{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:24:21.394Z","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent","markdownUrl":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent.md","server":{"slug":"com-eatloyalist-restaurant-reservations","name":"Loyalist Reservations","registryName":"com.eatloyalist/restaurant-reservations","description":"Book tables at restaurants on the Loyalist network. No login; read availability, then book.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"agent","type":"remote","identifier":"https://agent.eatloyalist.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T08:04:22.046Z"},"score":{"total":78,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":78},{"date":"2026-11-04","total":77},{"date":"2026-11-03","total":77},{"date":"2026-11-02","total":76},{"date":"2026-11-01","total":76},{"date":"2026-10-31","total":76},{"date":"2026-10-30","total":75},{"date":"2026-10-29","total":75},{"date":"2026-10-28","total":74},{"date":"2026-10-27","total":74},{"date":"2026-10-26","total":73},{"date":"2026-10-25","total":73},{"date":"2026-10-24","total":72},{"date":"2026-10-23","total":72},{"date":"2026-10-22","total":71},{"date":"2026-10-21","total":71},{"date":"2026-10-20","total":70},{"date":"2026-10-19","total":70},{"date":"2026-10-18","total":69},{"date":"2026-10-17","total":69},{"date":"2026-10-16","total":69},{"date":"2026-10-15","total":68},{"date":"2026-10-14","total":68}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":57,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 1757 tokens (~351/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"351","items":"5","tools":"5","tokens":"1757","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":73,"verdict":"partial","reasons":["Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"22"}}]},{"name":"Tool Coverage","score":67,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"6","judged":"6"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"agent","type":"remote","identifier":"https://agent.eatloyalist.com/mcp","withdrawn":false,"score":78,"current":true,"url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent","markdownUrl":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent.md"}],"facts":[{"label":"Endpoint","value":"https://agent.eatloyalist.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"find_venues","title":null,"description":"Restaurants bookable through this network, and what each one's system supports.\n\n        Returns every venue that has opted in, across restaurant groups. Two optional filters\n        narrow it, never widen it: `signup_form_id` to one website's venues when you found an\n        Orion signup embed on a restaurant's page, and `venue_id` to a single venue when\n        you already have its loyalist-venue-id (off a page's markup or a ReserveAction entry\n        point) and want just that one rather than listing them all and matching yourself.\n        Neither can reach a venue that has not opted in.\n\n        A venue with `bookable: false` has no reservation system connected and will return\n        no availability.","inputs":[{"name":"signup_form_id","type":null,"required":false,"description":null},{"name":"venue_id","type":null,"required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":172},{"name":"get_availability","title":null,"description":"Bookable times at one venue, on one date, for one party size.\n\n        `date` is the venue's own local calendar date, `YYYY-MM-DD`. Each slot carries a\n        `slot_id` to pass to book and a `starts_at` that is a full venue-local datetime, so\n        a service running past midnight is unambiguous without you having to infer the day.\n\n        An empty `slots` list means nothing is open on those terms, not that the venue is\n        closed. Try a different time, party size or date before telling someone it is full.","inputs":[{"name":"date","type":"string","required":true,"description":null},{"name":"party_size","type":"integer","required":true,"description":null},{"name":"venue_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":155},{"name":"book","title":null,"description":"Book a table. This takes a real table at a real restaurant.\n\n        Pass a `slot_id` from get_availability. Confirm the venue, date, time and party size\n        with the person before calling this, and do not call it speculatively: there is no\n        cancel tool, so a booking made by mistake has to be undone by the guest phoning the\n        restaurant.\n\n        Calling it twice with identical arguments is safe and returns the same reservation\n        rather than taking a second table. Changing the slot or the guest makes it a\n        different booking, so re-read availability rather than editing the arguments to\n        \"retry\".\n\n        `phone` is optional here but required by some venues; omitting it can come back as\n        `guest_field_required`. `note` reaches the restaurant as the reservation's note.\n\n        `source` is where you found this venue: if the restaurant's own website told you a\n        value to pass (in its markup or llms.txt), send it here so the restaurant can see its\n        own site drove the booking. Leave it out if you did not arrive through one.\n\n        `reservation_id` is for your own use, to read the booking back with get_reservation.\n        It is not a confirmation number the venue knows, so do not read it out to the guest:\n        tell them the restaurant, date, time and party size instead.","inputs":[{"name":"email","type":"string","required":true,"description":null},{"name":"first_name","type":"string","required":true,"description":null},{"name":"last_name","type":"string","required":true,"description":null},{"name":"note","type":null,"required":false,"description":null},{"name":"phone","type":null,"required":false,"description":null},{"name":"slot_id","type":"string","required":true,"description":null},{"name":"source","type":null,"required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":345},{"name":"get_reservation","title":null,"description":"Read one booking this credential made back from the venue.