Mtb Hq Snack Kiosk Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mtb Hq Snack Kiosk Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Lightweight Node MCP server for querying Tally product/category data used by mymarketaccount.net.
It uses the same endpoints seen in the web app:
GET /cartapi/cart/categoriesGET /cartapi/cart/productsand sends Authorization: Bearer <token>.
locationId and accountIdnpm installnpm startTALLY_TOKEN default bearer tokenTALLY_LOCATION_ID default 4dfd336941716947dba20acffc45660dTALLY_ACCOUNT_ID default accountTALLY_PAGE_SIZE default page size for product paging (default 100)TALLY_BASE_URL default https://tally.prod.readytouchpos.comTALLY_API_KEY default 3C9DEDE2-EC3E-43E3-9C20-E591ED341127set_tally_token(token)list_categories(locationId?, token?)list_products(locationId?, accountId?, token?, category?, search?, minPrice?, maxPrice?, sortBy?, limit?, pageSize?, maxPages?, maxRecords?)ask_products(question, locationId?, accountId?, token?, category?, search?, minPrice?, maxPrice?, sortBy?, limit?, pageSize?, maxPages?, maxRecords?)ask_products supports lightweight question inference for phrases like:
under $3over 5between 2 and 4top 10cheapest, best deal, average, how many{
"mcpServers": {
"tally": {
"command": "node",
"args": ["/home/kurtk/mtb-hq-snack-kiosk-mcp/src/index.js"],
"env": {
"TALLY_LOCATION_ID": "4dfd336941716947dba20acffc45660d",
"TALLY_ACCOUNT_ID": "<account-id>"
}
}
}
}[mcp_servers.tally]
command = "node"
args = ["<path to repo>/src/index.js"]
[mcpServers.tally.env]
TALLY_LOCATION_ID = "4dfd336941716947dba20acffc45660d"
TALLY_ACCOUNT_ID = "<account-id>"Then call:
set_tally_token with your current token.ask_products or list_products for product/price questions./tallyapi/auth/register and /tallyapi/auth/login) is intentionally not implemented here; this server expects an already valid token.set_tally_token is held in process memory for the running MCP session.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.