DouxProcess Directory
REMOTE · DOUXPROCESS.DIRECTORY
Is a US business licensed, bonded and insured today? From the government record. Free, no paid rank.
Available components
Last scanned (15 minutes ago)
Scores higher than 81% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Search and Retrieval
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2618 tokens (~137/item across 19 items; 13 tools + 6 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management43
- Stability observed for 13 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
- Schema quality: 192 → 137 ▲ functional
- Schema quality: excellent → good functional
- 30 Oct 26 0
- Schema quality: 137 → 192 ▼ functional
- Schema quality: good → excellent functional
- This server's schema is too large to store in full, so we cannot compare its tools day to day functional
- 29 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 123 → 137 ▼ functional
- New tool “book_estimate” functional
- New tool “request_quotes” functional
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: pass → fail ▼ functional
- Tool coverage: 83% → 89% ▲ functional
- Server version: 1.1.0 → 1.2.0 functional
- New tool “verify_business” functional
- New tool “watch_business” functional
- New tool “license_history” functional
- New tool “watch_licenses” functional
- 24 Oct 26 +5
- The server rewrote its instructions, which are the text every model session reads security
- Tool “find_businesses” rewrote its description, which is the text the model reads security
- Tool “get_business” rewrote its description, which is the text the model reads security
- Tool “list_categories” rewrote its description, which is the text the model reads security
- Tool “request_contact” rewrote its description, which is the text the model reads security
- Schema quality: 119 → 106 ▲ functional
- Tool coverage: 58% → 83% ▲ functional
- Stability: unverified → 0.03 ▲ functional
- MCP protocol: fail → pass ▲ functional
- Tool “find_businesses” now declares an output schema ▲ functional
- Tool “get_business” now declares an output schema ▲ functional
- Tool “list_categories” now declares an output schema ▲ functional
- Tool “request_contact” now declares an output schema ▲ functional
- The server now declares the “prompts” capability functional
- The server now declares the “resources” capability functional
- First check of Capabilities: pass functional
- First check of Schema quality: 100 functional
- First check of Tool coverage: 100 functional
- New prompt “find_a_pro” functional
- New prompt “verify_a_license” functional
- MCP protocol version: 2025-06-18 → 2026-07-28 functional
- New resource “business-view” functional
- New resource “categories” functional
- New resource “ranking-rule” functional
- New resource “request-service” functional
- New resource “results-view” functional
- New resource “sources” functional
- Server version: 1.0.0 → 1.1.0 functional
- New tool “ask” functional
- New tool “request_service” functional
- New tool “verify_license” functional
- “find_businesses” added an optional parameter “cursor” cosmetic
- “find_businesses” added an optional parameter “limit” cosmetic
- “find_businesses” added an optional parameter “postal_code” cosmetic
- “find_businesses” added an optional parameter “radius_miles” cosmetic
- “find_businesses” added an optional parameter “where” cosmetic
- “find_businesses” reworded the description of “page” cosmetic
- “request_contact” reworded the description of “consent” cosmetic
- “request_contact” reworded the description of “details” cosmetic
- “request_contact” reworded the description of “email” cosmetic
- “request_contact” reworded the description of “phone” cosmetic
- “request_contact” reworded the description of “slug” cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://douxprocess.directory/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=douxprocess.directory | CN=YE1,O=Let's Encrypt,C=US | 23 Oct 2026 | 21 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 5a3904968781a3b0336877b03218c7cfef1 |
| SANs: douxprocess.directory | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of douxprocess.directory. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| directory. | present | 5701 | 8 | Verified |
| douxprocess.directory. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | geolocation=(), microphone=(), camera=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://douxprocess.directory/mcp | Verified | 200 | |
| http (plaintext) | http://douxprocess.directory/mcp | HTTPS enforced | 301 | https://douxprocess.directory/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
ask Ask the directory ~93
Ask in plain words ('licensed electrician near 92101 who does EV chargers') and get a short answer built only from listings, plus the businesses it rests on, in the published order. Same rules as find_businesses: no ranking or recommendation language, coverage stated honestly.
