MCP servers › io.github.bck-stack › sitecheck-shop-social

MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24

io.github.bck-stack/sitecheck-shop-social

113 pay-per-call agent tools: e-commerce, product, price and social media data tools. x402 — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-10-24version 1.0.2streamable HTTP113 tools

Summary

io.github.bck-stack/sitecheck-shop-social is a remote MCP server listed in the official MCP registry at version 1.0.2. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 113 tools, 0 resources and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

met: Registry entry is active and says how to run it
not met: Source repository link opens
not applicable: Repository is not archived
not applicable: Code pushed to the repository in the 90 days before our check
not applicable: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

From public records, not a safety rating. Each check with its reason

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Tools: 113
Last tested: 2026-10-24

Add to your client

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-24

Mode

read-only (no tool calls)

Latest version

1.0.2, published 2026-10-24 (registry, as of the 2026-10-24 snapshot)

First listed version

2026-10-23 (earliest version still in the registry; older removed versions would be earlier)

Version history

3 versions listed, 2026-10-23 to 2026-10-24; 3 in the 90 days before the 2026-10-24 snapshot.

Most recent 3 versions

1.0.2 · 2026-10-24
1.0.1 · 2026-10-24
1.0.0 · 2026-10-23

(versions still listed in the registry only)

Registry data

snapshot 2026-10-24

Package and repository

checked 2026-10-24

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 1.0.2 (published 2026-10-24).

Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.

What it is

What does this server offer?

Observed inventory

113tools

0resources

0prompts

None of its 113 tools are described as changing anything. For 113 the reading was uncertain, so no mark is shown.

ecommerce_vestiairecollective
“Vestiaire Collective listing tracker (US site, USD): for 1-10 listing IDs (the number before .shtml in a listing URL) returns title, brand, category, condition, color, material, current price, seller…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- idsstringrequired“Comma-separated listing IDs or listing URLs, 1 to 10, e.g.”
ecommerce_amazon_bestsellers
“Top items on Amazon.com's Best Sellers page: rank, ASIN and product page link, read from the public HTML.”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“How many ranked items, 1 to 30 (default 10)”
ecommerce_chewy_com
“Chewy (US) item tracker: for 1-10 Chewy item IDs (the number after /dp/ in a chewy.com URL) returns name, brand, price, strike-through price, Autoship price and discount, per-unit price, in-stock / d…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- idsstringrequired“Comma-separated Chewy item IDs or chewy.com product URLs, 1 to 10, e.g.”
ecommerce_rakuten_japan
“Rakuten Ichiba (Japan) product search from the official Rakuten Web Service API: item name, price in JPY, shop, review average and count, point rate, availability, shipping flags and item link.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Keyword, 1 to 60 characters (Japanese or English)”
- limitstring“How many items, 1 to 30 (default 5)”
- sortstring“standard (default), +itemPrice, -itemPrice, -reviewCount, -reviewAverage, -updateTimestamp”
ecommerce_hepsiburada
“Hepsiburada (Turkey) product search: product name, product ID (HB SKU), final price and crossed-out price in TRY, discount %, rating and number of reviews, campaign lines (e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search words in Turkish or English, e.g.”
- sortstring“relevance (default), price_low, price_high, reviews, rating or newest”
- pagestring“Page number 1 to 50 (default 1)”
ecommerce_grubhub
“Grubhub restaurants delivering to a US ZIP code (or lat/lng), optionally matching a search such as pizza or sushi: restaurant id, name, cuisines, rating and rating count, price level (1-4), delivery …”
Publisher declares: read-only yes · open-world yes
6 inputs
- zipstring“US 5-digit ZIP code, e.g.”
- latnumber“Latitude (with lng, instead of zip)”
- lngnumber“Longitude (with lat, instead of zip)”
- querystring“Optional search text: cuisine, dish or restaurant name, e.g.”
- modestring“delivery (default) or pickup”
- pageinteger“Page number, 1-10 (default 1)”
ecommerce_trendyol_turkey
“Trendyol (Turkey) product search: total hits and 36 products per page with product id, name, brand, category, price (TRY), original price and discount, rating and review count, best-seller rank, favo…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- querystringrequired“Search words (Turkish works best), e.g.”
- pagenumber“Result page 1-50 (default 1)”
ecommerce_chemist_warehouse
“Chemist Warehouse (Australia) category products (first page, about 20): product id, name, price (AUD), saving off RRP (AUD), rating and review count, image and product link.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- categorystringrequired“Category id and slug from chemistwarehouse.com.au/shop-online/<id>/<slug>, e.g.”
ecommerce_digikala_iran
“Digikala (Iran) product search: product ID, Persian and English title, brand, category, selling price and list price in Iranian rial (and toman), discount %, stock, rating (0-100) and count, default …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search text in Persian or English, e.g.”
- sortstring“relevance (default), views, newest, bestselling, cheapest or expensive”
- pagestring“Page number 1 to 50 (default 1)”
ecommerce_backmarket
“Back Market refurbished-product search on a country site (en-us, en-gb, fr-fr, de-de, es-es, it-it, ...): total hits and the first page of products with listing id, title, brand, model, category, con…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- querystringrequired“Search words, e.g.”
- localestring“Site locale: en-us (default), en-gb, fr-fr, de-de, es-es, it-it, nl-nl, en-au, ja-jp, ...”
ecommerce_takealot_south_africa
“Takealot.com (South Africa) product search from the JSON API the Takealot website uses: product ID (PLID), title, brand, price or price range in ZAR, list price, saving badge, star rating, review cou…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- sortstring“relevance (default), price_low, price_high, rating or newest”
ecommerce_aliexpress
“AliExpress product search from the public search page: product ID, title, sale price and original price with currency code, discount %, promo label (welcome-gift cards have no price), star rating and…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Page number 1 to 60 (default 1)”

