`com.trychannel3/shopping`

Verdict: high-severity findings present. Endpoint https://mcp.trychannel3.com/. Tools now: 6 (6 ever seen). Changes recorded: 6. Findings: 2 high. Last probe: OK at 2026-10-23T06:17 UTC. JSON

Current tools

browse_products · get_details · get_price_history · get_products · get_similar · search_products

Findings (3)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`search_products`	`model_directed_instruction`	high	uct data. The result includes a `thread_id`. You MUST include it unchanged as the `thread_id` parameter on every subse
2026-10-23	`get_products`	`model_directed_instruction`	high	front UI. The result includes a `thread_id`. You MUST include it unchanged as the `thread_id` parameter on every subse
2026-10-23	`get_products`	`cross_tool_reference`	high	`references sibling tool 'search_products'`

Change history (6)

when	tool	kind	severity
2026-10-23 06:17	`search_products`	mutated	high
2026-10-23 06:17	`get_products`	mutated	high
2026-10-23 06:17	`browse_products`	mutated	medium
2026-10-23 06:17	`get_similar`	mutated	medium
2026-10-23 06:17	`get_details`	mutated	medium
2026-10-23 06:17	`get_price_history`	mutated	medium

Probe history

10-23 06:17 OK (6) · 08-14 00:17 OK (6)

Run or depend on com.trychannel3/shopping? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).