# Deer Supply (remote · deer.supply)

Deer Supply (Canada): GLP weight-loss pens, live prices and delivery; sign in for orders and health.

- Trust score: 79/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-04

## Components

- remote · `deer.supply`: 79/100 (this document), [markdown](https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp.md), [page](https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp)

## Channel facts

- Endpoint: `https://deer.supply/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `2.1.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-04.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 69/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1664 tokens (~87/item across 19 items; 19 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 58/100
  - Stability check failed: schema churn in the 19 days we've observed: 1 tool removals, 0 breaking changes, 0 auth/transport breaks, 0 additions.
- **Tool Coverage**: 78/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 34% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 19 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Deer Supply MCP server?

Deer Supply is a hosted endpoint at https://deer.supply/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http supply-deer-deer-supply 'https://deer.supply/api/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "supply-deer-deer-supply": {
      "url": "https://deer.supply/api/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "supply-deer-deer-supply": {
      "type": "http",
      "url": "https://deer.supply/api/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.supply-deer-deer-supply]
url = "https://deer.supply/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "supply-deer-deer-supply": {
      "type": "remote",
      "url": "https://deer.supply/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add supply-deer-deer-supply --url 'https://deer.supply/api/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  supply-deer-deer-supply:
    url: "https://deer.supply/api/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "supply-deer-deer-supply": {
      "Transport": "http",
      "Url": "https://deer.supply/api/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add supply-deer-deer-supply -t streamable-http -u 'https://deer.supply/api/mcp'
```

### Other

```json
{
  "mcpServers": {
    "supply-deer-deer-supply": {
      "type": "http",
      "url": "https://deer.supply/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 54 to 58.

### 2026-11-02 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 48 to 51.

### 2026-10-31 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 41 to 44.

### 2026-10-29 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 34 to 38.

### 2026-10-26 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 24 to 28.

### 2026-10-24 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 18 to 21.

### 2026-10-22 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 11 to 14.

### 2026-10-20 (score 72, 0)

- [security regression] Stability: 0.10 → fail
- [security regression] A breaking change shipped without a version bump: still 2.1.0
- [security regression] Tool “get_trust_report” was removed
- [security] The server rewrote its instructions, which are the text every model session reads

## MCP tools (19)

### `search_products` (~119 tokens)

Search products

Search Deer Supply's catalog (Canada). Weight loss: Retatrutide, Tirzepatide and Semaglutide as pre-filled, ready-to-use pens; also recovery products and ancillary capsules. Returns each product with its sizes, today's price in CAD (sales included), price per mg, quantity breaks, stock and links. Call with no arguments to list everything.

Input parameters:

- `category` (string)
- `query` (string): Words to match, e.g. 'tirzepatide', 'mounjaro', 'recovery'.

### `get_product` (~72 tokens)

Product details

Everything Deer Supply publishes about one product: what it is, sizes and prices, the published dosing schedule, what is in the box, lab (COA) reports, and the related FAQ answers. product_id comes from search_products (e.g. 'retatrutide').

Input parameters:

- `product_id` (string, required)

### `compare_weight_loss_medications` (~79 tokens)

Compare weight-loss medications

Side-by-side comparison of the three GLP weight-loss medications Deer Supply sells (Semaglutide, Tirzepatide, Retatrutide): mechanism, generation, the landmark trial's average weight loss, maintenance dose, today's starting price and lowest price per mg in CAD. Use this when someone is choosing a weight-loss option.

### `estimate_weight_loss` (~77 tokens)

Estimate weight loss (trial averages)

What the clinical trials averaged for someone at a given starting weight, per medication, at 6, 12 and 18 months, using the same curves as deer.supply/calculator. These are trial averages, not a prediction for any one person.

Input parameters:

- `unit` (string)
- `weight` (number, required): Current body weight.

### `quote_cart` (~97 tokens)

Price a cart

Price a cart exactly as Deer Supply's checkout would: line prices with any sale or quantity break, an optional coupon code, shipping and the total in CAD, plus a delivery estimate when a Canadian postal code is given. variant_id values come from search_products. Nothing is reserved or ordered.

Input parameters:

- `coupon_code` (string)
- `items` (array, required)
- `postal_code` (string): Canadian postal code, for the delivery estimate.

### `create_cart_link` (~56 tokens)

Create a cart link

A deer.supply link that opens the cart with these items already in it, for the person to review and check out themselves (they enter their own delivery details and payment). Agents cannot place orders.

Input parameters:

- `items` (array, required)

### `delivery_estimate` (~74 tokens)

Delivery estimate

When an order placed now would ship and arrive, for a Canadian postal code, using the dates Deer quotes on its product pages (orders by noon Eastern ship that weekday; pens travel on the fastest service).

Input parameters:

- `includes_pens` (boolean): False for an order of capsules only.
- `postal_code` (string, required)

### `get_help` (~54 tokens)

Help and policies

Answers from Deer Supply's FAQ (shipping, storage, payment, using the pens, eligibility, returns) plus links to its policies. Pass the question; leave it empty for the whole FAQ.