Show 88 more tools

ecommerce_flixbus
“FlixBus and FlixTrain trips between two cities on a date: departure and arrival times and stations, duration, number of transfers, price in EUR (with and without platform fee), seats left and availab…”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- fromstringrequired“Departure city name, e.g.”
- tostringrequired“Arrival city name, e.g.”
- datestring“Travel date YYYY-MM-DD, today to 180 days ahead (default: 7 days from today)”
ecommerce_zazzle
“Zazzle (US) product search from the public search page: product ID, title, product type, price and current sale price in USD, discount %, promo label, all-time order count, store name and handle, ima…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Page number 1 to 16 (default 1)”
ecommerce_costplusdrugs
“Cost Plus Drugs mail-order cash prices from its official pricing API: search by drug name (optionally strength) or NDC; returns medication and brand name, generic/brand, form, strength, treatment cat…”
Publisher declares: read-only yes · open-world yes
4 inputs
- termstring“Drug or brand name, partial match, e.g.”
- strengthstring“Strength filter with term, e.g.”
- ndcstring“National Drug Code, with or without dashes, e.g.”
- limitstring“Max results 1 to 100 (default 25)”
ecommerce_nykaa_beauty
“Nykaa (India) beauty product search: name, brand, price and MRP in INR, discount, rating, rating count, in-stock flag, shade/variant count, offer count, category path, tags (bestseller, featured) and…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Results page 1 to 10 (default 1)”
ecommerce_shopify_stores
“Products of a Shopify store from its public /products.json feed: title, type, vendor, variant prices and whether each variant is in stock.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- shopstringrequired“Store domain, e.g.”
- limitstring“How many products, 1 to 30 (default 5)”
ecommerce_faire
“Faire wholesale marketplace category listing (logged-out view): product token, name, brand name and token, suggested retail price (USD), case quantity, stock units, brand rating and review count, new…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- categorystringrequired“Faire category name as in faire.com/category/<name>, e.g.”
ecommerce_metalprices_com
“Latest precious-metal prices from MetalpriceAPI (gold XAU, silver XAG, palladium XPD, platinum XPT): USD per troy ounce, plus the raw rate (ounces per 1 USD) and the time the price is from (end of da…”
Publisher declares: read-only yes · open-world yes
1 input
- currenciesstring“Comma list of codes from XAU, XAG, XPD, XPT (default all four)”
ecommerce_petco
“Petco.com (US) product search read from the public search page: product name, brand, price, list price, Repeat Delivery (autoship) price in USD, average rating, review count, category, same-day deliv…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Page number 1 to 20 (default 1)”
ecommerce_lazada_products
“Lazada product search for Singapore, Malaysia, Philippines, Thailand, Vietnam and Indonesia, from the JSON the Lazada catalog page itself loads: product name, item ID, price and original price in loc…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search words, e.g.”
- countrystring“sg (default), my, ph, th, vn or id”
- pagestring“Page number 1 to 20 (default 1)”
ecommerce_revzilla
“RevZilla motorcycle gear and parts in a category (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- categorystringrequired“Category slug as in revzilla.com/<slug>, e.g.”
- pagestring“Results page 1 to 20 (default 1)”
ecommerce_avantor_vwr_international
“Avantor / VWR catalog search (US or Canada site): product code, name, short description, VWR catalog and article number, supplier/vendor, list prices per unit of measure (e.g.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Search words, e.g.”
- sitestring“us (default, USD) or ca (CAD)”
- pagestring“Page number from 1 (default 1)”
- limitstring“Results per page 1 to 50 (default 20)”
ecommerce_vintage_photo_restorer
“Restores an old, scratched or faded photo with an AI image model (Cloudflare Workers AI, img2img).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- imagestringrequired“Base64 of a JPEG or PNG, up to 1 MB”
- strengthstring“How much the model may change the photo, 0.1 to 0.9 (default 0.4)”
ecommerce_smart_apify_actor
“Searches the public Apify Store for scraper actors by keyword: name, author, short description, and 30-day user count.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search keyword, 2 to 60 characters”
- limitstring“How many actors, 1 to 20 (default 5)”
ecommerce_costco
“Costco Canada (costco.ca) product tracker: for 1-5 product IDs (the number at the end of a costco.ca product URL) returns name, brand, item number (SKU), price in CAD, availability (in stock / out of…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- idsstringrequired“Comma-separated costco.ca product IDs or product URLs, 1 to 5, e.g.”
ecommerce_rappi
“Rappi restaurant menu and prices (Mexico, Brazil, Colombia, Argentina, Chile, Peru, Uruguay, Ecuador, Costa Rica): for a Rappi store ID returns store name, brand, address, open status, ETA, delivery …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- storeIdstringrequired“Rappi store ID (the number in rappi.<country>/restaurantes/<id>-name) or a restaurant URL (required)”
