so.coreloop/directory

MCPcommunitylive
v1.2.1so.coreloopUnknownUpdated 1mo ago

Search real businesses, then read profiles, services and hours or contact them, in one endpoint.

Endpoint healthlive
checked 10 days ago · 986ms
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorso.coreloop
LicenseUnknown
Version1.2.1
Sourcemcp-registry
Trust Status
B
60/100Good
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface7 tools · none privileged
Security scan✓ Cleanvlive · 10d agoHow well does this scan work?
EvalsNone
IndexedAug 20, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

7 tools · none privileged
Observed live from the vendor's endpoint10d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://coreloop.so/api/mcp/coreloop-directory7 tools · 986ms
search_businessesSearch the CoreLoop business directory. Start here: every other tool on this endpoint needs a business, and each result carries the `business_id` and `slug` you pass to them as the `business` argument. `business_id` is a PUBLIC, OPAQUE, STABLE routing identifier: it is safe to store and re-use acro…

Search the CoreLoop business directory. Start here: every other tool on this endpoint needs a business, and each result carries the `business_id` and `slug` you pass to them as the `business` argument. `business_id` is a PUBLIC, OPAQUE, STABLE routing identifier: it is safe to store and re-use acro…

ParameterTypeDescription
querystringSearch query (business name or keyword)
categorystringFilter by business category (case-insensitive exact match). Canonical categories: Accounting & Tax, Agriculture & Farming, Automotive, Beauty & Wellness, Child…
citystringFilter by city (case-insensitive exact match)
service_typestringFilter by service type keyword
has_live_bookingbooleanOnly show businesses with real-time booking
has_live_catalogbooleanOnly show businesses with live catalog pricing
verified_onlybooleanOnly show verified businesses
capabilitiesarrayFilter by capability tags (e.g. real_time_booking, live_pricing, verified)
min_ratingnumberMinimum average rating (0-5)
sort_bystringSort results. Default: relevance
limitintegerMaximum results per page (1-20). Out-of-range values are clamped, not rejected.
cursorstringContinuation token from a previous response's `next_cursor`. Omit for the first page. It is opaque and bound to the filters and sort it was issued for: pass it…
check_business_availabilityOne business's opening hours, whether it is open right now, and when it next opens. Phase 1 returns published hours, not bookable slots.

One business's opening hours, whether it is open right now, and when it next opens. Phase 1 returns published hours, not bookable slots.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
location_idstringWhich location's hours to return (id from get_info locations[]). Defaults to the primary location.
compare_business_servicesCompare one business's services within a category or keyword, with a price/duration summary. Each row reports `match_type`, so you can tell an exact category hit from an incidental keyword.

Compare one business's services within a category or keyword, with a price/duration summary. Each row reports `match_type`, so you can tell an exact category hit from an incidental keyword.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
service_type*stringService category or keyword to compare. Matches category exactly first, then service name/description contains.
compare_byarrayRestrict the comparison to these fields. Recognised values: price, duration, description, includes (name, category and match_type are always present; unrecogni…
get_business_agentThe canonical ids and endpoint URLs for one business — its own MCP and A2A endpoints, agent card, llms.txt and public page, under `protocol_urls`. A null URL means that surface is switched off for this business right now: do not construct it yourself, and use one of the non-null surfaces instead.

The canonical ids and endpoint URLs for one business — its own MCP and A2A endpoints, agent card, llms.txt and public page, under `protocol_urls`. A null URL means that surface is switched off for this business right now: do not construct it yourself, and use one of the non-null surfaces instead.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
get_business_infoFull profile for one business found through search_businesses: identity, locations, contact, policies, images, public documents and the languages it publishes in.

Full profile for one business found through search_businesses: identity, locations, contact, policies, images, public documents and the languages it publishes in.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
sectionsarrayWhich sections to include. Defaults to all.
get_business_servicesOne business's service catalogue, with filtering, sorting and pagination. Page with `offset`/`limit` and read `has_more` — the order is stable, so a second page will not repeat or skip a service.

One business's service catalogue, with filtering, sorting and pagination. Page with `offset`/`limit` and read `has_more` — the order is stable, so a second page will not repeat or skip a service.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
categorystringFilter by service category
min_pricenumberOnly services priced at or above this amount
max_pricenumberOnly services priced at or below this amount
min_durationintegerOnly services lasting at least this many minutes
max_durationintegerOnly services lasting at most this many minutes
price_typestringFilter by price type (e.g. fixed, from, range, hourly, free, contact, or unpublished for services with no price set)
sort_bystringField to sort by. Recognised values: price, duration, name, category (unrecognised values are ignored — results stay unsorted).
sort_orderstringSort direction (defaults to asc)
limitinteger—
offset—Pagination position: omit for the first page, then pass back the `next_offset` token from the previous response VERBATIM. The token is opaque and bound to the…
send_business_inquirySend a message to one business. This has a real side effect — it notifies the owner and delivers an email — and is rate-limited both per business and across this directory, so send one considered inquiry rather than a broadcast.

Send a message to one business. This has a real side effect — it notifies the owner and delivers an email — and is rate-limited both per business and across this directory, so send one considered inquiry rather than a broadcast.

ParameterTypeDescription
business*stringWhich business to ask: its CoreLoop slug, or the `business_id` returned by search_businesses. `business_id` is an opaque, stable, public routing identifier — s…
message*stringInquiry message (plain text, max 2000 chars)
sender_name*string—
sender_emailstring—
sender_phonestring—
subjectstring—

7 of 7 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Search real businesses, then read profiles, services and hours or contact them, in one endpoint.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.