{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:20:30.361Z","url":"https://verifymcp.io/servers/me-pouch-agents/agents","markdownUrl":"https://verifymcp.io/servers/me-pouch-agents/agents.md","server":{"slug":"me-pouch-agents","name":"Pouch.me","registryName":"me.pouch/agents","description":"Custom printed pouches, plus labels, tissue, tape and boxes (Pouch.me): specs and quote requests.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"agents","type":"remote","identifier":"https://agents.pouch.me/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/me-pouch-agents/agents","version":"1.0.2","transport":null,"scoredAt":"2026-11-05T06:17:56.446Z"},"score":{"total":63,"tier":"medium","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":63},{"date":"2026-11-04","total":63},{"date":"2026-11-03","total":63},{"date":"2026-11-02","total":62},{"date":"2026-11-01","total":65},{"date":"2026-10-31","total":64},{"date":"2026-10-30","total":64},{"date":"2026-10-29","total":63},{"date":"2026-10-28","total":62},{"date":"2026-10-27","total":62}]},"categories":[{"name":"Endpoint Security","score":63,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"405"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":60,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 972 tokens (~138/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"138","items":"7","tools":"7","tokens":"972","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"fail","reasons":["Stability check failed: schema churn in the 9 days we've observed: 2 tool removals, 0 breaking changes, 0 auth/transport breaks, 3 additions."],"codes":[{"code":"stability.churn","args":{"days":"9","added":"3","breaks":"0","removed":"2","auth_transport":"0"}}]},{"name":"Tool Coverage","score":89,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","63% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"63"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"8","judged":"8"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"agents","type":"remote","identifier":"https://agents.pouch.me/mcp","withdrawn":false,"score":63,"current":true,"url":"https://verifymcp.io/servers/me-pouch-agents/agents","markdownUrl":"https://verifymcp.io/servers/me-pouch-agents/agents.md"}],"facts":[{"label":"Endpoint","value":"https://agents.pouch.me/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.2"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"list_bag_formats","title":"List bag formats","description":"Pouch.me: the bag formats we quote, with each format's minimum order quantity per design.","inputs":[],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":30},{"name":"get_bag_format","title":"Get one bag format","description":"Pouch.me: details for one format id from list_bag_formats (options, materials, minimum).","inputs":[{"name":"format_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":39},{"name":"how_we_work","title":"How Pouch.me works","description":"Pouch.me: what's free (design, prepress, standard US shipping), the quote -> proof -> payment steps, options, materials and what we need from the customer.","inputs":[],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":44},{"name":"bag_recommendation_questions","title":"Bag recommendation questions","description":"Pouch.me: the questions (and allowed answers) for recommend_bag_type.","inputs":[],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":28},{"name":"recommend_bag_type","title":"Recommend a bag type","description":"Pouch.me: a rule-based starting suggestion for bag format and material. It doesn't size the bag or check fit; our team confirms format, size and material on the written quote. Pass answers as {question_id: choice_id} from bag_recommendation_questions.","inputs":[{"name":"answers","type":"object","required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":71},{"name":"recommend_bag_size","title":"Recommend a bag size","description":"Pouch.me: a starting bag size from the same sizing tool as pouch.me/bag-sizing and our quote form's \"Size it for me\". Give the product, how much goes in each bag (weight, volume or count) and the bag type (e.g. from recommend_bag_type); for solid pieces add the size of one piece. Returns the recommended outside size in inches and mm, how well it fits, and the sizing tool's own explanation. Our team confirms the final size on the written quote. To put the size on a quote request, pass sizing_reference to submit_quote_request.","inputs":[{"name":"bag_size","type":null,"required":false,"description":"A bag size the customer already has in mind, with units, if any. The sizing tool checks it."},{"name":"fill_amount","type":"string","required":true,"description":"How much goes in each bag: weight, volume or count, e.g. '12 oz', '250 g', '24 cookies'. Ask the customer; don't guess."},{"name":"format","type":"string","required":false,"description":"Bag type, e.g. from recommend_bag_type. not_sure lets the sizing tool pick. Roll stock isn't sized."},{"name":"piece_size","type":null,"required":false,"description":"For solid pieces (cookies, bars, jerky): the size of one piece with units, e.g. '4 x 4 x 1 in'."},{"name":"product","type":"string","required":true,"description":"What goes in the bag, e.g. 'whole bean coffee'. Ask the customer; don't guess."