Search verified local businesses, check what their verification proves, and message them.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://api.tunnelpowered.com/api/mcp17 tools · 455mssearch_businessesFind businesses, merchants and websites in the tunnel knowledge base by name or topic. Start here: every other tool needs a `slug`, and this is where a `slug` comes from. Returns an array of summaries, each with `slug`, `kind`, name, description and a `verification` object. Read `verification.level…Find businesses, merchants and websites in the tunnel knowledge base by name or topic. Start here: every other tool needs a `slug`, and this is where a `slug` comes from. Returns an array of summaries, each with `slug`, `kind`, name, description and a `verification` object. Read `verification.level…
| Parameter | Type | Description |
|---|---|---|
| query* | string | Name, topic or place. Words are matched independently against the name, location, description, offerings and FAQ, and most of them have to appear somewhere in… |
| type | string | Optional. Return only records of this kind. |
| limit | number | Optional. Maximum results, 1 to 50. Defaults to 20. |
get_businessRead the full profile of one business. Returns identity, contact details, address, social profiles, offerings, FAQ, `verification` and any machine-readable endpoints we publish for it. Absent information is named in `missing` rather than dropped silently, so an empty field means "we do not hold thi…Read the full profile of one business. Returns identity, contact details, address, social profiles, offerings, FAQ, `verification` and any machine-readable endpoints we publish for it. Absent information is named in `missing` rather than dropped silently, so an empty field means "we do not hold thi…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind | string | Optional. The `kind` field from the same search result. If omitted, "entity" is tried first, then "website". |
check_merchant_verificationCheck live what a merchant has actually been verified to, and by whom. Call this before acting on a claim that matters — a profile is a cached summary, this is the current answer. Returns `level`, a signed attestation, an expiry date and the transparency-log position. `level` "human" means a tunnel…Check live what a merchant has actually been verified to, and by whom. Call this before acting on a claim that matters — a profile is a cached summary, this is the current answer. Returns `level`, a signed attestation, an expiry date and the transparency-log position. `level` "human" means a tunnel…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result, or the merchant numeric id. |
ask_businessAsk one specific question about a listing and get an answer from the registry, with no human involved. Try this before contact_business: it is instant, free, and does not put a message in someone's inbox. Returns either an answer or an escalation. When `resolved` is true, `answer` holds it and `bas…Ask one specific question about a listing and get an answer from the registry, with no human involved. Try this before contact_business: it is instant, free, and does not put a message in someone's inbox. Returns either an answer or an escalation. When `resolved` is true, `answer` holds it and `bas…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind* | string | The `kind` field from the same search result. |
| intent* | string | Which question to ask. "is_open_now" needs nothing else; "delivers_to" needs a `params` place; "lead_time" asks the shortest notice they accept an order on. |
| params | object | Arguments for the question. For "delivers_to": { "place": "Botanica" }. Ignored by the others. |
ask_business_freeformSame answers as ask_business, but you send the person's own words instead of choosing an intent, and the reply comes back in the language they used. Supported languages: en, ro, ru, de; anything else is answered in English. Prefer ask_business when you already know which of the three questions you…Same answers as ask_business, but you send the person's own words instead of choosing an intent, and the reply comes back in the language they used. Supported languages: en, ro, ru, de; anything else is answered in English. Prefer ask_business when you already know which of the three questions you…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind* | string | The `kind` field from the same search result. |
| question* | string | What the person actually asked, in their own words and their own language. Do not translate or rephrase it — the language of this text decides the language of… |
| idempotency_key | string | Optional, and only matters when a question reaches a person. The same question about the same business within 24 hours attaches to the open one and does not no… |
check_escalationRead the answer to a question that had to go to a human. Use the `escalation.ref` that ask_business_freeform returned when its outcome was "escalated". Returns a `state` and, once there is one, the business's own `answer` in their words. Branch on `state`: "open" means we have not reached them yet,…Read the answer to a question that had to go to a human. Use the `escalation.ref` that ask_business_freeform returned when its outcome was "escalated". Returns a `state` and, once there is one, the business's own `answer` in their words. Branch on `state`: "open" means we have not reached them yet,…
| Parameter | Type | Description |
|---|---|---|
| ref* | string | The `escalation.ref` from an earlier ask_business_freeform result. It is the only way to read this answer, so keep it. |
