com.commerceforagents/commerceforagents

Est-ce que com.commerceforagents/commerceforagents est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.commerceforagents/commerceforagents » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• book-contract≈ 1310 tokens

  Files a concierge switch request with the complete contract data in one call. Intended for autonomous agents that already hold the user's full profile, IBAN and a standing authorization; in a conversation with a person, start-booking opens a form in which the user enters these data. Commerce for Agents stores the request encrypted and an operator submits the contract application to the provider; the user receives a confirmation email at once and the provider's contract documents later. There is no self-service checkout link. Input: the `ref` of the chosen offer plus the contract data. Postal code and city come from the comparison; previousProvider, previousCustomerNumber and meterNumber are printed on the last energy bill. `consent: true` attests that the user explicitly agreed to (1) Commerce for Agents submitting the contract on their behalf, (2) the SEPA direct-debit mandate for the given IBAN and (3) the privacy policy at commerceforagents.com/privacy, either by an explicit yes in the conversation or by a standing authorization given to the agent. The response contains nextSteps for the user.

  Paramètres, retour & exemple (19)

  Paramètres

  • ref · string · requis
    Offer reference from a compare-tariffs result (field `ref`).
  • iban · string · requis
    IBAN for the SEPA direct-debit mandate, no spaces (e.g. DE89370400440532013000).
  • email · string · requis
    Email address — receives the booking confirmation and provider documents.
  • phone · string · optionnel
    Phone number (optional, some providers ask for it).
  • street · string · requis
    Street of the supply address (Straße).
  • consent · boolean · requis
    The user has explicitly agreed to: (1) Commerce for Agents submitting this contract on their behalf, (2) the provider's contract terms as shown by tariff-details, (3) the SEPA mandate for the given IBAN, (4) the privacy policy — and has been told the contract can be withdrawn within 14 days. True only after that agreement.
  • language · string · optionnel · de | en
    Language of the conversation — used for the confirmation email. Default: "de".
  • lastName · string · requis
    Last name (Nachname).
  • birthDate · string · requis
    Date of birth, ISO format YYYY-MM-DD. Energy providers require it for the contract.
  • firstName · string · requis
    First name (Vorname).
  • moveInDate · string · optionnel
    Move-in date (Umzugsdatum), ISO YYYY-MM-DD. Required for switchType "relocation", ignored for a switch.
  • salutation · string · requis · herr | frau | divers
    Salutation (Anrede), required by the providers: "herr", "frau" or "divers".
  • switchType · string · requis · switch | relocation
    "switch": changing provider at the current address (Anbieterwechsel). "relocation": moving in / first contract at this address (Umzug/Neueinzug).
  • houseNumber · string · requis
    House number (Hausnummer), e.g. "12a".
  • meterNumber · string · optionnel
    Meter number (Zählernummer, optional — printed on the meter or the last bill).
  • accountHolder · string · optionnel
    Account holder if different from the contract holder.
  • desiredStartDate · string · optionnel
    Desired contract start, ISO YYYY-MM-DD. Omit for the next possible date.
  • previousProvider · string · optionnel
    Current/previous energy provider. Required for switchType "switch".
  • previousCustomerNumber · string · optionnel
    Customer number at the previous provider (Kundennummer, optional but speeds up the switch).

  Exemple d'appel

  {"name": "book-contract", "arguments": {"ref": "texte", "iban": "texte", "email": "texte", "street": "texte", "consent": true, "lastName": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "tariff": "texte", "provider": "texte", "nextSteps": "texte", "requestId": "texte", "annualTotalEur": 1}}

• compare-broadband≈ 436 tokens

  For questions like “what internet providers are at my address?”, “is fiber available?”, “fast home internet near me?”, “Starlink vs cable?”, “cheapest internet at my address?”, “how much is internet here?”, or “moving to an address, what internet can I get?”, look up US fixed broadband provider availability and speed by address or coordinates. Returns FCC availability and maximum advertised speeds by census block (not building-level), ranked by low latency, then speed. Address is sent to the US Census Bureau Geocoder to identify the census block; starting prices ("from $X/mo", with conditions, source and check date) for major national and regional providers (e.g. AT&T, Verizon, T-Mobile, Spectrum, Xfinity, Optimum, Starlink). Filter by minimum download speed or technology.

