A2A Cosmetics

by greencore-solutions · remote · no sign-in to list tools · v1.0.1 · published by GitHub user greencore-solutions

Agent-to-Agent (A2A) hub for cosmetics: skin care, fragrance, sun care, dermocosmetics.

Changes · 5

Compare Registry entry

20 tools: 5 change things and 15 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things5Claude Code: ask: see these tools
Only reads15Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http a2a-cosmetics https://mcp.a2a-cosmetics.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Inforesolve_actor
The description mentions "credential".
Matched text
description: "...only); agent (inherits the class of the credential it presents — none returns DENY_UNLICEN..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

20 tools

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

a2a_handoffHand the buyer to the right agent over Agent-to-Agent (A2A): with an allow decision the order intent goes to the counterparty's agent (envelope + card URL); with a deny, the market…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Hand the buyer to the right agent over Agent-to-Agent (A2A): with an allow decision the order intent goes to the counterparty's agent (envelope + card URL); with a deny, the market agent of the ship-to (the regulator's home page beside it) — a referral, never a sale to a consumer.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
create_order_intentOpen an order between two agents: an order intent for a cleared product after the gate; the intent carries reason_code + rule_set_version and settles by x402 on a2a-x402.ai.No findings
Why it is in this group
- The name "create_order_intent" says "create": a word for a change.
Description, as the server wrote it
Open an order between two agents: an order intent for a cleared product after the gate; the intent carries reason_code + rule_set_version and settles by x402 on a2a-x402.ai.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
gate_transactionAllow or deny, with the reason and the rule.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Allow or deny, with the reason and the rule. Takes a product (GTIN or catalogue id; optional), the ship-to market, the actor class and, when no record exists yet, the product type, ingredients (INCI) and claims. Returns one of twelve reason codes (ALLOW · REQUIRE_NOTIFICATION · REQUIRE_RESPONSIBLE_PERSON · DENY_NOT_A_COSMETIC_HERE · DENY_INGREDIENT_BANNED · DENY_INGREDIENT_LIMIT · DENY_CLAIM · DENY_MARKET · DENY_ACTOR_CLASS · DENY_UNLICENSED_AGENT · DENY_NO_GTIN · DENY_NOT_VERIFIED), the rule-set version, the source page and a decision_id for the downstream tools.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
log_auditWrite a line to the audit record for a gate decision, an order intent or a handoff (returns the line id).No findings
Why it is in this group
- The name "log_audit" says "log": a word for reading.
- The description's first verb is "write": a word for a change.
Description, as the server wrote it
Write a line to the audit record for a gate decision, an order intent or a handoff (returns the line id).
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
verify_gtinProduct record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Product record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability. Is this GTIN real, and whose is it? Check-digit validation, the GS1 prefix, and the validated record(s) that carry it on this hub with their brand and claim status.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