check_commitmentRead a commitment you were given by commit_order, including whether the business has since withdrawn it. Returns `state`: "issued" means it stands, "repudiated" means the business said they cannot honour it, with their stated reason. A withdrawal does not erase the original — both are on the record…Read a commitment you were given by commit_order, including whether the business has since withdrawn it. Returns `state`: "issued" means it stands, "repudiated" means the business said they cannot honour it, with their stated reason. A withdrawal does not erase the original — both are on the record…
| Parameter | Type | Description |
|---|---|---|
| ref* | string | The `ref` returned by commit_order. It is the only way to read this commitment. |
get_rate_cardRead the prices a business has authorised us to quote on their behalf. Returns `published` and, when true, a `rateCard` holding a currency, an optional minimum charge and `items` — each with a `code`, a label, a unit and an amount. Those `code` values are what request_quote and commit_order take: w…Read the prices a business has authorised us to quote on their behalf. Returns `published` and, when true, a `rateCard` holding a currency, an optional minimum charge and `items` — each with a `code`, a label, a unit and an amount. Those `code` values are what request_quote and commit_order take: w…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind | string | Optional. The `kind` field from the same search result. Defaults to "entity". |
request_quotePrice a specific set of line items against a business's rate card. Call get_rate_card first and name `code` values from it; we do the arithmetic. Returns `quoted`. When true you get `total`, `lines` showing what each one came to, and `validUntil`. A quote is a statement, NOT a hold — nothing is res…Price a specific set of line items against a business's rate card. Call get_rate_card first and name `code` values from it; we do the arithmetic. Returns `quoted`. When true you get `total`, `lines` showing what each one came to, and `validUntil`. A quote is a statement, NOT a hold — nothing is res…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind | string | Optional. The `kind` field from the same search result. Defaults to "entity". |
| items* | array | The lines to price. Each is an object with a `code` from get_rate_card and an optional quantity, which defaults to 1. Up to 100 lines. |
| note | string | Optional. What the job is, in the buyer's own words. Never parsed and never changes the figure; it is what a human reads if the quote has to go to one. |
| language | string | Optional. The buyer's language, recorded with the request. Defaults to English. |
check_availabilityFind out when a business is actually free. Worked out per call against their opening hours, their notice period, their blackout dates and what is already booked — there is no stored list of free times to be out of date. Returns `known` true with `days`, each holding `slots` that carry a start, an e…Find out when a business is actually free. Worked out per call against their opening hours, their notice period, their blackout dates and what is already booked — there is no stored list of free times to be out of date. Returns `known` true with `days`, each holding `slots` that carry a start, an e…
| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind | string | Optional. The `kind` field from the same search result. Defaults to "entity". |
| from | string | Optional. First day to look at, yyyy-mm-dd in the business's own local calendar. Defaults to their today. |
| days | number | Optional. How many days to walk, 1 to 14. Defaults to 7. |
| time | string | Optional. One exact start time as HH:MM, 24-hour, on the first day of the range. The answer comes back under `asked`, and "not-a-slot-start" means their day di… |
commit_orderinjection riskPlace a binding order with a business, inside limits they set in advance. This is the only tool here that commits anyone to anything. Either name the figure yourself, or send `items` from get_rate_card and we price them from the merchant's own card. Either way it is checked against their price floo…Place a binding order with a business, inside limits they set in advance. This is the only tool here that commits anyone to anything. Either name the figure yourself, or send `items` from get_rate_card and we price them from the merchant's own card. Either way it is checked against their price floo…
en required. Register once at POST /api/v1/agents/register, exchange the credentials at POST /api/v1/agents/token.| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind* | string | The `kind` field from the same search result. |
| amount | number | What the buyer is offering to pay, as a number. Required unless you send `items`. This is your figure, not ours — we only check it against the limits the busin… |
| currency | string | ISO code, e.g. MDL or EUR. Required unless you send `items`. It must match the currency their limits are in. |
| items | array | Optional. Lines from their rate card, as request_quote takes them. When present, the price is theirs rather than yours and is computed fresh at this moment — a… |
| date* | string | The day the work or delivery is for, as yyyy-mm-dd, in the business's own local calendar. |
| time | string | Optional. A slot start on that day, HH:MM in 24-hour time and in their timezone. It must be one of the starts check_availability lists; times between them are… |
| quantity | number | Optional. How many, as a whole number. Defaults to 1. Leave it out when you send `items` — the quantities are on the lines. |
| description | string | Optional. What the order is for, in plain words. Recorded and shown to the business; it is never parsed and never changes what we check. |
cancel_orderCancel an order you placed with commit_order. Returns `settled`. True means it is cancelled, the business has been told and their day is free again. False comes with a `reason`: "inside-cancel-window" (later notice than they said they need), "no-cancel-window-set" (they never said), "order-passed",…Cancel an order you placed with commit_order. Returns `settled`. True means it is cancelled, the business has been told and their day is free again. False comes with a `reason`: "inside-cancel-window" (later notice than they said they need), "no-cancel-window-set" (they never said), "order-passed",…
