# `io.tooloracle/shoporacle` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.tooloracle/shoporacle - JSON: https://anlyon.dev/api/v1/servers/io.tooloracle/shoporacle - Version: 2.0.0 (active) - Publisher: io.tooloracle (domain proven to the MCP Registry) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/ToolOracle/shoporacle - Metadata from the official MCP Registry, synced 2026-10-21T18:52:51.714Z Title and description, as the publisher wrote them: ```untrusted-server-text E-Commerce Intelligence MCP — 11 tools: price comparison, stock, reviews. 18 countries. ``` Scanned 2026-10-21T19:37:30.247Z over streamable-http. **11 tools: 4 change things and 7 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 0 | ask | | Changes things | write | 4 | ask | | Only reads | read | 7 | allow | ## Findings No check matched anything in these tool definitions. ## Changes things (4) Creates or changes something that can be changed back. Claude Code: ask. ### `health_check` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Server health, API connectivity status, supported sources and countries, tool list, pricing info. ``` ### `price_alert` - The description's first verb is "set": a word for a change. Description, as the server wrote it: ```untrusted-server-text Set, check, list, or delete price alerts. Get notified when a product drops below your target price. Actions: 'set' (create alert), 'check' (check current price vs target), 'list' (show all alerts), 'delete' (remove alert). ``` ### `stock_monitor` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Check product availability and stock status across Amazon and Google Shopping. Shows in-stock/out-of-stock, prices, delivery info, and sellers. ``` ### `track_price` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Track the current price of a product and build price history over time. Supply an Amazon ASIN for exact product tracking, or a search query for best-price discovery. ``` ## Only reads (7) Looks things up and changes nothing. Claude Code: allow. ### `bestseller_list` - The name "bestseller_list" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get top-selling products in a category from Amazon or Google Shopping. Returns ranked list with prices, ratings, and reviews. Great for market research. ``` ### `compare_prices` - The name "compare_prices" says "compare": a word for reading. Description, as the server wrote it: ```untrusted-server-text Compare prices for the same product across Google Shopping, Amazon, and eBay. Returns best price, worst price, potential savings, and a ranked price list. ``` ### `competitor_pricing` - The description's first verb is "compare": a word for reading. Description, as the server wrote it: ```untrusted-server-text Compare pricing of two specific products or brands side by side across all marketplaces. Shows which is cheaper, price difference, and offers from each source. ``` ### `market_position` - The description's first verb is "analyze": a word for reading. Description, as the server wrote it: ```untrusted-server-text Analyze where a product ranks in its category — price positioning (budget/mid/premium/luxury), rating comparison, cheaper and pricier alternatives. ``` ### `price_history` - The description's first verb is "view": a word for reading. Description, as the server wrote it: ```untrusted-server-text View stored price history for a product with trend analysis (rising/falling/stable). Tracks min, max, average prices over time. Call track_price first to build up history data. ``` ### `product_search` - The name "product_search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search for products across Google Shopping, Amazon, and eBay. Returns prices, ratings, links. Supports country-specific results (DE, US, UK, etc.) and sorting by price or reviews. ``` ### `review_summary` - The description's first verb is "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get review ratings, score breakdown, and top customer reviews for a product from Amazon. Useful for purchase decisions and product quality assessment. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `shoporacle`: ```json { "permissions": { "allow": [ "mcp__shoporacle__product_search", "mcp__shoporacle__compare_prices", "mcp__shoporacle__review_summary", "mcp__shoporacle__price_history", "mcp__shoporacle__bestseller_list", "mcp__shoporacle__competitor_pricing", "mcp__shoporacle__market_position" ], "ask": [ "mcp__shoporacle__track_price", "mcp__shoporacle__price_alert", "mcp__shoporacle__stock_monitor", "mcp__shoporacle__health_check" ], "deny": [] } } ```