agent-bev
ai-agent-bev-bev-door declares 9 capabilities across 9 tools, with 1 critical issue.
Issues
9 of 9 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
9 of 9 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
2 tools can modify data and declare no limit.
7 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
search_drinks | read |
declared |
get_record | read |
declared |
find_producer | read |
declared |
list_nodes | read |
declared |
compare_drinks | read |
declared |
get_order_route | read |
declared |
create_order_intent | write |
inferred |
get_offers | read |
declared |
accept_offer | write |
assumed |
Record history
| Recorded | Exposure | Source |
|---|---|---|
| 2026-09-28 | 23 | tools/list on https://mcp.bev-buyer.ai/mcp, published in the official MCP registry as ai.agent-bev/bev-door 0.2.4 |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.