| Parameter | Type | Description |
|---|---|---|
| ref* | string | The `ref` returned by commit_order. It is the only handle on this order. |
| note | string | Optional. Why, in the buyer's own words. Recorded, shown to the business and carried into the question if a person has to decide. Never parsed, and it cannot c… |
reschedule_orderMove an order you placed to a different date, or a booking to a different slot. The price, the items and the quantity are unchanged — this moves WHEN, nothing else. To change what was ordered, use request_order_change. A booking made for a time must be moved to a time, and a whole-day order to a wh…Move an order you placed to a different date, or a booking to a different slot. The price, the items and the quantity are unchanged — this moves WHEN, nothing else. To change what was ordered, use request_order_change. A booking made for a time must be moved to a time, and a whole-day order to a wh…
| Parameter | Type | Description |
|---|---|---|
| ref* | string | The `ref` returned by commit_order. |
| date* | string | The new day, as yyyy-mm-dd in the business's own local calendar. |
| time | string | The new slot start, HH:MM in 24-hour time and in their timezone. Required if the order was made for a time; leave it out if it was made for a whole day. |
| note | string | Optional. Why, in the buyer's own words. Shown to the business, never parsed. |
request_order_changeRaise anything else about an order that already exists: a change to what was ordered, a refund request, or a problem with what was delivered. This tool never settles anything, and that is deliberate. Changing an order re-prices it and a refund moves money tunnel does not hold, so both are decisions…Raise anything else about an order that already exists: a change to what was ordered, a refund request, or a problem with what was delivered. This tool never settles anything, and that is deliberate. Changing an order re-prices it and a refund moves money tunnel does not hold, so both are decisions…
| Parameter | Type | Description |
|---|---|---|
| ref* | string | The `ref` returned by commit_order. |
| change* | string | What kind of request this is: "modify" to change what was ordered, "refund" to ask about money back, "other" for anything else including something being wrong. |
| note* | string | What the buyer actually said, in their own words. This is the part the business needs, so send it verbatim. Carried unchanged and never interpreted. |
contact_businessinjection riskOpen a conversation with the person behind a listing. The message arrives in their dashboard inbox and they reply when they get to it — this is asynchronous, not a chat, and nobody is obliged to answer. Returns a `conversation_id` and a secret `token`. Keep both: they are the only way to read a rep…Open a conversation with the person behind a listing. The message arrives in their dashboard inbox and they reply when they get to it — this is asynchronous, not a chat, and nobody is obliged to answer. Returns a `conversation_id` and a secret `token`. Keep both: they are the only way to read a rep…
en required. Register once at POST /api/v1/agents/register, exchange the credentials at POST /api/v1/agents/token,…| Parameter | Type | Description |
|---|---|---|
| slug* | string | The `slug` field from a search_businesses result. |
| kind | string | Optional. The `kind` field from the same search result. |
| agent_name* | string | Who is writing, in words the business will read — e.g. "Claude, on behalf of a customer". |
| subject* | string | Short subject line, like an email subject. |
| message* | string | The message body. Maximum 4000 characters. |
| agent_contact | string | Optional. An out-of-band address the business can reply to, e.g. the end user email if they agreed to share it. |
check_repliesRead a conversation you opened with contact_business, including anything the business has replied since. Returns the whole message thread and its status. Poll it; there is no push. Authentication: the `conversation_id` and `token` from contact_business are the credential for this call. No bearer to…Read a conversation you opened with contact_business, including anything the business has replied since. Returns the whole message thread and its status. Poll it; there is no push. Authentication: the `conversation_id` and `token` from contact_business are the credential for this call. No bearer to…
| Parameter | Type | Description |
|---|---|---|
| conversation_id* | number | The `conversation_id` returned by contact_business. |
| token* | string | The secret `token` returned by contact_business. |
send_followupAdd another message to a conversation already opened with contact_business. Returns the updated message thread. There is a cap on messages per conversation, so send one considered follow-up rather than several fragments. Authentication: bearer token required — the same one used for contact_business…Add another message to a conversation already opened with contact_business. Returns the updated message thread. There is a cap on messages per conversation, so send one considered follow-up rather than several fragments. Authentication: bearer token required — the same one used for contact_business…
| Parameter | Type | Description |
|---|---|---|
| conversation_id* | number | The `conversation_id` returned by contact_business. |
| token* | string | The secret `token` returned by contact_business. |
| message* | string | The message body. Maximum 4000 characters. |
17 of 17 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Search verified local businesses, check what their verification proves, and message them.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.