Back to Browse

Aio Agents MCP Server

by Gsc Em
Developer ToolsUse Caution2.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

GSC CPG to Retail Grocery Nodes. 2,235 banners across 28 markets. By GreenCore Solutions.

About

GSC CPG to Retail Grocery Nodes. 2,235 banners across 28 markets. By GreenCore Solutions.

Remote endpoints: streamable-http: https://mcp.gsc-cpg.com

Security Report

2.5
Use Caution2.5Critical Risk

The MCP server exposes a procurement attribution dataset with reasonable query tools but has several security concerns. The hardcoded database password in the default DATABASE_URL string is a critical credential exposure risk, even though it's documented as requiring change. Input validation is insufficient—parameterized queries are used but filter patterns are overly permissive. The server lacks authentication/authorization controls, making it openly accessible to any agent that connects. File path handling in parse_data.py uses hardcoded absolute paths without validation. While permissions align with its purpose (network access for database, env vars for config), the combination of exposed credentials and missing auth creates a moderate-to-high risk profile. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

AIO Agents MCP

Demand-side procurement attribution for retail grocery · 2,235 banners · 28 markets · ERP × Cloud × Procurement attribution.

Operated by GreenCore Solutions Corp.


What this is

A live MCP server exposing GreenCore's demand-side procurement attribution dataset to AI agents.

AI agents — Claude, GPT, Gemini, Grok, Mistral — connect to mcp.gsc-cpg.com and query where a CPG product can land: which retail grocery banners run which ERP system, on which cloud, with which procurement platform, in which market.

Companion to io.github.gsc-em/a2a-mcp-cpg — supply-side catalog (rails, GTINs, signals). Together: GSC's full agentic CPG procurement surface.

MCP endpoint: https://mcp.gsc-cpg.com

Registry: io.github.gsc-em/aio-agents-mcp


Tools

ToolPurpose
find_bannersFind banners matching country / ERP / cloud / procurement / confidence filters.
get_market_summaryGet attribution totals + ERP / cloud / procurement breakdowns for a single market.
get_strike_targetsReturn ranked list of highest-confidence agentic-ready banners.
get_agentic_readinessGet readiness scorecard by region (% of banners with attribution).
count_attribution_coverageGlobal dataset stats — totals, distinct ERPs / clouds / platforms.

Dataset

DimensionCoverage
Total banners2,235
Markets28 (18 EU + 10 LatAm)
Banners with full attribution1,218 (54%)
Confirmed276
Probable210
Inferred319
Contested26
Distinct ERP systems209 (SAP S/4HANA, Oracle Fusion, D365, Infor, Totvs, etc.)
Distinct clouds105 (Azure, GCP, STACKIT, AWS, OCI, HEC, on-prem, hybrid)
Distinct procurement platforms94 (Ariba, Coupa, Ivalua, GEP, JAGGAER, Zycus, Native, etc.)

Attribution is 6-LLM cross-validated (ChatGPT, Gemini, Copilot, Perplexity, Mistral, Grok) where possible. Confidence tiers reflect cross-LLM agreement: CONFIRMED (5-of-6 or 6-of-6), PROBABLE (partial agreement), INFERRED (corporate-parent inheritance), CONTESTED (sources disagree), UNKNOWN (no reliable attribution).


Markets covered

EU: Germany · France · United Kingdom · Ireland · Italy · Spain · Portugal · Netherlands · Belgium · Luxembourg · Austria · Switzerland · Norway · Sweden · Denmark · Finland · Poland · Czech Republic

LatAm: Brazil · Mexico · Colombia · Chile · Argentina · Peru · Ecuador · Costa Rica + Central America · Dominican Republic · Puerto Rico + Caribbean


Ghost Headers

Every response carries the GreenCore Ghost Header set:

X-GSC-Protocol: ACM-68000
X-GSC-Version: 1.0.0
X-GSC-Router: mcp.gsc-cpg.com
X-GSC-Role: mcp-server
X-GSC-Operator: GreenCore Solutions Corp.
X-GSC-Registry: io.github.gsc-em/aio-agents-mcp
X-MCP-Server: https://mcp.gsc-cpg.com
X-MCP-Registry: io.github.gsc-em/aio-agents-mcp
X-Agent-Access: Claude,Mistral,Gemini,Grok,OpenAI

Architecture

github.com/gsc-em/aio-agents-mcp     ← this repo
       │
       ▼
Azure Container Apps (France Central)
  ├─ ca-aio-agents-mcp               (FastMCP server, this code)
  └─ pg-aio-agents-fr                (Postgres Flexible Server, dataset)
       │
       ▼
mcp.gsc-cpg.com                       ← public MCP endpoint

Subscription: AIO Agents (gsc-em.com tenant) Resource group: rg-aio-agents-fr Region: France Central


Companion server

GreenCore operates two production MCP servers in the official MCP Registry:

RepositoryEndpointFunction
io.github.gsc-em/a2a-mcp-cpgmcp.gsc-em.comSupply side — rails, GTINs, ACM-68000 signals
io.github.gsc-em/aio-agents-mcpmcp.gsc-cpg.comDemand side — banner attribution, strike targets

Together they form the complete agentic CPG procurement surface: what we sell + where it lands.


License

MIT — see LICENSE.


Links

NameURL
GreenCore Solutions Corp.gsc-cpg.com
Repositorygithub.com/gsc-em/aio-agents-mcp
MCP Registryio.github.gsc-em/aio-agents-mcp
Companion MCPa2a-mcp-cpg

Reviews

No reviews yet

Be the first to review this server!