  Paramètres, retour & exemple (5)

  Paramètres

  • lat · number · optionnel
    Latitude, if no address is given.
  • lon · number · optionnel
    Longitude, if no address is given.
  • address · string · optionnel
    US street address incl. city and state or ZIP.
  • technology · array · optionnel
    Only these technologies.
  • minDownloadMbps · number · optionnel
    Only providers advertising at least this download speed.

  Exemple d'appel

  {"name": "compare-broadband", "arguments": {"lat": 1, "lon": 1, "address": "texte", "technology": [], "minDownloadMbps": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• compare-esims≈ 1316 tokens

  Use this when the user needs phone data abroad: a travel eSIM, an international data plan for a trip, avoiding roaming charges, "will my phone work in Japan", the cheapest data for N days in a country, or unlimited travel data. Ranks a curated catalog of country eSIM packages (Airalo, Saily, Ubigi, Holafly, Nomad) by USD list price among packages valid for the whole trip with at least the data needed, listing each provider's cheapest package first and then the remaining packages by price, and shows price per GB and per day with a provider link. It does not check phone compatibility; the phone must be eSIM-capable and unlocked. Destinations: AU, BR, CA, CO, DE, ES, FR, GB, GR, IT, JP, KR, MX, NL, PT, TH, TR, US. Inputs: destination (country code), days, optional data_gb, unlimited and providers. No personal data is used. Keywords: travel eSIM, eSIM for Japan, cheapest eSIM, international data plan, roaming.

  Paramètres, retour & exemple (5)

  Paramètres

  • days · integer · requis
    Trip length in days; packages must be valid at least this long.
  • data_gb · number · optionnel
    Minimum data needed in GB (default 1). Ignored when unlimited is true.
  • providers · array · optionnel
    Only these providers, e.g. ["Airalo", "Saily"].
  • unlimited · boolean · optionnel
    true: only unlimited-data packages; false: exclude them; omitted: unlimited packages also qualify.
  • destination · string · requis
    Destination country, ISO 3166-1 alpha-2 (e.g. JP, US, GB). Supported: AU, BR, CA, CO, DE, ES, FR, GB, GR, IT, JP, KR, MX, NL, PT, TH, TR, US.

  Exemple d'appel

  {"name": "compare-esims", "arguments": {"days": 1, "destination": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"days": 1, "basis": "texte", "closest": {}, "message": "texte", "results": [], "excluded": {}, "disclosure": "texte", "destination": "texte", "catalogVerifiedOldest": "texte"}}

• compare-mobile-plans≈ 987 tokens

  Compares and ranks US mobile phone plans, cheapest first, from a curated catalog of carrier and prepaid (MVNO) plans, each price checked on the provider's own page, by 12-month average cost per line, with any promo price shown alongside. The catalog is a selection, not the whole market; each result states how many plans and providers it covers and the oldest price-check date. Inputs: number of lines, and optionally data need, budget per line, prepaid or postpaid, must-have features and preferred network. No address or location is used, so network coverage is not checked; each result carries a coverage note. Keywords: cheapest phone plan, compare cell phone plans, cell phone plan, mobile plan comparison, switch carriers, unlimited data plan, family plan, prepaid vs postpaid.

  Paramètres, retour & exemple (6)

  Paramètres

  • lines · integer · optionnel
    Number of phone lines to price.
  • data_need · string · optionnel · light | moderate | heavy | unlimited
    Minimum data: light ≥2GB, moderate ≥5GB, heavy ≥20GB, unlimited = unlimited plans only.
  • must_haves · array · optionnel
    Required features: hotspot, 5g, premium_data (deprioritization-free), unlimited_data.
  • budget_per_line · number · optionnel
    Max USD/month per line.
  • preferred_network · string · optionnel
    Preferred underlying network, e.g. AT&T, Verizon, T-Mobile.
  • prepaid_or_postpaid · string · optionnel · prepaid | postpaid
    Restrict to prepaid or postpaid plans; omit for both.

