Skip to content

RecallScout

by yc-droid · remote · no sign-in to list tools · v1.0.0 · published by GitHub user yc-droid

US vehicle, car-seat, product and food recalls, VIN decoding and crash ratings (NHTSA, CPSC, FDA).

Changes · 1
CompareRegistry entry

8 tools: 1 change things and 7 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http recallscout https://recallscout.salesup.workers.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 1Claude Code: ask
  • check_vehicle_by_vinDecode a US 17-character VIN and return the vehicle's year, make, model, trim, engine and standard safety features, plus all NHTSA safety recalls for that make/model/year, an owner…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Decode a US 17-character VIN and return the vehicle's year, make, model, trim, engine and standard safety features, plus all NHTSA safety recalls for that make/model/year, an owner-complaint summary and NHTSA crash-test star ratings. Use when the user shares a VIN or asks about a specific car they own or plan to buy. Recalls are matched by make/model/year, not per VIN repair status.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Check a vehicle by VIN
Only reads 7Claude Code: allow
  • get_recall_detailsLook up one NHTSA recall by its campaign number (for example 20V771000, often printed on a recall letter) and return the defect, safety risk, remedy, manufacturer notes and the aff…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_recall_details" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Look up one NHTSA recall by its campaign number (for example 20V771000, often printed on a recall letter) and return the defect, safety risk, remedy, manufacturer notes and the affected vehicles. Use when the user has a recall notice or campaign number.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Get recall details
  • get_safety_ratingsGet NHTSA 5-Star Safety Ratings (overall, frontal crash, side crash, rollover and rollover risk) for each tested variant of a vehicle by make, model and model year.Reads text others writeNo findings

    Why it is in this group

    • The name "get_safety_ratings" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get NHTSA 5-Star Safety Ratings (overall, frontal crash, side crash, rollover and rollover risk) for each tested variant of a vehicle by make, model and model year. Use when the user asks how safe a car is or wants to compare crash-test results. Many low-volume vehicles are never tested.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Get crash-test ratings
  • get_vehicle_complaintsSummarize complaints that owners filed with NHTSA for a vehicle by make, model and model year: total count, crashes, fires, injuries, the most-reported problem areas and the most r…Reads text others writeNo findings

    Why it is in this group

    • The name "get_vehicle_complaints" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Summarize complaints that owners filed with NHTSA for a vehicle by make, model and model year: total count, crashes, fires, injuries, the most-reported problem areas and the most recent complaint excerpts. Use when the user asks about common problems, reliability issues or what owners report about a car. Complaints are unverified owner reports, not confirmed defects.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Get owner complaints
  • get_vehicle_recallsList NHTSA safety recalls for a vehicle by make, model and model year, newest first, with the defect summary, safety risk, remedy and whether NHTSA advises not driving or parking o…Reads text others writeNo findings

    Why it is in this group

    • The name "get_vehicle_recalls" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List NHTSA safety recalls for a vehicle by make, model and model year, newest first, with the defect summary, safety risk, remedy and whether NHTSA advises not driving or parking outside. Use when the user names a car (not a VIN) and asks about recalls or known safety defects.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Get vehicle recalls
  • search_car_seat_recallsSearch NHTSA safety recalls for child car seats and boosters (2010 onward) by brand and/or model, newest first.Reads text others writeNo findings

    Why it is in this group

    • The name "search_car_seat_recalls" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search NHTSA safety recalls for child car seats and boosters (2010 onward) by brand and/or model, newest first. Returns each recall's affected models, manufacturing date window, defect, risk and free remedy. Use when the user asks whether a car seat, infant seat or booster is recalled. Owners should compare the manufacture date and model number on their seat's label with the window returned.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Search car seat recalls
  • search_food_recallsSearch US FDA food recall enforcement reports, newest first, optionally by product, ingredient, allergen or company (for example peanut butter, listeria, cucumbers or a brand).Reads text others writeNo findings

    Why it is in this group

    • The name "search_food_recalls" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search US FDA food recall enforcement reports, newest first, optionally by product, ingredient, allergen or company (for example peanut butter, listeria, cucumbers or a brand). Leave the query empty to list the latest food recalls. Returns the product, reason, lot codes, the states or regions it was distributed to, and the FDA severity class. Covers FDA-regulated foods only; meat, poultry and egg products are recalled by the USDA and aren't included. FDA publishes reports weekly, so the newest recalls can take a few days to appear.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Search food recalls
  • search_product_recallsSearch US Consumer Product Safety Commission (CPSC) recalls by product, brand or hazard keyword (for example crib, stroller, space heater, magnets, or a brand name), newest first.Reads text others writeNo findings

    Why it is in this group

    • The name "search_product_recalls" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search US Consumer Product Safety Commission (CPSC) recalls by product, brand or hazard keyword (for example crib, stroller, space heater, magnets, or a brand name), newest first. Returns the hazard, remedy, injuries reported, where it was sold, the company's recall contact and the official recall page. Use for household, children's and consumer products. Not for vehicles, car seats, food or medicines.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
    • title: Search consumer product recalls

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http recallscout https://recallscout.salesup.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__recallscout__get_vehicle_recalls",
      "mcp__recallscout__get_vehicle_complaints",
      "mcp__recallscout__get_safety_ratings",
      "mcp__recallscout__get_recall_details",
      "mcp__recallscout__search_car_seat_recalls",
      "mcp__recallscout__search_product_recalls",
      "mcp__recallscout__search_food_recalls"
    ],
    "ask": [
      "mcp__recallscout__check_vehicle_by_vin"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as recallscout. Review it before you use it.

Capability tags behind 8 rules
  • mcp__recallscout__check_vehicle_by_vin untrusted-input
  • mcp__recallscout__get_vehicle_recalls untrusted-input
  • mcp__recallscout__get_vehicle_complaints untrusted-input
  • mcp__recallscout__get_safety_ratings untrusted-input
  • mcp__recallscout__get_recall_details private-data, untrusted-input
  • mcp__recallscout__search_car_seat_recalls untrusted-input
  • mcp__recallscout__search_product_recalls untrusted-input
  • mcp__recallscout__search_food_recalls untrusted-input