{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:21:20.694Z","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog","markdownUrl":"https://verifymcp.io/servers/com-muretai-catalog/catalog.md","server":{"slug":"com-muretai-catalog","name":"Muretai Catalog","registryName":"com.muretai/catalog","description":"Search products across independent online shops. Read-only; links go to each shop's own page.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"catalog","type":"remote","identifier":"https://catalog.muretai.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-muretai-catalog/catalog","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T09:26:51.936Z"},"score":{"total":70,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":70},{"date":"2026-11-04","total":69},{"date":"2026-11-03","total":69},{"date":"2026-11-02","total":68},{"date":"2026-11-01","total":68},{"date":"2026-10-31","total":70},{"date":"2026-10-30","total":70}]},"categories":[{"name":"Endpoint Security","score":77,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC is configured correctly; the domain's records validate against the full chain to the root."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.validated","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":55,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 548 tokens (~548/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"548","items":"1","tools":"1","tokens":"548","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":20,"verdict":"partial","reasons":["Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"6"}}]},{"name":"Tool Coverage","score":95,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","86% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"86"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 2 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"2","judged":"2"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"catalog","type":"remote","identifier":"https://catalog.muretai.com/mcp","withdrawn":false,"score":70,"current":true,"url":"https://verifymcp.io/servers/com-muretai-catalog/catalog","markdownUrl":"https://verifymcp.io/servers/com-muretai-catalog/catalog.md"}],"facts":[{"label":"Endpoint","value":"https://catalog.muretai.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"catalog.search","title":"Search independent shops","description":"Search shops that publish a signed Agent Card, plus shops listed from public data (provenance \"unclaimed\": search-only, no door). Shops are listed by how well their PRODUCTS match, best first; demo stores, wholesalers, off-topic sellers and non-shop sites (reviews, how-to, repair, coupons, with no known price) are left out and counted in `filtered`. Each result gives the shop's origin, DID, Agent Card URL and its best matching products (name, price, link, image when the shop is signed or claimed), so an agent can go straight to that shop's Agent Entry with a signed request. Without `limit` the answer is the top 5 shops with 3 products each (`more` says how many further shops matched); pass `limit` for more shops, or use GET /catalog/search for the full rows.","inputs":[{"name":"in_stock","type":"boolean","required":false,"description":"true: only in-stock products, and only shops that have one."},{"name":"limit","type":"integer","required":false,"description":null},{"name":"max_price","type":"number","required":false,"description":"Keep products whose known price (a fixed price, or the low end of a range) is at most this, in the shop's currency. A product with an unknown price never passes."},{"name":"q","type":"string","required":false,"description":"Words to match in shop cards and products."},{"name":"sort","type":"string","required":false,"description":"\"price\": each shop's products cheapest first, unknown prices last."},{"name":"tags","type":"array","required":false,"description":"Keep shops whose card skills carry ALL of these tags."},{"name":"unfiltered","type":"boolean","required":false,"description":"Operators only. true: also list the shops the relevance filters leave out (demo/sample stores, wholesalers, off-topic sellers, non-shop sites); `filtered` counts them otherwise."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":351}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:26:51.000Z","track":"remote","endpoint":"https://catalog.muretai.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=catalog.muretai.com","issuer":"CN=YE2,O=Let's Encrypt,C=US","notBefore":"2026-10-16T17:34:52Z","notAfter":"2027-01-14T17:34:51Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"secure","label":"Secure","name":"catalog.muretai.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"muretai.com.","outcome":"verified","label":"Verified"},{"zone":"catalog.muretai.com.","outcome":"verified","label":"Verified"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a1ab08-5331-75c2-be98-16030fbef8ff","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a1ab08-5331-75c2-be98-16030fbef8ff"},{"id":"chg_01a1a0b3-913e-75a0-a351-bb398333923c","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a1a0b3-913e-75a0-a351-bb398333923c"},{"id":"chg_01a19666-8747-7200-8fd6-b1007cd3e9bf","kind":"check.verdict","summary":"Schema quality (pass → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-8747-7200-8fd6-b1007cd3e9bf"},{"id":"chg_01a19666-8748-7566-97b9-7dff0eaae741","kind":"tool.description_changed","summary":"Tool “catalog.search” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-8748-7566-97b9-7dff0eaae741"},{"id":"chg_01a19666-8749-735b-885b-d561e3a6029b","kind":"param.added_optional","summary":"“catalog.search” added an optional parameter “unfiltered”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-8749-735b-885b-d561e3a6029b"},{"id":"chg_01a19666-8749-7b9a-992e-1da4617ac567","kind":"server.version_changed","summary":"Server version (1 → 268f3d14b3369197157de60ec38fd162d8ff684b)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-8749-7b9a-992e-1da4617ac567"},{"id":"chg_01a19666-874a-7400-b676-66f140ceac15","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-874a-7400-b676-66f140ceac15"},{"id":"chg_01a19666-874a-7ac6-9439-e88c09c5b520","kind":"score.total_changed","summary":"Trust score (70 → 68)","materiality":"functional","direction":"regression","scoreDelta":-2,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19666-874a-7ac6-9439-e88c09c5b520"},{"id":"chg_01a19140-7a50-7ef6-ac36-046307c65e68","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a19140-7a50-7ef6-ac36-046307c65e68"},{"id":"chg_01a18ce7-35ea-7f39-ac04-0262837a68ab","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-muretai-catalog/catalog#chg-chg_01a18ce7-35ea-7f39-ac04-0262837a68ab"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-muretai-catalog/catalog/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-muretai-catalog/catalog","markdown":"https://verifymcp.io/servers/com-muretai-catalog/catalog.md","changelogJson":"https://verifymcp.io/servers/com-muretai-catalog/catalog/changelog.json","changelogRss":"https://verifymcp.io/servers/com-muretai-catalog/catalog.xml","external":[{"label":"Remote endpoint","href":"https://catalog.muretai.com/mcp"},{"label":"Website","href":"https://catalog.muretai.com/llms.txt"}]}}