Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Agoria

REMOTE · AGORIA.STUDIO

Search local businesses and book, order, quote or message any of them from one connection.

Available components

0 this week 89 Trust /100

Last scanned (3 hours ago)

Scores higher than 97% of remote servers

Reachable. Last reached 6 Nov 2026.

Category E-commerce

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability80
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 1732 tokens (~96/item across 18 items; 18 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage91
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 74% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 6 Nov 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 15 Oct 26 0
    • Authorization: unverified → partial ▲ security
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • HSTS header: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
  • 14 Oct 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • Stability: pass → unverified ▼ security
    • Authorization: partial → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • HSTS header: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
  • 4 Oct 26 89
    • HSTS header: fail → pass ▲ security
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 17 Sept 26 0
    • HSTS header: unverified → fail ▼ security
    • Authorization: unverified → partial ▲ security
    • Transport: fail → pass ▲ security
  • 16 Sept 26 0
    • HSTS header: fail → unverified ▼ security
    • Authorization: partial → unverified ▼ security
    • Transport: pass → fail ▼ security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 6 Nov 2026 · Probed https://agoria.studio/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=agoria.studio CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US 14 Jul 2026 14 Jan 2027 RSA 2048 SHA256-RSA cffa9cd1efdbed0274ab77de7af0162
SANs: agoria.studio
CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US (CA) CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US 2 Nov 2017 2 Nov 2027 RSA 2048 SHA256-RSA d07782a133fc6f9a57296e131ffd179
CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US (CA) CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US 1 Aug 2013 15 Jan 2038 RSA 2048 SHA256-RSA 33af1e6a711a9a0bb2864b11d09fae5

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of agoria.studio. — Secure

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
studio. DS published 1354 8 Verified
agoria.studio. DS published 9962 8 Verified
agoria.studio. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy frame-ancestors 'self'
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://agoria.studio/mcp Verified 200
http (plaintext) http://agoria.studio/mcp HTTPS enforced 301 https://agoria.studio/mcp
MCP tools · 18 exposed · ~1,732 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
accept_quote ~87

Choose a business's quote. This creates a real order at that business and declines the others. If that business protects payments, the reply carries a payment link where the money is held by Agoria until the customer confirms they got the work — hand that link to the customer.

NameTypeReqDescription
briefTokenstringyesFrom request_quotes
slugstringyesThe business whose quote to accept

No output schema declared.

No examples provided.

ask_market ~85

Same index as search_market, but takes a plain sentence — 'three bedroom house under 800k in Geelong', 'automatic ute under 80,000km' — and works out the filters itself. Use it when you have the user's own words; use search_market when you already know the exact filters.

NameTypeReqDescription
questionstringyesThe user's request, in their words

No output schema declared.

No examples provided.

book_appointment ~84

Book an appointment at any business by slug. Confirm the slot with check_availability first.

NameTypeReqDescription
customerContactstringyesPhone or email
customerNamestringyes–
notestring––
serviceIdstringyes–
slugstringyesBusiness slug
startsAtstringyesISO datetime from check_availability

No output schema declared.

No examples provided.

check_availability ~59

Check open appointment slots for a service at a business on a date (YYYY-MM-DD).

NameTypeReqDescription
datestringyesYYYY-MM-DD
serviceIdstringyesService id from get_business
slugstringyesBusiness slug

No output schema declared.

No examples provided.

compare_quotes ~57

See every business's answer to a brief side by side: price, what it covers, lead time, rating, whether the payment would be protected, and which is cheapest or soonest.

NameTypeReqDescription
briefTokenstringyesFrom request_quotes

No output schema declared.

No examples provided.

create_want ~119

Save a standing search on the customer's behalf. They get told when matching supply appears, AND — anonymously, without their contact details — sellers who could satisfy it can see it and offer. Use this when search_market found nothing good: it converts a dead end into a request the market can answer.

NameTypeReqDescription
cadencestring–How often to tell them about new matches
contactstringyesThe customer's email — never shown to sellers
namestring––
requeststringyesWhat they want, in their words

No output schema declared.

No examples provided.

get_business ~47

Get full details for a business by slug: description, contact, hours, services, FAQs, and the actions its agent supports.

NameTypeReqDescription
slugstringyesBusiness slug from search_businesses

No output schema declared.

No examples provided.

get_item ~92

Everything about a single item: full facets, photos, where it is, who is selling it and how well-proven they are, a price guide computed from comparable items on the network, and the adjacent services a buyer usually needs next (finance, inspection, conveyancing, transport).

NameTypeReqDescription
refstringyesItem ref from search_market, e.g. 'acme-motors/offering:stk991'

No output schema declared.

No examples provided.

get_reviews ~53

Get a business's aggregate rating and reviews by slug. Optionally filter to a product/service id.

NameTypeReqDescription
slugstringyesBusiness slug
targetIdstring–Product/service id; omit for whole business

No output schema declared.

No examples provided.

list_market_filters ~49

What can be searched and filtered on. Call this when you are unsure which `kind` or which `filters` keys search_market will accept.