  Exemple d'appel

  {"name": "compare-mobile-plans", "arguments": {"lines": 1, "data_need": "light", "must_haves": [], "budget_per_line": 1, "preferred_network": "texte", "prepaid_or_postpaid": "prepaid"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"lines": 1, "plans": [], "source": "texte", "message": "texte", "priceNote": "texte", "coverageNote": "texte", "selectionNote": "texte", "catalogPlanCount": 1, "oldestVerifiedDate": "texte", "catalogProviderCount": 1}}

• compare-tariffs≈ 5070 tokens

  Compares German electricity and gas tariffs with live market data for a postal code and an annual consumption, and returns one page of the ranked market: prices with and without bonus, monthly average, savings against the local default supplier (Grundversorgung) or the user's current contract, contract terms, price guarantee, eco status and customer ratings. Covers tariff comparison only, not general energy questions. Prices come live from the market data and can change at any time. Keywords: Stromvergleich, Gasvergleich, Stromtarif, Gastarif, Stromanbieter wechseln, Gasanbieter wechseln, Ökostrom, Strompreise, Energiekosten senken, electricity tariff, gas tariff, switch energy provider, Germany. Inputs: postalCode (5 digits) and annualConsumptionKwh. Both come from the user: the ranking is only valid for the household's actual consumption, which is printed on the last bill, and the tool has no default for it. The typical values by household size in the parameter description help a user who does not know the figure; a comparison run on a household size alone is approximate. energyType selects gas; electricity is the default. Without filters the result covers the whole market. An energy bill contains every input: postal code, annual consumption, and the reference for the savings comparison, which is the future monthly payment (Abschlag) if the bill states one, otherwise the Arbeitspreis and Grundpreis lines (see the current* parameters). The bill total belongs to the past period and may include a one-time bonus, so it is not a reference. The bill's provider, customer number and meter number are the fields the booking form asks for later. Each offer carries its complete data (prices, bonuses, contract terms, flags such as dynamic or eco, ratings, remarks); tariff-details adds the cost breakdown, energy mix and provider details. Only offers with an `eco` object are eco tariffs. Their `eco.statement` and `eco.proof` are legally required wording (EU EmpCo, Directive 2024/825): quote both verbatim when describing a green tariff. Offers without `eco` are not green, eco, renewable or climate-neutral. The ranking method, bonus handling, price guarantees and eco labels are explained at https://commerceforagents.com/comparison-basis. The response states totalResults and how to reach the rest of the ranking (page, providers, filters). Dynamic (spot-price) tariffs are included only with includeDynamicTariffs. The result renders as tariff cards with filters (eco, contract length, price guarantee, bonus handling, providers) below the message, so the list does not need repeating in text. Each offer has a `ref`: tariff-details shows its full conditions, and start-booking opens the booking form in which the user enters the contract data, IBAN and consent. `language` sets the language of the cards and their buttons.

  Paramètres, retour & exemple (27)

