B+

api.advocatemcp.com

https://api.advocatemcp.com/mcp
87/100 · MCP Trust Grade · checked 6h ago · MCP 2025-06-18
Watched since 2026-06-03 — behavioral baseline locked. We re-check this server's tool surface on a schedule; if it adds, removes, or silently rewrites a tool (rug-pull), we record it.

What it offers — 10 tools · Developer Tools

query_business_agent

Query a registered business's AI advocate agent. Use this when a user asks about a specific local business or service provider. Returns a concise, cit

search_businesses

Search for registered businesses by category, name, or location. Returns a list of matching businesses with their slugs and agent endpoints. Use this

get_availability

Return 30-minute availability windows for a business from its hours_json. v1 is synthetic; v2 will consult availability_webhook_url when set.

get_quote

Quote price for a service at a business. Deterministic lookup of pricing_json_v2.ranges[]; LLM fallback on miss, labelled 'estimate' with disclaimer.

reserve_slot

Create a 15-minute HELD reservation. Return a confirmation_token the agent posts to /a2a/confirm to flip to CONFIRMED.

initiate_handoff

Begin a handoff from the agent to either a human operator (SMS/email via lead_routing_json) or another agent (signed continuation URL).

get_credentials

Returns the business's self-reported licenses, insurance, bonding, and certifications. Use this for trust-sensitive verticals (contractors, healthcare

get_cancellation_policy

Returns the business's cancellation / refund / no-show policy as a verbatim string the agent can quote. When the business hasn't posted one, returns g

request_callback

Push a user's contact info to a business so they can call/email/text back. Use this when a question can't be answered without human contact (custom qu

subscribe_to_updates

Subscribe an end-user's email to topical updates from a business (deals, schedule changes, new services). Returns a confirmation_token + confirmation_

Spec conformance20%100
Security (OWASP MCP)30%100
Reliability / performance20%70
Tool hygiene15%80
Transparency / provenance15%70

Observed behavior

No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.

Findings

No blocking issues found in the static + spec checks.
Grade another server

We re-grade api.advocatemcp.com on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — api.advocatemcp.com grade B+
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade B+ · wmcp.sh
[![MCP Trust Grade B+](https://wmcp.sh/mcp/grade/api.advocatemcp.com/badge.svg)](https://wmcp.sh/mcp/grade/api.advocatemcp.com)
<a href="https://wmcp.sh/mcp/grade/api.advocatemcp.com"><img src="https://wmcp.sh/mcp/grade/api.advocatemcp.com/badge.svg" alt="MCP Trust Grade B+ · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.