Send real gifts to 190+ countries: search, check delivery, get a secure checkout link.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://mcp.giftroam.com/mcp6 tools · 676mssearch_giftsFind gifts that can be delivered to a destination country, optionally filtered by free text, occasion, budget (minor units) and a needed-by date. Returns a shortlist with final customer prices (delivery included) and delivery days. Paginate with cursor. Country is required — ask for it first.Find gifts that can be delivered to a destination country, optionally filtered by free text, occasion, budget (minor units) and a needed-by date. Returns a shortlist with final customer prices (delivery included) and delivery days. Paginate with cursor. Country is required — ask for it first.
| Parameter | Type | Description |
|---|---|---|
| country* | string | Destination country, ISO-3166 alpha-2 (e.g. FR). |
| query | string | Product keywords only, 1-4 words (e.g. 'chocolate basket', 'red roses'). Do NOT include the destination, recipient or occasion here - use the country/occasion… |
| occasion | string | Occasion slug from the occasions resource (e.g. birthday). |
| budget_min | integer | Minimum price in minor units (cents). |
| budget_max | integer | Maximum price in minor units (cents). |
| date_needed | string | YYYY-MM-DD; only gifts that can arrive by then. |
| limit | integer | — |
| cursor | string | Opaque cursor from a previous page. |
| locale | string | Display language for results (e.g. he-IL). The query may be typed in that language. |
get_gift_detailsFull description, contents, images, customer price, estimated delivery window (EST cutoff-aware), substitution policy and restrictions for one gift in one destination country.Full description, contents, images, customer price, estimated delivery window (EST cutoff-aware), substitution policy and restrictions for one gift in one destination country.
| Parameter | Type | Description |
|---|---|---|
| gift_id* | string | gift_id from search_gifts (or the gift's URL slug). |
| country* | string | Destination country, ISO-3166 alpha-2. |
| locale | string | Display language for gift content (e.g. he-IL). Prices and availability are unaffected. |
check_deliveryIs delivery to a country (optionally a city, by a date, for a specific gift) feasible? Returns earliest/latest estimate and warnings (PO box, hotel, holiday window) with a suggested action. Use it whenever the user has a deadline.Is delivery to a country (optionally a city, by a date, for a specific gift) feasible? Returns earliest/latest estimate and warnings (PO box, hotel, holiday window) with a suggested action. Use it whenever the user has a deadline.
| Parameter | Type | Description |
|---|---|---|
| country* | string | Destination country, ISO-3166 alpha-2. |
| city | string | Destination city (used for warnings only; never store addresses in chat). |
| date_needed | string | YYYY-MM-DD the gift must arrive by. |
| gift_id | string | Optional gift_id to use that gift's delivery window. |
| locale | string | Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected. |
create_checkoutCreate a signed, single-purpose checkout link (30-minute expiry) for one gift to one country. The schema has no recipient fields on purpose: name, address, phone, delivery details and payment are collected on the secure page. Show the returned summary and get the user's explicit confirmation before…Create a signed, single-purpose checkout link (30-minute expiry) for one gift to one country. The schema has no recipient fields on purpose: name, address, phone, delivery details and payment are collected on the secure page. Show the returned summary and get the user's explicit confirmation before…
| Parameter | Type | Description |
|---|---|---|
| gift_id* | string | gift_id from search_gifts. |
| country* | string | Destination country, ISO-3166 alpha-2. |
| quantity | number | Always 1 in v1. |
| delivery_date | string | Requested delivery date YYYY-MM-DD; omit for as-soon-as-possible. |
| gift_card_text | string | Card message (≤180 chars) if the user already gave one. |
| idempotency_key* | string | Client-generated key; retries with the same key return the same link. |
| locale | string | Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected. The checkout page opens… |
get_order_statusCustomer-facing status, ETA window and next action for an order. Requires the buyer's order token (delivered after payment) — the token is the credential; never guess or enumerate tokens. Never returns address, phone or payment details.Customer-facing status, ETA window and next action for an order. Requires the buyer's order token (delivered after payment) — the token is the credential; never guess or enumerate tokens. Never returns address, phone or payment details.
| Parameter | Type | Description |
|---|---|---|
| order_token* | string | The order token from the buyer's confirmation (GR-XXXXX-…). Never guess tokens. |
| locale | string | Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected. |
list_my_ordersThe signed-in user's GiftRoam orders: status, ETA window, gift, destination and the order token for tracking. Requires the authenticated GiftRoam connection (OAuth, scope orders:read); on a guest connection it returns auth_required. Never returns addresses, phone numbers or payment details.The signed-in user's GiftRoam orders: status, ETA window, gift, destination and the order token for tracking. Requires the authenticated GiftRoam connection (OAuth, scope orders:read); on a guest connection it returns auth_required. Never returns addresses, phone numbers or payment details.
| Parameter | Type | Description |
|---|---|---|
| limit | integer | — |
| locale | string | Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected. |
6 of 6 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Send real gifts to 190+ countries: search, check delivery, get a secure checkout link.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.