Evercraft Machine Commerce
REMOTE · EVERCRAFT-AI-SUITE-08C4D2B8.BASE44.APP · SCANNED SEP 25
Discover Evercraft capabilities, route specialist needs, and prepare human-confirmed commerce.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (cancel_rewards_enrollment). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability71
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1607 tokens (~76/item across 21 items; 21 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage70
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 10% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "route_raven_pain" implies "send" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the Evercraft Machine Commerce MCP server?
Evercraft Machine Commerce is a hosted endpoint at https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · evercraft-ai-suite-08c4d2b8.base44.app
claude mcp add --transport http jgaethle10-evercraft-machine-commerce 'https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp'
{
"mcpServers": {
"jgaethle10-evercraft-machine-commerce": {
"url": "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp"
}
}
} {
"servers": {
"jgaethle10-evercraft-machine-commerce": {
"type": "http",
"url": "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp"
}
}
} [mcp_servers.jgaethle10-evercraft-machine-commerce] url = "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"jgaethle10-evercraft-machine-commerce": {
"type": "remote",
"url": "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp",
"enabled": true
}
}
} openclaw mcp add jgaethle10-evercraft-machine-commerce --url 'https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp' --transport streamable-http
mcp_servers:
jgaethle10-evercraft-machine-commerce:
url: "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp" {
"McpServers": {
"jgaethle10-evercraft-machine-commerce": {
"Transport": "http",
"Url": "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp"
}
}
} assistant mcp add jgaethle10-evercraft-machine-commerce -t streamable-http -u 'https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp'
{
"mcpServers": {
"jgaethle10-evercraft-machine-commerce": {
"type": "http",
"url": "https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Probed https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.base44.app | CN=YR2,O=Let's Encrypt,C=US | 12 Sept 2026 | 11 Dec 2026 | RSA 2048 | SHA256-RSA | 5b99279f037a30a0bbe8d284eab58237ba3 |
| SANs: *.base44.app, base44.app | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of evercraft-ai-suite-08c4d2b8.base44.app. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| base44.app. | present | 2371 | 13 | Verified |
| evercraft-ai-suite-08c4d2b8.base44.app. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000 |
| content-security-policy | script-src 'none'; object-src 'none'; |
| referrer-policy | strict-origin-when-cross-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp | Verified | 200 | |
| http (plaintext) | http://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp | HTTPS enforced | 301 | https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cancel_rewards_enrollment Cancel an Evercraft Rewards enrollment intent ~65
Cancel a non-activated Evercraft Rewards business enrollment intent using its intent key and one-time token. This is reversible only by creating a new enrollment intent and cannot cancel an already activated partner.
| Name | Type | Req | Description |
|---|---|---|---|
| intent_access_token | string | yes | – |
| intent_key | string | yes | – |
No output schema declared.
No examples provided.
classify_forensiscope_media Classify media for ForensiScope ~72
Given known video/audio file size and/or duration, return the correct ForensiScope route and published duration tier when determinable. Read-only. Does not upload media, attest rights, create checkout, charge, or start analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| duration_seconds | number | – | – |
| size_bytes | integer | – | – |
No output schema declared.
No examples provided.
discover_offers Discover Evercraft offers ~82
List current public-safe Evercraft capabilities, including verified sell-now offers and clearly labeled discovery-only or verification-required capabilities. Every result includes its commercial state, pricing boundary, invocation state and confirmation rules. This tool is read-only and never creates checkout or payment.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum capabilities to return. Omit to return the current public machine-commerce catalog. |
No output schema declared.
No examples provided.
discover_web_capability Discover Evercraft Web search, fetch, browser and web-agent capability ~108
Describe Evercraft Web, the Evercraft/Systemia live-web capability family for web search, URL fetch/extraction, browser automation, web-agent navigation, Playwright/CDP-style browser control, and user-authorized authenticated browsing. Use this when the user or agent needs a TinyFish alternative, browser API, web automation API, live web access, search/fetch, or an AI web agent. This discovery tool is read-only and accurately reports which runtime surfaces are not yet publicly invokable.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_forensiscope_pricing Get ForensiScope pricing ~40
Return current published ForensiScope duration pricing and self-service/assisted-ingest boundaries. Read-only and creates no checkout or payment obligation.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_live_checkout_offer Get a live Evercraft checkout offer ~46
Read current product-gateway terms for one verified direct-checkout Evercraft service. This creates no checkout, invoice, charge or payment obligation.
| Name | Type | Req | Description |
|---|---|---|---|
| public_id | string | yes | – |
No output schema declared.