- countrystring“mx (default), br, co, ar, cl, pe, uy, ec, cr; taken from the URL if a URL is given”
- maxProductsstring“Max menu products to return, 1 to 500 (default 200)”
ecommerce_singlecare
“SingleCare prescription coupon prices for a drug: price at each nearby pharmacy (Kroger, CVS, Walgreens, Walmart...) with loyalty price and distance, the lowest price, form, strength and quantity pri…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- drugstringrequired“Drug name as in singlecare.com/prescription/<name>, e.g.”
- zipstring“Optional 5-digit US ZIP code for nearby pharmacies”
ecommerce_ace_hardware
“Ace Hardware (US) product search: total hits and up to 30 products per page with product code, name, brand, price, MSRP, on-sale flag, UPC, manufacturer part number, product type, online stock, ratin…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- querystringrequired“Search words, e.g.”
- pagenumber“Result page 1-20 (default 1)”
ecommerce_gmx_arbitrum_prices
“GMX token prices on Arbitrum from the public api.gmx.io/prices feed.”
Publisher declares: read-only yes · open-world yes
Takes no inputs.
ecommerce_restaurant_depot_sysco_us_foods_chef_store
“Restaurant-supply prices from US Foods CHEF'STORE (cash-and-carry, open to the public): products with brand, description, category, pack and size, UPCs, item number and, at the chosen store, unit and…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Product search, e.g.”
- storestring“CHEF'STORE store number (default: the site's default store)”
- limitstring“Products, 1 to 50 (default 20)”
- pagestring“Page number from 1 (default 1)”
ecommerce_webstaurantstore
“WebstaurantStore search results for restaurant and foodservice supplies: item number, description, shown price per unit and product link, from the public results page (first page only).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, 2 to 60 characters (letters, digits, spaces, dashes)”
- limitstring“How many items, 1 to 30 (default 10)”
ecommerce_invaluable_auctions
“Auction lots from Invaluable (thousands of auction houses worldwide) for a keyword: upcoming lots with current bid, bid count, estimate range, sale date and type (live/timed), or past lots with the h…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Keyword, e.g.”
- statusstring“upcoming (default) or past”
- limitstring“Lots per page, 1 to 50 (default 20)”
- pagestring“Page number from 1 (default 1)”
ecommerce_newegg
“Newegg (US) product search: item number, title, model, price, list price, instant rebate, lowest price in 30 days, in-stock flag, rating, review count, seller count, category, best-selling rank, free…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Results page 1 to 20 (default 1)”
ecommerce_dealstream_listings
“DealStream businesses for sale: listing title, asking price (USD), short description, industry, city and state, listing id and link, 25 per page (page 1 to 50), newest first, for the whole US or one …”
Publisher declares: read-only yes · open-world yes
2 inputs
- statestring“Optional US state name, e.g.”
- pagestring“Results page 1 to 50 (default 1)”
ecommerce_target_reviews
“Reviews of a Target product by TCIN (the number after A- in a target.com product URL): rating statistics (average, count, 1-5 star distribution, % recommended, review and question counts) and reviews…”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- tcinstringrequired“Target product ID (TCIN), e.g.”
- sortstring“recent (default), helpful, highest or lowest”
- verifiedstring“true for verified purchases only”
- limitstring“Reviews per page, 1 to 50 (default 10)”
- pagestring“Page number from 1 (default 1)”
ecommerce_uline
“Uline industrial supply product by item number (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- itemstringrequired“Uline item number, e.g.”
ecommerce_gamenation
“GameNation.in (India) game, console and accessory search from the JSON API its website uses: product name, product ID, condition (new or pre-owned), selling price and MRP in INR, discount %, trade-in…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search words, e.g.”
- availablestring“true = only products in stock (default false = all)”
- limitstring“Products to return, 1 to 200 (default 50)”
ecommerce_fisher_scientific
“Fisher Scientific (US) lab product search: product family title, description, leaf category, starting list price (USD, as shown to logged-out visitors), catalog (part) numbers in the family, key spec…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, e.g.”
- pagestring“Results page 1 to 10 (default 1)”
ecommerce_mood_fabrics
“Fabrics listed on Mood Fabrics' public product feed: title, type, variant prices and whether each variant is in stock.”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“How many products, 1 to 30 (default 5)”
ecommerce_made_in_china
“Made-in-China.com wholesale product search: product name, supplier company, price range (USD, as the page's structured data gives it) and stock state from the public results page.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search word, 2 to 40 letters (e.g.”
- limitstring“How many products, 1 to 20 (default 5)”
ecommerce_dealstream
