{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:27:47.973Z","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp","markdownUrl":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp.md","server":{"slug":"jump4jump-eatmeprint-ordering","name":"io.github.jump4jump/eatmeprint-ordering","registryName":"io.github.jump4jump/eatmeprint-ordering","description":"EatMePrint agent ordering: get_pricing, preview_set, place_order, check_order.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"eatmeprint-mcp","type":"remote","identifier":"https://eatmeprint-mcp.eatmeprint.workers.dev/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp","version":"1.10.0","transport":null,"scoredAt":"2026-11-05T05:38:20.957Z"},"score":{"total":57,"tier":"low","status":"scored","weekDelta":1,"history":[{"date":"2026-11-05","total":57},{"date":"2026-11-04","total":57},{"date":"2026-11-03","total":56},{"date":"2026-11-02","total":56},{"date":"2026-11-01","total":56},{"date":"2026-10-31","total":56},{"date":"2026-10-30","total":56},{"date":"2026-10-29","total":56}]},"categories":[{"name":"Endpoint Security","score":46,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (place_order).","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_destructive","args":{"tool":"place_order"}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"405"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":63,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 978 tokens (~244/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"244","items":"4","tools":"4","tokens":"978","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":11,"verdict":"fail","reasons":["Stability check failed: schema churn in the 7 days we've observed: 0 tool removals, 1 breaking changes, 0 auth/transport breaks, 0 additions."],"codes":[{"code":"stability.churn","args":{"days":"7","added":"0","breaks":"1","removed":"0","auth_transport":"0"}}]},{"name":"Tool Coverage","score":96,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","88% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"88"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"eatmeprint-mcp","type":"remote","identifier":"https://eatmeprint-mcp.eatmeprint.workers.dev/mcp","withdrawn":false,"score":57,"current":true,"url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp","markdownUrl":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://eatmeprint-mcp.eatmeprint.workers.dev/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.10.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_pricing","title":"Get pricing, delivery and allergens","description":"Price, shipping cost, lead time and allergen information for an edible photo macaron set. Call this before ordering so you can tell the person what it costs and what is in it. Pass the delivery ZIP to get a firm shipping cost and total: it is the same live carrier rate place_order will book for that ZIP. Without a ZIP the reply is \"$67 plus shipping\".","inputs":[{"name":"state","type":"string","required":false,"description":"Two-letter US state code, e.g. \"CA\" or \"NY\". Optional; wording only."},{"name":"zip","type":"string","required":false,"description":"Five-digit US delivery ZIP, e.g. \"90028\". Optional; gives a firm shipping quote."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":140},{"name":"preview_set","title":"Preview a 3x3 set from nine images","description":"Build a printable set from exactly nine public image URLs, in grid order (left to right, top to bottom). Returns thumbnail previews, the price, and a set_hash to pass to place_order. Images must be JPEG or PNG, up to 10 MB each, reachable over plain https with no redirect. Private or internal addresses are refused. Nothing is charged and no order is created.","inputs":[{"name":"images","type":"array","required":true,"description":"Exactly nine image URLs in grid order."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":100},{"name":"place_order","title":"Place an order","description":"Places a REAL order for physical macarons shipped to a real address, and returns a crypto deposit address to send funds to. Confirm the total, the delivery address and the allergen warning with the person you are acting for BEFORE calling this. Pass either `images` (nine URLs, simplest — the set is built for you) or the `set_hash` and `add_to_cart_fields` returned by a previous preview_set call. Returns an order id, a crypto deposit address and amount, and a status link that needs no account or password. The order only reaches the bakery after the payment confirms. A recipient phone number is REQUIRED - carriers need it to generate a label, so collect it before calling.","inputs":[{"name":"add_to_cart_fields","type":"object","required":false,"description":"The `add_to_cart.fields` object exactly as returned by preview_set. Required when using set_hash instead of images."