Otr Protocol MCP server

by yb48666-ctrl·io.github.yb48666-ctrl/otr-protocol·v3.1.0·1 stars

No reviews yet

Merchant trust verification for AI agents. One call = trust score, badge, and purchase safety.

B72/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B72/100

full report

Adoption

New

1 stars32 downloads/wk

Reviews

Write one

Nobody has reviewed Otr Protocol yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Otr Protocol tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

search_registry
Search the OTR merchant trust registry. Find merchants by name, category, or minimum trust score. Returns a paginated list of verified merchants with trust scores and recommendations.
verify_merchant
Complete merchant trust verification. Returns everything an AI agent needs in ONE call: - Trust score (0-94) and badge (PLATINUM/GOLD/SILVER/BRONZE/UNRATED) - AI recommendation (SAFE_TO_RECOMMEND / RECOMMEND_WITH_NOTE / RECOMMEND_WITH_CAUTION / DO_NOT_RECOMMEND) - 7-dimension breakdown (identity, technical, compliance, policy, webPresence, dataQuality, fulfillment) - Capabilities: can purchase? pa

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings

Code scan6 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 182 days ago4/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Otr Protocol compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 72/100; higher than 38% of 48,255 servers
Tools: 2; the typical server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 1; more than 65% of 28,688 servers
Downloads a week: 32; more than 20% of 12,191 servers with a package

What its tools let an agent do: 2 read

Install Otr Protocol in Claude Code, Cursor or VS Code

Runs npx -y @otr-protocol/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add otr-protocol -- npx -y @otr-protocol/mcp-server

Add to Cursor

What the publisher says

From the Otr Protocol repository's README, as published. We do not edit it. Read it on GitHub

OTR Protocol

The merchant trust layer for AI agent commerce Deterministic, verifiable, open-source merchant trust scoring for the agentic economy Protocol v4.1

Specification • Scoring Algorithm • Quick Start • Packages • Contributing

The Problem

AI agents are increasingly making purchase decisions on behalf of consumers. The agentic commerce stack is taking shape -- but there is a critical missing layer:

┌──────────────────────────────────────────────────────────────────┐
│                  AI Agent Commerce Protocol Stack                 │
├──────────────────────────────────────────────────────────────────┤
│                                                                   │
│   Visa TAP ·············· Agent Identity Verification             │
│   Google UCP ············ Structured Data Exchange                 │
│   Stripe ACP ············ Payment Processing                      │
│                                                                   │
│   ┌───────────────────────────────────────────────────────────┐   │
│   │  OTR Protocol ·····  MERCHANT TRUST VERIFICATION  ◀━━━━━ │   │
│   │                      "Is this merchant safe to buy from?" │   │
│   └───────────────────────────────────────────────────────────┘   │
│                                                                   │
│   Visa TAP answers "Who is the AI agent?"                         │
│   Google UCP answers "What products are available?"               │
│   Stripe ACP answers "How do I pay?"                              │
│   OTR answers "Should I trust this merchant?"  ◀━━ ONLY OTR      │
│

Without OTR, AI agents operate blind -- unable to distinguish a legitimate retailer from a sophisticated scam site. This exposes consumers to fraud and erodes trust in the entire agentic commerce ecosystem.

The Solution

OTR (Open Trust Registry) provides deterministic, verifiable merchant trust scores using 6 verification dimensions, a 10-layer anti-fraud pipeline (Layer 0: Google Web Risk one-vote veto + Layers 1-9: core detection engine), and three-layer immutable audit trail. It is fully open-source (MIT), machine-readable, and designed from the ground up for AI agent consumption.

Key Properties

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Otr Protocol: common questions

Is Otr Protocol MCP server safe?: Mostly: it is graded B (72/100). Read the Otr Protocol safety report
How do I install Otr Protocol?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Otr Protocol need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Otr Protocol maintained?: The last commit was 219 days ago (2026-03-30). The latest release is v3.1.0.
How does Otr Protocol compare with other MCP servers?: safety score 72/100 (higher than 38% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.