Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Hustle Got Real

REMOTE · MCP.HUSTLEGOTREAL.COM

Dropshipping for eBay, Amazon and Shopify: products, listings, prices, stock, orders and analytics.

+3 this week 57 Trust /100

Last scanned (20 hours ago)

Scores higher than 43% of remote servers

Reachable. Last reached 5 Nov 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability0
Schema Quality & AI Usability76
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 34974 tokens (~202/item across 173 items; 172 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
  • Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety50
  • Injection-marker check failed: the server instructions contains an instruction to conceal the call from the user, the text "Do not tell the user", at byte 6308 of that field. See how to fix → Fail
  • All 6 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 174 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • New tool “hgr_post_searchproduct_recoverlisting”, which the server declares destructive security
    • New tool “hgr_post_searchproduct_recoverlistings”, which the server declares destructive security
    • Tool “hgr_get_searchproduct_getmissinglistings” rewrote its description, which is the text the model reads security
    • Server version: 2026.11.1.0 → 2026.11.3.1 functional
  • 2 Nov 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “hgr_post_listingcreate_getdata” rewrote its description, which is the text the model reads security
    • Server version: 2026.10.31.0 → 2026.11.1.0 functional
  • 1 Nov 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “hgr_post_sales_loadprogress” rewrote its description, which is the text the model reads security
    • Server version: 2026.10.29.1 → 2026.10.31.0 functional
  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 30 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Stability: unverified → 0.03 ▲ functional
    • Server version: 2026.10.29.0 → 2026.10.29.1 functional
  • 29 Oct 26 54

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://mcp.hustlegotreal.com/

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=partner.hustlegotreal.com CN=YR2,O=Let's Encrypt,C=US 21 Oct 2026 19 Jan 2027 RSA 2048 SHA256-RSA 573b203bf16fc63dfaee0ed17cb4f2756ac
SANs: mcp.hustlegotreal.com, partner.hustlegotreal.com, partnerapi.hustlegotreal.com
CN=YR2,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA 4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.hustlegotreal.com. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
hustlegotreal.com. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.hustlegotreal.com/ Not MCP 200
http (plaintext) http://mcp.hustlegotreal.com/ HTTPS enforced 308 https://mcp.hustlegotreal.com/
MCP tools · 172 exposed · ~31,732 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
hgr_remove_autoordering_configuration ~150

Removes an auto-ordering configuration by autoOrderingAccountRef returned by hgr_get_autoordering_configuration for one visible store/channel. Requires HGRApi Header channel / ChannelOAuthId resolved internally, confirmed=true and impactConfirmed=true after warning about consequences.

NameTypeReqDescription
autoOrderingAccountRefstringyesOpaque auto-ordering account reference returned by hgr_get_autoordering_configuration.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_remove_listing ~169

Removes or retires one listing by visible Product ID, or a pending listing by the visible pending listing id. Requires confirmed=true and impactConfirmed=true after warning about consequences. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.
pendingListingIdinteger–Visible pending listing id, only for pending listings where HGRWeb shows this id.
productIdstring–Visible marketplace Product Id / primary id. Prefer this for active or terminated listings.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_reply_support_ticket ~75

Replies to a support ticket with text only. File attachments are blocked by MCP policy. Requires confirmed=true.

NameTypeReqDescription
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact support message.
messagestringyesMessage body.
ticketIdstringyesVisible support ticket id/reference.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_request_noapi_code ~85

Requests a No-API Server verification code for a visible store. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_save_ai_agent_configuration ~186

Saves AI Agent configuration. Requires confirmed=true and impactConfirmed=true; activation requires acceptedAiAgentTerms=true and disabling requires disableWarningConfirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
acceptedAiAgentTermsboolean–Required as true when enabling AI Agent.
body–yesWAPI SaveAgentChannelConfigurationRequest body, for example Enabled=true/false.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
disableWarningConfirmedboolean–Required as true when disabling AI Agent after warning that it will stop learning and may need to start over if reactivated.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_save_autoordering_configuration ~141

Saves auto-ordering configuration with the exact WAPI request body for one visible store/channel. Requires HGRApi Header channel / ChannelOAuthId resolved internally, confirmed=true and impactConfirmed=true for supplier credential/configuration changes. Secret fields are redacted in the response.

NameTypeReqDescription
body–yesWAPI SaveAutoOrderingRequest body.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_save_channel_setting ~130

Saves one channel setting using WAPI SaveOne. Requires confirmed=true and impactConfirmed=true because channel settings can affect many listings. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
body–yesWAPI ChannelConfiguration SaveOneRequest body: Key, Value.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_save_source_setting ~138

Saves one exact setting exposed by HGRWeb Supplier configuration. No supported setting enables, disables, suspends or re-enables a supplier. Requires confirmed=true and impactConfirmed=true because source settings can affect many listings. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
bodyobjectyes–
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_search_orders ~73

Searches orders/order lines by visible order Reference and optional visible store. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
referencestring–Visible marketplace/order reference to search for.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_send_noapi_answer ~94

Sends a No-API Server security answer. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
answerstringyesSecurity answer provided by the user.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_send_noapi_code ~94

Sends a No-API Server verification code. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
codestringyesVerification code received by the user.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_set_manual_tracking_id ~102

Sets the manual tracking/reference state for one exact order line using WAPI ManualTrackingIdSet. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
referencestring–Visible marketplace/order reference.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_set_shipping_address ~126

