oakandluna.com WebMCP audit

Name: oakandluna.com WebMCP audit
Creator: ora

Rescan

audited Oct 28, 2026in 17s

84/ 100Incomplete audit · 54% of the applicable check weight evaluated

6 tools registered. Strongest in tool selection, weakest in shared experience.

Shared experience50

Tool selection100

Tool quality97

Trust100

https://oakandluna.com

Tools

5 read, 0 write, 1 undeclared

Loading map

search_products

Search this store's products by keyword, with optional sort, page and filters.Answers a question. Declared read only.

pagehttps://www.oakandluna.com/

implementation

viaimperative

entry pointdocument

registered after1630ms

executepresent

api surface

queryrequired

sortoptional

pageoptional

filtersoptional

annotations

read onlytrue

untrusted contentnot declared

titlenot declared

1 finding

warningHuman parity

weight 8

6 tools run through the JavaScript API and the page itself was not graded on this run, so parity could not be confirmed. A visible effect in your existing UI when a tool runs closes the gap.

search_products, get_product_details, track_order, get_delivery_estimate, get_bag_delivery_estimate

fix

// Make the tool's effect visible on the page the person is looking at:
// update the same UI your existing human flow uses when search_products runs,
// so the person co-browsing sees what the agent just did.
execute: async (args, { signal }) => {
  const result = await performAction(args, signal);
  renderResultInPage(result); // the human-visible half of the same action
  return result;
}

tool json

{
  "name": "search_products",
  "description": "Search this store's products by keyword, with optional sort, page and filters.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string",
        "minLength": 3,
        "description": "Search keywords, e.g. \"gold name necklace\""
      },
      "sort": {
        "type": "string",
        "enum": [
          "featured",
          "from-low-price-to-high",
          "from-high-price-to-low"
        ],
        "description": "Sort order. Defaults to \"featured\""
      },
      "page": {
        "type": "integer",
        "minimum": 1,
        "description": "Page number, starting at 1. Defaults to 1"
      },
      "filters": {
        "type": "object",
        "additionalProperties": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "description": "Filters to apply, as { \"<filter name>\": [\"<value>\", ...] }. Use the names and values from the \"filters\" field of a previous result"
      }
    },
    "required": [
      "query"
    ]
  },
  "annotations": {
    "readOnlyHint": true
  }
}

Findings

Shared experience

50 / 100 · weight 30

not applicableVisible effect

weight 6

Not invoked on this run: this audit did not call any tool. Scheduled re-audits only read the registry; a live audit from the report page calls the tools that declare readOnlyHint: true and not consequentialHint: true.

not measuredPage experience

weight 16

The page-experience model hop returned no usable result, so the page was not graded.

warningHuman parity

weight 8

6 tools run through the JavaScript API and the page itself was not graded on this run, so parity could not be confirmed. A visible effect in your existing UI when a tool runs closes the gap.

toolsearch_products

search_products, get_product_details, track_order, get_delivery_estimate, get_bag_delivery_estimate

fix

// Make the tool's effect visible on the page the person is looking at:
// update the same UI your existing human flow uses when search_products runs,
// so the person co-browsing sees what the agent just did.
execute: async (args, { signal }) => {
  const result = await performAction(args, signal);
  renderResultInPage(result); // the human-visible half of the same action
  return result;
}

Tool selection

100 / 100 · weight 25

not applicableInvoke success rate

weight 6

not measuredTool selection

weight 12

The tool-selection model hop returned no usable result.

passCoverage vs. site type

weight 7

The tool set covers the whole core commerce flow: search or browse the catalog, read one item in detail, add to or read the cart, start checkout or place an order.

Tool quality

97 / 100 · weight 25

warningRegistration timing

weight 1

The slowest tool took 1630ms to register, past the 1000ms an agent reading the registry at first paint would wait for.

toolget_bag_delivery_estimate

get_bag_delivery_estimate: registered at 1630ms

fix

// Register tools as soon as they're ready, not behind a deferred/async chunk.
document.modelContext.registerTool({ /* ... */ });

passCanonical entry point

weight 3

All 6 tools register on the canonical document.modelContext entry point.

passSchema validity

weight 4

All 6 declared input schemas are structurally valid object schemas.

passSchema quality

weight 4

All 5 of 6 tool schemas that declare parameters describe them (the other 1 declares no parameters), and every description stays within Chrome's size guidance.

passNaming quality

weight 2

All 6 tool names are consistent, verb-led, and within Chrome's size guidance.

passStub detection

weight 4

All 6 tools declare an execute handler.

passRegistration errors

weight 2

No tool registration threw during the capture.

not measuredDescription quality

weight 5

The description-quality model hop returned no usable result, so descriptions were not rated.

Trust

100 / 100 · weight 20

passAnnotations present

weight 4

All 5 read-shaped tools declare readOnlyHint: true - the one declared claim that lets an agent treat a call as safe to make without asking.

passAnnotation mismatch

weight 4

No tool claims to be read-only while its own name or description says it writes (5 declared hints checked).

not applicableUntrusted content hint

weight 3

No tool's contract suggests it returns text written by somebody other than the site, so there is nothing to flag as untrusted.

not applicableConsequential hint

weight 3

No tool name reads like a consequential action (a purchase, a booking, a payment, a transfer, a deletion), so there is no consequentialHint to expect.

not applicableHint vs. observed

weight 3

not measuredInjection surface

weight 3

The injection-surface model hop returned no usable result, so tool contracts were not reviewed for injection surface.

Tool selection

The tool-selection model hop returned no usable result.

Add the tools this site is missing

Our scanner reads your website and suggests the right WebMCP tools for it.

The open source webmcp plugin teaches your coding agent to audit a site, implement tools on document.modelContext, and verify them in a real browser. npx @ora-ai/webmcp-verify runs the verification on its own. No signup, no hosted service.

how this was captured

observed via: capture shim (Chromium 151.0.7922.34)
chrome: 151.0.7922.34
capture shim: v3
spec snapshot: 2026-10-16
mode: fast
pages: 1 - entry page only
tools: 6
invoked: not invoked; a live audit calls them
run time: 17s
finished: Oct 28, 2026

Checked the way in-browser agents discover tools: the top-level document's modelContext registry, read after the page settles.