com.buyerawareapp/buyeraware

MCPcommunitylive
v1.0.1com.buyerawareappUnknownUpdated 1mo ago

Mechanic-grade used-car listing verdicts: risk score, failure points, repair costs, fair price.

Endpoint healthlive
checked 9 days ago · 658ms
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorcom.buyerawareapp
LicenseUnknown
Version1.0.1
Sourcemcp-registry
Trust Status
B
60/100Good
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface5 tools · none privileged
Security scan✓ Cleanvlive · 9d agoHow well does this scan work?
EvalsNone
IndexedAug 25, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

5 tools · none privileged
Observed live from the vendor's endpoint9d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://api.buyerawareapp.com/mcp5 tools · 658ms
create_trial_keyCreate a BuyerAware API key so this user can run verdicts (3 free). Call this once when no key is configured, then show the user the key and tell them to save it. Do not call it again for someone who already has a key — one trial per email address.

Create a BuyerAware API key so this user can run verdicts (3 free). Call this once when no key is configured, then show the user the key and tell them to save it. Do not call it again for someone who already has a key — one trial per email address.

ParameterTypeDescription
email*stringthe user's email address; the key is issued against it, one trial key per address
namestringoptional display name for the key record
analyze_listingStart a BuyerAware pre-purchase verdict on ONE used vehicle. Runs a mechanic-grade read: ranked failure points with $ exposure, recalls, seller-claim fact-check, fair price range, adjusted true cost, risk score 1-10, BUY / BUY_WITH_CONDITIONS / WALK_AWAY, a word-for-word negotiation script, and low…

Start a BuyerAware pre-purchase verdict on ONE used vehicle. Runs a mechanic-grade read: ranked failure points with $ exposure, recalls, seller-claim fact-check, fair price range, adjusted true cost, risk score 1-10, BUY / BUY_WITH_CONDITIONS / WALK_AWAY, a word-for-word negotiation script, and low…

ParameterTypeDescription
listing_urlstringlink to the listing — Marketplace, Craigslist, AutoTrader, a dealer page
listing_textstringthe listing copy pasted as-is, when there is no shareable URL
vinstring17-character VIN, if the listing shows one
locationstringbuyer city/state, for pricing and inspection context
buyer_contextstringwhat the buyer needs it for, budget, and any specific concerns
get_verdictFetch the result of an analyze_listing job. If status is 'queued' or 'running', wait ~15 seconds and call again. Free — polling never costs a credit.

Fetch the result of an analyze_listing job. If status is 'queued' or 'running', wait ~15 seconds and call again. Free — polling never costs a credit.

ParameterTypeDescription
job_id*stringthe job_id returned by analyze_listing
tank_alternativesFREE, no API key needed, answers instantly. Recommend 2-3 lower-risk used vehicles ('Tanks') from BuyerAware's curated 47-platform database that land near a budget. Use when a buyer asks what to buy instead, or what is reliable for $X. Use analyze_listing instead when they have a specific car in mi…

FREE, no API key needed, answers instantly. Recommend 2-3 lower-risk used vehicles ('Tanks') from BuyerAware's curated 47-platform database that land near a budget. Use when a buyer asks what to buy instead, or what is reliable for $X. Use analyze_listing instead when they have a specific car in mi…

ParameterTypeDescription
budget*numbertarget purchase price in USD
mileagenumbermileage to price at; default 100000
categorystringsedan, hatchback, small suv, medium suv, large suv, midsize truck, full-size truck, diesel truck, minivan, wagon, hybrid, phev, ev, luxury
max_risknumberrisk ceiling 1-10; default 5
limitnumberhow many to return; default 3
tank_lookupFREE, no API key needed, answers instantly. Look up one platform in BuyerAware's curated database: risk score, verdict, the one known trap, private-party value at a mileage, 5-year operating cost. Covers 47 US-market platforms; anything outside it returns no match, which is itself a signal — follow…

FREE, no API key needed, answers instantly. Look up one platform in BuyerAware's curated database: risk score, verdict, the one known trap, private-party value at a mileage, 5-year operating cost. Covers 47 US-market platforms; anything outside it returns no match, which is itself a signal — follow…

ParameterTypeDescription
query*stringplatform name, e.g. '4Runner', 'Camry V6', 'CR-V', 'Tundra 5.7'
mileagenumbermileage to value at; default 100000

5 of 5 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Mechanic-grade used-car listing verdicts: risk score, failure points, repair costs, fair price.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.