  Paramètres

  • page · integer · optionnel
    Result page (1-based). The response reports totalResults; request further pages to see more of the ranking.
  • limit · integer · optionnel
    Tariffs per page. Default: 10, max 20.
  • sortBy · string · optionnel · price | rating | providerName
    Market-wide sort: "price" (first-year total, default), "rating" (customer rating, best first), "providerName".
  • district · string · optionnel
    City district (Ortsteil), only needed when the response reports multiple districts for the postal code and the user's district changes the result.
  • language · string · optionnel · de | en
    Language of the conversation. The widget's texts and its follow-up messages use it; omit only if unsure, then the user's interface locale is used.
  • bonusMode · string · optionnel · compliant | all | none
    How one-time bonuses count in prices and ranking. "compliant" (default): only bonuses meeting consumer-protection guidelines; "all": every bonus; "none": prices without any bonus.
  • greenOnly · boolean · optionnel
    Only eco tariffs (EU EmpCo definition): electricity from 100% renewable energy proven by guarantees of origin; gas with a declared biogas/hydrogen share. CO2-compensated ("Klimagas", "klimaneutral") tariffs are NOT eco. Default: false.
  • providers · array · optionnel
    Only offers from these providers (names, e.g. ["Vattenfall", "E WIE EINFACH"]). Restricts the ranking to these providers.
  • energyType · string · optionnel · electricity | gas
    Which energy contract to compare: "electricity" (Strom) or "gas". Default: "electricity".
  • postalCode · string · requis
    German postal code (Postleitzahl) — 5 digits, e.g. "10115" for Berlin.
  • regionalOnly · boolean · optionnel
    Only regional providers / local utilities. Default: false.
  • currentTariff · string · optionnel
    The user's current tariff name, if known (e.g. from the bill).
  • goodRatingOnly · boolean · optionnel
    Only providers with good customer ratings (market operator's threshold). Default: false.
  • includeDeposit · boolean · optionnel
    Include tariffs requiring a deposit (Kaution). Default: false.
  • cancellationMax · string · optionnel · 1_month | 6_weeks | 3_months
    Maximum cancellation period (Kündigungsfrist). Omit = no filter.
  • currentProvider · string · optionnel
    The user's current provider, if known (e.g. from the bill).
  • contractMonthsMax · ? · optionnel
    Maximum initial contract duration in months (1, 3, 6, 12 or 24). Default: no limit.
  • includePrepayment · boolean · optionnel
    Include tariffs requiring prepayment (Vorauskasse). Default: false.
  • annualConsumptionKwh · integer · requis
    The household's actual annual consumption in kWh, from the user or their last bill; no default. The ranking depends on it. Typical values by household size: electricity ~1500 (1 person), 2500 (2), 3500 (3), 4500 (4+); gas ~9000 (flat), ~20000 (house).
  • currentAnnualCostEur · number · optionnel
    The user's ONGOING yearly cost on their current contract in EUR: current prices, one-time bonuses EXCLUDED. Not the bill total: a new-customer bonus is paid once, so the total of a bonus year understates what they pay next year. Compute Arbeitspreis × kWh / 100 + 12 × Grundpreis (post-increase prices if the bill announces one), or better: pass currentWorkingPriceCtKwh + currentBasePriceEurMonth and let the server compute it. When given, savings are computed against this instead of the default utility tariff.
  • includeDynamicTariffs · boolean · optionnel
    Include dynamic (spot-price) tariffs whose first-year price is only a forecast. Default: false, since most German households book fixed-price tariffs.
  • includePackageTariffs · boolean · optionnel
    Include kWh-package tariffs (Pakettarife). Default: false.
  • maxTariffsPerProvider · integer · optionnel
    Tariffs per provider in the ranking. Default 1 (best per provider); 0 = all tariffs of every provider.
  • priceGuaranteeMonthsMin · ? · optionnel
    Minimum price-guarantee duration in months. null = no filter (default).
  • currentBasePriceEurMonth · number · optionnel
    Grundpreis of the user's current contract in EUR per month, gross (a yearly Grundpreis divided by 12).
  • currentMonthlyPaymentEur · number · optionnel
    The FUTURE monthly payment (Abschlag) stated on the bill for the coming period, e.g. 'Ihr monatlicher Zahlbetrag beträgt zukünftig 159,00 €'. It already reflects price changes after the billing period, which the bill's Arbeitspreis/Grundpreis lines predate. Takes precedence over the price components.
  • currentWorkingPriceCtKwh · number · optionnel
    Arbeitspreis of the user's current contract in ct/kWh, gross, as printed on the bill (the new price if an increase is announced). Together with currentBasePriceEurMonth the server computes the ongoing yearly cost itself — preferred over currentAnnualCostEur.