Input parameters:

- `question` (string)

### `get_store_info` (~50 tokens)

About Deer Supply

Who Deer Supply is and how buying works: what it sells, where it ships, payment methods accepted right now, shipping costs, the money-back policy, lab testing, and how to reach a person.

### `get_lab_results` (~36 tokens)

Lab reports

Third-party lab (COA) reports Deer Supply publishes per product size. Optional product_id.

Input parameters:

- `product_id` (string)

### `track_order` (~70 tokens)

Track an order

Status of a Deer Supply order, given its order number AND the email it was placed with (the same check as deer.supply/track). Returns the status, dates, items and tracking number. Never returns addresses or payment details.

Input parameters:

- `email` (string, required)
- `order_number` (string, required)

### `get_my_account` (~76 tokens)

My Deer account

Requires signing in with a Deer account. A plain-language summary of the signed-in customer's Deer account: their name, orders with status and tracking, store credit and rewards, and (when health access was granted) each health profile's weigh-ins, plan and side effects. The same picture the store's own assistant has. Start here.

### `list_my_orders` (~49 tokens)

My orders

Requires signing in with a Deer account. The signed-in customer's orders, newest first: number, date, status, total, items, tracking number and expected arrival.

Input parameters:

- `limit` (integer)

### `get_my_health` (~82 tokens)

My health charts

Requires signing in with a Deer account. Each health profile on the account (one sign-in can chart several people): its id (needed to log anything), recent weigh-ins in pounds and the trend, the treatment plan (medication, week, current dose, next injection, upcoming dose steps), side effects with their ids, reminder settings and the weigh-in reward.

### `log_weight` (~75 tokens)

Log a weigh-in

Requires signing in with a Deer account. Record a weigh-in on one of the customer's health profiles. Confirm the number with the person first.

Input parameters:

- `date` (string): YYYY-MM-DD, default today.
- `profile_id` (string, required): From get_my_health.
- `unit` (string)
- `weight` (number, required)

### `import_weights` (~81 tokens)

Import weight history

Requires signing in with a Deer account. Add many past weigh-ins at once (from a scale app, a spreadsheet, a photo the person shared). Days already logged are skipped. Show the person the list and get their OK first.

Input parameters:

- `entries` (array, required)
- `profile_id` (string, required): From get_my_health.
- `unit` (string)

### `report_side_effect` (~105 tokens)

Report a side effect

Requires signing in with a Deer account. Send a side effect to the customer's care team on one profile. If it sounds severe, tell the person to get medical help right away (call 911 or go to an emergency department) as well; this report is not an emergency channel.

Input parameters:

- `description` (string, required)
- `profile_id` (string, required): From get_my_health.
- `severity` (string, required)
- `started_on` (string): YYYY-MM-DD, optional.

### `resolve_side_effect` (~67 tokens)

Mark a side effect resolved

Requires signing in with a Deer account. Mark one of the profile's open side effects as resolved (side_effect_id from get_my_health). Reopening one is the care team's job.

Input parameters:

- `profile_id` (string, required): From get_my_health.
- `side_effect_id` (string, required)

### `set_health_emails` (~65 tokens)

Health email settings

Requires signing in with a Deer account. Turn a profile's weigh-in reminder emails and/or reorder alert emails on or off.

Input parameters:

- `profile_id` (string, required): From get_my_health.
- `reorder_alert` (boolean)
- `weighin_reminders` (boolean)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp#diagnostics

## Score history

- 2026-11-04: 79
- 2026-11-03: 78
- 2026-11-02: 78
- 2026-11-01: 77
- 2026-10-31: 77
- 2026-10-30: 76
- 2026-10-29: 76
- 2026-10-28: 75
- 2026-10-27: 75
- 2026-10-26: 75
- 2026-10-25: 74
- 2026-10-24: 74
- 2026-10-23: 73
- 2026-10-22: 73
- 2026-10-21: 72
- 2026-10-20: 72
- 2026-10-19: 72
- 2026-10-18: 72
- 2026-10-17: 71
- 2026-10-16: 71

## Common questions

### What is the Deer Supply MCP server?

Deer Supply is an MCP server listed in the public MCP registry as supply.deer/deer-supply. Deer Supply (Canada): GLP weight-loss pens, live prices and delivery; sign in for orders and health. This page covers its hosted endpoint (https://deer.supply/api/mcp).

### Is the Deer Supply MCP server safe to use?

Deer Supply scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Deer Supply MCP server expose?

Deer Supply exposes 19 tools: search_products, get_product, compare_weight_loss_medications, estimate_weight_loss, quote_cart, and 14 more. Their descriptions and schemas cost roughly 1,384 tokens of context every time the server is loaded.

### Does the Deer Supply MCP server require authentication?

No. We connected to Deer Supply without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Deer Supply MCP server still maintained?

Deer Supply is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://deer.supply/api/mcp
- Website: https://deer.supply/
- Changelog RSS feed: https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/supply-deer-deer-supply/api-mcp