Plain Freight
REMOTE · PLAINFREIGHT.COM
All-in DDP quotes for China to USA shipments, 100 g to 2,000 kg, from a live rate card
Available components
Last scanned (54 minutes ago)
Scores higher than 83% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (generate_offer). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1331 tokens (~190/item across 7 items; 5 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 95% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
- Stability: 0.97 → pass security
- 4 Nov 26 −1
- Stability: pass → 0.97 functional
- 15 Oct 26 +1
- Stability: 0.97 → pass security
- 13 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 90. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Oct 26 +3
No change was recorded against any check on this day. Stability & Change Management went from 63 to 83. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://plainfreight.com/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=plainfreight.com | CN=YR2,O=Let's Encrypt,C=US | 23 Oct 2026 | 21 Jan 2027 | RSA 2048 | SHA256-RSA | 654263b6f9bbe7815fae64bc06e0ebf42a9 |
| SANs: plainfreight.com | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of plainfreight.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| plainfreight.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://plainfreight.com/api/mcp | Verified | 200 | |
| http (plaintext) | http://plainfreight.com/api/mcp | HTTPS enforced | 308 | https://plainfreight.com/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_goods Check if goods can be shipped ~144
Checks whether Plain Freight can ship a product from China to the US, and which documents it needs. Records nothing. Input: the product description. Returns a verdict: instant_offer or branded_rate (priced at once, each on its applicable rate) or person_checks_first (for example batteries, chemicals, food, cosmetics, seeds, vapes or weapons: a person reviews the goods before any price), with a plain explanation and the documents or details to have ready. It applies the same goods screen as Plain Freight's offers; it is not legal or customs advice.
| Name | Type | Req | Description |
|---|---|---|---|
| product | string | yes | The product, in the user's words (materials and whether it has a battery help) |
| Name | Type | Req | Description |
|---|---|---|---|
| category | string|null | – | – |
| error | string | – | – |
| explanation | string | – | – |
| have_ready | string|null | – | Documents or details the person will ask for |
| next_step | string | – | – |
| verdict | string | – | instant_offer: priced at once; branded_rate: priced at once on its applicable rate; person_checks_first: no price until a person reviews the goods |
No examples provided.
check_offer_status Check an offer's second review ~122
Reads the result of the second check on a Plain Freight offer, by the offer's quote_id. Read-only. Returns settled (true once the check finished), possibly updated options and summary, follow-up questions whose answers change the price or customs channel, the offer email status, and needs_review. When needs_review is true, prices are withheld until a person at Plain Freight reviews the goods (for example batteries, food or chemicals), and Plain Freight follows up by email.
| Name | Type | Req | Description |
|---|---|---|---|
| quote_id | string | yes | The quote_id of a Plain Freight offer (a UUID) |
| Name | Type | Req | Description |
|---|---|---|---|
| string|null | – | Offer email status: sent, queued, deferred, skipped or failed | |
| error | string | – | – |
| needs_review | boolean | – | – |
| options | array | – | – |
| questions | array | – | – |
| quote_id | string | – | – |
| settled | boolean | – | – |
| text | string|null | – | – |
No examples provided.
estimate_price Estimate China to USA shipping cost ~284
Rough price estimate for shipping goods from China to a US address, 100 g to 2,000 kg. Records nothing, contacts no one and needs no email. Inputs: total weight, and optionally the product and carton sizes or total volume. Returns estimated door to door prices in USD for air (and sea from 10 kg chargeable weight), the chargeable weight used (the greater of actual weight and carton volume in cm3 / 6,000), transit estimates, and whether US import duty is included. Figures come from Plain Freight's pricing engine for densely packed goods, priced on the applicable rate; goods that need a review get no figure. The exact ZIP code, pickup city and cartons can move the price, so the result is an estimate, not an offer.
| Name | Type | Req | Description |
|---|---|---|---|
| carton_count | integer | – | Number of cartons of that size |
| carton_height_cm | number | – | One carton's height in cm |
| carton_length_cm | number | – | One carton's length in cm |
| carton_width_cm | number | – | One carton's width in cm |
| product | string | – | What is being shipped, in a few words (sets the goods rate) |
| total_cbm | number | – | Total volume in cubic meters, if known instead of carton sizes |
| weight_kg | number | yes | Total actual weight of the shipment in kg |
| Name | Type | Req | Description |
|---|---|---|---|
| actual_kg | number | – | – |
| chargeable_kg | number | – | – |
| error | string | – | – |
| estimate | boolean | – | Always true: a rough figure, not an offer |
| goods | object | – | – |
| next_step | string | – | – |
| options | array | – | – |
| priced_as | string | – | – |
| priced_on | string | – | Date the pricing engine produced these figures |
| volumetric_kg | number|null | – | – |
No examples provided.