Sets/corrects the shipping address for an order resolved from the visible order Reference. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
body–yesWAPI shipping address payload. Include shippingAddress only; the MCP resolves the order line from the visible order Reference.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
referencestring–Visible marketplace/order reference.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_stop_order_lines ~90

Stops orders resolved from visible order Reference. Requires confirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
referencestring–Visible marketplace/order reference.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_terminate_listing ~158

Terminates one active listing by visible Product ID. Requires confirmed=true and impactConfirmed=true after warning about consequences. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.
pendingListingIdinteger–Visible pending listing id, only for pending listings where HGRWeb shows this id.
productIdstring–Visible marketplace Product Id / primary id. Prefer this for active or terminated listings.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_ai_publisher_optimization ~123

Updates AI Publisher optimization columns. Requires confirmed=true and impactConfirmed=true. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
body–yesWAPI optimization body: OptimizeTitles, OptimizeDescriptions, OptimizeFields.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_listing ~403

Changes editable fields of one exact listing variation using HGRApi SaveProductChanges. Call only after the listing is exact and the user explicitly confirmed the action. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact change.
dispatchTimeDaysnumber–New dispatch handling time in days.
ignoreRulesboolean–Whether this listing ignores pricing rules.
markupnumber–New percentage markup.
markupFixednumber–New fixed markup.
maxDeliveryDaysnumber–New maximum delivery days setting.
minQuantitynumber–New minimum quantity setting.
monitorPriceboolean–Whether HGR should monitor source price for this listing.
monitorPriceDecreaseboolean–Whether HGR should monitor source price decreases for this listing.
monitorStockboolean–Whether HGR should monitor source stock for this listing.
notesstring–New listing notes.
paymentPolicyinteger–New marketplace payment business policy id.
pricenumber–New channel price.
priceDecreasePercentagenumber–Price decrease percentage setting.
primeOnlyboolean–Whether this listing should use Prime-only source offers when applicable.
productIdstring–Visible marketplace Product Id / primary id. Prefer this when the user provides a Product Id.
quantityinteger–New channel stock quantity.
returnPolicyinteger–New marketplace return business policy id.
shippingPolicyinteger–New marketplace shipping business policy id.
sourceUrlstring–New source product URL.
titlestring–New listing title.
variationProductIdstring–Visible variation Product Id / primary id when the listing has multiple variations.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_noapi_servers ~148

Updates No-API Server credentials/configuration with the exact WAPI credentials array for one visible store/channel. Requires HGRApi Header channel / ChannelOAuthId resolved internally, confirmed=true and impactConfirmed=true. Never returns passwords.

NameTypeReqDescription
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact credential/configuration change.
credentials–yesExact WAPI ManagedServerCredentials[] array. Password values are accepted as input but never returned.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete credential/configuration consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_price_warrior_settings ~129

Updates Price Warrior settings for one visible store. Requires confirmed=true and impactConfirmed=true because repricing can affect many listings. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
body–yesWAPI PriceWarrior UpdateSettingsRequest body.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_pricing_rule ~132

Updates a pricing rule for one visible store. Requires confirmed=true and impactConfirmed=true because pricing rules can affect many listings. Requires HGRApi Header channel / ChannelOAuthId resolved internally.

NameTypeReqDescription
body–yesWAPI PricingRulesUpdateRequest body: RuleId and supported rule fields.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_template ~121

Updates a listing template for one visible store/channel. Requires HGRApi Header channel / ChannelOAuthId resolved internally, confirmed=true and impactConfirmed=true because templates can affect publishing flows.

NameTypeReqDescription
body–yesWAPI Templates UpdateRequest body.
channelOAuthIdintegeryesChannelOAuthId returned by hgr_list_channels for the selected visible store.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.
impactConfirmedbooleanyesMust be true after the user explicitly confirmed the concrete high-impact consequences.

Structured output declared, but exposes no named fields.

No examples provided.

hgr_update_virtual_assistant ~66

Updates or deactivates a Virtual Assistant / VA profile. Requires confirmed=true.

NameTypeReqDescription
body–yesWAPI UpdateRequest body: Id, Active and other supported fields.
confirmedbooleanyesMust be true after the user explicitly requested or confirmed the exact action.

Structured output declared, but exposes no named fields.

No examples provided.

Install

How do I install the Hustle Got Real MCP server?

Hustle Got Real is a hosted endpoint at https://mcp.hustlegotreal.com/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.hustlegotreal.com

# add to Claude Code
claude mcp add --transport http com-hustlegotreal-mcp 'https://mcp.hustlegotreal.com/'
Common questions

What is the Hustle Got Real MCP server?

Hustle Got Real is an MCP server listed in the public MCP registry as com.hustlegotreal/mcp. Dropshipping for eBay, Amazon and Shopify: products, listings, prices, stock, orders and analytics. This page covers its hosted endpoint (https://mcp.hustlegotreal.com/).

Is the Hustle Got Real MCP server safe to use?

Hustle Got Real scores 57 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Hustle Got Real MCP server expose?

Hustle Got Real exposes 172 tools: hgr_get_authenticated_user, hgr_list_channels, hgr_get_subscription_summary, hgr_get_active_listings, hgr_get_pending_listings, and 167 more. Their descriptions and schemas cost roughly 31,732 tokens of context every time the server is loaded.

Does the Hustle Got Real MCP server require authentication?

No. We connected to Hustle Got Real without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Hustle Got Real MCP server still maintained?

Hustle Got Real is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Hustle Got Real MCP server?

VerifyMCP ran 13 checks on Hustle Got Real, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.