Score a car deal with an agent

Three facts from the listing. ZIP is optional. Paste listing text on the homepage if you want a prefill. No Facebook Marketplace or Craigslist URL fetch. Grades use dealer-market comps.

• Asking price — what the seller wants today.
• Mileage — odometer on that car.
• ZIP — optional. Narrows comps to a local market. The default score is national.
• Vehicle — year, make, and model (trim if you have it), or the 17-character VIN.

A 2020 Toyota Camry at $16,000 / 62k miles is enough. ZIP 78701 is optional local refine. A VIN is enough too. How to judge if a car is a good deal covers the human version of this checklist.

The homepage form hits the same scoring engine as the API. Live scores need a signed-in account and share the Free meter. Paste the fields and read the grade.

OAuth is the default connect path. Add the Streamable HTTP URL. The client opens a browser for the same email magic-link sign-in used at /login. Do not paste a ds_… key into Cursor config.

{
  "mcpServers": {
    "dealscore": {
      "url": "https://cardealscore.com/api/mcp"
    }
  }
}

That URL is https://cardealscore.com/api/mcp. After consent, call score_deal with the same payload as POST /api/score:

{
  "year": 2020,
  "make": "Toyota",
  "model": "Camry",
  "asking_price": 16000,
  "mileage": 62000,
  "zip": "78701"
}

Response includes grade, delta_pct, expected price, brief, and risks. Thin or failed comps return coverage: cannot_score. Do not invent a Great deal when that happens. How the grades work.

Keys are for curl, scripts, and MCP clients that cannot run a browser OAuth flow. Sign in at /login and mint a key at /keys. Send it as x-api-key or Authorization: Bearer.

Operator env keys still work as break-glass. They are not the agent-connect path.

• No Facebook Marketplace or Craigslist URL fetch.
• No silent mock fallback in production.
• No traffic claims, affiliate links, or invented comps.

Endpoint details: API docs. Agent summary: llms.txt. Auth discovery: /auth.