“DealStream businesses for sale: listing title, asking price (USD), short description, industry, city and state, listing id and link, 25 per page (page 1 to 50), newest first, for the whole US or one …”
Publisher declares: read-only yes · open-world yes
2 inputs
- statestring“Optional US state name, e.g.”
- pagestring“Results page 1 to 50 (default 1)”
ecommerce_vestiaire_collective
“Vestiaire Collective listing tracker (US site, USD): for 1-10 listing IDs (the number before .shtml in a listing URL) returns title, brand, category, condition, color, material, current price, seller…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- idsstringrequired“Comma-separated listing IDs or listing URLs, 1 to 10, e.g.”
ecommerce_cpsc_recalls
“U.S.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Words that must appear in the recall title, 2 to 100 characters”
- limitstring“How many recalls to return, 1 to 20 (default 5)”
ecommerce_chrome_web_store
“Chrome Web Store search results: extension name, id and detail-page link, from the public results page (first page only).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, 2 to 60 characters (letters, digits, spaces, dashes)”
- limitstring“How many extensions, 1 to 20 (default 5)”
ecommerce_openbeautyfacts_products
“Beauty and personal-care products by brand from Open Beauty Facts (community open data, crowd-sourced).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- brandstringrequired“Brand name, e.g.”
- limitstring“How many products, 1 to 20 (default 5)”
ecommerce_sephora_products
“Sephora (US) product search from Sephora's own catalog search: for a keyword up to 60 products per page with product ID, SKU ID, brand, name, price or price range (USD), sale price, rating, review co…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search keyword or brand (2 to 80 characters)”
- pagestring“Result page, 1 to 20 (default 1)”
- limitstring“Products from this page, 1 to 60 (default 60)”
ecommerce_mediamarkt_eu
“MediaMarkt / MediaWorld product search for Germany, Austria, Switzerland, Italy (MediaWorld) and Poland, read from the schema.org product list on the public search page: product name, price and curre…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words in the shop's language, e.g.”
- countrystring“de (default), at, ch, it or pl”
ecommerce_eu_safety_gate_rapex
“EU Safety Gate (RAPEX) weekly product-safety report index from the European Commission's public XML list: newest reports first, with reference, publication date, week and the link to each report's al…”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“How many weekly reports, 1 to 50 (default 5)”
ecommerce_falabella_latam
“Falabella Chile product search: product ID, name, brand, seller, prices in CLP (Falabella CMR card price, internet/event price and crossed-out normal price) with discount badge, rating and review cou…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words in Spanish or English, e.g.”
- pagestring“Page number 1 to 50 (default 1)”
ecommerce_pricerunner
“Price comparison from PriceRunner (Klarna) in the UK, Sweden or Denmark: for a search, products with lowest price and currency, number of shops offering it, category, popularity rank, rating average …”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Product search, e.g.”
- marketstring“uk (default), se or dk”
social_reddit_posts_comments
“Reddit community discussions from Reddit's public RSS feeds: top posts of a subreddit for hour/day/week/month/year/all, or one thread (post id) with its visible comments.”
Publisher declares: read-only yes · open-world yes
3 inputs
- subredditstring“Subreddit name without r/ (2-21 letters, digits or _).”
- periodstring“hour, day, week, month, year or all (default day).”
- poststring“Optional Reddit post id (e.g.”
social_tiktok_creative_center_top_ads
“TikTok Creative Center Top Ads: the top-performing TikTok auction ads the public gallery shows first for a region and period (logged-out view: the first 4 cards): ad id, campaign objective, industry,…”
Publisher declares: read-only yes · open-world yes
2 inputs
- regionstring“Two-letter country code, e.g.”
- periodstring“Look-back days: 7, 30 or 180 (default 30)”
social_instagram_reel
“Recent reels and videos of a public Instagram account from Instagram's web profile JSON: reels and videos among the 12 newest grid posts and the newest long-form (IGTV) videos, each with URL, caption…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Instagram username (with or without @) or instagram.com/<user> URL”
social_x_com_profiles
“Public X (Twitter) profiles for up to 10 usernames via the free FxTwitter API (open-source relay of X's public profile data; X's own API is paid): user ID, name, bio with expanded links, location, we…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamesstringrequired“1 to 10 X usernames, comma separated, with or without @ (x.com/<user> URLs accepted)”
social_instagramon 1 other server
“Engagement snapshot of a public Instagram account from Instagram's web profile JSON: followers, total posts, and the 12 newest posts with likes, comments, video views and per-post engagement rate ((l…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Instagram username (with or without @) or instagram.com/<user> URL”