\n\n        Use it to confirm a booking landed. A `status` of `pending` means the venue has not\n        answered yet, not that it failed; treat anything you do not recognise as\n        non-terminal rather than reporting a failure.","inputs":[{"name":"reservation_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":78},{"name":"join_waitlist","title":null,"description":"Ask to be told if a table opens at a time the guest actually wants.\n\n        This is not a reservation and never becomes one by itself. The venue contacts the\n        guest if something frees up, so say that plainly rather than implying a table is\n        held.\n\n        Offer it whenever the guest cannot get a time that suits them, which is far more\n        often than a venue being completely full: someone who wants 7:30 and is offered\n        5:00 or 9:45 may well prefer to wait for 7:30. An empty get_availability is only\n        the most obvious case. Try other times, party sizes and dates first, then ask\n        whether they would rather wait than take a time that does not work. Record what\n        they wanted in `time_range`, not the time you found.\n\n        `date` is the venue's own local calendar date, `YYYY-MM-DD`. `time_range` is\n        required and is the window in the guest's words, like \"7:00 PM - 9:00 PM\" or\n        \"7:00 PM\"; ask the guest for it rather than guessing, because the venue works the\n        list by when people wanted to come. The email address is where the confirmation\n        goes, so it must be the guest's own.\n\n        Not every venue accepts these. One that does not refuses with a message saying so,\n        which is an answer, not an error to retry.\n\n        There is no reference number to give the guest, so the response is the only record\n        either of you gets. Confirm it back to them by the restaurant, date and time.\n\n        Mention the confirmation email only when `confirmation_sent` is true. When it is\n        false the request is still on the venue's list, the note simply did not go out, so\n        say they are on the list and that no email is coming rather than promising one.","inputs":[{"name":"date","type":"string","required":true,"description":null},{"name":"email","type":"string","required":true,"description":null},{"name":"first_name","type":"string","required":true,"description":null},{"name":"last_name","type":"string","required":true,"description":null},{"name":"notes","type":null,"required":false,"description":null},{"name":"party_size","type":"integer","required":true,"description":null},{"name":"phone","type":null,"required":false,"description":null},{"name":"time_range","type":"string","required":true,"description":null},{"name":"venue_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":476}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:04:22.000Z","track":"remote","endpoint":"https://agent.eatloyalist.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_256_GCM_SHA384","chainError":null,"certificates":[{"subject":"CN=agent.eatloyalist.com","issuer":"CN=YR2,O=Let's Encrypt,C=US","notBefore":"2026-10-06T19:14:28Z","notAfter":"2027-01-04T19:14:27Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR2,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"agent.eatloyalist.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"eatloyalist.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-14","recent":[{"id":"chg_01a1aabc-cbb1-7479-a8f1-442c8829e271","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a1aabc-cbb1-7479-a8f1-442c8829e271"},{"id":"chg_01a1a06d-dc14-76a2-a259-4b208e36b9e0","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a1a06d-dc14-76a2-a259-4b208e36b9e0"},{"id":"chg_01a190fa-fa33-7dc8-b337-bb71cbff3139","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a190fa-fa33-7dc8-b337-bb71cbff3139"},{"id":"chg_01a186ae-9d0c-726d-a095-d8ac5c28c48e","kind":"server.version_changed","summary":"Server version (1.28.1 → 1.30.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a186ae-9d0c-726d-a095-d8ac5c28c48e"},{"id":"chg_01a186ae-9d0c-7b74-87bf-81c9018d6f79","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a186ae-9d0c-7b74-87bf-81c9018d6f79"},{"id":"chg_01a17c61-4819-7603-b3dc-cfabbcb9d5d8","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a17c61-4819-7603-b3dc-cfabbcb9d5d8"},{"id":"chg_01a17214-4072-75d5-ae43-3104c5386e7b","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a17214-4072-75d5-ae43-3104c5386e7b"},{"id":"chg_01a167c7-888f-7da9-9cce-46f41defe2e6","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a167c7-888f-7da9-9cce-46f41defe2e6"},{"id":"chg_01a15d7a-ef44-7f08-9c47-5f9677075a14","kind":"tool.description_changed","summary":"Tool “find_venues” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a15d7a-ef44-7f08-9c47-5f9677075a14"},{"id":"chg_01a15d7a-ef46-72ea-bc86-fe3f8f51a961","kind":"server.name_changed","summary":"The server changed its declared name (loyalist-reservations → orion-reservations)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a15d7a-ef46-72ea-bc86-fe3f8f51a961"},{"id":"chg_01a15d7a-ef47-756a-a48e-08d2c90f841c","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a15d7a-ef47-756a-a48e-08d2c90f841c"},{"id":"chg_01a15d7a-ef47-7bc4-8148-65aead4e6c64","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a15d7a-ef47-7bc4-8148-65aead4e6c64"},{"id":"chg_01a1532e-4966-757a-b4a6-58910fe36375","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a1532e-4966-757a-b4a6-58910fe36375"},{"id":"chg_01a143bb-0843-7c69-85fc-28d29d378794","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a143bb-0843-7c69-85fc-28d29d378794"},{"id":"chg_01a13e95-0160-7333-9cfc-64483725ca39","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a13e95-0160-7333-9cfc-64483725ca39"},{"id":"chg_01a13893-47f3-761b-b06b-b716f5ecd6d7","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent#chg-chg_01a13893-47f3-761b-b06b-b716f5ecd6d7"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent","markdown":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent.md","changelogJson":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent/changelog.json","changelogRss":"https://verifymcp.io/servers/com-eatloyalist-restaurant-reservations/agent.xml","external":[{"label":"Remote endpoint","href":"https://agent.eatloyalist.com/mcp"}]}}