CPG Knowledge Graph
REMOTE · MCP.CPGKNOWLEDGEGRAPH.AI · SCANNED SEP 20
The MCP for the beauty, cosmetics and personal care sector
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability76
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1621 tokens (~115/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the CPG Knowledge Graph MCP server?
CPG Knowledge Graph is a hosted endpoint at https://mcp.cpgknowledgegraph.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.cpgknowledgegraph.ai
claude mcp add --transport http greencore-solutions-cpg-knowledge-graph 'https://mcp.cpgknowledgegraph.ai/mcp'
{
"mcpServers": {
"greencore-solutions-cpg-knowledge-graph": {
"url": "https://mcp.cpgknowledgegraph.ai/mcp"
}
}
} {
"servers": {
"greencore-solutions-cpg-knowledge-graph": {
"type": "http",
"url": "https://mcp.cpgknowledgegraph.ai/mcp"
}
}
} [mcp_servers.greencore-solutions-cpg-knowledge-graph] url = "https://mcp.cpgknowledgegraph.ai/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"greencore-solutions-cpg-knowledge-graph": {
"type": "remote",
"url": "https://mcp.cpgknowledgegraph.ai/mcp",
"enabled": true
}
}
} openclaw mcp add greencore-solutions-cpg-knowledge-graph --url 'https://mcp.cpgknowledgegraph.ai/mcp' --transport streamable-http
mcp_servers:
greencore-solutions-cpg-knowledge-graph:
url: "https://mcp.cpgknowledgegraph.ai/mcp" {
"McpServers": {
"greencore-solutions-cpg-knowledge-graph": {
"Transport": "http",
"Url": "https://mcp.cpgknowledgegraph.ai/mcp"
}
}
} assistant mcp add greencore-solutions-cpg-knowledge-graph -t streamable-http -u 'https://mcp.cpgknowledgegraph.ai/mcp'
{
"mcpServers": {
"greencore-solutions-cpg-knowledge-graph": {
"type": "http",
"url": "https://mcp.cpgknowledgegraph.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Sept 26 +11
- Authorization: unverified → partial ▲ security
- Tool “node_market” rewrote its description, which is the text the model reads security
- Tool “resolve_node” rewrote its description, which is the text the model reads security
- Schema quality: pass → fail ▼ functional
- Tool coverage: 0% → 100% ▲ functional
- Schema quality: good → excellent functional
- Server version: 1.2.3 → 1.2.4 functional
- Server version: 1.2.2 → 1.2.3 functional
- Server version: 1.2.1 → 1.2.2 functional
- “check_eligibility” reworded the description of “banner” cosmetic
- “check_eligibility” reworded the description of “country_iso” cosmetic
- “check_eligibility” reworded the description of “gtin” cosmetic
- “find_makers” reworded the description of “has_website” cosmetic
- “find_makers” reworded the description of “limit” cosmetic
- “find_makers” reworded the description of “node” cosmetic
- “find_makers” reworded the description of “region” cosmetic
- “find_makers” reworded the description of “segment” cosmetic
- “find_retailers” reworded the description of “limit” cosmetic
- “find_retailers” reworded the description of “node” cosmetic
- “find_retailers” reworded the description of “parent_banner” cosmetic
- “find_retailers” reworded the description of “region” cosmetic
- “get_kernel” reworded the description of “brand” cosmetic
- “get_kernel” reworded the description of “node” cosmetic
- “get_signal_chain” reworded the description of “gtin” cosmetic
- “list_brands_by_node” reworded the description of “node” cosmetic
- “node_market” reworded the description of “code” cosmetic
- “resolve_gtin” reworded the description of “gtin” cosmetic
- “resolve_node” reworded the description of “code” cosmetic
- “resolve_scope” reworded the description of “scope_id” cosmetic
- “resolve_sparks” reworded the description of “gtin” cosmetic
- Tool “check_eligibility” changed its title: Check Eligibility → Check banner eligibility cosmetic
- Tool “count_gtin_coverage” changed its title: Count Gtin Coverage → Count GTIN coverage cosmetic
- Tool “find_makers” changed its title: Find Makers → Find makers cosmetic
- Tool “find_retailers” changed its title: Find Retailers → Find retailers cosmetic
- Tool “get_kernel” changed its title: Get Kernel → Get SPARKS kernel cosmetic
- Tool “get_signal_chain” changed its title: Get Signal Chain → Get ACM-68000 signal chain cosmetic
- Tool “list_brands_by_node” changed its title: List Brands By Node → List brands by node cosmetic
- Tool “list_nodes” changed its title: List Nodes → List sovereign nodes cosmetic
- Tool “list_sku_types” changed its title: List Sku Types → List SKU types cosmetic
- Tool “node_market” changed its title: Node Market → Node market cosmetic
- Tool “resolve_gtin” changed its title: Resolve Gtin → Resolve GTIN cosmetic
- Tool “resolve_node” changed its title: Resolve Node → Resolve node cosmetic
- Tool “resolve_scope” changed its title: Resolve Scope → Resolve scoped agent cosmetic
- Tool “resolve_sparks” changed its title: Resolve Sparks → Resolve SPARKS cosmetic
- 16 Sept 26 0
- Server version: 1.2.0 → 1.2.1 functional
- 15 Sept 26 0
- Server version: 4.0.3 → 1.2.0 functional
- 10 Sept 26 0
- Server version: 4.0.2 → 4.0.3 functional
- 5 Sept 26 0
- Server version: 4.0.0 → 4.0.2 functional
- 1 Sept 26 0
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- MCP protocol version: 2025-11-25 → 2026-07-28 functional
- Server version: 3.4.7 → 4.0.0 functional
- Tool “check_eligibility” changed its title: Check Eligibility cosmetic
- Tool “count_gtin_coverage” changed its title: Count Gtin Coverage cosmetic
- Tool “find_makers” changed its title: Find Makers cosmetic
- Tool “find_retailers” changed its title: Find Retailers cosmetic
- Tool “get_kernel” changed its title: Get Kernel cosmetic
- Tool “get_signal_chain” changed its title: Get Signal Chain cosmetic
- Tool “list_brands_by_node” changed its title: List Brands By Node cosmetic
- Tool “list_nodes” changed its title: List Nodes cosmetic
- Tool “list_sku_types” changed its title: List Sku Types cosmetic
- Tool “node_market” changed its title: Node Market cosmetic
- Tool “resolve_gtin” changed its title: Resolve Gtin cosmetic
- Tool “resolve_node” changed its title: Resolve Node cosmetic
- Tool “resolve_scope” changed its title: Resolve Scope cosmetic
- Tool “resolve_sparks” changed its title: Resolve Sparks cosmetic
- 26 Aug 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 +1
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://mcp.cpgknowledgegraph.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=cpgknowledgegraph.ai | CN=WE1,O=Google Trust Services,C=US | 22 Aug 2026 | 20 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | 72812aca20457c120ebc0c781c2c4dd0 |
| SANs: cpgknowledgegraph.ai, *.cpgknowledgegraph.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.cpgknowledgegraph.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| cpgknowledgegraph.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.cpgknowledgegraph.ai/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.cpgknowledgegraph.ai/mcp | HTTPS enforced | 301 | https://mcp.cpgknowledgegraph.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_eligibility Check banner eligibility ~131
Check whether a GTIN can ship to a specific retailer banner in a country.
| Name | Type | Req | Description |
|---|---|---|---|
| banner | string | yes | Retail banner name exactly as registered in the graph (the retailer_name returned by find_retailers). |
| country_iso | string | yes | ISO 3166-1 alpha-2 code of the selling market (e.g. FR), case-insensitive. |
| gtin | string | yes | GS1 GTIN of the product, 8 to 14 digits; zero-padded to the canonical 14-digit GTIN-14 before lookup (e.g. 00990832300624). |
Structured output declared, but exposes no named fields.
No examples provided.
count_gtin_coverage Count GTIN coverage ~31
Global coverage statistics: GTINs, nodes, makers (supply), retailers (demand).
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
find_makers Find makers ~193
Global cross-node maker (supply) search. Filter by segment / region / node / has_website.
| Name | Type | Req | Description |
|---|---|---|---|
| has_website | – | – | true = only makers with a website on record; false = only makers without one; omit for both. |
| limit | integer | – | Maximum rows to return, 1 to 500 (default 25). |
| node | – | – | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. Omit for all nodes. |
| region | – | – | Region label as stored on the registry row (e.g. EU, ASIA), case-insensitive. Omit for all regions. |
| segment | – | – | Maker segment label as stored on the registry row (e.g. Haircare, Skincare); exact match. Omit for all segments. |
Structured output declared, but exposes no named fields.
No examples provided.
find_retailers Find retailers ~158
Global cross-node retailer (demand) search. Filter by region / node / parent_banner.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum rows to return, 1 to 500 (default 25). |
| node | – | – | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. Omit for all nodes. |
| parent_banner | – | – | Parent banner name, case-insensitive substring match (e.g. Carrefour). Omit for all banners. |
| region | – | – | Region label as stored on the registry row (e.g. EU, ASIA), case-insensitive. Omit for all regions. |
Structured output declared, but exposes no named fields.
No examples provided.
get_kernel Get SPARKS kernel ~157
SPARKS completeness tier for a brand in a market: 100 = resolvable (a real pack/size record is held) . 8 = registered (brand known, pack/size pending) . 'floor' = STANDARD default (no brand-specific record). Returns the stored tier flag — do NOT compute a score. Never returns a pack/size.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | yes | Brand name as marketed (e.g. Nivea); normalized exact match, fail-closed. |
| node | string | yes | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. |
Structured output declared, but exposes no named fields.