social_facebook_pages
“Facebook Page profile from Facebook's public Page Plugin: page name, follower count, verified flag and page link.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagestringrequired“Facebook page username (e.g.”
social_youtube
“Latest videos of a YouTube channel (first page, up to 30): video id, title, link, duration, view count text and age text, read from the channel's public Videos page.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- handlestringrequired“Channel handle, with or without @ (e.g.”
social_facebook_search
“Facebook people search by name via Facebook's public people directory (facebook.com/public/<name>, logged-out view, up to ~24 results): profile id, rank, name, profile link and profile photo.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- namestringrequired“Person's name, e.g.”
social_facebook_marketplace
“Facebook Marketplace search for a city (logged-out view, the first ~15-25 listings): listing id, title, price, amount, city, state, seller name, sold / pending flags, delivery types, created time, ph…”
Publisher declares: read-only yes · open-world yes
4 inputs, 2 required
- citystringrequired“Marketplace city slug as in facebook.com/marketplace/<city>, e.g.”
- querystringrequired“Search words, e.g.”
- minPricenumber“Optional minimum price”
- maxPricenumber“Optional maximum price”
social_tiktok_shop
“TikTok Shop (US) category products: the products the public category page shows first (about 10) with title, price, original price, rating, review count, units sold, shop name, brand and product link…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- categorystringrequired“Category slug, e.g.”
- categoryIdstring“Category id (digits), e.g.”
social_tiktok_profile
“Public TikTok profile from the profile page's embedded data: user ID, secUid, nickname, bio, bio link, verified, private and organization flags, language, avatar, creation date, and exact counts of f…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“TikTok username (with or without @), or a tiktok.com/@user URL”
social_facebook_ads_library
“Ads from Meta's official Ad Library API, by keyword or page IDs and country: ad ID, page, funding byline, creation and delivery dates, creative texts, snapshot URL, platforms, languages and, for poli…”
Publisher declares: read-only yes · open-world yes
6 inputs
- qstring“Search words (or use pageIds)”
- pageIdsstring“Up to 10 Facebook page IDs, comma separated”
- countrystring“Two-letter country the ads reached, e.g.”
- adTypestring“ALL or POLITICAL_AND_ISSUE_ADS (default).”
- activeStatusstring“ACTIVE, INACTIVE or ALL (default ALL)”
- limitstring“1 to 50 ads (default 10)”
social_facebook_groups
“Facebook group snapshot as a logged-out visitor sees it: group name, id, Public/Private, member count and the posts shown in the first page load (post id, link, author, text, time, reactions, comment…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- groupstringrequired“Group vanity name (e.g.”
social_youtube_channel_email
“YouTube channel About page from YouTube's public page data: description, country, subscriber/view/video counts, external links, and any email addresses the creator wrote in the public description.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- handlestringrequired“Channel handle, with or without @ (e.g.”
social_youtube_transcript
“Transcript (captions) of a public YouTube video from YouTube caption tracks: title, channel, length, available caption languages, and the chosen track as timed segments (start and duration in seconds…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- videostringrequired“YouTube video URL (watch, youtu.be, shorts, embed) or the 11-character video ID”
- langstring“Preferred caption language code, e.g.”
social_socialblade
“Social Blade creator statistics for a YouTube, Instagram, TikTok or Twitch account: followers/subscribers, views or likes, uploads, engagement rate and averages where Social Blade has them, Social Bl…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- platformstring“youtube, instagram, tiktok or twitch (default youtube)”
- handlestringrequired“Account handle without @, e.g.”
social_contact_info
“Contact details published on one public web page you name (https only): mailto and tel links, email addresses written in the page text, and links to social profiles, plus the page title.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Public https page URL to read (one page, max 300 characters)”
social_telegram_channel
“Public Telegram channel from its t.me/s preview page: title, description, subscriber/photo/video/link counts, and the latest ~20 posts with text, view count text and time.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- channelstringrequired“Public channel username without @ (5-32 letters, digits or _)”
social_facebook_reels
“Facebook Reel details from the public reel page (logged-out view): reel id, title, summary, caption, duration (seconds), thumbnail, owner name and id, post time, reaction, comment and share counts.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- reelstringrequired“Reel link (facebook.com/reel/<id>) or numeric reel id”
social_reddit_profiles
