{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T16:31:32.601Z","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp","markdownUrl":"https://verifymcp.io/servers/com-whoppah-commerce/mcp.md","server":{"slug":"com-whoppah-commerce","name":"Whoppah","registryName":"com.whoppah/commerce","description":"Search and shop curated second-hand design: furniture, lighting, art and designer bags.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp","type":"remote","identifier":"https://mcp.whoppah.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp","version":"1.1.0","transport":null,"scoredAt":"2026-11-06T09:18:58.188Z"},"score":{"total":87,"tier":"high trust","status":"scored","weekDelta":2,"history":[{"date":"2026-11-06","total":87},{"date":"2026-11-05","total":87},{"date":"2026-11-04","total":86},{"date":"2026-11-03","total":87},{"date":"2026-11-02","total":87},{"date":"2026-11-01","total":86},{"date":"2026-10-31","total":86},{"date":"2026-10-30","total":85},{"date":"2026-10-29","total":85},{"date":"2026-10-28","total":84},{"date":"2026-10-27","total":84},{"date":"2026-10-26","total":84},{"date":"2026-10-25","total":83},{"date":"2026-10-24","total":83},{"date":"2026-10-23","total":82},{"date":"2026-10-22","total":82},{"date":"2026-10-21","total":81},{"date":"2026-10-20","total":81},{"date":"2026-10-19","total":80},{"date":"2026-10-18","total":80},{"date":"2026-10-17","total":79},{"date":"2026-10-16","total":79},{"date":"2026-10-15","total":78},{"date":"2026-10-14","total":78},{"date":"2026-10-13","total":77},{"date":"2026-10-12","total":77},{"date":"2026-10-10","total":76},{"date":"2026-10-07","total":75},{"date":"2026-10-06","total":74},{"date":"2026-10-04","total":73}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":82,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (good).","Tool/resource definitions use about 1017 tokens (~101/item across 10 items; 7 tools + 3 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"101","items":"10","tools":"7","tokens":"1017","resources":"3"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":74,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","10% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"10"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"mcp","type":"remote","identifier":"https://mcp.whoppah.com/mcp","withdrawn":false,"score":87,"current":true,"url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp","markdownUrl":"https://verifymcp.io/servers/com-whoppah-commerce/mcp.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.whoppah.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_catalog","title":"Search Whoppah listings","description":"Search Whoppah's live catalogue of curated second-hand design: furniture, lighting, art, decor and designer bags, every listing screened by Whoppah's curators. Use it when someone wants to find, compare or buy a second-hand design piece listed on Whoppah. Combine a free-text query with filters (category, brand, designer, price range in EUR, condition, colour, material, seller country) and narrow further with the facet counts in the result. Every result can be bought or bid on right now: sold, reserved and expired listings never appear. Each item carries its whoppah.com link; give the buyer that link, because buying and payment happen on whoppah.com.","inputs":[{"name":"brand","type":null,"required":false,"description":null},{"name":"category","type":null,"required":false,"description":null},{"name":"color","type":null,"required":false,"description":null},{"name":"condition","type":null,"required":false,"description":null},{"name":"country","type":null,"required":false,"description":null},{"name":"designer","type":null,"required":false,"description":null},{"name":"language","type":"string","required":false,"description":"The buyer's language: titles come back as whoppah.com shows them in it, and links open the listing's page in it."