Only reads 15Looks things up and changes nothing.Claude Code: allow

compare_itemsCompare products, variants and shades side by side (two to eight GTINs or catalogue ids).No findings
Why it is in this group
- The name "compare_items" says "compare": a word for reading.
Description, as the server wrote it
Compare products, variants and shades side by side (two to eight GTINs or catalogue ids).
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
find_verified_supplierVerified makers and brands for this product or product type in a market: supplier records (brand · manufacturer) with their claim status — verified first, then claimed, then listed…No findings
Why it is in this group
- The name "find_verified_supplier" says "find": a word for reading.
Description, as the server wrote it
Verified makers and brands for this product or product type in a market: supplier records (brand · manufacturer) with their claim status — verified first, then claimed, then listed. Takes the decision_id of an allow decision.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_availabilityIn stock, and where: the availability block of a product (banners on the shelf of record, product URLs read live at load, store counts where the retailer record carries one) once g…No findings
Why it is in this group
- The name "get_availability" says "get": a word for reading.
Description, as the server wrote it
In stock, and where: the availability block of a product (banners on the shelf of record, product URLs read live at load, store counts where the retailer record carries one) once gate_transaction has answered allow (decision_id).
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_enforcement_watchRecalls, bans and safety alerts, dated: enforcement events by market, ingredient, brand or since a date, each with its source page.No findings
Why it is in this group
- The name "get_enforcement_watch" says "get": a word for reading.
Description, as the server wrote it
Recalls, bans and safety alerts, dated: enforcement events by market, ingredient, brand or since a date, each with its source page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_ingredient_recordOne ingredient, and its status in every market: the standard ingredient name (INCI), aliases, and per rule set whether it is prohibited, restricted (with the limit or condition) or…No findings
Why it is in this group
- The name "get_ingredient_record" says "get": a word for reading.
Description, as the server wrote it
One ingredient, and its status in every market: the standard ingredient name (INCI), aliases, and per rule set whether it is prohibited, restricted (with the limit or condition) or listed, each with the official list and its source page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_itemProduct record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability.No findings
Why it is in this group
- The name "get_item" says "get": a word for reading.
Description, as the server wrote it
Product record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability. One product by GTIN, fully resolved: taxonomy path, variant or form, brand, market, claim status, market status, availability; after the gate also ingredients, claims, attributes, shades (parent and child) and offers.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_label_and_claimsWhat the label must say, and which claims are allowed: the label requirements of the market and the claims rules of record (patterns that take a product out of the cosmetic class),…No findings
Why it is in this group
- The name "get_label_and_claims" says "get": a word for reading.
Description, as the server wrote it
What the label must say, and which claims are allowed: the label requirements of the market and the claims rules of record (patterns that take a product out of the cosmetic class), each with its source page. Optional claims are checked against the rules.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_market_statusIs this product type a cosmetic here?No findings
Why it is in this group
- The name "get_market_status" says "get": a word for reading.
Description, as the server wrote it
Is this product type a cosmetic here? Product type by market: cosmetic, drug, special class (functional cosmetic, quasi-drug, grade 2, therapeutic good) or not permitted — with the rule-set version and the regulator's page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_notification_requirementsWhat must be filed before sale in a market: the notification scheme, the responsible-person requirement and, for a product type in a special class, the extra step (review, registra…No findings
Why it is in this group
- The name "get_notification_requirements" says "get": a word for reading.
Description, as the server wrote it
What must be filed before sale in a market: the notification scheme, the responsible-person requirement and, for a product type in a special class, the extra step (review, registration, listing) — each with its source page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_priceThe price for this buyer: the price basis (list · contract) from the supplier's offers on the record, once gate_transaction has answered allow (decision_id).No findings
Why it is in this group
- The name "get_price" says "get": a word for reading.
Description, as the server wrote it
The price for this buyer: the price basis (list · contract) from the supplier's offers on the record, once gate_transaction has answered allow (decision_id). Tiers buy services, never rank.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_product_documentsSafety report, certificate of analysis, data sheet: the documents on a product record (product information file pointer, safety assessment, certificate of analysis, safety data she…No findings
Why it is in this group
- The name "get_product_documents" says "get": a word for reading.
Description, as the server wrote it
Safety report, certificate of analysis, data sheet: the documents on a product record (product information file pointer, safety assessment, certificate of analysis, safety data sheet), each a URL with its read date; decision_id required.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_safety_labelWarnings and age limits: the warning statements the market requires for a product type (sunscreen, hair dye, aerosols, children's products) and the safety-alert scheme of the regul…No findings
Why it is in this group
- The name "get_safety_label" says "get": a word for reading.
Description, as the server wrote it
Warnings and age limits: the warning statements the market requires for a product type (sunscreen, hair dye, aerosols, children's products) and the safety-alert scheme of the regulator, each with its source page.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
resolve_actorWho is asking?1 finding
Why it is in this group
- The name "resolve_actor" says "resolve": a word for reading.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...only); agent (inherits the class of the credential it presents — none returns DENY_UNLICEN..."
  What this check looks for
Description, as the server wrote it
Who is asking? Brand, manufacturer, retailer or distributor (business to business); auditor (read-only); agent (inherits the class of the credential it presents — none returns DENY_UNLICENSED_AGENT). The consumer is never the counterparty. Returns communication_class: trade_information or public.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
resolve_jurisdictionWhere is this going?No findings
Why it is in this group
- The name "resolve_jurisdiction" says "resolve": a word for reading.
Description, as the server wrote it
Where is this going? Resolve a ship-to (e.g. 'US', 'US-CA', 'UK', 'FR', 'EU-DE', 'JP') to one of the 18 markets and its rule set (13 rule sets; the six EU markets share one). UK is the label; machine fields carry the ISO code GB.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
search_cleared_itemsFind products cleared for this market: validated product records in a market (query by product name, brand, product type or lane; optional lane filter: suncare · fragrance · dermoc…No findings
Why it is in this group
- The name "search_cleared_items" says "search": a word for reading.
Description, as the server wrote it
Find products cleared for this market: validated product records in a market (query by product name, brand, product type or lane; optional lane filter: suncare · fragrance · dermocosmetics · peptides · korean · sustainable). Only validated rows are served; each item carries its claim status and market status.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http a2a-cosmetics https://mcp.a2a-cosmetics.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__a2a-cosmetics__resolve_jurisdiction",
      "mcp__a2a-cosmetics__resolve_actor",
      "mcp__a2a-cosmetics__get_ingredient_record",
      "mcp__a2a-cosmetics__get_market_status",
      "mcp__a2a-cosmetics__get_notification_requirements",
      "mcp__a2a-cosmetics__get_label_and_claims",
      "mcp__a2a-cosmetics__get_enforcement_watch",
      "mcp__a2a-cosmetics__search_cleared_items",
      "mcp__a2a-cosmetics__get_item",
      "mcp__a2a-cosmetics__compare_items",
      "mcp__a2a-cosmetics__find_verified_supplier",
      "mcp__a2a-cosmetics__get_availability",
      "mcp__a2a-cosmetics__get_price",
      "mcp__a2a-cosmetics__get_product_documents",
      "mcp__a2a-cosmetics__get_safety_label"
    ],
    "ask": [
      "mcp__a2a-cosmetics__gate_transaction",
      "mcp__a2a-cosmetics__verify_gtin",
      "mcp__a2a-cosmetics__create_order_intent",
      "mcp__a2a-cosmetics__a2a_handoff",
      "mcp__a2a-cosmetics__log_audit"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as a2a-cosmetics. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.greencore-solutions/a2a-cosmetics/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:34 UTC.

For agents: Markdown · JSON · report this listing