“Reddit user profile from Reddit's public user feed: the user's name, the profile subtitle, and their latest submitted posts (title, subreddit, date, link; about 25 items).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Reddit username without u/ (3-20 letters, digits, _ or -)”
social_youtube_hashtag
“Videos on one YouTube hashtag page: video id, title, channel, view count text (exact for most videos), age text, duration and link, as shown on the first page (about 10-12 videos).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- tagstringrequired“Hashtag without #, letters, digits or _ (2-50 characters)”
social_facebook_likes
“Reaction, comment and share counts for up to 10 public Facebook post URLs, from Facebook's public Embedded Post plugin: counts as shown (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- postsstringrequired“1 to 10 public Facebook post, photo or video URLs, comma separated”
social_instagram_contact
“Public contact details of an Instagram account from Instagram's web profile JSON: business email, phone and address (only when the account shows them as public contact buttons), contact method, categ…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Instagram username (with or without @) or instagram.com/<user> URL”
social_instagram_posts
“The 12 most recent grid posts of a public Instagram account from Instagram's web profile JSON: shortcode, URL, type (image/carousel/video/reel), full caption, post time, likes, comments, video views …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Instagram username (with or without @) or instagram.com/<user> URL”
social_instagram_profile
“Public Instagram profile from Instagram's web profile JSON: ID, username, full name, bio, external link and bio links, verified/private/business flags, category, exact follower, following and post co…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Instagram username (with or without @) or instagram.com/<user> URL”
social_x_com
“One public X (Twitter) post by URL or ID from the JSON behind X's official embed widget: text, language, date, like and reply counts, edit status, reply-to, links, hashtags, mentions, photos and vide…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- poststringrequired“Post URL (x.com or twitter.com /status/<id>) or numeric post ID”
social_youtube_comments
“First page of top comments (about 20) on one YouTube video: author, verified/creator flags, text, like count text, reply count text and age text.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- videoIdstringrequired“YouTube video id (11 characters)”
social_reddit_posts
“Posts of one subreddit from Reddit's public feed, sorted hot, new, top or rising (about 25 items): id, title, author, date and link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- subredditstringrequired“Subreddit name without r/ (2-21 letters, digits or _)”
- sortstring“hot, new, top or rising (default hot)”
social_threads_search
“Threads (Meta) post search: the top posts for a keyword or hashtag as the logged-out search page shows them (typically 10-20) with author, text, time, likes, replies, reposts, quotes, media and link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Keyword or #hashtag”
- limitstring“How many posts, 1 to 25 (default 10)”
social_pinterest
“Latest pins of a public Pinterest profile from Pinterest's own RSS feed: profile name and description, and for each of the newest 25 pins the pin URL and ID, text, image URL and publish date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- usernamestringrequired“Pinterest username, e.g.”
- limitstring“Pins to return, 1 to 25 (default 25)”
social_tiktokon 1 other server
“One public TikTok video by URL from the video page's embedded data: caption, hashtags, creation date, duration, size, cover image, region, language, ad flag, exact play, like, comment, share, save an…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“TikTok video URL https://www.tiktok.com/@<user>/video/<id>”
social_youtube_shorts
“Latest Shorts of one YouTube channel from its public Shorts page (first ~48 items): video id, title, view count text (as YouTube shows it, e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- handlestringrequired“Channel handle, with or without @ (e.g.”
social_telegram_keyword_search
“Keyword search inside one public Telegram channel, using the channel's own preview search: matching posts with id, text, view count text and date (about 20 per page).”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
- channelstringrequired“Public channel username without @ (5-32 letters, digits or _)”
- querystringrequired“Keyword or phrase to search for (2-100 characters)”
social_facebook_followers_following
“Facebook Page follower counts from Facebook's public Page Plugin: for up to 10 Pages (username, numeric ID or facebook.com URL) the Page name, numeric page ID, verified badge, profile picture URL and…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagesstringrequired“1 to 10 Facebook Pages, comma separated: username, numeric ID or facebook.com/<page> URL”
social_threads_replies
“Replies to a Threads post: the post itself (text, likes, reply/repost/quote counts) and the replies the public post page shows (first page, typically 10-25, including short reply chains and the autho…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- urlstringrequired“Threads post URL (threads.net or threads.com), or a bare post code such as DeZtp-TkQHh together with handle”
