io.github.kirubel/kirah-local-services

Est-ce que io.github.kirubel/kirah-local-services est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.kirubel/kirah-local-services » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• cancel_booking≈ 1191 tokens

  Cancels one grant-authorized booking after explicit user confirmation. Reusing idempotency_key makes retries safe. Kirah refuses cancellations that could refund a charged deposit or restore a paid plan session; an allowed cancellation has no undo.

  Paramètres, retour & exemple (5)

  Paramètres

  • grant · string · requis
    The capability token from this booking's create_booking response (confirmation.grant). Required: without it there is no way to establish that you are the agent that made this booking. It must carry the `booking:cancel` scope. Tampered, wrong-booking, wrong-tenant, revoked and insufficiently-scoped grants all answer invalid_grant, indistinguishably; an authentic grant past the appointment start answers expired_grant.
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • booking_ref · string · requis
    The reference create_booking returned for the booking you want to CANCEL. It must be the SAME booking the supplied grant was issued for; a mismatch answers invalid_grant, indistinguishably from a forged grant.
  • agent_metadata · object · optionnel
  • idempotency_key · string · requis
    REQUIRED — unlike create_booking, this action cannot derive one, because "cancel booking X" is byte-identical whether it is a transport retry or a deliberate second call. Omitting it answers missing_idempotency_key. Reuse the SAME key when retrying the SAME cancellation: the replay returns the original result with idempotent_replay:true, cancels nothing and sends no second notice. The same key against a different booking_ref answers idempotency_conflict.

  Exemple d'appel

  {"name": "cancel_booking", "arguments": {"grant": "texte", "tenant": "texte", "booking_ref": "texte", "idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"demo": true, "grant": "texte", "detail": "texte", "reason": "texte", "end_iso": "texte", "missing": [], "outcome": "ok", "notified": "texte", "start_iso": "texte", "policy_fee": "texte", "request_id": "texte", "booking_ref": "texte"}}

• create_booking≈ 1193 tokens

  Creates one guest booking for an exact service, provider and ISO-8601 start time after explicit user confirmation. Reusing idempotency_key makes retries safe. Kirah accepts no payment credentials through MCP; a deposit-required service may return a Kirah-hosted human payment continuation, but this call transfers no funds.

  Paramètres, retour & exemple (8)

  Paramètres

  • client · object · requis
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • start_iso · string · requis
  • service_id · string · requis
  • provider_id · string · optionnel
  • agent_metadata · object · optionnel
  • idempotency_key · string · optionnel
  • intake_responses · object · optionnel
    Answers to the service's intake form (2.8), keyed by intake field id as advertised in list_services' service.intake_form.fields[].id. FLAT only: values must be a string, a boolean, or a finite number — arrays, nested objects and nulls are rejected. Unknown keys are ignored by the booking engine. Answers are validated against the LIVE form; a required plain boolean accepts an explicit true OR false, a consent boolean accepts only true, and a select must exactly match one advertised option. Omit this field entirely when the service has no intake form.

  Exemple d'appel

  {"name": "create_booking", "arguments": {"client": {}, "tenant": "texte", "start_iso": "texte", "service_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"demo": true, "grant": "texte", "detail": "texte", "reason": "texte", "end_iso": "texte", "missing": [], "outcome": "ok", "notified": "texte", "start_iso": "texte", "policy_fee": "texte", "request_id": "texte", "booking_ref": "texte"}}

• find_available_services≈ 1256 tokens

  Checks up to five top matching eligible Kirah businesses for earliest current availability within an exact ISO-8601 window of up to 14 days. Returns checked status and a partial-coverage flag.

