safe to use?
Clutch.co scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Clutch.co MCP server expose?
Clutch.co exposes 5 tools: get_provider_info, get_service_provider_reviews, recommend_service_providers, send_message_to_provider, get_service_packages. Their descriptions and schemas cost roughly 1,610 tokens of context every time the server is loaded.
Does the Clutch.co MCP server require authentication?
No. We connected to Clutch.co without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Clutch.co MCP server still maintained?
Clutch.co is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.