| Name | Type | Req | Description |
|---|---|---|---|
| question | string | yes | The person's question, in their words. |
| where | string | – | A place, if it is not in the question. |
| Name | Type | Req | Description |
|---|---|---|---|
| businesses | array | yes | – |
| covered | boolean | – | – |
| followups | array | – | – |
| has_more | boolean | – | – |
| intent | object | – | – |
| label | string | – | – |
| more_url | string | – | – |
| note | string | – | – |
| ranking | string | yes | – |
| text | string | yes | – |
No examples provided.
book_estimate Book an estimate visit ~201
Books an estimate visit with ONE contractor the person chose whose listing shows luma.books_online. The contractor calls the person to confirm the time. Call it once without consent to get consent_text, show it, and call again with consent=true only if they agree.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address of the job, as the person gave it for this booking. |
| consent | boolean | yes | True only if the person read and agreed to consent_text. |
| job | string | yes | What the job is, in the person's words. |
| name | string | yes | The person's name. |
| phone | string | yes | A 10-digit phone number the contractor calls to confirm. |
| preferred_times | string | – | Optional: days and times that suit them. |
| site | string | – | Or the Luma site from the listing's luma.site. |
| slug | string | – | The listing slug from find_businesses (a listing with luma.books_online). |
| Name | Type | Req | Description |
|---|---|---|---|
| booked | boolean | yes | – |
| business | string | – | – |
| consent_text | string | – | – |
| contact_directly | object | – | – |
| next | string | – | – |
| reference | string | – | – |
| site_url | string | – | – |
| why | string | – | – |
No examples provided.
find_businesses Find businesses ~277
Search the DouxProcess Directory for US businesses by what the person needs (roofer, electrician, insurance agency...) and where (a city and state, a ZIP, or a state). Returns the matches in the published ranking order with license, how it was checked, phone, website and listing page. covered=false with a note means the directory does not hold that kind of business or place yet: say so, do not guess. Nobody pays for placement; listings affiliated with DouxProcess's owner carry a disclosure, pass it on. Do not rank, rate or recommend; show the options and let the person choose.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | A category id from list_categories, e.g. roofer. |
| city | string | – | – |
| cursor | string | – | next_cursor from the previous call. |
| limit | integer | – | – |
| page | integer | – | Older clients: a page number. Prefer cursor. |
| postal_code | string | – | A 5-digit ZIP. |
| query | string | – | What the person needs, in their words. |
| radius_miles | number | – | – |
| state | string | – | Two-letter US state. |
| where | string | – | A place: 'Pasadena, CA', a 5-digit ZIP, or a state. Never the person's own address or GPS. |
| Name | Type | Req | Description |
|---|---|---|---|
| businesses | array | yes | – |
| count | integer | yes | – |
| covered | boolean | yes | – |
| has_more | boolean | yes | – |
| intent | object | – | – |
| next_cursor | string|null | – | – |
| note | string | – | – |
| ranking | string | yes | – |
| total | integer|null | – | – |
No examples provided.
get_business Get one business ~84
One business's details: licenses with their basis (issuer_file = matched against the issuer's own published file on checked_at; stated = given by the business, not yet matched, send the person to source_url), contact, whether it takes requests, and its own agent addresses (MCP and A2A).
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | The slug from find_businesses. |
| Name | Type | Req | Description |
|---|---|---|---|
| about | string | – | – |
| agent | object | – | – |
| booking_link | string | – | – |
| can_take_requests | boolean | – | – |
| categories | array | – | – |
| city | string | – | – |
| disclosure | string | – | – |
| languages | array | – | – |
| licences | array | – | – |
| licenses | array | – | – |
| luma | object | – | – |
| mcp_url | string | – | – |
| name | string | yes | – |
| note | string | – | – |
| page | string | yes | – |
| phone | string | – | – |
| postal | string | – | – |
| quote_link | string | – | – |
| region | string | – | – |
| request_contact | string | – | – |
| service_area | object | – | – |
| slug | string | yes | – |
| status | string | – | – |
| street | string | – | – |
| website | string | – | – |
No examples provided.
license_history License history ~142
A California contractor license's record in the CSLB's public file, and every change since the directory began reading it daily: status and suspensions, workers' comp type and dates, bond amounts and dates, classes, expiry. Give a CSLB license number or a listing link. It never includes an insurer, surety or person's name, or a policy, bond or case number. Report what it says; do not judge the business. Not for decisions about a person's credit, employment, insurance or housing.
| Name | Type | Req | Description |
|---|---|---|---|
| license | string | yes | A CSLB license number (e.g. 1000002), or a listing link or slug from find_businesses. |
| Name | Type | Req | Description |
|---|---|---|---|
| found | boolean | yes | – |
| how_checked | string | – | – |
| license | string | – | – |
| licenses | array | – | – |
| note | string | – | – |
| page | string | – | – |
| slug | string | – | – |
| watch | string | – | – |
No examples provided.
list_categories List categories ~50
Every category with its id, NAICS 2022 code, plain name, Google Business Profile names, how many listings it has, and whether requests for it are sent (health is listed but never routed).