NameTypeReqDescription
kindarray–Narrow to specific kinds

No output schema declared.

No examples provided.

list_products ~57

List the products a business sells by slug — price/sale, availability/stock, brand, SKU/GTIN, variants, specs, dimensions.

NameTypeReqDescription
querystring–Optional keyword filter
slugstringyesBusiness slug

No output schema declared.

No examples provided.

open_demand ~69

Open standing requests from real buyers, anonymised. Useful for a business deciding what to stock or list, and for understanding where the network has no supply at all.

NameTypeReqDescription
kindarray––
unmetOnlyboolean–Only requests nothing currently matches
wherestring––

No output schema declared.

No examples provided.

price_guide ~120

A price distribution for comparable items on the network — asking prices, and where the network settled the sale, what buyers actually paid. Widens the comparison and says so when the exact match is too thin to be meaningful.

NameTypeReqDescription
attributesobjectyesWhat is being priced, e.g. {"make":"Toyota","model":"HiLux","year":2021}
kindstringyesItem kind, e.g. 'vehicle' or 'listing'
wherestring–Restrict to a locality first; dropped automatically if too thin

No output schema declared.

No examples provided.

request_quotes ~207

Describe a job once and send it to the businesses that can price it. Each one answers with a real number, what it covers, and how long the price stands. Returns a briefToken — poll compare_quotes with it to see the prices as they land, then accept_quote to choose one. Use this instead of calling request_quote at each business separately.

NameTypeReqDescription
budgetnumber––
categorystring–Business category to target, e.g. 'Plumber'
customerContactstringyesEmail or phone — businesses quote back to this
customerNamestring––
detailsstringyesWhat the customer needs, in plain language. The more specific, the better the quotes.
locationstring–City or suburb
neededBystring–When it's needed
slugsarray–Specific businesses to ask. Omit to have Agoria match them.
titlestring–Short label for the job

No output schema declared.

No examples provided.

resolve_place ~61

Resolve a suburb, postcode or city to coordinates and the radius that name implies. Use it to check a place exists before passing it to search_market.

NameTypeReqDescription
wherestringyese.g. 'Fitzroy', '3065', 'Geelong VIC'

No output schema declared.

No examples provided.

search_businesses ~84

Find businesses on Agoria by free-text query, category, and/or city. Returns each business's slug plus the actions its agent can take, so you can act on it directly from this same connection.

NameTypeReqDescription
categorystring––
citystring––
querystring–e.g. 'emergency plumber', 'gluten free pizza'

No output schema declared.

No examples provided.

search_market ~264

Search individual items across every business on the network — property listings, vehicles, courses, products, services, events, plans — with typed filters, a price range and a radius around a place. Prefer this over search_businesses whenever the user is looking for a THING rather than a company. Returns items with prices, locations, photo counts and the seller's verification status.

NameTypeReqDescription
filtersobject–Typed facet filters keyed by field id, e.g. {"beds":{"min":3},"make":"toyota"}
kindarray–Item kinds to include, e.g. ['listing'], ['vehicle'], ['course']. Call list_market_filters to see what exists.
limitnumber––
maxPricenumber––
minPricenumber––
pagenumber––
querystring–Free text, e.g. 'renovated terrace', 'diesel ute'
radiusKmnumber–Radius around `where`. Defaults to the size of the place named.
sortstring––
verifiedOnlyboolean–Only items from businesses whose details have been checked against an outside register
wherestring–A suburb, postcode, city or 'lat,lng'

No output schema declared.

No examples provided.

take_action ~138

Perform any non-booking action a business supports (request_quote, place_order, send_message, pay_invoice, sign_document, subscribe, register…). Get valid action ids and their fields from get_business. Pass the action's fields as a JSON object. If the result is 'action_required', hand the user the next.url (payment/signing link) or re-call with fields.confirmToken to confirm.

NameTypeReqDescription
actionstringyesAction id, e.g. 'request_quote'
fieldsobjectyesThe action's input fields as a JSON object (include confirmToken to complete a gated action)
slugstringyesBusiness slug

No output schema declared.

No examples provided.

Install

How do I install the Agoria MCP server?

Agoria is a hosted endpoint at https://agoria.studio/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · agoria.studio

# add to Claude Code
claude mcp add --transport http studio-agoria-registry 'https://agoria.studio/mcp'
Common questions

What is the Agoria MCP server?

Agoria is an MCP server listed in the public MCP registry as studio.agoria/registry. Search local businesses and book, order, quote or message any of them from one connection. This page covers its hosted endpoint (https://agoria.studio/mcp).

Is the Agoria MCP server safe to use?

Agoria scores 89 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Agoria MCP server expose?

Agoria exposes 18 tools: search_businesses, search_market, ask_market, get_item, list_market_filters, and 13 more. Their descriptions and schemas cost roughly 1,732 tokens of context every time the server is loaded.

Does the Agoria MCP server require authentication?

No. We connected to Agoria without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Agoria MCP server still maintained?

Agoria is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Agoria MCP server?

VerifyMCP ran 13 checks on Agoria, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.