com.giftroam/giftroam

Est-ce que com.giftroam/giftroam est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.giftroam/giftroam » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• check_delivery≈ 529 tokens

  Is delivery to a country (optionally a city, by a date, for a specific gift) feasible? Returns earliest/latest estimate and warnings (PO box, hotel, holiday window) with a suggested action.

  Paramètres, retour & exemple (5)

  Paramètres

  • city · string · optionnel
    Destination city (used for warnings only; never store addresses in chat).
  • locale · string · optionnel
    Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected.
  • country · string · requis
    Destination country, ISO-3166 alpha-2.
  • gift_id · string · optionnel
    Optional gift_id to use that gift's delivery window.
  • date_needed · string · optionnel
    YYYY-MM-DD the gift must arrive by.

  Exemple d'appel

  {"name": "check_delivery", "arguments": {"country": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "latest": "texte", "locale": "texte", "earliest": "texte", "feasible": true, "warnings": [], "display_text": "texte", "business_days": {}, "suggested_action": "texte"}}

• create_checkout≈ 686 tokens

  Create a signed, single-purpose checkout link (30-minute expiry) for one gift to one country. The schema has no recipient fields on purpose: name, address, phone, delivery details and payment are collected on the secure page. Returns an order summary with the link. Retries with the same idempotency_key return the same link.

  Paramètres, retour & exemple (7)

  Paramètres

  • locale · string · optionnel
    Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected. The checkout page opens in this language.
  • country · string · requis
    Destination country, ISO-3166 alpha-2.
  • gift_id · string · requis
    A gift_id from search results.
  • quantity · number · optionnel
    Always 1 in v1.
  • delivery_date · string · optionnel
    Requested delivery date YYYY-MM-DD; omit for as-soon-as-possible.
  • gift_card_text · string · optionnel
    Card message (≤180 chars) if the user already gave one.
  • idempotency_key · string · requis
    Client-generated key; retries with the same key return the same link.

  Exemple d'appel

  {"name": "create_checkout", "arguments": {"country": "texte", "gift_id": "texte", "idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "locale": "texte", "summary": {}, "expires_at": "texte", "checkout_url": "texte", "display_text": "texte"}}

• get_gift_details≈ 714 tokens

  Full description, contents, images, customer price, estimated delivery window (EST cutoff-aware), substitution policy and restrictions for one gift in one destination country.

  Paramètres, retour & exemple (3)

  Paramètres

  • locale · string · optionnel
    Display language for gift content (e.g. he-IL). Prices and availability are unaffected.
  • country · string · requis
    Destination country, ISO-3166 alpha-2.
  • gift_id · string · requis
    A gift_id from search results (or the gift's URL slug).

  Exemple d'appel

  {"name": "get_gift_details", "arguments": {"country": "texte", "gift_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"gift": {}, "error": {}, "locale": "texte", "translation": {}, "display_text": "texte"}}

• get_order_status≈ 451 tokens

  Customer-facing status, ETA window and next action for an order. Looked up by the buyer's private order token, issued after payment; the token is the only credential. Never returns address, phone or payment details.

  Paramètres, retour & exemple (2)

  Paramètres

  • locale · string · optionnel
    Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected.
  • order_token · string · requis
    The order token from the buyer's confirmation email (GR-XXXXX-…).

  Exemple d'appel

  {"name": "get_order_status", "arguments": {"order_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"gift": "texte", "error": {}, "locale": "texte", "status": "texte", "country": "texte", "updated_at": "texte", "next_action": "texte", "display_text": "texte", "status_label": "texte", "delivery_date": "texte", "estimated_window": {}}}

• list_my_orders≈ 487 tokens

  The signed-in user's GiftRoam orders: status, ETA window, gift, destination and the order token for tracking. Requires the authenticated GiftRoam connection (OAuth, scope orders:read); on a guest connection it returns auth_required. Never returns addresses, phone numbers or payment details.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
  • locale · string · optionnel
    Language of the conversation with the user (e.g. he-IL, fr-FR). Localizes content and messages; prices and availability are unaffected.

  Exemple d'appel

  {"name": "list_my_orders", "arguments": {"limit": 1, "locale": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "total": 1, "locale": "texte", "orders": [], "display_text": "texte"}}

• search_gifts≈ 838 tokens

  Find gifts that can be delivered to a destination country, optionally filtered by free text, occasion, budget (minor units) and a needed-by date. Returns a shortlist with final customer prices (delivery included) and delivery days. Paginate with cursor.

  Paramètres, retour & exemple (9)

  Paramètres

  • limit · integer · optionnel
  • query · string · optionnel
    Product keywords, 1-4 words (e.g. 'chocolate basket', 'red roses'). Destination, recipient and occasion are separate fields. Omit for a general browse.
  • cursor · string · optionnel
    Opaque cursor from a previous page.
  • locale · string · optionnel
    Display language for results (e.g. he-IL). The query may be typed in that language.
  • country · string · requis
    Destination country, ISO-3166 alpha-2 (e.g. FR).
  • occasion · string · optionnel
    Occasion slug from the occasions resource (e.g. birthday).
  • budget_max · integer · optionnel
    Maximum price in minor units (cents).
  • budget_min · integer · optionnel
    Minimum price in minor units (cents).
  • date_needed · string · optionnel
    YYYY-MM-DD; only gifts that can arrive by then.

  Exemple d'appel

  {"name": "search_gifts", "arguments": {"country": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "total": 1, "locale": "texte", "country": {}, "results": [], "next_cursor": "texte", "date_warning": "texte", "display_text": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.giftroam.com/mcp