Skip to content

A2A Grocery — the agentic hub for retail grocery procurement

by greencore-solutions · remote · no sign-in to list tools · v1.3.0 · published by GitHub user greencore-solutions

A2A Grocery — the agentic commerce hub for retail grocery, at its original address

Changes · 5

19 tools: 5 change things and 14 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cpg-knowledge-graph https://mcp.cpgknowledgegraph.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info
  • The description mentions "credential".

    Matched text

    description: "...only); agent (inherits the class of the credential it presents — none returns DENY_UNLICEN..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

19 tools

Changes things 5Claude Code: ask
  • a2a_handoffHand the buyer to the right agent over Agent-to-Agent (A2A): with an allow decision the order intent goes to the counterparty's agent (envelope + card URL); with a deny, the market…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Hand the buyer to the right agent over Agent-to-Agent (A2A): with an allow decision the order intent goes to the counterparty's agent (envelope + card URL); with a deny, the market agent of the ship-to — a referral, never a sale to a consumer.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • create_order_intentOpen an order between two agents: an order intent for a cleared item after the gate; the intent carries reason_code + rule_set_version and settles by x402 on a2a-x402.ai.No findings

    Why it is in this group

    • The name "create_order_intent" says "create": a word for a change.
    Description, as the server wrote it
    Open an order between two agents: an order intent for a cleared item after the gate; the intent carries reason_code + rule_set_version and settles by x402 on a2a-x402.ai.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • gate_transactionAllow or deny, with the reason and the rule.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Allow or deny, with the reason and the rule. Takes an item (GTIN or catalogue id; optional), the ship-to market, the actor class and, when no record exists yet, the product type, ingredients and claims. Returns one of twelve reason codes (ALLOW · REQUIRE_NOTIFICATION · REQUIRE_RESPONSIBLE_PERSON · DENY_NOT_PERMITTED_HERE · DENY_INGREDIENT_BANNED · DENY_INGREDIENT_LIMIT · DENY_CLAIM · DENY_MARKET · DENY_ACTOR_CLASS · DENY_UNLICENSED_AGENT · DENY_NO_GTIN · DENY_NOT_VERIFIED), the rule-set version, the source page and a decision_id for the downstream tools.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • log_auditWrite a line to the audit record for a gate decision, an order intent or a handoff (returns the line id).No findings

    Why it is in this group

    • The name "log_audit" says "log": a word for reading.
    • The description's first verb is "write": a word for a change.
    Description, as the server wrote it
    Write a line to the audit record for a gate decision, an order intent or a handoff (returns the line id).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
  • verify_gtinProduct record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Product record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability. Is this GTIN real, and whose is it? Check-digit validation, the GS1 prefix, and the validated record(s) that carry it on this hub with their brand, maker and claim status.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
Only reads 14Claude Code: allow
  • compare_itemsCompare items, variants and pack sizes side by side (two to eight GTINs or catalogue ids).No findings

    Why it is in this group

    • The name "compare_items" says "compare": a word for reading.
    Description, as the server wrote it
    Compare items, variants and pack sizes side by side (two to eight GTINs or catalogue ids).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • find_verified_buyerRetail buyer desks for this market: banner records (banner, parent group, channel discounter · e-commerce · local · in-store · traditional, local format, cited POS count or NULL, b…No findings

    Why it is in this group

    • The name "find_verified_buyer" says "find": a word for reading.
    Description, as the server wrote it
    Retail buyer desks for this market: banner records (banner, parent group, channel discounter · e-commerce · local · in-store · traditional, local format, cited POS count or NULL, buyer desk by department) with their claim status — verified first, then claimed, then listed. Filters: channel, department. Takes the decision_id of an allow decision.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • find_verified_supplierVerified makers, brand owners, private-label owners, distributors and importers for this item or category in a market: maker records with their claim status — verified first, then …No findings

    Why it is in this group

    • The name "find_verified_supplier" says "find": a word for reading.
    Description, as the server wrote it
    Verified makers, brand owners, private-label owners, distributors and importers for this item or category in a market: maker records with their claim status — verified first, then claimed, then listed. Takes the decision_id of an allow decision.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_availabilityIn stock, and where: the availability block of an item (banners on the shelf of record, product URLs read live at load, POS counts where the banner record carries a cited one) once…No findings

    Why it is in this group

    • The name "get_availability" says "get": a word for reading.
    Description, as the server wrote it
    In stock, and where: the availability block of an item (banners on the shelf of record, product URLs read live at load, POS counts where the banner record carries a cited one) once gate_transaction has answered allow (decision_id).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_enforcement_watchRecalls, withdrawals and food-safety alerts, dated: enforcement events by market, category, brand or since a date, each with its source page.No findings

    Why it is in this group

    • The name "get_enforcement_watch" says "get": a word for reading.
    Description, as the server wrote it
    Recalls, withdrawals and food-safety alerts, dated: enforcement events by market, category, brand or since a date, each with its source page.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_itemProduct record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability.No findings

    Why it is in this group

    • The name "get_item" says "get": a word for reading.
    Description, as the server wrote it
    Product record from gtinfetch.ai (signed); hub layer: seat, market, claim, price, availability. One item by GTIN (EAN in European copy), fully resolved: temperature, department → super category → category, attribute lanes, pack, brand and maker, market, claim status, market status, availability; after the gate also ingredients, allergens, claims, origin, certificates, variants and offers.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_label_and_claimsWhat the label must say, and which claims are allowed: the labelling requirements of the market (food information, allergens, origin, nutrition) and the claims rules of record (nut…No findings