}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":297},{"name":"submit_quote_request","title":"Submit a quote request","description":"Pouch.me: send a quote request to our team for your user. We email your user a confirmation link first; the request reaches our team only after they confirm it themselves (don't click it for them). Our team reviews it; if it's something we can make, we reply by email with a written quote or a question about the spec. No reply time is given. Requires customer_consent=true. Returns a reference number. Does not create an order.","inputs":[{"name":"request","type":null,"required":true,"description":null}],"outputs":[],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":106}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T06:17:56.000Z","track":"remote","endpoint":"https://agents.pouch.me/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=pouch.me","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-11-05T03:34:26Z","notAfter":"2027-02-03T04:33:08Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"agents.pouch.me.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"me.","outcome":"verified","label":"Verified"},{"zone":"pouch.me.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":405},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-27","recent":[{"id":"chg_01a1a00c-e147-7109-85b9-1b1592f8c0a4","kind":"check.verdict","summary":"Schema quality (pass → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1a00c-e147-7109-85b9-1b1592f8c0a4"},{"id":"chg_01a1a00c-e14b-7edb-918b-2e540e571222","kind":"check.measure","summary":"Tool coverage (0% → 63%)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1a00c-e14b-7edb-918b-2e540e571222"},{"id":"chg_01a1a00c-e150-7d74-8701-cbe108060cad","kind":"check.measure","summary":"Schema quality (fair → good)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1a00c-e150-7d74-8701-cbe108060cad"},{"id":"chg_01a1a00c-e155-74e3-8c3e-79213b7e61d0","kind":"tool.added","summary":"New tool “recommend_bag_size”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1a00c-e155-74e3-8c3e-79213b7e61d0"},{"id":"chg_01a1a00c-e156-739d-8ac1-f0e0fcd288f7","kind":"score.total_changed","summary":"Trust score (62 → 63)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1a00c-e156-739d-8ac1-f0e0fcd288f7"},{"id":"chg_01a19a74-d974-73c2-ab57-5aaf1e384378","kind":"check.verdict","summary":"Stability (0.17 → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d974-73c2-ab57-5aaf1e384378"},{"id":"chg_01a19a74-d975-7991-b235-a076d3a90da9","kind":"check.verdict","summary":"Schema quality (fail → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d975-7991-b235-a076d3a90da9"},{"id":"chg_01a19a74-d976-7e0c-a092-9f84b659033b","kind":"check.measure","summary":"Schema quality (good → fair)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d976-7e0c-a092-9f84b659033b"},{"id":"chg_01a19a74-d977-7d4e-8c14-b940e859e50c","kind":"tool.removed","summary":"Tool “inkable_options” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d977-7d4e-8c14-b940e859e50c"},{"id":"chg_01a19a74-d978-73f1-b9ce-686e0b8214fe","kind":"tool.removed","summary":"Tool “inkable_price” was removed","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d978-73f1-b9ce-686e0b8214fe"},{"id":"chg_01a19a74-d978-794c-85ee-98a2936df8b2","kind":"server.version_changed","summary":"Server version (1.0.1 → 1.0.2)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d978-794c-85ee-98a2936df8b2"},{"id":"chg_01a19a74-d978-7d65-b40c-c12735e8b706","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d978-7d65-b40c-c12735e8b706"},{"id":"chg_01a19a74-d979-7213-8097-964cffaa50b0","kind":"score.total_changed","summary":"Trust score (65 → 62)","materiality":"functional","direction":"regression","scoreDelta":-3,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a19a74-d979-7213-8097-964cffaa50b0"},{"id":"chg_01a195bf-3526-7c4f-b52b-51c3bd49176e","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a195bf-3526-7c4f-b52b-51c3bd49176e"},{"id":"chg_01a18c4f-1f68-7853-977f-29df0a25813a","kind":"check.measure","summary":"Schema quality (134 → 113)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a18c4f-1f68-7853-977f-29df0a25813a"},{"id":"chg_01a18c4f-1f69-7488-94e2-a07f994838b5","kind":"tool.added","summary":"New tool “bag_recommendation_questions”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a18c4f-1f69-7488-94e2-a07f994838b5"},{"id":"chg_01a18c4f-1f69-791d-a705-e7424da665e5","kind":"tool.added","summary":"New tool “recommend_bag_type”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a18c4f-1f69-791d-a705-e7424da665e5"},{"id":"chg_01a18c4f-1f69-7dad-ba1f-f1a91d85ab89","kind":"score.total_changed","summary":"Trust score (63 → 64)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a18c4f-1f69-7dad-ba1f-f1a91d85ab89"},{"id":"chg_01a1864d-aa8e-78f5-84b2-3d57677c6316","kind":"score.total_changed","summary":"Trust score (62 → 63)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a1864d-aa8e-78f5-84b2-3d57677c6316"},{"id":"chg_01a18123-d365-7bf5-be99-d47d20918085","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/me-pouch-agents/agents#chg-chg_01a18123-d365-7bf5-be99-d47d20918085"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/me-pouch-agents/agents/changelog.json"},"links":{"html":"https://verifymcp.io/servers/me-pouch-agents/agents","markdown":"https://verifymcp.io/servers/me-pouch-agents/agents.md","changelogJson":"https://verifymcp.io/servers/me-pouch-agents/agents/changelog.json","changelogRss":"https://verifymcp.io/servers/me-pouch-agents/agents.xml","external":[{"label":"Remote endpoint","href":"https://agents.pouch.me/mcp"},{"label":"Website","href":"https://agents.pouch.me/"}]}}