Shorted customer plugin

The portable package uses the public, anonymous Streamable HTTP endpoint at https://api.shorted.com.au/mcp/public. This fixed catalog does not advertise the alerts sign-in shortcut or add alert tools for a signed-in caller. The general /mcp endpoint retains its separate optional alert workflow. The package contains no Shorted Admin dependency, credential, account binding or customer-data permission. Optional OAuth in the service is not required for this public-data package.

The package contains five positive and three negative review cases. Live data varies: assertions concern returned identifiers, sources, units and dates rather than fixed stock prices or rankings. Reviewers need no account or private data.

Before public upload, record and verify the actual native-host walkthrough, add its reviewer-accessible URL to review.demo_recording_url, validate the archive and rerun checks against the exact saved Portal version. Draft cases and direct API checks do not prove native-host case execution. The authorized developer completes the final legal declarations.

The public tool catalog must include explicit boolean safety annotations. TestPublicToolAnnotationsOnTheWire verifies the SDK-serialized definitions.