Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "check_exposure", "check_policies", "check_products" and 4 more
⟨50 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨41 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨40 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨44 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨47 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨60 unchanged words⟩ or saved; ongoing checks are Store Canary Pro. A bare hostname is fine; URL paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
⟨48 unchanged words⟩ findings plus a link to the full audit. Pass a bare hostname or URL; paths are ignored and the host's homepage is checked.
⟨5 unchanged words⟩ "The store's public address, for example https://example.com//example.com. A bare hostname (example.com) is fine. Any path, query or fragment is ignored: the homepage of the host is checked.","format":"uri","maxLength":2048, ⟨6 unchanged words⟩
Added "check_exposure", "check_policies", "check_products" and 4 more; changed the definition of "check_store" (1 tools before, 8 now)
⟨91 unchanged words⟩ ":"uri","type":"string"},"reportUrl":{"description":"Shareable read-only report page. The result is encoded in the link; nothing is stored.","format":"uri","type":"string"},"status":{"description":"checked = findings below; ⟨38 unchanged words⟩
Check what a store exposes publicly — Flag WordPress, WooCommerce, plugin and PHP versions a store shows publicly (generator tags, asset ?ver= values, X-Powered-By), a public /readme.html and a readable /wp-content/debug.log. Log contents are never returned or kept. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Check a store's policy pages — Check that the homepage links to privacy, terms, shipping and returns/refunds pages, and that each linked page on the same site loads. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Unknown → Live
First tool surface recorded: 1 tool (server version 1.0.0)
https://mcp.storecanary.app/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 5 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
Sample a store's products — Read up to 10 published products from the public WooCommerce Store API and flag missing prices, missing images and out-of-stock items. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Check a store's SEO basics — Check a store's robots.txt (and whether it blocks the whole site), its XML sitemap, the homepage title and meta description, and noindex on the homepage. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Time a store's key pages — Time one download each of a store's homepage, one product page and the cart from Cloudflare's network. One sample per page, not a lab test or an average. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Check a store's HTTPS setup — Check that a store's HTTPS certificate is accepted, http:// permanently redirects to https://, the redirect chain is short and stays on HTTPS, and an HSTS header is set. The exact certificate expiry date isn't visible to an outside fetch. Read-only: one run of GET requests only; never logs in, adds to cart or submits forms. Nothing is monitored or saved; ongoing checks are Store Canary Pro.
Explain a Store Canary finding — Explain a finding code returned by any Store Canary tool (for example ssl_hsts or exposure_debug_log) in plain words, with a suggested fix. Makes no network requests.