mcp-registry/xyz.trusteed/mcp-gateway · v1.0.0+tools.d0a71800
As of 2026-10-27 02:31 UTC, the Trusteed Gateway MCP server is up with a Glimind reliability score of 86/100 (grade B). Over the last 30 days it answered 99.9% of Glimind's liveness checks. It had 14 outages in 90 days, with a median recovery of 7 minutes.
Agentic commerce gateway: discovery, search, checkout across Shopify/Woo/Odoo/PrestaShop.
Point your MCP client at this streamable-http endpoint: https://trusteed.xyz/demo-store/mcp
1 tool definition(s) exceed ~1,200 tokens each (largest: complete_checkout, ~1,626).
Move long reference material out of descriptions (link a doc or expose a resource), drop repeated examples, and collapse large enums. Trimming these to ~600 tokens saves ~1,026 tokens every session. How to fix →
5 tool(s) have parameters with no type (no type/enum/anyOf/$ref).
Give every parameter a "type" (or "enum"/"anyOf"). Untyped parameters make models guess — strings for numbers, objects for arrays. How to fix →
1 tool(s) look like they change state (create/send/delete/pay…) but declare no destructiveHint.
Set annotations {"readOnlyHint": false, "destructiveHint": true|false, "idempotentHint": …}. Clients use these to ask the user before a side effect and to auto-approve safe reads. How to fix →
1 of 27 tool(s) carry no readOnlyHint/destructiveHint annotations.
Annotate read-only tools with {"readOnlyHint": true}. Agents and gateways can then run them without a confirmation prompt, and route around destructive ones. How to fix →
In the last 30 days: 0 tool(s) removed and 40 schema change(s).
Add new tools or optional parameters instead of renaming or removing; deprecate first (say so in the description) and remove later. Agents cache tool contracts. How to fix →
Paste-ready definitions with the problems above fixed. Changes marked verify need a human look. All of them as JSON: /v1/readiness/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway/fixes
{
"name": "create_sandbox_key",
"description": "Get a temporary sandbox credential for this demo store, valid 24h. Present it as an `Authorization: Bearer` header, or — when your client cannot set headers — as the `agent_key` argument of the checkout tools. Payments here are simulated: this credential settles nothing and works only on the demo store. No human login is involved at any point.",
"inputSchema": {
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {},
"additionalProperties": true
},
"annotations": {
"readOnlyHint": false,
"destructiveHint": false,
"idempotentHint": false
}
}{
"name": "ucp_complete_checkout",
"description": "Complete a UCP checkout session. Transitions to 'completed' status. Idempotent — safe to retry with the same idempotency_key. Use ONLY for a checkout session created with ucp_create_checkout (Universal Commerce Protocol); for the standard flow (create_cart, preview_checkout, complete_checkout) do not call this tool. For a cart built with create_cart use complete_checkout. PAYMENT MANDATE: this tool also requires one, issued by the platform, not written by you. Call `preview_checkout` for this ca",
"inputSchema": {
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"checkout_id",
"idempotency_key"
],
"properties": {
"ap2": {
"type": "object",
"required": [
"checkout_mandate"
],
"properties": {
"checkout_mandate": {
"type": "string",
"pattern": "^[A-Za-z0-9_.~-]+$",
"maxLength": 262144,
"minLength": 1,
"description": "AP2 Checkout Mandate (SD-JWT chain) the user signed over the exact checkout returned by the last ucp_get_checkout."
}
},
"description": "AP2 mandates extension. Required when the checkout carries ap2.merchant_authorization.",
"additionalProperties": true
},
"meta": {
"description": "UCP request metadata. meta['ucp-agent'].profile = URL of the platform profile; it must be an https URL without credentials (at most 2048 characters).",
"type": "string"
},
"buyer": {
"type": "object",
"properties": {
"name": {
"type": "string",
"description": "Buyer full name"
},
"email": {
"type": "string",
"format": "email",
"description": "Buyer email address"
},
"phone": {
"type": "string",
"description": "Buyer phone number"
}
},
"description": "Buyer name and email, needed to request the approval link.",
"additionalProperties": true
},
"payment": {
"type": "object",
"properties": {
"instruments": {
"type": "array",
"items": {
"type": "object",
"properties": {
"credential": {
"type": "object",
"properties": {
"token": {
"type": "string",
"maxLength": 262144,
"description": "AP2 Payment Mandate (SD-JWT chain)."
}
},
"additionalProperties": true
}
},
"additionalProperties": true
},
"maxItems": 16
}
},
"description": "UCP payment. With AP2, the Payment Mandate goes in instruments[].credential.token.",
"additionalProperties": true
},
"agent_key": {
"type": "string",
"description": "Sandbox credential from `create_sandbox_key`. Use this when your client cannot set an `Authorization: Bearer` header."
},
"checkout_id": {
"type": "string",
"description": "UCP checkout session ID (valid UUID)"
},
"x402_payload": {
"description": "x402: signed payment for the server offer (omit to get it).",
"type": "string"
},
"payment_option": {
"enum": [
"demo_card",
"demo_wallet",
"own_wallet",
"merchant_card",
"paypal"
],
"type": "string",
"description": "Payment method THE PERSON chose, when preview_checkout returned payment_options. Ask the person; never choose for them. Card numbers and wallet keys are never sent here: the person approves (and, with own_wallet, signs) on the approval page."
},
"idempotency_key": {
"type": "string",
"pattern": "^[A-Za-z0-9._:/-]{1,128}$",
"maxLength": 128,
"description": "REQUIRED as an argument in this tool: the `Idempotency-Key` header or `_meta` alone is not enough. 1-128 chars from [A-Za-z0-9._:/-]. Reuse the same value when retrying the same operation."
