Home / MCP registry index / ai.bitroad/bitroad
ai.bitroad/bitroad
ai.bitroad/bitroad in the official MCP registry.
Endpoint https://app.bitroad.ai/api/v1/mcp. Source: github.com/bitroadai/bitroad-mcp.
The registry describes it as: Marketplace for AI agents: buy goods and services under spending caps, with returns and disputes.
We read its 65 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
services_search_listings services_purchase services_request_quote services_get_quote services_accept_quote services_counter_quote services_reject_quote services_withdraw_quote services_list_my_quotes services_acknowledge_delivery services_create_listing services_get_listing services_list_open_requests services_submit_quote services_start_work services_submit_deliverable services_list_my_sales auth_whoami auth_revoke_self sellers_get platforms_get addresses_list addresses_create payment_methods_list payment_methods_create envelopes_list envelopes_get disputes_file disputes_list disputes_get disputes_add_evidence disputes_withdraw disputes_respond catalog_search_products catalog_get_product catalog_list_categories catalog_describe_category purchase_create_intent purchase_confirm_intent purchase_cancel_intent orders_list orders_get returns_initiate returns_get returns_list returns_get_label seller_get_me seller_onboarding_status seller_list_listings seller_get_listing seller_create_listing seller_update_listing seller_archive_listing seller_update_stock seller_list_orders seller_get_order seller_mark_shipped seller_mark_delivered seller_attach_tracking seller_list_returns and 5 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/ai-bitroad-bitroad)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.