- handlestring“Author username, only needed when url is a bare post code”
- limitstring“How many replies, 1 to 50 (default 20)”
social_labx_com
“Listings of one LabX seller (lab equipment marketplace) from the seller's public profile page: listing id, title, price range, currency, condition, category, source link and availability date (about …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- sellerstringrequired“LabX seller path: slug/id as in the profile URL, e.g.”
social_facebook_posts
“Latest public posts of a Facebook Page as a logged-out visitor sees them (Facebook shows the first 1-3 posts without login): post id, link, text, time, reaction / comment / share counts and media typ…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagestringrequired“Facebook Page username (e.g.”
social_facebook_comments
“Comments on a public Facebook post as a logged-out visitor sees them (the 'Most relevant' comments of the first page load, usually about 10): comment id, author, author link, text, time, reaction cou…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Link of a public Facebook post (facebook.com/<page>/posts/<id>, /permalink.php?..., /photo?fbid=..., /reel/<id>)”
social_tiktok_hashtag_analytics
“TikTok hashtag stats from TikTok's public hashtag detail JSON: hashtag ID, title, description, exact video count and total view count, average views per video and commerce flag, for up to 10 hashtags…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- hashtagsstringrequired“1 to 10 hashtags, comma separated, with or without #”
social_youtube_twitch_kick_creator_outreach
“One outreach card for a creator across YouTube, Twitch and Kick (give any of the three usernames): bio, follower/subscriber counts, live status, verified flag, every public social link (Instagram, X,…”
Publisher declares: read-only yes · open-world yes
3 inputs
- youtubestring“YouTube handle, e.g.”
- twitchstring“Twitch login, e.g.”
- kickstring“Kick channel slug, e.g.”
social_snapchat
“Public Snapchat profile from its web profile page: username, display name, page title and description, snapcode image and canonical link.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- usernamestringrequired“Snapchat username without @ (3-15 letters, digits, .”
social_facebook_events
“Events listed on a Facebook Page's Events tab (logged-out view): event id, name, date text, place, city, cancelled flag, organiser and event link, plus the Page name.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagestringrequired“Facebook Page username (e.g.”
social_facebook_photos
“Latest photos on a Facebook Page's Photos tab (logged-out view, usually 8): photo id, alt-text caption, image URL, width, height and photo link, plus the Page name and follower count.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagestringrequired“Facebook Page username (e.g.”
social_tiktok_comments
“Top-level comments of a public TikTok video from TikTok's web comment list JSON: comment ID, text, likes, reply count, time, language, pinned/liked-by-creator flags and the commenter's ID, username a…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- urlstringrequired“TikTok video URL (tiktok.com/@user/video/<id>) or the numeric video ID”
- limitstring“How many comments, 1 to 60 (default 20)”
social_bilibili_comments
“Hot comments on one Bilibili video from Bilibili's public comment endpoint: comment id, author name, text, like count, reply count and time (up to 20, most-liked first).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- aidstringrequired“Bilibili video aid (digits, e.g.”
social_threads_profile
“Threads (Meta) profile: name, verified flag, bio, follower count and bio links, plus the latest posts the public profile page shows (about 10, including the author's own thread continuations) with te…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- handlestringrequired“Threads username without @, e.g.”
- limitstring“How many posts, 0 to 20 (default 10)”
social_telegram_homepage
“Latest public posts of one Telegram channel as shown on its public web preview (t.me/s/<channel>): post id, text, view count text and date, about 20 per page.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- channelstringrequired“Public channel username without @ (5-32 letters, digits or _)”
social_youtube_edu_channels
“Education channels on YouTube: channels found by a topic search (default 'education', first page of about 20) with channel id, name, handle, subscriber count text, description snippet and link, from …”
Publisher declares: read-only yes · open-world yes
1 input
- topicstring“Education topic to search (2-100 characters, default education)”
social_facebook_page_contact_info
“Contact details from a Facebook Page's About tab (logged-out view): category, email, phone, website(s), address, other social links and the raw list of fields Facebook shows, plus the Page name and f…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- pagestringrequired“Facebook Page username (e.g.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 113 tools are listed. Read 2026-10-24.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).