generate_offer Quote a China to USA shipment ~335
Prices a real shipment from China to a US address, 100 g to 2,000 kg, on Plain Freight's live pricing engine. Returns door to door prices in USD: each option covers freight, US customs clearance and delivery, and says whether US import duty is included (DDP) or paid at import. Carton dimensions affect the price: for light, bulky cargo the volumetric weight sets it. Side effects: each call records a separate quote request with Plain Freight, and if an email is given the written offer is emailed to that address once a second check settles (at most one offer email per address per day). Nothing is booked or charged. The result carries a quote_id, by which the second check's verdict can be read.
| Name | Type | Req | Description |
|---|---|---|---|
| destination_zip | string | – | US destination ZIP code of the shipment |
| dimensions | string | – | Cartons and size, e.g. '4 cartons, 60x40x35 cm each' |
| string | – | Optional. Address the written offer is mailed to; replying to that email is one way to book. | |
| name | string | – | Optional. The name to address the offer email to |
| notes | string | – | Optional shipment facts: HS code, Amazon FBA requirements, delivery constraints, certifications held |
| origin | string | – | Pickup city or supplier's city in China |
| product | string | yes | What is being shipped, e.g. 'LED desk lamps, 500 units' |
| urgency | string | – | – |
| weight_kg | number | yes | Total weight in kg (0.1 to 2000) |
| Name | Type | Req | Description |
|---|---|---|---|
| agent_review | string | – | – |
| book_url | string | – | plainfreight.com booking form, prefilled with this shipment and quote |
| contact | string | – | – |
| error | string | – | – |
| needs_review | boolean | – | true: prices withheld until a person clears the goods |
| next_step | string | – | – |
| options | array | – | – |
| questions | array | – | – |
| quote_id | string|null | – | Reference for the offer's second check and for booking |
| shipment | object | – | – |
| summary | string | – | – |
| valid_days | number | – | – |
No examples provided.
track_shipment Track an existing shipment ~148
Reads a booked Plain Freight shipment from its tracking link. Input: the tracking link from the booking email (https://plainfreight.com/track/<token>) or the bare token; the token is the credential, so only someone the customer shared the link with can read the record. Returns the shipment reference, the current stage on the 10-stage lifecycle (Booking through Delivered), shipment details and the dated event log. Read-only; changes to a booking go by email to info@plainfreight.com with the shipment reference.
| Name | Type | Req | Description |
|---|---|---|---|
| tracking_link | string | yes | The tracking URL from the booking email (https://plainfreight.com/track/<token>), or the token by itself |
| Name | Type | Req | Description |
|---|---|---|---|
| carrier | string|null | – | Shown only once the invoice is paid |
| contact | string | – | – |
| destination_city | string|null | – | – |
| error | string | – | – |
| events | array | – | – |
| goods | string|null | – | – |
| lifecycle | array | – | – |
| origin_city | string|null | – | – |
| record_url | string | – | – |
| reference | string|null | – | – |
| stage | string|null | – | e.g. '7 of 10'; null when cancelled |
| status | string | – | – |
| status_label | string | – | – |
| tracking_number | string|null | – | Shown only once the invoice is paid |
| updated_at | string | – | – |
| weight_kg | number|null | – | – |
No examples provided.
How do I install the Plain Freight MCP server?
Plain Freight is a hosted endpoint at https://plainfreight.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · plainfreight.com
claude mcp add --transport http com-plainfreight-quotes 'https://plainfreight.com/api/mcp'
What is the Plain Freight MCP server?
Plain Freight is an MCP server listed in the public MCP registry as com.plainfreight/quotes. All-in DDP quotes for China to USA shipments, 100 g to 2,000 kg, from a live rate card. This page covers its hosted endpoint (https://plainfreight.com/api/mcp).
Is the Plain Freight MCP server safe to use?
Plain Freight scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Plain Freight MCP server expose?
Plain Freight exposes 5 tools: estimate_price, check_goods, generate_offer, check_offer_status, track_shipment. Their descriptions and schemas cost roughly 1,033 tokens of context every time the server is loaded.
Does the Plain Freight MCP server require authentication?
No. We connected to Plain Freight without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Plain Freight MCP server still maintained?
Plain Freight is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.