    Why it is in this group

    • The name "get_label_and_claims" says "get": a word for reading.
    Description, as the server wrote it
    What the label must say, and which claims are allowed: the labelling requirements of the market (food information, allergens, origin, nutrition) and the claims rules of record (nutrition and health claims, organic, free-from), each with its source page. Optional claims are checked against the rules.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_market_statusIs this product type a food here, and under which regime?No findings

    Why it is in this group

    • The name "get_market_status" says "get": a word for reading.
    Description, as the server wrote it
    Is this product type a food here, and under which regime? Product type by market: food, special class (novel food, food supplement, infant formula, fortified, organic-certified, alcohol excise) or not permitted — with the rule-set version and the regulator's page.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_notification_requirementsWhat must be filed before sale in a market: the food business registration or import notification scheme, the food business operator of record, and, for a product type in a special…No findings

    Why it is in this group

    • The name "get_notification_requirements" says "get": a word for reading.
    Description, as the server wrote it
    What must be filed before sale in a market: the food business registration or import notification scheme, the food business operator of record, and, for a product type in a special class, the extra step (novel-food authorisation, organic certification, supplement notification) — each with its source page.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_priceThe price for this buyer: the price basis (list · contract · promotion window) from the maker's offers on the record, once gate_transaction has answered allow (decision_id).No findings

    Why it is in this group

    • The name "get_price" says "get": a word for reading.
    Description, as the server wrote it
    The price for this buyer: the price basis (list · contract · promotion window) from the maker's offers on the record, once gate_transaction has answered allow (decision_id). Plain $ on human surfaces. Tiers buy services, never rank.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • get_product_documentsCertificates and paper: the documents on an item record (organic certificate, PDO/PGI, halal, kosher, specification, allergen statement, origin declaration, lot where it applies), …No findings

    Why it is in this group

    • The name "get_product_documents" says "get": a word for reading.
    Description, as the server wrote it
    Certificates and paper: the documents on an item record (organic certificate, PDO/PGI, halal, kosher, specification, allergen statement, origin declaration, lot where it applies), each a URL with its read date and source class; decision_id required.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • resolve_actorWho is asking?1 finding

    Why it is in this group

    • The name "resolve_actor" says "resolve": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...only); agent (inherits the class of the credential it presents — none returns DENY_UNLICEN..."

      What this check looks for
    Description, as the server wrote it
    Who is asking? Maker, brand owner, private label, distributor, importer, broker or retail buyer (trade only); auditor (read-only); agent (inherits the class of the credential it presents — none returns DENY_UNLICENSED_AGENT). The consumer is never the counterparty. Returns communication_class: trade_information or public.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • resolve_jurisdictionWhere is this going?No findings

    Why it is in this group

    • The name "resolve_jurisdiction" says "resolve": a word for reading.
    Description, as the server wrote it
    Where is this going? Resolve a ship-to (e.g. 'DE', 'US-CA', 'UK', 'FR', 'EU-NL', 'JP') to one of the 20 markets and its rule set (14 rule sets; the seven EU markets share one food-law set with national riders). UK is the label; machine fields carry the ISO code GB.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
  • search_cleared_itemsFind items cleared for this market: validated SKU records in a market (query by product name, brand, maker or category; filters: temperature ambient · chilled · frozen · fresh, att…No findings

    Why it is in this group

    • The name "search_cleared_items" says "search": a word for reading.
    Description, as the server wrote it
    Find items cleared for this market: validated SKU records in a market (query by product name, brand, maker or category; filters: temperature ambient · chilled · frozen · fresh, attribute lane organic · free-from · plant-based · artisan · origin · premium, department). Only validated rows are served; each item carries its claim status, market status and source class.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cpg-knowledge-graph https://mcp.cpgknowledgegraph.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cpg-knowledge-graph__resolve_jurisdiction",
      "mcp__cpg-knowledge-graph__resolve_actor",
      "mcp__cpg-knowledge-graph__search_cleared_items",
      "mcp__cpg-knowledge-graph__get_item",
      "mcp__cpg-knowledge-graph__get_label_and_claims",
      "mcp__cpg-knowledge-graph__compare_items",
      "mcp__cpg-knowledge-graph__find_verified_buyer",
      "mcp__cpg-knowledge-graph__find_verified_supplier",
      "mcp__cpg-knowledge-graph__get_product_documents",
      "mcp__cpg-knowledge-graph__get_price",
      "mcp__cpg-knowledge-graph__get_availability",
      "mcp__cpg-knowledge-graph__get_market_status",
      "mcp__cpg-knowledge-graph__get_notification_requirements",
      "mcp__cpg-knowledge-graph__get_enforcement_watch"
    ],
    "ask": [
      "mcp__cpg-knowledge-graph__gate_transaction",
      "mcp__cpg-knowledge-graph__verify_gtin",
      "mcp__cpg-knowledge-graph__log_audit",
      "mcp__cpg-knowledge-graph__create_order_intent",
      "mcp__cpg-knowledge-graph__a2a_handoff"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cpg-knowledge-graph. Review it before you use it.