Lowtoxgear Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Lowtoxgear Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Two MCP servers for the Lowtoxgear ecosystem. Both live, no-auth, no API key needed — paste a URL into Claude.ai → Settings → Connectors, or call directly via JSON-RPC 2.0 POST.
| Server | Connect URL | Tools |
|---|---|---|
| [Lowtoxgear Storefront](./lowtoxgear-storefront/) | https://mcp.lowtoxgear.com/mcp | search_products, get_product, list_collections, filter_by_certification, get_policies |
| [Lowtoxgear Scanner](./lowtoxgear-scanner/) | https://mcp-scan.lowtoxgear.com/mcp | scan_barcode, get_catalog_stats, get_magnet_samples, submit_missing_product, get_resources |
Both registered under the *`com.lowtoxgear/** namespace (DNS-verified via lowtoxgear.com`) in the Anthropic MCP Registry.
The Lowtoxgear brand is an Australian low-tox lifestyle e-commerce store spanning four collections:
The storefront MCP exposes the Shopify public catalogue with one brand-specific extension: filter_by_certification lets agents query by tags like GOTS, OEKO-TEX, PFAS-free, etc.
The Scanner is an independent Australian ingredient scanner for any consumer product. Live at scan.lowtoxgear.com:
The Scanner MCP is a thin wrapper around the existing scanner backend — it exposes the same data via the MCP JSON-RPC protocol so agents can query it programmatically.
{
"mcpServers": {
"lowtoxgear-storefront": { "url": "https://mcp.lowtoxgear.com/mcp" },
"lowtoxgear-scanner": { "url": "https://mcp-scan.lowtoxgear.com/mcp" }
}
}Settings → Connectors → Add custom connector → paste either URL.
# Scan a barcode
curl -sS https://mcp-scan.lowtoxgear.com/mcp \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
"params":{"name":"scan_barcode","arguments":{"barcode":"9300605000018"}}}'
# Search the storefront
curl -sS https://mcp.lowtoxgear.com/mcp \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
"params":{"name":"search_products","arguments":{"query":"GOTS organic"}}}'Both servers reference each other in their initialize and get_* responses:
get_policies returns a pointer to the Scanner (for chemical-safety analysis of items found in the catalogue).get_resources returns a pointer to the Storefront (for shopping the cleanest-in-class).This lets agents chain queries naturally: scan a barcode → if flagged, query the storefront for a cleaner alternative.
┌──────────────────────────┐
│ AI agent (Claude / etc) │
└────┬───────────────┬─────┘
│ JSON-RPC 2.0 │ JSON-RPC 2.0
▼ ▼
mcp.lowtoxgear.com/mcp mcp-scan.lowtoxgear.com/mcp
(storefront MCP Worker) (scanner MCP Worker)
│ │
│ Shopify │ scan.lowtoxgear.com/api/*
│ public JSON │ (existing scanner web app)
▼ ▼
lowtoxgear.com scan.lowtoxgear.com
(Shopify store) (D1: 21k AU products,
237 chemical rules)Both MCP Workers run on Cloudflare Workers with their own custom domains. The Scanner backend (D1 database, chemical-rule engine, OCR ingestion) lives in a separate Worker we don't modify.
See [PUBLISHING.md](./PUBLISHING.md) — one DNS verification on lowtoxgear.com unlocks both manifests under com.lowtoxgear/*.
MIT — see LICENSE.
Built by Lowtoxgear · Source for scanner data is independent + source-cited · Contact: [email protected]
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.