com.themassprint/massprint

Est-ce que com.themassprint/massprint est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.themassprint/massprint » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 7 outils

• apply_enterprise≈ 304 tokens

  Apply for an enterprise (invoiced) account — for platforms printing at volume behind their own checkout. Enterprise orders auto-confirm with no payment link, are priced at a platform discount off retail (default 25% below), and are settled monthly. Requires a valid India GSTIN for tax invoicing. This does NOT issue a key immediately: the application is reviewed and, once approved, an API key is emailed to contact_email. Use this only when a human has asked to set up a business/enterprise print account.

  Paramètres, retour & exemple (5)

  Paramètres

  • gstin · string · requis
    15-character India GSTIN, e.g. 29ABCDE1234F1Z5. Required for GST invoicing.
  • notes · string · optionnel
    Anything else for the reviewer (optional).
  • company_name · string · requis
    Registered business name.
  • contact_email · string · requis
    Where the approved API key and invoices are sent.
  • expected_monthly_volume · integer · optionnel
    Approximate books printed per month (optional).

  Exemple d'appel

  {"name": "apply_enterprise", "arguments": {"gstin": "texte", "company_name": "texte", "contact_email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• cancel_order≈ 274 tokens

  Cancel an order, stopping it before it is printed. With the order_token from create_order this works while the order is awaiting_payment. A platform that sends its own API key (Authorization: Bearer mp_live_...) can additionally cancel an order THAT KEY created while it is confirmed or printing — that is how you stop a press when your customer cancels on your side. shipped and delivered can never be canceled; that is a refund, contact support (see get_catalog). Canceling stops production but moves no money, and it releases the order's client_reference — replaying that reference afterwards creates a new order and prints it. If the order moved on before the cancel landed you get not_cancellable naming its new status, never a false "canceled".

  Paramètres, retour & exemple (2)

  Paramètres

  • order_id · string · requis
  • order_token · string · optionnel
    The token returned once by create_order. Optional if you send the API key that created the order instead.

  Exemple d'appel

  {"name": "cancel_order", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_order≈ 463 tokens

  Create a print order for a validated upload. Validates everything BEFORE any payment link is minted. Returns { order, order_token } — the order object has order_id, status, amount, and payment_url (the Razorpay link, present while awaiting_payment). Give payment_url to the human to pay (UPI/cards/netbanking). SAVE order_token — it is shown only once and is required for get_order and cancel_order. The order confirms automatically after payment; unpaid orders expire after 72 hours.

  Paramètres, retour & exemple (5)

  Paramètres

  • email · string · requis
    Buyer email; receives the Razorpay payment notification.
  • copies · integer · optionnel
  • format · string · requis · paperback | hardcover | sticker-a3 | greeting-card-a5
    paperback/hardcover: bound storybook (20-60 page PDF). sticker-a3: single-sheet A3 portrait sticker / wall chart (exactly 1 page, 842×1191 pt). greeting-card-a5: folded A5 greeting card, one A4-landscape sheet printed duplex (exactly 2 pages, 859×612 pt incl. 3 mm bleed).
  • address · object · requis
    India shipping address (V1 ships within India only).
  • upload_id · string · requis
    upload_id of a PDF that passed validation.

  Exemple d'appel

  {"name": "create_order", "arguments": {"email": "texte", "format": "paperback", "address": {}, "upload_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_upload≈ 172 tokens

  Start a PDF upload. Returns {upload_id, put_url, expires_at, max_bytes}. HTTP PUT the raw PDF bytes to put_url (Content-Type: application/pdf, no auth needed — the URL is signed). The PUT response includes the validation report. Then pass upload_id to create_order. Keyless use is bounded per calling origin: 20 create_upload calls per hour, at most 5 unused uploads open at a time, and put_url expires in 2 hours — so PUT the bytes promptly and reuse an upload_id you already hold instead of creating extras. An API key (see apply_enterprise) lifts both limits.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "create_upload", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_catalog≈ 106 tokens

  List what can be printed: SKUs (storybook books, sticker-a3 wall charts, greeting-card-a5 folded cards), formats, supported trim sizes, page-count limits, prices (INR, shipping included), and shipping coverage (India only). Call this first to quote a price or check whether a PDF will be accepted.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_catalog", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_order≈ 166 tokens

  Check an order: status (awaiting_payment → confirmed → printing → shipped → delivered), tracking number once shipped, and — while unpaid — the payment_url again (so you can always re-answer "how do I pay"). Requires the order_token from create_order, or the API key that created the order (Authorization: Bearer mp_live_...).

  Paramètres, retour & exemple (2)

  Paramètres

  • order_id · string · requis
  • order_token · string · optionnel
    The token returned once by create_order. Optional if you send the API key that created the order instead.

  Exemple d'appel

  {"name": "get_order", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• validate_pdf≈ 129 tokens

  Get the print-validation report for an uploaded PDF before paying: page count, trim size, hard errors (blocking) and soft warnings (non-blocking). Every error includes a `resolution` explaining how to fix it. Free to call; use it to check printability before create_order.

  Paramètres, retour & exemple (1)

  Paramètres

  • upload_id · string · requis
    The upload_id returned by create_upload.

  Exemple d'appel

  {"name": "validate_pdf", "arguments": {"upload_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://themassprint.com/mcp