Read-only commerce/checkout preflight (UCP/ACP). Returns evidence, never places orders.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://commerce.mcp.jithox.com/mcp5 herramientas · 661 mssearch_retail_productsSearch the queried retail source by free text or EAN. Returns CANDIDATE public records with deterministic match kinds and visible ambiguity: 'exact_public_record' / 'possible_match' / 'multiple_matches' / 'no_match_in_queried_source' — a no-match is never 'not sold', only 'not in the source we quer…Search the queried retail source by free text or EAN. Returns CANDIDATE public records with deterministic match kinds and visible ambiguity: 'exact_public_record' / 'possible_match' / 'multiple_matches' / 'no_match_in_queried_source' — a no-match is never 'not sold', only 'not in the source we quer…
| Parámetro | Tipo | Descripción |
|---|---|---|
| query | string | Free-text search (title/brand). |
| ean | string | EAN/GTIN for an exact lookup. |
get_product_offerReport one product's current offer from the queried source (price in integer minor units, availability, provenance) — or, given a merchant host plus the merchant's own itemId, prepare/re-check NORMALIZED CHECKOUT EVIDENCE over the merchant's declared UCP/ACP checkout data: items, currency, subtotal…Report one product's current offer from the queried source (price in integer minor units, availability, provenance) — or, given a merchant host plus the merchant's own itemId, prepare/re-check NORMALIZED CHECKOUT EVIDENCE over the merchant's declared UCP/ACP checkout data: items, currency, subtotal…
| Parámetro | Tipo | Descripción |
|---|---|---|
| ean | string | EAN/GTIN of the product. |
| publicRecordId | string | A public record id from a prior search. |
| merchant | string | A merchant hostname for checkout evidence (must be on this deployment's allowlist or served by a configured provider). |
| itemId | string | The merchant's own item id (required with merchant). |
| quantity | integer | Quantity for the checkout evidence quote (default 1). |
| priorEvidence | object | componentHashes from a prior evidence answer — presence turns this call into a re-check with per-component change detection. |
compare_product_offersCompare current offers for 2–5 EANs as a VALUE TABLE ordered by a stated criterion (price ascending). One unreadable offer makes the whole table 'unavailable' — no partial table is sold as a comparison. A table, never a ranking sold as advice, never a 'best product'. Answers come from the queried s…Compare current offers for 2–5 EANs as a VALUE TABLE ordered by a stated criterion (price ascending). One unreadable offer makes the whole table 'unavailable' — no partial table is sold as a comparison. A table, never a ranking sold as advice, never a 'best product'. Answers come from the queried s…
| Parámetro | Tipo | Descripción |
|---|---|---|
| eans* | array | EANs to compare; a comparison needs at least 2 (fewer returns 'insufficient_identifiers'). |
build_affiliate_buy_linkReturn the provider's OFFICIAL product link for a record — no network call, nothing ordered, never a checkout-completion URL. A HUMAN clicks it; any commission accrues at the provider's own partner programme, never through this server. 'ready' when the provider publishes a link; 'unsupported' when…Return the provider's OFFICIAL product link for a record — no network call, nothing ordered, never a checkout-completion URL. A HUMAN clicks it; any commission accrues at the provider's own partner programme, never through this server. 'ready' when the provider publishes a link; 'unsupported' when…
| Parámetro | Tipo | Descripción |
|---|---|---|
| publicRecordId* | string | The public record id to link to. |
get_commerce_readinessOne plain state of THIS server: which commerce provider is configured, which protocols this deployment speaks (UCP profile discovery + negotiation; the ACP REST checkout format), what each protocol still needs before live evidence exists, and the affiliate state. 'ready' / 'not_configured'. Truthfu…One plain state of THIS server: which commerce provider is configured, which protocols this deployment speaks (UCP profile discovery + negotiation; the ACP REST checkout format), what each protocol still needs before live evidence exists, and the affiliate state. 'ready' / 'not_configured'. Truthfu…
No se publicó ningún esquema de entrada para esta herramienta.
5 de 5 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Read-only commerce/checkout preflight (UCP/ACP). Returns evidence, never places orders.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.