# ai.wem3/wem-price-compare Price comparison across partner retailers. Read-only, 90-day history, disclosed affiliate. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.3 - **Author:** ai.wem3 - **License:** Unknown - **Endpoints:** streamable-http https://wem3.ai/api/mcp - **Source:** https://wem3.ai/extension/ai - **Endpoint health:** reachable (last checked 2026-09-25T17:33:02.952Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 0 days ## Security scan - **Status:** warnings - **Scanned:** 2026-09-25T17:33:02.952Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (warning) in the `search_promotions` tool: Concealment directive aimed at the model ## Tools 11 declared. Observed from a live `tools/list` probe. - `search_products` — Search for products across connected retailers. The query may be a product name, a barcode (EAN/UPC/GTIN), an Amazon ASIN, an MPN, a merchant SKU (when it uniqu - `semantic_search` — Search for products using natural language descriptions. Uses AI embeddings for semantic understanding — handles vague requests like "comfortable shoes for stan - `get_categories` — Get available product categories and the approximate price range for each. Use to guide the user when their request is vague. If the user is shopping — a model - `get_product` — Get full details for a specific product by its provider and ID, or by a bare wem_id. Use after search results to get more info before recommending. If the user - `compare_products` — Compare 2-5 products side by side. Returns a structured comparison of price, rating, shipping, and key features. Use when the user is deciding between options. - `find_lowest_price` — Find the single lowest-priced product matching the stated constraints. Ranks on price, adjusted for the priorities the caller states (rating, shipping) — never - `compare_offers` — Multi-retailer offers for one product from WEM's own catalogue, cheapest first, with a 90-day price-history low. Identity is resolved by barcode, catalogue slug - `verify_offer` — Check a price claim before repeating it. Given a product and a price someone has asserted at a named retailer, returns whether that price is live in WEM's verif - `lookup_products` — Look up several products in one call: up to 20 barcodes (EAN/UPC/GTIN), Amazon ASINs, WEM IDs or wem3.ai/pl URLs. Each row says whether WEM's catalogue holds th - `get_evidence_receipt` — Fetch a WEM evidence receipt by id (wem-evr-...). Returns the citation handle from a prior verify_offer call so an agent can cite a verification without repeati - `search_promotions` — Current promotions (sales and offers) from retailers WEM has an affiliate programme with, as each retailer published them to its affiliate network. Filter by me ## Install **Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:search_promotions: Concealment directive aimed at the model **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/ai.wem3%2Fwem-price-compare - Install plan: https://forgeregistry.com/api/v1/packages/ai.wem3%2Fwem-price-compare/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/ai.wem3%2Fwem-price-compare - HTML page: https://forgeregistry.com/registry/ai.wem3%2Fwem-price-compare - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.