Counted from the listing

Parameters with a description: 100% of 218
Tools with a description: 100% of 113
Typical description length: 438 characters

The tool set

Counted from the listing

Tools: 113
Size of the list: about 28,310 tokens for an agent to load (characters ÷ 4)
Naming: 113 of 113 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 0 of 113 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-24 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://api.shopsocial-api.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "sitecheck-shop-social": {
      "url": "https://api.shopsocial-api.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "sitecheck-shop-social": {
      "type": "http",
      "url": "https://api.shopsocial-api.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"sitecheck-shop-social","type":"http","url":"https://api.shopsocial-api.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http sitecheck-shop-social https://api.shopsocial-api.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.shopsocial-api.workers.dev/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint api.shopsocial-api.workers.dev/mcp	Session opened	matches	our test · 2026-10-24
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-24

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
Not metSource repository link opensThe registry entry gives no repository link.
Does not applyRepository is not archivedNo public GitHub repository to read.
Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.bck-stack/sitecheck-shop-social

Answered from the data above

Does io.github.bck-stack/sitecheck-shop-social need an API key or sign-in?

It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.bck-stack/sitecheck-shop-social been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-24

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 4

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
519 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 113 tools, 0 resources, 0 prompts.
1,243 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

pending: added in the weekly update

listed 2026-10-24; not classified yet

Pricing modelAI-classified

pending: added in the weekly update

the website is not read yet

Programming language

does not apply

no existing GitHub repository (server declares no repository link, so there is nothing to fetch)

Hosting type

remote (hosted by the publisher)

registry · 2026-10-24

MCP capability

tools

our test · 2026-10-24

Transport

streamable HTTP

registry · 2026-10-24

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-24

Lifecycle status

active

registry · 2026-10-24

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

not stated

no readable GitHub owner to describe

Maintenance

does not apply

server declares no repository link, so there is nothing to fetch

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.bck-stack/sitecheck-shop-social: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-shop-social

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.bck-stack/sitecheck-shop-social)](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-shop-social)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology