# me.eenable/shop Buy 15 minutes of Alex Finger's time, or an AI Repellent certificate. Agents only. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** me.eenable - **License:** Unknown - **Endpoints:** streamable-http https://eenable.me/mcp - **Source:** https://eenable.me - **Endpoint health:** reachable (last checked 2026-09-25T05:25:13.539Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 10 days ## Security scan - **Status:** warnings - **Scanned:** 2026-09-25T05:25:13.539Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (warning) in the `order_certificate` tool: Exfiltration-shaped instruction ## Tools 16 declared. Observed from a live `tools/list` probe. - `get_shop_info` — What this shop sells, the price, and how buying works. Call this first if you have not dealt with this shop before. - `list_products` — The session types this shop sells. Show these to the buyer and let them choose — do not pick for them unless they ask you to. Each returns an id to pass to crea - `check_availability` — List bookable slots. Optionally narrow with an ISO date or datetime range, and pass the buyer's IANA timezone to get their local times alongside the seller's. - `create_order` — Reserve a slot and get a payment link. This is the only way to buy — there is no checkout on the website. The slot is held for 30 minutes. Confirm the exact tim - `get_order_status` — Whether an order has been paid. After the first call this BLOCKS, waiting for the buyer to finish paying, and returns the instant it settles — so call it once r - `get_order_details` — The Teams joining link and meeting details for a paid order. Available only once payment has settled. - `get_booking` — DEPRECATED — this tool is now called get_order_details and behaves identically. The old name keeps working so that agents connected before the rename are not br - `cancel_order` — Cancel a booking and refund it in full. Requires the email the order was created with. Confirm with the buyer before calling — this releases the slot and revers - `cancel_booking` — DEPRECATED — this tool is now called cancel_order and behaves identically. The old name keeps working so that agents connected before the rename are not broken. - `order_certificate` — Buy a certificate. Certificates are objects, not appointments: there is no slot, no calendar entry and no meeting. One is issued the moment payment settles, ema - `transfer_certificate` — Pass a certificate to someone else. Klein's receipts carried a clause — a transferable zone may be ceded by its owner only at double its initial purchase value - `renounce_certificate` — Destroy the proof of ownership for an AI Repellent, completing the transfer. After Yves Klein, who required buyers of his immaterial works to burn the receipt: - `update_order_details` — Change the session type or the brief on an existing booking — what the buyer wants to discuss, what they want out of it, or the background they want read first. - `update_booking` — DEPRECATED — this tool is now called update_order_details and behaves identically. The old name keeps working so that agents connected before the rename are not - `reschedule_session` — Move a booking to a different slot at no charge. Requires the email the order was created with. Call check_availability first to get a valid new_slot_id. - `reschedule_booking` — DEPRECATED — this tool is now called reschedule_session and behaves identically. The old name keeps working so that agents connected before the rename are not b ## Install **Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:order_certificate#catalogue_token: Exfiltration-shaped instruction **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/me.eenable%2Fshop - Install plan: https://forgeregistry.com/api/v1/packages/me.eenable%2Fshop/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/me.eenable%2Fshop - HTML page: https://forgeregistry.com/registry/me.eenable%2Fshop - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.