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | yes | – |
| note | string | – | – |
| total | integer | – | – |
No examples provided.
request_contact Send a request to one business ~219
Sends the person's request to the ONE business they chose, so it can reply to them. Only claimed listings take requests, and health businesses never do. Before calling, show the person this sentence and get their agreement: 'I agree that DouxProcess sends my name, my contact details and this request to <business>, and only to them, so they can reply to me about it.' Set consent=true only if they agreed. Clients that support forms get a consent form instead. Never include health details, card numbers, ID numbers or passwords.
| Name | Type | Req | Description |
|---|---|---|---|
| consent | boolean | yes | True only if the person read and agreed to the consent sentence. |
| details | string | yes | What they need, in their words. No health details, card numbers, ID numbers or passwords. |
| string | – | An email address the business can reply to. | |
| name | string | yes | The person's name. |
| phone | string | – | Or a phone number the business can reply to. |
| slug | string | yes | The slug from find_businesses or get_business. |
| Name | Type | Req | Description |
|---|---|---|---|
| business | string | – | – |
| consent_text | string | – | – |
| contact_directly | object | – | – |
| next | string | – | – |
| reference | string | – | – |
| routed | boolean | – | – |
| sent | boolean | yes | – |
| why | string | – | – |
No examples provided.
request_quotes Get quotes from contractors nearby ~255
Sends the person's request to up to 3 licensed contractors near them who use Luma (the contractor app DouxProcess Inc. builds), Luma Pro members first, and returns the other matches with their own contact details. Call it once without consent to get consent_text and the disclosure, show both to the person, and call again with consent=true only if they agree. Never include card numbers, ID numbers or passwords.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Optional: the job address, only if the person gave it for this request. |
| category | string | yes | A category id from list_categories, e.g. roofer. |
| consent | boolean | yes | True only if the person read and agreed to consent_text. |
| details | string | yes | What they need, in their words. No card numbers, ID numbers or passwords. |
| string | – | Or an email address. | |
| name | string | yes | The person's name. |
| phone | string | – | A phone number the businesses can reply to. |
| preferred_times | string | – | Optional: when they are free. |
| where | string | yes | A city and state ('Pasadena, CA') or a 5-digit ZIP. Never the person's own street address. |
| Name | Type | Req | Description |
|---|---|---|---|
| consent_text | string | – | – |
| count | integer | – | – |
| disclosure | string | – | – |
| next | string | – | – |
| others | array | – | – |
| sent | boolean | yes | – |
| sent_to | array | – | – |
| why | string | – | – |
No examples provided.
request_service Request a quote ~82
Open the request form for one business the person chose (ChatGPT local services Get Quote). The form shows the consent sentence and sends only when the person ticks it. For a business that does not take requests it shows the business's own phone and website.
| Name | Type | Req | Description |
|---|---|---|---|
| business_id | string | yes | The business id (its slug) from find_businesses or the business feed. |
| Name | Type | Req | Description |
|---|---|---|---|
| business | object | yes | – |
| can_request | boolean | yes | – |
| consent_text | string | yes | – |
| how | string | – | – |
No examples provided.
verify_business Is it licensed, bonded and insured ~207
Is this business licensed, bonded and insured today, from the government record. Give a listing slug, a license number, or a business name with its two-letter state. Returns licensed, bonded and insured as true, false or null (the record does not say), each with its source, checked_at day and record_url, the board's open gaps, and the listing URL. For CSLB contractors insured means workers' comp. Report the facts and link the record; do not judge the business. Not for decisions about a person's credit, employment, insurance or housing.