  Paramètres, retour & exemple (9)

  Paramètres

  • query · string · requis
    The consumer's service need in plain words — identical semantics to search_businesses.query.
  • location · string · optionnel
    Optional place text ('City, ST', ZIP, bare city/state) OR explicit coordinates 'lat,lng' — identical semantics to search_businesses.location.
  • tenant_mode · string · optionnel · real_only | include_demos | demos_only
    The authoritative demo eligibility filter, with the same semantics as search_businesses. include_demos is the default and returns real and demo candidates; real_only excludes demos; demos_only returns only clearly labeled demonstration candidates.
  • include_demo · boolean · optionnel
    Back-compat alias: true is equivalent to tenant_mode 'include_demos' and false to 'real_only'. When omitted, tenant_mode defaults to include_demos. Every demo candidate carries demo:true and a demo_notice. Supplying both include_demo and tenant_mode with disagreeing demo-inclusion is invalid_tenant_mode.
  • radius_miles · integer · optionnel
    Radius in miles (default 25) — operative when the location resolves to coordinates (2.6 semantics).
  • earliest_after · string · optionnel
    Exact ISO 8601 instant the window opens (default: now). Natural-language times are rejected (invalid_earliest_after).
  • candidate_limit · integer · optionnel
    How many top-matching businesses get LIVE availability checks (invalid_candidate_limit outside 1-5). This bounds the whole fan-out: businesses beyond it are never touched, and partial:true says so.
  • earliest_before · string · optionnel
    Exact ISO 8601 instant the window closes (default: earliest_after + 14 days). Must be after earliest_after and at most 14 days after it (invalid_earliest_before).
  • max_price_cents · integer · optionnel
    Only candidate services with a parseable price at or under this amount are considered.

  Exemple d'appel

  {"name": "find_available_services", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_availability≈ 550 tokens

  Returns current open times for one exact service and optional provider over a YYYY-MM-DD range of up to 31 days, with at most 20 rows. Approval-mode times are preferences rather than holds.

  Paramètres, retour & exemple (4)

  Paramètres

  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • date_range · object · requis
  • service_id · string · requis
  • provider_id · string · optionnel

  Exemple d'appel

  {"name": "get_availability", "arguments": {"tenant": "texte", "date_range": {}, "service_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_booking_status≈ 540 tokens

  Returns the current status, time, service and provider for one grant-authorized booking reference. Client contact details and intake responses are excluded.

  Paramètres, retour & exemple (3)

  Paramètres

  • grant · string · optionnel
    The booking-bound capability token returned by create_booking. It must match this tenant and booking_ref and remain unexpired and unrevoked.
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • booking_ref · string · requis
    The reference create_booking returned (its idempotency key). Tampered, unrelated, cross-tenant or never-committed references answer one indistinguishable booking_not_found.

  Exemple d'appel

  {"name": "get_booking_status", "arguments": {"tenant": "texte", "booking_ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_reschedule_options≈ 1082 tokens

  Returns up to five real alternate times and the current fee or approval consequences for one grant-authorized booking. It does not hold, move or cancel the appointment.

  Paramètres, retour & exemple (6)

  Paramètres

  • grant · string · requis
    The capability token from this booking's create_booking response (confirmation.grant). Required: without it there is no way to establish that you are the agent that made this booking. Tampered, wrong-booking, wrong-tenant and revoked grants all answer invalid_grant, indistinguishably; an authentic grant past the appointment start answers expired_grant. These are the GRANT codes, not the payment page's invalid_token/expired_token — through contract 2.11 this action answered the latter, whose prose wrongly told callers their payment link was broken.
  • limit · integer · optionnel
    How many options to return. Default 2, hard maximum 5; a larger value is CLAMPED to 5 rather than rejected. The ceiling is deliberate: the primary consumer is a voice agent reading options aloud, and five spoken times is more than a caller can hold in their head.
  • latest · string · optionnel
    Optional exact ISO 8601 instant — the latest replacement time to consider. Default: now + 14 days. Must be after `earliest` and at most 31 days after it; anything else answers invalid_latest. Supply it explicitly whenever `earliest` is more than 14 days out.
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • earliest · string · optionnel
    Optional exact ISO 8601 instant — the earliest replacement time to consider. Default: now + 2 hours (a slot the customer cannot physically reach is not an option). Natural-language times are not accepted.
  • booking_ref · string · requis
    The reference create_booking returned (its idempotency key). It must be the SAME booking the supplied grant was issued for; a mismatch answers invalid_grant, indistinguishably from a forged grant.

