# AON — Agent Offer Network (remote · api.aon.pro)

Real, buyable product and service offers — live pricing and trackable links for any MCP agent.

- Trust score: 59/100 (low)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-18

## Components

- remote · `api.aon.pro`: 59/100 (this document), [markdown](https://verifymcp.io/servers/pro-aon-mcp/v1-mcp.md), [page](https://verifymcp.io/servers/pro-aon-mcp/v1-mcp)

## Channel facts

- Endpoint: `https://api.aon.pro/v1/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-18.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 61/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1610 tokens (~322/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 41/100
  - Stability check failed: schema churn in the 16 days we've observed: 0 tool removals, 0 breaking changes, 1 auth/transport breaks, 0 additions.
- **Tool Coverage**: 93/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 79% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 20/100
  - Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28.

## Install

### How do I install the AON — Agent Offer Network MCP server?

AON — Agent Offer Network is a hosted endpoint at https://api.aon.pro/v1/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http pro-aon-mcp 'https://api.aon.pro/v1/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "pro-aon-mcp": {
      "url": "https://api.aon.pro/v1/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "pro-aon-mcp": {
      "type": "http",
      "url": "https://api.aon.pro/v1/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.pro-aon-mcp]
url = "https://api.aon.pro/v1/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "pro-aon-mcp": {
      "type": "remote",
      "url": "https://api.aon.pro/v1/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add pro-aon-mcp --url 'https://api.aon.pro/v1/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  pro-aon-mcp:
    url: "https://api.aon.pro/v1/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "pro-aon-mcp": {
      "Transport": "http",
      "Url": "https://api.aon.pro/v1/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add pro-aon-mcp -t streamable-http -u 'https://api.aon.pro/v1/mcp'
```

### Other

```json
{
  "mcpServers": {
    "pro-aon-mcp": {
      "type": "http",
      "url": "https://api.aon.pro/v1/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-17 (score 59, +1)

No change was recorded against any check on this day. Stability & Change Management went from 34 to 38.

### 2026-10-14 (score 58, +1)

No change was recorded against any check on this day. Stability & Change Management went from 24 to 28.

### 2026-10-12 (score 57, +1)

No change was recorded against any check on this day. Stability & Change Management went from 14 to 21.

### 2026-10-10 (score 56, +2)

No change was recorded against any check on this day. Stability & Change Management went from 4 to 14.

### 2026-10-07 (score 54, −11)

- [security regression] Authorization: fail → unverified
- [security regression] Stability: 0.07 → fail

### 2026-10-04 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-03 (score 64, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-10-02 (score 64, +36)

- [security improvement] Transport: unverified → pass
- [security improvement] Injection markers: unverified → pass
- [security] First check of Judged manipulation: pass
- [security] Authorization: Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.
- [functional regression] MCP protocol: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 79
- [functional] First check of Schema quality: excellent
- [functional] First check of Destructive annotations: pass
- [functional] First check of Schema quality: fail

## MCP tools (5)

### `aon_search_offers` (~621 tokens)

Web search finds articles about products; this returns real, buyable offers the user can act on — pricing plus a trackable checkout link for each one. Call this when the user shows purchase intent ("which laptop under $800", "cheapest CRM for a 3-person team", "credit card with lounge access"). The arguments use the AgentOffer Query v1.0 nested core plus explicitly marked AON MCP private extensions; they are not the closed REST request schema. Minimum: intent.content[0] = {"type":"input_text","text":"<one natural sentence>"}. Narrow by category with AON Taxonomy v1 ids in `constraints.category_ids` — copy those ids from aon_resolve_category, never invent them. The response is the full query result as JSON text: `data.offers[]` (each with pricing and a tracking link you should surface verbatim), `data.request_id`, `data.protocol_version`, `data.language`, an optional `data.engagement` block of follow-up suggestions, and `extra.hints[]` when an argument was corrected. To act on a suggestion, merge its `query_helper.request_patch` into your next call — the patch keys are protocol field paths, so they merge straight into this same request object — echo its `query_helper.origin` back in `intent.origin[]`, and pass the previous `data.request_id` as `context.session.previous_request_id` so already-shown offers are not repeated. Results are relevance-gated: an empty `offers` list is a real answer, not an error.

Input parameters:

- `constraints` (object)
- `context` (object)
- `force_offer` (boolean): The search always stays relevance-gated and returns at least one offer when it is set to true.
- `intent` (object, required)
- `pagination` (object): AON private extension (not part of the AgentOffer v1.0 request object).
- `placement_id` (string): Optional ad placement id. This argument takes precedence over the X-AON-Placement-Id HTTP header; when omitted, the header supplies the placement. The placement must be active and identifies the appl…
- `request_id` (string): Your idempotency key. Use an unguessable value (UUID). Reuse it to retry the SAME query; if you change what you are asking for, send a NEW id — otherwise you get the previous answer back with no erro…
- `response_options` (object)
- `sort` (string): AON private extension (not part of the AgentOffer protocol). Only recommended is supported today; any other value is treated as unset and reported in extra.hints.

