# com.flo-voice1/acp-sandbox (remote · acp-sandbox.flo-voice1.com)

Agentic Commerce Protocol sandbox: agent builds a cart, human approves a real PayPal payment.

- Trust score: 68/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-24

> **Recent critical change**: Authorization (2026-10-24). See the changelog below before you install this server.

## Components

- remote · `acp-sandbox.flo-voice1.com`: 68/100 (this document), [markdown](https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox.md), [page](https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox)

## Channel facts

- Endpoint: `https://acp-sandbox.flo-voice1.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-24.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (update_checkout).
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 64/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 553 tokens (~69/item across 8 items; 8 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 47/100
  - Stability observed for 14 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 83/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 50% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the com.flo-voice1/acp-sandbox MCP server?

com.flo-voice1/acp-sandbox is a hosted endpoint at https://acp-sandbox.flo-voice1.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-flo-voice1-acp-sandbox 'https://acp-sandbox.flo-voice1.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-flo-voice1-acp-sandbox": {
      "url": "https://acp-sandbox.flo-voice1.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-flo-voice1-acp-sandbox": {
      "type": "http",
      "url": "https://acp-sandbox.flo-voice1.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-flo-voice1-acp-sandbox]
url = "https://acp-sandbox.flo-voice1.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-flo-voice1-acp-sandbox": {
      "type": "remote",
      "url": "https://acp-sandbox.flo-voice1.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-flo-voice1-acp-sandbox --url 'https://acp-sandbox.flo-voice1.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-flo-voice1-acp-sandbox:
    url: "https://acp-sandbox.flo-voice1.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-flo-voice1-acp-sandbox": {
      "Transport": "http",
      "Url": "https://acp-sandbox.flo-voice1.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-flo-voice1-acp-sandbox -t streamable-http -u 'https://acp-sandbox.flo-voice1.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-flo-voice1-acp-sandbox": {
      "type": "http",
      "url": "https://acp-sandbox.flo-voice1.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-24 (score 68, +1)

- [critical regression] Authorization: unverified → fail
- [security] Tool “create_checkout” rewrote its description, which is the text the model reads
- [security] Tool “request_paypal_payment” rewrote its description, which is the text the model reads
- [security] Tool “update_checkout” rewrote its description, which is the text the model reads
- [security] Tool “wait_for_payment_approval” rewrote its description, which is the text the model reads
- [security] Tool “cancel_checkout” is now declared destructive
- [security] Tool “complete_checkout” is now declared destructive
- [security] Tool “update_checkout” is now declared destructive

### 2026-10-21 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-19 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-17 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-15 (score 64, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-13 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-12 (score 62, +1)

- [functional improvement] Stability: unverified → 0.07

### 2026-10-10 (score 61)

First indexed and scored.

## MCP tools (8)

### `list_products` (~26 tokens)

List products

List everything the demo store sells, with product ids and prices. Prices are in USD.

### `create_checkout` (~112 tokens)

Create a checkout

Start a checkout (an Agentic Commerce Protocol checkout session) with the products and quantities the user wants. Returns the session id, the cart and its total. If no api_key is given, a sandbox key is created and returned.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `buyer_email` (string): The buyer's email, if the user gave one.
- `items` (array, required): Products to buy, by product_id from list_products.

### `update_checkout` (~74 tokens)

Change the cart

Replace the items in an open checkout (e.g. the user changed their mind). Any PayPal payment created for the old total is dropped.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `items` (array, required)
- `session_id` (string, required)

### `get_checkout` (~53 tokens)

Get a checkout

Read the current cart, total, payment status and order of a checkout.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `session_id` (string, required)

### `request_paypal_payment` (~70 tokens)

Ask the user to pay with PayPal

Create a PayPal (sandbox) payment for the checkout's exact total. Returns approve_url, the PayPal link where the user approves the payment.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `session_id` (string, required)

### `wait_for_payment_approval` (~81 tokens)

Wait for the user to approve the PayPal payment

Wait (up to 45s per call) until PayPal reports the user approved the payment. Returns still_waiting if the user has not approved yet.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `session_id` (string, required)
- `timeout_seconds` (integer)

### `complete_checkout` (~90 tokens)

Complete the checkout

Place the order. With payment "paypal" the approved PayPal payment is captured first, and the order only goes through if PayPal confirms the money for the exact total. "mock" skips real payment (testing only).

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `payment` (string)
- `session_id` (string, required)

### `cancel_checkout` (~47 tokens)

Cancel a checkout

Cancel an open checkout. Nothing is charged.

Input parameters:

- `api_key` (string): Sandbox key from create_checkout (not needed if the connection already carries one).
- `session_id` (string, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox#diagnostics

## Score history

- 2026-10-24: 68
- 2026-10-23: 67
- 2026-10-22: 67
- 2026-10-21: 67
- 2026-10-20: 66
- 2026-10-19: 66
- 2026-10-18: 65
- 2026-10-17: 65
- 2026-10-16: 64
- 2026-10-15: 64
- 2026-10-14: 63
- 2026-10-13: 63
- 2026-10-12: 62
- 2026-10-10: 61

## Common questions

### What is the com.flo-voice1/acp-sandbox MCP server?

com.flo-voice1/acp-sandbox is an MCP server listed in the public MCP registry as com.flo-voice1/acp-sandbox. Agentic Commerce Protocol sandbox: agent builds a cart, human approves a real PayPal payment. This page covers its hosted endpoint (https://acp-sandbox.flo-voice1.com/mcp).

### Is the com.flo-voice1/acp-sandbox MCP server safe to use?

com.flo-voice1/acp-sandbox scores 68 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.flo-voice1/acp-sandbox MCP server expose?

com.flo-voice1/acp-sandbox exposes 8 tools: list_products, create_checkout, update_checkout, get_checkout, request_paypal_payment, and 3 more. Their descriptions and schemas cost roughly 553 tokens of context every time the server is loaded.

### Does the com.flo-voice1/acp-sandbox MCP server require authentication?

No. We connected to com.flo-voice1/acp-sandbox without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the com.flo-voice1/acp-sandbox MCP server still maintained?

com.flo-voice1/acp-sandbox is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://acp-sandbox.flo-voice1.com/mcp
- Repository: https://github.com/flovoice53-tech/acp-sandbox
- Changelog RSS feed: https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox.json
- HTML version of this page: https://verifymcp.io/servers/com-flo-voice1-acp-sandbox/acp-sandbox