},{"name":"limit","type":"integer","required":false,"description":null},{"name":"material","type":null,"required":false,"description":null},{"name":"page","type":"integer","required":false,"description":null},{"name":"price_max","type":null,"required":false,"description":null},{"name":"price_min","type":null,"required":false,"description":null},{"name":"query","type":null,"required":false,"description":null},{"name":"sort","type":null,"required":false,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":256},{"name":"get_item","title":"Get listing details","description":"Get the full public details of one listing: description, price in EUR, condition and quality grade, brand and designer, dimensions, materials, photos, seller reference and the whoppah.com link. Pass the id (or slug) from search_catalog. Every item is a one-off, so check it here before recommending a specific piece. Only listings that can be bought or bid on right now are returned. not_found means the item has sold, expired or been withdrawn, not that it never existed: offer the buyer alternatives (search_catalog, or similar_items on a comparable listing) instead of describing it.","inputs":[{"name":"id","type":null,"required":false,"description":null},{"name":"language","type":"string","required":false,"description":"The buyer's language: titles come back as whoppah.com shows them in it, and links open the listing's page in it."},{"name":"slug","type":null,"required":false,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":174},{"name":"similar_items","title":"Find similar listings","description":"Find listings that look and read like a given one, to offer alternatives or comparisons. Pass a product id from search_catalog or get_item.","inputs":[{"name":"language","type":"string","required":false,"description":"The buyer's language: titles come back as whoppah.com shows them in it, and links open the listing's page in it."},{"name":"limit","type":"integer","required":false,"description":null},{"name":"product_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":85},{"name":"get_seller_profile","title":"Get seller profile","description":"Public profile of a Whoppah seller: private or business seller, expert-seller status, and review score with recent review excerpts. Use it when the buyer asks whether a seller can be trusted. Never returns a buyer's or seller's name or contact details: a name in a review excerpt reads [name], and buyers and sellers talk through whoppah.com.","inputs":[{"name":"seller_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":92},{"name":"list_brands_designers","title":"Look up brands and designers","description":"Look up Whoppah's brand and designer index, to spell names correctly, ground answers and build precise search filters. Use kind=brand or kind=designer with an optional name query.","inputs":[{"name":"kind","type":"string","required":false,"description":null},{"name":"limit","type":"integer","required":false,"description":null},{"name":"page","type":"integer","required":false,"description":null},{"name":"query","type":null,"required":false,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":75},{"name":"list_categories","title":"List categories","description":"List the marketplace categories (slugs and titles), to build precise search_catalog filters.","inputs":[{"name":"limit","type":"integer","required":false,"description":null},{"name":"page","type":"integer","required":false,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":39},{"name":"shipping_quote","title":"Get shipping options","description":"Shipping options and prices for one listing to the buyer's country (courier, parcel or pickup), as offered at checkout on whoppah.com. Pass the product id and a country code, e.g. 'de'.","inputs":[{"name":"country","type":"string","required":true,"description":null},{"name":"postal_code","type":null,"required":false,"description":null},{"name":"product_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":74}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T09:18:58.000Z","track":"remote","endpoint":"https://mcp.whoppah.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=mcp.whoppah.com","issuer":"CN=Cloudflare TLS Issuing ECC CA 4,O=SSL Corporation,C=US","notBefore":"2026-10-02T18:26:40Z","notAfter":"2026-12-31T18:19:11Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=Cloudflare TLS Issuing ECC CA 4,O=SSL Corporation,C=US","issuer":"CN=SSL.com TLS Transit ECC CA R2,O=SSL Corporation,C=US","notBefore":"2025-05-29T19:50:15Z","notAfter":"2035-05-27T19:50:14Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=SSL.com TLS Transit ECC CA R2,O=SSL Corporation,C=US","issuer":"CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US","notBefore":"2022-10-21T17:02:23Z","notAfter":"2037-10-17T17:02:22Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US","issuer":"CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB","notBefore":"2025-08-01T00:00:00Z","notAfter":"2028-12-31T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.whoppah.