  Exemple d'appel

  {"name": "compare-tariffs", "arguments": {"postalCode": "texte", "annualConsumptionKwh": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"city": {}, "page": 1, "query": {}, "tariffs": [], "coverageNote": "texte", "priceSpanEur": {}, "totalResults": 1, "referenceNote": "texte", "otherDistricts": [], "referenceTariff": {}, "hiddenDynamicTariffs": 1}}

• compare-vpn≈ 1342 tokens

  Use this when the user asks which VPN to buy, wants the cheapest VPN, a VPN for streaming, torrenting or travel, a VPN for public Wi-Fi safety, an audited no-logs VPN, or wants to avoid renewal price traps. Ranks a curated catalog of US-priced (USD) VPN plans (NordVPN, Surfshark, ExpressVPN, Proton VPN, Private Internet Access, CyberGhost), cheapest first, by effective monthly cost over the preferred term including renewals, and shows the upfront price, renewal price, devices, money-back days, audited no-logs (with auditor), jurisdiction and RAM-only servers; privacy facts not confirmed on the provider's own pages are marked unconfirmed. The catalog is a selection, not the whole market; each result states the oldest price-check date. Prices are US/USD; local checkout prices may differ. Inputs, all optional: term_months (1, 12, 24 or 36), min_devices, needs (streaming, p2p; plans where the feature is unconfirmed are excluded), country (only adds a note when not US) and checkout (default false: pricing-page links; true: plan-preselected checkout links). No personal data is used. Keywords: best VPN, cheapest VPN, VPN comparison, VPN deals, no-logs VPN, VPN renewal price.

  Paramètres, retour & exemple (5)

  Paramètres

  • needs · array · optionnel
    Required features: streaming, p2p (torrenting).
  • country · string · optionnel
    Two-letter country code. Prices are always US prices in USD; for a country other than US the result says local checkout prices may differ.
  • checkout · boolean · optionnel
    Default false: return pricing-page links. Set true to return plan-preselected provider checkout links instead.
  • min_devices · integer · optionnel
    Minimum simultaneous devices needed.
  • term_months · ? · optionnel
    Preferred subscription length in months: 1, 12, 24 or 36.

  Exemple d'appel

  {"name": "compare-vpn", "arguments": {"needs": [], "country": "texte", "checkout": true, "min_devices": 1, "term_months": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plans": [], "source": "texte", "message": "texte", "priceNote": "texte", "disclosure": "texte", "currencyNote": "texte", "selectionNote": "texte", "missingTermNote": "texte", "unconfirmedNote": "texte", "oldestVerifiedDate": "texte"}}

• start-booking≈ 527 tokens

  Opens the booking form for one offer from a comparison, identified by its `ref`; the form renders below the message. Read-only: the call submits, stores and sends nothing, and takes no personal data. In the form the user enters the contract details (page 1), then the IBAN and consent (page 2), and files the request there. Messages such as 'Bitte öffne das Buchungsformular', 'ich möchte diesen Tarif', 'den nehme ich', 'book #2' or 'switch me to this', usually sent by the card's 'Jetzt buchen' button, ask for this form. `language` sets the language of the form. There is no self-service checkout link. Keywords: Buchungsformular, Tarif buchen, wechseln, Wechsel beauftragen, Vertrag abschließen, open booking form, book, switch, sign up.

  Paramètres, retour & exemple (2)

  Paramètres

  • ref · string · requis
    Offer reference from a compare-tariffs result (field `ref`). No personal data.
  • language · string · optionnel · de | en
    Language of the conversation; the booking form uses it. Default: de.