| Name | Type | Req | Description |
|---|---|---|---|
| issuer | string | – | The issuer code with a license number, e.g. CA-CSLB. |
| license | string | – | A license number, e.g. CSLB 1050000. |
| name | string | – | The business name (with state). |
| slug | string | – | A listing slug or link from find_businesses. |
| state | string | – | Two-letter US state, required with name. |
| Name | Type | Req | Description |
|---|---|---|---|
| bonded | boolean|null | yes | – |
| disclosure | string | – | – |
| facts | object | – | – |
| found | boolean | yes | – |
| how_checked | string | – | – |
| insured | boolean|null | yes | – |
| license | string | – | – |
| licensed | boolean|null | yes | – |
| listing | string | – | – |
| name | string | – | – |
| note | string | – | – |
| open_gaps | array | – | – |
| other_matches | array | – | – |
| place | string | – | – |
| record_url | string | – | – |
| red_flags | array | – | – |
| secondary_status | string | – | – |
| slug | string | – | – |
| source | object | – | – |
No examples provided.
verify_license Check a license ~100
Look up a license by number, business name or phone and say which listings carry it and how it was checked. When nothing matches, tell the person to check the issuer's own lookup; never say a license is valid without a match.
| Name | Type | Req | Description |
|---|---|---|---|
| issuer | string | – | The issuer code, e.g. CA-CSLB. |
| name | string | – | The business name. |
| number | string | – | The license number. |
| phone | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| found | boolean | – | – |
| how_checked | string | – | – |
| matches | array | yes | – |
| note | string | – | – |
| ok | boolean | yes | – |
| query | object | – | – |
| why | string | – | – |
No examples provided.
watch_business Watch businesses (free) ~196
Emails the person a link to watch up to 25 listings free: once they open it, they get one short email on any day the board's record changes (status, workers' comp, bonds, classes, expiry). CSLB contractors only. Use the person's own email, only when they asked. Before calling, show them this and get their yes: 'I agree that DouxProcess Directory may email <email> about changes to these licenses (status, workers' comp, bonds, classes, expiry). Nothing is watched until I open the link, and I can stop any time.' Set consent=true only if they agreed; clients with forms get a consent form.
| Name | Type | Req | Description |
|---|---|---|---|
| consent | boolean | yes | True only if the person read and agreed to the consent sentence. |
| string | yes | The person's own email address. | |
| slugs | array | yes | Listing slugs (or CSLB license numbers), up to 25. |
| Name | Type | Req | Description |
|---|---|---|---|
| consent_text | string | – | – |
| string | – | – | |
| listings | integer | – | – |
| note | string | – | – |
| plan | string | – | – |
| sent | boolean | yes | – |
| unknown | array | – | – |
| why | string | – | – |
No examples provided.
watch_licenses Watch licenses ~145
Emails the person a link to watch these CSLB licenses: once they open it, they get one short email on any day something changes on one (status, workers' comp, bonds, classes, expiry). Nothing is watched until the person opens the link. Use the person's own email, only when they asked. Free watches 25 licenses, Pro up to 500 for $99 a year, Unlimited every license they add for $999 a year. Not for decisions about a person's credit, employment, insurance or housing.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | The person's own email address. | |
| licenses | array | yes | CSLB license numbers or listing links, up to 500. |
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | – | |
| licenses | integer | – | – |
| note | string | – | – |
| sent | boolean | yes | – |
| tiers | string | – | – |
| unknown | array | – | – |
| why | string | – | – |
No examples provided.
How do I install the DouxProcess Directory MCP server?
DouxProcess Directory is a hosted endpoint at https://douxprocess.directory/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · douxprocess.directory
claude mcp add --transport http directory-douxprocess-white-pages 'https://douxprocess.directory/mcp'
What is the DouxProcess Directory MCP server?
DouxProcess Directory is an MCP server listed in the public MCP registry as directory.douxprocess/white-pages. Is a US business licensed, bonded and insured today? From the government record. Free, no paid rank. This page covers its hosted endpoint (https://douxprocess.directory/mcp).
Is the DouxProcess Directory MCP server safe to use?
DouxProcess Directory scores 80 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the DouxProcess Directory MCP server expose?
DouxProcess Directory exposes 13 tools: find_businesses, get_business, verify_license, list_categories, ask, and 8 more. Their descriptions and schemas cost roughly 2,051 tokens of context every time the server is loaded.
Does the DouxProcess Directory MCP server require authentication?
No. We connected to DouxProcess Directory without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the DouxProcess Directory MCP server still maintained?
DouxProcess Directory is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.