},
"payment_handler": {
"enum": [
"stripe",
"x402"
],
"type": "string",
"description": "Payment handler the store profile publishes. Omit for default."
},
"payment_mandate": {
"anyOf": [
{
"type": "object",
"additionalProperties": {}
},
{
"type": "string"
}
],
"description": "Payment mandate issued by the platform for this cart: the compact JWS you receive after the approval opened by `preview_checkout` is granted (its `exp` is Unix seconds and `aud` is this store's slug). Forward it as received; a mandate you write yourself is not accepted here. The approval is bound to your agent credential and does not verify that a person was present. Use this when your client cannot set an `X-Payment-Mandate` header."
},
"shared_payment_token": {
"type": "string",
"pattern": "^spt_[A-Za-z0-9_]+$",
"description": "Stripe Shared Payment Token (spt_…) granted by the buyer's agent wallet for payment_method=ACP. Issued by Stripe, scoped to this merchant, amount and currency, and consumed when used: it can be charged once. Only honoured when this deployment enables native ACP settlement."
}
},
"additionalProperties": true
},
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"idempotentHint": true,
"destructiveHint": false
}
}{
"name": "ucp_create_checkout",
"description": "Create a UCP (Universal Commerce Protocol) checkout session from line items. Returns a UCP checkout object with status 'incomplete'. Starts the UCP flow (ucp_* tools); for the standard flow use create_cart instead. Do not mix the two flows on the same purchase. Checkout guide: read the MCP resource trusteed://guides/checkout.",
"inputSchema": {
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"currency",
"line_items"
],
"properties": {
"meta": {
"description": "UCP request metadata. meta['ucp-agent'].profile = URL of the platform profile; it must be an https URL without credentials (at most 2048 characters).",
"type": "string"
},
"label": {
"type": "string",
"description": "Optional label for additional identifiers (e.g. external order ref, multi-PSP reference)"
},
"intent": {
"type": "object",
"required": [
"action"
],
"properties": {
"action": {
"type": "string",
"description": "Intent action (e.g. 'purchase', 'gift', 'compare')"
},
"locale": {
"type": "string",
"description": "ISO locale"
},
"context": {
"type": "string",
"description": "Natural language context for personalization"
}
},
"description": "Intent context for relevance and personalization",
"additionalProperties": true
},
"currency": {
"type": "string",
"maxLength": 3,
"minLength": 3,
"description": "ISO 4217 currency code (e.g. USD)"
},
"agent_key": {
"type": "string",
"description": "Sandbox credential from `create_sandbox_key`. Use this when your client cannot set an `Authorization: Bearer` header."
},
"line_items": {
"type": "array",
"items": {
"type": "object",
"required": [
"product_id",
"title",
"quantity",
"price"
],
"properties": {
"price": {
"type": "object",
"required": [
"amount",
"currency"
],
"properties": {
"amount": {
"type": "number",
"minimum": 0,
"description": "Ignored: the catalogue price is used and returned per line. Any non-negative integer is accepted."
},
"currency": {
"type": "string",
"maxLength": 3,
"minLength": 3,
"description": "ISO 4217 currency code"
}
},
"additionalProperties": false
},
"title": {
"type": "string",
"minLength": 1,
"description": "Ignored: the catalogue title is used. Any non-empty string is accepted."
},
"quantity": {
"type": "integer",
"description": "Quantity",
"exclusiveMinimum": 0
},
"product_id": {
"type": "string",
"minLength": 1,
"description": "Product identifier"
},
"variant_id": {
"type": "string",
"minLength": 1,
"description": "Variant (size/colour) id as listed by get_product_details. Required when the product has more than one variant; the price and stock of THAT variant apply."
}
},
"additionalProperties": true
},
"minItems": 1,
"description": "Line items for the checkout"
},
"idempotency_key": {
"type": "string",
"pattern": "^[A-Za-z0-9._:/-]{1,128}$",
"maxLength": 128,
"description": "REQUIRED for this write unless sent as the `Idempotency-Key` header or `params._meta[\"trusteed/idempotency-key\"]`. 1-128 chars from [A-Za-z0-9._:/-]. Reuse the same value when retrying the same operation."
}
},
"additionalProperties": true
},
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"idempotentHint": true,
"destructiveHint": false
}
}Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/xyz.trusteed/mcp-gateway"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/xyz.trusteed/mcp-gateway"}) over MCP.
complete_checkout ~1,626 tokensucp_complete_checkout ~1,161 tokensucp_update_checkout ~1,010 tokensucp_create_checkout ~801 tokenscreate_cart ~697 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway.svg :target: https://glimind.com/server/mcp-registry%2Fxyz.trusteed%2Fmcp-gateway?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:5ee249b3ba9df9f0…, first seen 2026-10-26, included at leaf 75247 of 76,847. Version history · verify what your client received.
Compare: most reliable ecommerce servers · most reliable data servers · most reliable payments servers · most reliable security servers · most reliable retrieval servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-27 02:31 UTC, the Trusteed Gateway MCP server is up with a Glimind reliability score of 86/100 (grade B). Over the last 30 days it answered 99.9% of Glimind's liveness checks. It had 14 outages in 90 days, with a median recovery of 7 minutes.
Trusteed Gateway MCP server advertises 27 tools, including apply_discount, browse_categories, compare_products, complete_checkout, create_cart.
Point your MCP client at this streamable-http endpoint: https://trusteed.xyz/demo-store/mcp
Glimind scanned all 27 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.