No examples provided.
get_signal_chain Get ACM-68000 signal chain ~78
Return the full ACM-68000 signal chain for a GTIN (zero-pads to 14).
| Name | Type | Req | Description |
|---|---|---|---|
| gtin | string | yes | GS1 GTIN of the product, 8 to 14 digits; zero-padded to the canonical 14-digit GTIN-14 before lookup (e.g. 00990832300624). |
Structured output declared, but exposes no named fields.
No examples provided.
list_brands_by_node List brands by node ~97
SPARKS depth surface: the distinct brands SPARKS covers in a sovereign market. Answers 'what brands do you know in [node]'. Coverage only — no pack/size values.
| Name | Type | Req | Description |
|---|---|---|---|
| node | string | yes | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. |
Structured output declared, but exposes no named fields.
No examples provided.
list_nodes List sovereign nodes ~51
The 49 sovereign nodes (the spine) — each with its GS1 GTIN and CLEAN per-node maker (supply) and retailer (demand) counts (separate subqueries, never summed).
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
list_sku_types List SKU types ~52
SPARKS taxonomy: the 84 standing BPC product-type codes the graph is structured on. Validate a type against this before a typed query. (BRAND is a tier, not a type.)
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
node_market Node market ~114
Supply↔demand bridge for ONE jurisdiction: makers (supply) and retailers (demand) as two separate counts (never summed), plus the same-node potential bridge pairs. The market-picture call for a jurisdiction; use this first for 'what does the market look like in X'.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. |
Structured output declared, but exposes no named fields.
No examples provided.
resolve_gtin Resolve GTIN ~76
Resolve a GTIN to its procurement readiness signal. Zero-pads input to 14 digits.
| Name | Type | Req | Description |
|---|---|---|---|
| gtin | string | yes | GS1 GTIN of the product, 8 to 14 digits; zero-padded to the canonical 14-digit GTIN-14 before lookup (e.g. 00990832300624). |
Structured output declared, but exposes no named fields.
No examples provided.
resolve_node Resolve node ~99
Resolve one node: its GS1 license + its makers (supply) + its retailers (demand). The market-picture call for a jurisdiction; use this first for 'what does the market look like in X'.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | Sovereign node code: the ISO 3166-1 alpha-2 code of the jurisdiction (e.g. FR, KR, AE), case-insensitive; list_nodes returns the 49 codes. |
Structured output declared, but exposes no named fields.
No examples provided.
resolve_scope Resolve scoped agent ~114
GSC Scoped Agents Registry — Era 1 founding registry (1,000,000 standing) plus Era 2 station-keyed registry (1,000,000 capacity, mint-on-activation) under SM-ECO-10060.
| Name | Type | Req | Description |
|---|---|---|---|
| scope_id | – | – | Scoped agent id to resolve: Era 1 sa-{parent}-{jurisdiction}-m{mcp}-{seq} or Era 2 sa2-{namespace}-m{mcp}-d{station}-w{seq}. Omit for the registry summary. |
Structured output declared, but exposes no named fields.
No examples provided.
resolve_sparks Resolve SPARKS ~152
Two-branch SPARKS resolver (zero-pads GTIN to 14). Branch A GSC Territory/License GTIN (990832300xxx) -> FULL license record (public). Branch B any third-party BPC GTIN -> GATED proof {recognized, region_node, kernel_available}; the pack/size VALUE is NEVER returned. Route to Navigator. Brand match is fail-closed (normalized exact match); uncertainty -> recognized:false.
| Name | Type | Req | Description |
|---|---|---|---|
| gtin | string | yes | GS1 GTIN of the product, 8 to 14 digits; zero-padded to the canonical 14-digit GTIN-14 before lookup (e.g. 00990832300624). |
Structured output declared, but exposes no named fields.
No examples provided.
What is the CPG Knowledge Graph MCP server?
CPG Knowledge Graph is an MCP server listed in the public MCP registry as io.github.greencore-solutions/cpg-knowledge-graph. The MCP for the beauty, cosmetics and personal care sector. This page covers its hosted endpoint (https://mcp.cpgknowledgegraph.ai/mcp).
Is the CPG Knowledge Graph MCP server safe to use?
CPG Knowledge Graph scores 88 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CPG Knowledge Graph MCP server expose?
CPG Knowledge Graph exposes 14 tools: resolve_gtin, check_eligibility, get_signal_chain, count_gtin_coverage, resolve_scope, and 9 more. Their descriptions and schemas cost roughly 1,503 tokens of context every time the server is loaded.
Does the CPG Knowledge Graph MCP server require authentication?
No. We connected to CPG Knowledge Graph without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the CPG Knowledge Graph MCP server still maintained?
CPG Knowledge Graph is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.