{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:51:58.842Z","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2","markdownUrl":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2.md","server":{"slug":"io-phoslabs-commerce-intelligence","name":"Commerce Intelligence","registryName":"io.phoslabs/commerce-intelligence","description":"Behavioral-science tools for commerce: checkout, drop-off, pricing, churn. 5 free calls, then paid.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp-2","type":"remote","identifier":"https://mcp.phoslabs.io/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2","version":"4.0.1","transport":null,"scoredAt":"2026-11-05T03:22:21.534Z"},"score":{"total":71,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":71},{"date":"2026-11-04","total":71},{"date":"2026-11-03","total":70},{"date":"2026-11-02","total":70},{"date":"2026-11-01","total":69},{"date":"2026-10-31","total":69},{"date":"2026-10-30","total":68},{"date":"2026-10-29","total":68},{"date":"2026-10-28","total":67}]},"categories":[{"name":"Endpoint Security","score":78,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 401, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC.","The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.rfc9728_invoke","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"401"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}},{"code":"auth.registration_dcr_only","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":58,"verdict":"fail","reasons":["AI-judged instruction clarity (fair).","Tool/resource definitions use about 786 tokens (~98/item across 8 items; 8 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"fair"}},{"code":"schema.footprint_lean","args":{"avg":"98","items":"8","tools":"8","tokens":"786","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":27,"verdict":"partial","reasons":["Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"8"}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"8"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 401, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"mcp-2","type":"remote","identifier":"https://mcp.phoslabs.io/mcp","withdrawn":false,"score":71,"current":true,"url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2","markdownUrl":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2.md"}],"facts":[{"label":"Endpoint","value":"https://mcp.phoslabs.io/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required"},{"label":"Version","value":"4.0.1"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"write_product_copy","title":null,"description":"Write product descriptions, landing page copy, or marketing messages that convert.\n    Uses social proof, loss framing, anchoring, and scarcity — without being manipulative.\n    CONVERT. 20 credits (€0.20 per call).","inputs":[{"name":"audience","type":"string","required":false,"description":null},{"name":"draft","type":"string","required":true,"description":null},{"name":"goal","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":85},{"name":"diagnose_dropoff","title":null,"description":"Find where and why customers abandon your funnel. Analyzes each step for\n    statistically significant drop-offs and identifies the behavioral barrier at each point.\n    Input: describe the funnel steps, optionally with data as JSON {steps: [{name, users}, ...]}.\n    CONVERT. 20 credits (€0.20 per call).","inputs":[{"name":"funnel_data","type":"string","required":false,"description":null},{"name":"funnel_description","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":101},{"name":"find_hidden_barriers","title":null,"description":"Identify what's really blocking customers from converting — not what they say, but\n    the actual capability gaps, missing motivation, and environmental friction.\n    UNDERSTAND. 20 credits (€0.20 per call).","inputs":[{"name":"behavior","type":"string","required":true,"description":null},{"name":"population","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":75},{"name":"fix_checkout","title":null,"description":"Redesign a checkout, signup, or purchase flow to reduce abandonment.\n    Returns step-by-step redesigned flow with friction removed and behavioral principles applied.\n    CONVERT. 20 credits (€0.20 per call).","inputs":[{"name":"current_flow","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":67},{"name":"optimize_onboarding","title":null,"description":"Reduce time-to-value for new signups. Identifies onboarding friction and\n    designs a flow that gets users to their 'aha moment' faster.\n    RETAIN. 20 credits (€0.20 per call).","inputs":[{"name":"current_flow","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":69},{"name":"predict_churn","title":null,"description":"Identify which customers are about to leave and why.\n    Returns churn risk scores with behavioral drivers and retention interventions.\n    RETAIN. 20 credits (€0.20 per call).","inputs":[{"name":"context","type":"string","required":false,"description":null},{"name":"session_id","type":"string","required":false,"description":null},{"name":"user_behavior","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":68},{"name":"detect_biases","title":null,"description":"Find cognitive biases in your messaging, UX copy, or product framing.\n    Returns biases found with severity and debiasing recommendations.\n    UNDERSTAND. 20 credits (€0.20 per call).","inputs":[{"name":"goal","type":"string","required":false,"description":null},{"name":"session_id","type":"string","required":false,"description":null},{"name":"text","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":72},{"name":"optimize_pricing","title":null,"description":"Design price framing, anchoring, and tier structure to maximize willingness to pay.\n    Includes decoy pricing analysis and value articulation strategy.\n    CONVERT. 20 credits (€0.20 per call).","inputs":[{"name":"context","type":"string","required":false,"description":null},{"name":"product","type":"string","required":true,"description":null},{"name":"session_id","type":"string","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":72}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T03:22:21.000Z","track":"remote","endpoint":"https://mcp.phoslabs.io/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=phoslabs.io","issuer":"CN=YE1,O=Let's Encrypt,C=US","notBefore":"2026-10-23T21:33:25Z","notAfter":"2027-01-21T21:33:24Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE1,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"mcp.phoslabs.io.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"io.","outcome":"verified","label":"Verified"},{"zone":"phoslabs.io.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"enforced_validated","label":"Enforced and verified","gate":"invoke","gateLabel":"On tool calls","status":200,"authorizationServers":["https://mcp.phoslabs.io/"]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":401},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-28","recent":[{"id":"chg_01a1a493-3dd0-70ed-a7d4-3e277b3f6dc7","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a1a493-3dd0-70ed-a7d4-3e277b3f6dc7"},{"id":"chg_01a19a47-16f3-797a-b0d8-1137fa5d6c62","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a19a47-16f3-797a-b0d8-1137fa5d6c62"},{"id":"chg_01a18ff4-aded-7041-a993-785f90158059","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a18ff4-aded-7041-a993-785f90158059"},{"id":"chg_01a185ac-89b6-7ed3-b342-fb7e4e57178c","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a185ac-89b6-7ed3-b342-fb7e4e57178c"},{"id":"chg_01a185ac-89b9-7360-b3c7-a7e41fc1948b","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a185ac-89b9-7360-b3c7-a7e41fc1948b"},{"id":"chg_01a185ac-89b5-78bf-824b-7488f072139a","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a185ac-89b5-78bf-824b-7488f072139a"},{"id":"chg_01a18126-d420-784d-a82c-018a2b53acad","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2#chg-chg_01a18126-d420-784d-a82c-018a2b53acad"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2/changelog.json"},"links":{"html":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2","markdown":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2.md","changelogJson":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2/changelog.json","changelogRss":"https://verifymcp.io/servers/io-phoslabs-commerce-intelligence/mcp-2.xml","external":[{"label":"Remote endpoint","href":"https://mcp.phoslabs.io/mcp"},{"label":"Website","href":"https://phoslabs.io/credits"}]}}