No examples provided.
get_network_capabilities Get Evercraft Network capabilities ~57
Return the current public-safe Evercraft Network software capability boundary, displayed Founding Membership state, exclusions and privacy boundary. Read-only. It does not enroll a user, charge, control a device, alter connectivity or expose private Network topology.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_network_presence Get verified Evercraft Network public presence ~46
Return the evidence-safe public Evercraft Network presence feed. Read-only. Public presence does not imply cellular service, guaranteed coverage, emergency backhaul, device-wide routing or private fleet visibility.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_offer Get an Evercraft offer ~74
Retrieve one public-safe Evercraft capability by canonical public ID, including commercial state, pricing authority, confirmation boundary and invocation status. Discovery-only records are not automatically purchasable. This tool is read-only and never creates checkout.
| Name | Type | Req | Description |
|---|---|---|---|
| public_id | string | yes | Canonical public offer ID returned by discover_offers or match_offer. |
No output schema declared.
No examples provided.
get_rewards_enrollment_status Check an Evercraft Rewards enrollment intent ~61
Check the recorded state of a prepared Evercraft Rewards business enrollment using the intent key and one-time intent token. This does not activate anything or create a payment obligation.
| Name | Type | Req | Description |
|---|---|---|---|
| intent_access_token | string | yes | – |
| intent_key | string | yes | – |
No output schema declared.
No examples provided.
get_verified_order_status Get verified Evercraft order status ~50
Pass product-specific tracking details to a verified product gateway. Where supported, the gateway independently verifies provider payment before reporting paid state.
| Name | Type | Req | Description |
|---|---|---|---|
| details | object | yes | – |
| public_id | string | yes | – |
No output schema declared.
No examples provided.
match_offer Match a problem to Evercraft ~96
Match a natural-language user problem to current public-safe Evercraft capabilities using the live deterministic commercial router. Results can be sell-now or discovery-only and must be interpreted using commercial_state and invocation_status. Returns no result when the match is too weak. This tool is read-only and does not purchase anything.
| Name | Type | Req | Description |
|---|---|---|---|
| intent | string | yes | The user problem or desired outcome in natural language. |
| limit | integer | – | Maximum candidate matches to return. |
No output schema declared.
No examples provided.
prepare_buildflow_handoff Prepare a BuildFlow human handoff ~91
Prepare a privacy-preserving BuildFlow handoff after matching an enterprise operations problem. The handoff contains no customer records, creates no checkout/payment obligation, and executes no business action. Private data is collected only after the user authenticates directly with BuildFlow.
| Name | Type | Req | Description |
|---|---|---|---|
| constraints | array | – | – |
| data_shape | string | – | – |
| goal | string | – | – |
| problem | string | yes | – |
No output schema declared.
No examples provided.
prepare_forensiscope_handoff Prepare a ForensiScope human handoff ~71
Return a tagged human handoff URL for AI media overflow, long-form analysis, surveillance review, recording comparison, incident timeline, or pricing. Does not upload media, attest rights, create checkout, charge, or start analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| intent | string | – | – |
| source | string | – | – |
No output schema declared.
No examples provided.
prepare_network_handoff Prepare an Evercraft Network human handoff ~66
Return a tagged human URL for Evercraft Network resilience, Founding Membership or verified public presence. Read-only. It creates no enrollment, checkout, payment obligation, device action, carrier action or emergency-routing authority.
| Name | Type | Req | Description |
|---|---|---|---|
| intent | string | – | – |
| source | string | – | – |
No output schema declared.