  Exemple d'appel

  {"name": "start-booking", "arguments": {"ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ref": "texte", "city": "texte", "tariff": "texte", "language": "de", "provider": "texte", "energyType": "electricity", "postalCode": "texte", "instruction": "texte", "monthlyAvgEur": 1, "annualTotalEur": 1, "providerLogoUrl": "texte", "annualConsumptionKwh": 1}}

• submit-switch-request≈ 1249 tokens

  Files a concierge switch request for an offer from a comparison: contract data, IBAN and the consents in one call. The booking form opened by start-booking calls it; autonomous MCP clients that hold the user's complete data and authorization can call it directly. Stores the request encrypted, sends the confirmation emails and returns only masked data. An operator later submits the contract application to the provider.

  Paramètres, retour & exemple (20)

  Paramètres

  • ref · string · requis
    Offer reference from a compare-tariffs result (field `ref`).
  • iban · string · requis
    IBAN as entered in the form; spaces allowed.
  • email · string · requis
    Email address — receives the booking confirmation and provider documents.
  • phone · string · optionnel
    Phone number (optional, some providers ask for it).
  • street · string · requis
    Street of the supply address (Straße).
  • language · string · optionnel · de | en
    Language of the conversation — used for the confirmation email. Default: "de".
  • lastName · string · requis
    Last name (Nachname).
  • birthDate · string · requis
    Date of birth, ISO format YYYY-MM-DD. Energy providers require it for the contract.
  • firstName · string · requis
    First name (Vorname).
  • moveInDate · string · optionnel
    Move-in date (Umzugsdatum), ISO YYYY-MM-DD. Required for switchType "relocation", ignored for a switch.
  • salutation · string · requis · herr | frau | divers
    Salutation (Anrede), required by the providers: "herr", "frau" or "divers".
  • switchType · string · requis · switch | relocation
    "switch": changing provider at the current address (Anbieterwechsel). "relocation": moving in / first contract at this address (Umzug/Neueinzug).
  • houseNumber · string · requis
    House number (Hausnummer), e.g. "12a".
  • meterNumber · string · optionnel
    Meter number (Zählernummer, optional — printed on the meter or the last bill).
  • accountHolder · string · optionnel
    Account holder if different from the contract holder.
  • authorization · object · requis
    The three consents the user gave in the form, with the wording versions shown to them.
  • idempotencyKey · string · requis
    Random per form instance. A retry with the same key returns the first result instead of filing twice.
  • desiredStartDate · string · optionnel
    Desired contract start, ISO YYYY-MM-DD. Omit for the next possible date.
  • previousProvider · string · optionnel
    Current/previous energy provider. Required for switchType "switch".
  • previousCustomerNumber · string · optionnel
    Customer number at the previous provider (Kundennummer, optional but speeds up the switch).

  Exemple d'appel

  {"name": "submit-switch-request", "arguments": {"ref": "texte", "iban": "texte", "email": "texte", "street": "texte", "lastName": "texte", "birthDate": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "tariff": "texte", "provider": "texte", "nextSteps": "texte", "requestId": "texte", "maskedIban": "texte", "annualTotalEur": 1}}

• tariff-details≈ 773 tokens

  Returns the full conditions of one tariff from a compare-tariffs result, identified by its `ref`: price composition, scope of the price guarantee, contract duration, renewal and cancellation terms, deposit, energy-source mix, customer ratings, and for eco tariffs the required eco statement and proof. Texts come in the requested `language`. Keywords: Tarifdetails, Vertragsbedingungen, Preisgarantie, Kündigungsfrist, Vertragslaufzeit, AGB, tariff conditions, contract details.

  Paramètres, retour & exemple (2)

  Paramètres

  • ref · string · requis
    Offer reference from a compare-tariffs result (field `ref`).
  • language · string · optionnel · de | en
    Language of the conversation (for the eco statement and proof texts). Default: the language of the compare-tariffs result the ref comes from.

  Exemple d'appel

  {"name": "tariff-details", "arguments": {"ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"eco": {}, "ref": "texte", "tariff": "texte", "remarks": [], "contract": [], "provider": "texte", "energyType": "electricity", "costBreakdown": [], "energySources": [], "annualTotalEur": 1, "customerRatings": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.commerceforagents.com/mcp