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"whoppah.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-03","recent":[{"id":"chg_01a1b027-74a5-7e84-9967-c121b13aa4c8","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1b027-74a5-7e84-9967-c121b13aa4c8"},{"id":"chg_01a1ab09-0d09-7f08-9792-a541cb02ce28","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1ab09-0d09-7f08-9792-a541cb02ce28"},{"id":"chg_01a1ab09-0d0a-7efc-ba65-1b5779e73c15","kind":"score.total_changed","summary":"Trust score (86 → 87)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1ab09-0d0a-7efc-ba65-1b5779e73c15"},{"id":"chg_01a1a5db-ff2c-7147-a818-31e395692cbb","kind":"check.measure","summary":"Schema quality (89 → 101)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2c-7147-a818-31e395692cbb"},{"id":"chg_01a1a5db-ff2d-75ef-81f3-63d66ddc0d8c","kind":"check.measure","summary":"Tool coverage (0% → 10%)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2d-75ef-81f3-63d66ddc0d8c"},{"id":"chg_01a1a5db-ff2d-7cf9-a103-67b7860be6c3","kind":"check.verdict","summary":"Stability (pass → 0.97)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2d-7cf9-a103-67b7860be6c3"},{"id":"chg_01a1a5db-ff2e-74f7-923d-88acb3cdfe22","kind":"param.added_optional","summary":"“get_item” added an optional parameter “language”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2e-74f7-923d-88acb3cdfe22"},{"id":"chg_01a1a5db-ff2e-79d1-9a90-1f6f06a8e624","kind":"tool.description_changed","summary":"Tool “get_seller_profile” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2e-79d1-9a90-1f6f06a8e624"},{"id":"chg_01a1a5db-ff2f-74e5-b358-7c9882e45d72","kind":"tool.description_changed","summary":"Tool “search_catalog” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2f-74e5-b358-7c9882e45d72"},{"id":"chg_01a1a5db-ff2f-7aef-bbdf-7d31f43fceae","kind":"param.added_optional","summary":"“search_catalog” added an optional parameter “language”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff2f-7aef-bbdf-7d31f43fceae"},{"id":"chg_01a1a5db-ff30-7170-b2dc-16ea80e094b1","kind":"param.added_optional","summary":"“similar_items” added an optional parameter “language”","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff30-7170-b2dc-16ea80e094b1"},{"id":"chg_01a1a5db-ff30-762e-a43b-6f42a697130c","kind":"score.total_changed","summary":"Trust score (87 → 86)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1a5db-ff30-762e-a43b-6f42a697130c"},{"id":"chg_01a19b8d-71d9-7652-b4e0-2a3fd1dd613a","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a19b8d-71d9-7652-b4e0-2a3fd1dd613a"},{"id":"chg_01a19b8d-71da-76b8-a32e-0067a3f776a6","kind":"score.total_changed","summary":"Trust score (86 → 87)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a19b8d-71da-76b8-a32e-0067a3f776a6"},{"id":"chg_01a1913a-473c-7b60-bce1-64a1f046a0dd","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a1913a-473c-7b60-bce1-64a1f046a0dd"},{"id":"chg_01a186e3-832d-7381-b85d-c8511cdb0809","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a186e3-832d-7381-b85d-c8511cdb0809"},{"id":"chg_01a17770-cf4d-728a-9da6-3e2dc81134c3","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a17770-cf4d-728a-9da6-3e2dc81134c3"},{"id":"chg_01a16d24-109c-7ee7-8816-7b356f2a6b91","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a16d24-109c-7ee7-8816-7b356f2a6b91"},{"id":"chg_01a162da-e6df-70d8-b9f7-c79e129c0e9f","kind":"check.reason","summary":"MCP protocol (Implements a current MCP spec version (2026-07-28).)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a162da-e6df-70d8-b9f7-c79e129c0e9f"},{"id":"chg_01a162da-e6e1-7234-9692-ff0411235eec","kind":"server.version_changed","summary":"Server version (1.0.0 → 1.1.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-whoppah-commerce/mcp#chg-chg_01a162da-e6e1-7234-9692-ff0411235eec"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/com-whoppah-commerce/mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-whoppah-commerce/mcp","markdown":"https://verifymcp.io/servers/com-whoppah-commerce/mcp.md","changelogJson":"https://verifymcp.io/servers/com-whoppah-commerce/mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/com-whoppah-commerce/mcp.xml","external":[{"label":"Remote endpoint","href":"https://mcp.whoppah.com/mcp"},{"label":"Website","href":"https://www.whoppah.com/agents"}]}}