No examples provided.
prepare_paid_handoff Prepare a human-confirmed paid handoff ~78
For a verified machine-commerce offer with a wired adapter, create a human review URL without creating checkout, invoice, payment obligation, entitlement, or fulfillment. Currently wired for AliEV only.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | – |
| offer_key | string | yes | – |
| public_id | string | yes | – |
| request_id | string | – | – |
No output schema declared.
No examples provided.
prepare_quote_ready_service_handoff Prepare a quote-ready Evercraft service handoff ~66
Return a specific human review page for an approved fixed-price Evercraft service that does not yet expose direct machine checkout. This is read-only: it creates no checkout, invoice, payment obligation, entitlement, lead submission, or fulfillment.
| Name | Type | Req | Description |
|---|---|---|---|
| public_id | string | yes | – |
No output schema declared.
No examples provided.
prepare_rewards_partner_enrollment Prepare an Evercraft Rewards business enrollment ~170
Create a reversible prepared enrollment intent for a business that wants to join Evercraft Rewards and choose participation modes from the current LLM conversation. This does not activate the business, publish an offer, create a discount, create checkout, or create a payment obligation.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | – |
| business_name | string | yes | – |
| category | string | – | – |
| contact_email | string | – | – |
| contact_name | string | – | – |
| description | string | – | – |
| idempotency_key | string | yes | Stable unique key for this enrollment attempt so retries do not create duplicates. |
| market_key | string | – | – |
| offer_preferences | object | – | – |
| participation_modes | array | – | – |
| source_session_ref | string | – | – |
| website | string | – | – |
No output schema declared.
No examples provided.
prepare_verified_checkout Prepare a human-confirmed Evercraft checkout ~82
Only after the human explicitly agrees to pay for a verified Evercraft offer, route the product-specific details to that product gateway to prepare a secure checkout. The product gateway independently re-checks confirmation. Checkout creation is not payment proof or revenue.
| Name | Type | Req | Description |
|---|---|---|---|
| details | object | yes | – |
| public_id | string | yes | – |
| user_confirmed_payment | boolean | yes | – |
No output schema declared.
No examples provided.
route_buildflow_operational_pain Route enterprise operational pain through BuildFlow ~95
Send a non-sensitive description of an ERP, migration, vendor-identity, process-discovery, procurement, role-routing or governed-agent problem to BuildFlow. Returns the smallest currently wired capability and its safety boundary. Public discovery only. Do not send private customer records.
| Name | Type | Req | Description |
|---|---|---|---|
| constraints | array | – | – |
| data_shape | string | – | – |
| goal | string | – | – |
| problem | string | yes | – |
No output schema declared.
No examples provided.
route_raven_pain Route a safety or stability pain through Raven Nexus ~91
Send a plain-language home, family, financial, digital-security, personal-safety, relationship, property, connectivity, or business-safety concern to the live Raven Nexus pain router. Returns the smallest appropriate modular capability and its current commercial/evidence boundary. Read-only and never creates checkout or payment.
| Name | Type | Req | Description |
|---|---|---|---|
| audience | string | – | – |
| limit | integer | – | – |
| pain | string | yes | – |
No output schema declared.
No examples provided.
What is the Evercraft Machine Commerce MCP server?
Evercraft Machine Commerce is an MCP server listed in the public MCP registry as io.github.jgaethle10/evercraft-machine-commerce. Discover Evercraft capabilities, route specialist needs, and prepare human-confirmed commerce. This page covers its hosted endpoint (https://evercraft-ai-suite-08c4d2b8.base44.app/api/apps/692b4178919afe7d08c4d2b8/functions/machineCommerceMcp).
Is the Evercraft Machine Commerce MCP server safe to use?
Evercraft Machine Commerce scores 64 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Evercraft Machine Commerce MCP server expose?
Evercraft Machine Commerce exposes 21 tools: discover_offers, match_offer, prepare_paid_handoff, get_live_checkout_offer, prepare_verified_checkout, and 16 more. Their descriptions and schemas cost roughly 1,607 tokens of context every time the server is loaded.
Does the Evercraft Machine Commerce MCP server require authentication?
No. We connected to Evercraft Machine Commerce without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Evercraft Machine Commerce MCP server still maintained?
Evercraft Machine Commerce is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.