### `aon_resolve_category` (~292 tokens)

Turn a free-text product or service description into AON Taxonomy v1 category ids you can safely pass to aon_search_offers. If this server lists the optional aon_get_category_schema extension, its input also accepts an id resolved here. Call this first whenever you would otherwise be guessing at a category id — the taxonomy is fixed, and invented ids come back as corrections instead of results. Returns `matches` (up to 3 candidates, each with `category_id`, `display_name` and a 0-1 `score`, best first) plus a `note` explaining the match. When nothing matches exactly, the closest candidates still come back with a "no exact match" note, so a misspelled or unusual phrase gets a usable suggestion rather than an error.

Input parameters:

- `placement_id` (string): Optional ad placement id. This argument takes precedence over the X-AON-Placement-Id HTTP header; when omitted, the header supplies the placement. The placement must be active and identifies the appl…
- `query` (string, required): What the user is shopping for, in words: "hiking boots", "team chat software", "credit card". A category id or a legacy alias also resolves.

### `aon_get_category_schema` (~289 tokens)

Hosted AON MCP category-guidance extension. This server returns it from tools/list, but Protocol v1.0 does not require it. Get the decision factors buyers weigh inside one AON Taxonomy v1 category, so you can ask the right clarifying question before searching. Call it when intent is vague ("I need a card", "looking for software") — each factor comes with the concrete options to choose between. Pass 'all' to see which categories currently ship a decision schema. Categories without a schema return a plain note, not an error; searching still works without one.

Input parameters:

- `category_id` (string, required): AON Taxonomy v1 category id such as finance.credit_lending, computers_electronics.computers.software, arts_entertainment.adult_entertainment, arts_entertainment.igaming, or 'all' to list the categori…
- `placement_id` (string): Optional ad placement id. This argument takes precedence over the X-AON-Placement-Id HTTP header; when omitted, the header supplies the placement. The placement must be active and identifies the appl…

### `aon_submit_feedback` (~134 tokens)

Submit an explicit user feedback action for an AON Offer. Call only after the user clearly dismisses it or says they are not interested; never infer this from silence or other behavior. This initial scaffold acknowledges the request with success but does not persist feedback or change delivery yet; the internal workflow will be added later.

Input parameters:

- `feedback` (string, required): dismissed hides this item temporarily; not_interested cancels the default watch for the target.
- `idempotency_key` (string): Optional caller-generated key reserved for idempotent processing when persistence is implemented.
- `target` (object, required): The Offer that received the explicit feedback.

### `aon_manage_watch` (~134 tokens)

Restore or cancel the default watch for an AON Offer or category. Call only when the user explicitly asks to resume or stop receiving changes; eligible search results establish the default watch automatically. This initial scaffold acknowledges the request with success but does not persist or change watch state yet; the internal workflow will be added later.

Input parameters:

- `idempotency_key` (string): Optional caller-generated key reserved for idempotent processing when persistence is implemented.
- `operation` (string, required): watch restores or enables the target watch; unwatch cancels it.
- `target` (object, required): The Offer or category whose watch should be restored or cancelled.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/pro-aon-mcp/v1-mcp#diagnostics

## Score history

- 2026-10-18: 59
- 2026-10-17: 59
- 2026-10-16: 58
- 2026-10-15: 58
- 2026-10-14: 58
- 2026-10-13: 57
- 2026-10-12: 57
- 2026-10-10: 56
- 2026-10-07: 54
- 2026-10-04: 65
- 2026-10-03: 64
- 2026-10-02: 64
- 2026-10-01: 28
- 2026-09-30: 28
- 2026-09-29: 28
- 2026-09-28: 28
- 2026-09-27: 28
- 2026-09-26: 28
- 2026-09-25: 28
- 2026-09-24: 28
- 2026-09-23: 28
- 2026-09-22: 28
- 2026-09-21: 28
- 2026-09-20: 28
- 2026-09-19: 28
- 2026-09-18: 28
- 2026-09-17: 28
- 2026-09-16: 28
- 2026-09-15: 28
- 2026-09-14: 28

## Common questions

### What is the AON — Agent Offer Network MCP server?

AON — Agent Offer Network is an MCP server listed in the public MCP registry as pro.aon/mcp. Real, buyable product and service offers, live pricing and trackable links for any MCP agent. This page covers its hosted endpoint (https://api.aon.pro/v1/mcp).

### Is the AON — Agent Offer Network MCP server safe to use?

AON — Agent Offer Network scores 59 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the AON — Agent Offer Network MCP server expose?

AON — Agent Offer Network exposes 5 tools: aon_search_offers, aon_resolve_category, aon_get_category_schema, aon_submit_feedback, aon_manage_watch. Their descriptions and schemas cost roughly 1,470 tokens of context every time the server is loaded.

### Does the AON — Agent Offer Network MCP server require authentication?

No. We connected to AON — Agent Offer Network without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the AON — Agent Offer Network MCP server still maintained?

AON — Agent Offer Network is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.aon.pro/v1/mcp
- Authorisation metadata: https://api.aon.pro/.well-known/oauth-protected-resource/v1/mcp
- Repository: https://github.com/aonpro-dev/aonpro-mcp
- Website: https://docs.aon.pro/mcp
- Changelog RSS feed: https://verifymcp.io/servers/pro-aon-mcp/v1-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/pro-aon-mcp/v1-mcp.json
- HTML version of this page: https://verifymcp.io/servers/pro-aon-mcp/v1-mcp