},{"name":"confirm_total_usd","type":"number","required":false,"description":"Confirm a total your human has approved. Use this to RESUME an order that already exists: after an over-ceiling result, or when a repeat call matched an existing order and the payment instruction was…"},{"name":"email","type":"string","required":true,"description":"An address a human actually reads."},{"name":"idempotency_key","type":"string","required":false,"description":"Optional explicit key. If omitted, one is derived from the order details, so retrying the identical request is safe and will not create a duplicate."},{"name":"images","type":"array","required":false,"description":"Nine public https image URLs in grid order. Simplest route: the set is built and carted for you. Omit if passing set_hash + add_to_cart_fields instead."},{"name":"max_total_usd","type":"number","required":false,"description":"Optional safety ceiling in USD. The shipping cost is only known once the order exists, so set this to the most your human agreed to pay. If the real total is higher, the order is still created but NO…"},{"name":"note","type":"string","required":false,"description":"Optional short message for the card in the box."},{"name":"pay_currency","type":"string","required":false,"description":"Crypto ticker to pay in, e.g. \"usdttrc20\". Optional; a default is chosen."},{"name":"recipient","type":"object","required":true,"description":"Who receives the box, and where."},{"name":"reorder_nonce","type":"string","required":false,"description":"Set this ONLY to deliberately place a second, separate order with identical details (same set, same recipient). Any distinct value works. Without it, an identical repeat is treated as a retry and ret…"},{"name":"set_hash","type":"string","required":false,"description":"From preview_set. Requires add_to_cart_fields too."},{"name":"shipping_id","type":"string","required":false,"description":"Optional: force a specific shipping-method instance id. Normally omit."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":574},{"name":"check_order","title":"Check order status","description":"Look up the current state of an order using the id and code from the status link. Needs no account and no password. Use this to report progress back to the person who asked.","inputs":[{"name":"code","type":"string","required":true,"description":null},{"name":"order_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":60}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:38:20.000Z","track":"remote","endpoint":"https://eatmeprint-mcp.eatmeprint.workers.dev/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=eatmeprint.workers.dev","issuer":"CN=YE2,O=Let's Encrypt,C=US","notBefore":"2026-10-19T12:02:21Z","notAfter":"2027-01-17T12:02:20Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"eatmeprint-mcp.eatmeprint.workers.dev.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"dev.","outcome":"verified","label":"Verified"},{"zone":"workers.dev.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":405},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1a50b-3c74-7647-8f81-a2d06bc4b43a","kind":"score.total_changed","summary":"Trust score (56 → 57)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a1a50b-3c74-7647-8f81-a2d06bc4b43a"},{"id":"chg_01a18b4d-0bae-78f4-9ce0-e0a09d145b85","kind":"check.reverified","summary":"Stability (unverified → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a18b4d-0bae-78f4-9ce0-e0a09d145b85"},{"id":"chg_01a18b4d-0baf-7bfb-a585-27c6416253d3","kind":"tool.title_changed","summary":"Tool “place_order” changed its title (Place a real order (spends money, ships a physical product) → Place an order)","materiality":"cosmetic","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a18b4d-0baf-7bfb-a585-27c6416253d3"},{"id":"chg_01a18b4d-0bb0-72a5-809a-513fafe1aef4","kind":"param.required_removed","summary":"“preview_set” dropped the required parameter “email”","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a18b4d-0bb0-72a5-809a-513fafe1aef4"},{"id":"chg_01a18b4d-0bb0-7947-b2f8-5fe975335304","kind":"server.version_changed","summary":"Server version (1.10.0 → 1.10.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a18b4d-0bb0-7947-b2f8-5fe975335304"},{"id":"chg_01a18696-e052-7523-967d-3d670e20f319","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp#chg-chg_01a18696-e052-7523-967d-3d670e20f319"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp","markdown":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp.md","changelogJson":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/jump4jump-eatmeprint-ordering/eatmeprint-mcp.xml","external":[{"label":"Remote endpoint","href":"https://eatmeprint-mcp.eatmeprint.workers.dev/mcp"},{"label":"Website","href":"https://eatmeprint.com/for-agents/"}]}}