  Exemple d'appel

  {"name": "get_reschedule_options", "arguments": {"grant": "texte", "tenant": "texte", "booking_ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_services≈ 912 tokens

  Returns one published Kirah business catalog with current services, providers, timezone, prices, durations, deposit requirements, intake-question definitions and derived booking capabilities.

  Paramètres, retour & exemple (1)

  Paramètres

  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).

  Exemple d'appel

  {"name": "list_services", "arguments": {"tenant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• reschedule_booking≈ 1490 tokens

  Atomically moves one grant-authorized booking to a real open time after explicit user confirmation. Reusing idempotency_key makes retries safe. Failure leaves the original booking unchanged; success returns a rotated grant.

  Paramètres, retour & exemple (7)

  Paramètres

  • grant · string · requis
    The capability token from this booking's create_booking response (confirmation.grant). Required: without it there is no way to establish that you are the agent that made this booking. It must carry the `booking:reschedule` scope. Tampered, wrong-booking, wrong-tenant, revoked and insufficiently-scoped grants all answer invalid_grant, indistinguishably; an authentic grant past the appointment start answers expired_grant. These are the GRANT codes, not the payment page's invalid_token/expired_token — through contract 2.11 this action answered the latter, whose prose wrongly told callers their payment link was broken.
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).
  • start_iso · string · requis
    The exact ISO 8601 instant to move the appointment to. Natural-language times are not accepted. You may supply it DIRECTLY — calling get_reschedule_options first is optional, not required — because the instant is validated against real availability by the same slot engine create_booking uses. A time that is not genuinely open answers slot_taken with the original booking untouched; a time further ahead than this business books answers beyond_booking_horizon.
  • booking_ref · string · requis
    The reference create_booking returned for the booking you want to MOVE. It must be the SAME booking the supplied grant was issued for; a mismatch answers invalid_grant, indistinguishably from a forged grant. A successful move does not change it.
  • provider_id · string · optionnel
    OPTIONAL. Move the booking to a different provider. Omit it and the booking keeps the provider it is already on — the customer booked a person, not a room. An explicit provider is honored only when that provider exists in this tenant's catalog (else unknown_provider) AND performs the booked service (else provider_service_mismatch). The service and its duration never change.
  • agent_metadata · object · optionnel
  • idempotency_key · string · requis
    REQUIRED — unlike create_booking, this action cannot derive one, because "move booking X to time T" is byte-identical whether it is a retry or a deliberate second move. Omitting it answers missing_idempotency_key. Reuse the SAME key when retrying the SAME move: the replay returns the original result with idempotent_replay:true and moves nothing. The same key with a different start_iso or provider_id answers idempotency_conflict.

  Exemple d'appel

  {"name": "reschedule_booking", "arguments": {"grant": "texte", "tenant": "texte", "start_iso": "texte", "booking_ref": "texte", "idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"demo": true, "grant": "texte", "detail": "texte", "reason": "texte", "end_iso": "texte", "missing": [], "outcome": "ok", "notified": "texte", "start_iso": "texte", "policy_fee": "texte", "request_id": "texte", "booking_ref": "texte"}}

• search_businesses≈ 1559 tokens

  Searches Kirah's eligible public business directory by service need or exact Kirah Agent Address, with optional coarse location, price and demo-mode filters. Demo results are explicitly labeled.

  Paramètres, retour & exemple (9)

  Paramètres

  • limit · integer · optionnel
  • query · string · optionnel
    The consumer's need in plain words (e.g. 'lower back tightness', 'prenatal massage'). Matched deterministically against real service catalogs, expanded by the discovery ontology.
  • cursor · string · optionnel
    Opaque next_cursor value from a previous search_businesses response with the SAME query/filters: resumes after that tenant in the stable ordering. A cursor that does not decode, or that names a tenant not present in the current ordering, is invalid_cursor.
  • location · string · optionnel
    Optional place text ('City, ST', ZIP, bare city/state) OR explicit coordinates 'lat,lng'. With resolvable coordinates, radius_miles applies as real distance; otherwise matching is city/ZIP/metro-market text equality.
  • tenant_mode · string · optionnel · real_only | include_demos | demos_only
    The authoritative eligibility filter for demo tenants. include_demos (default) returns real and demo businesses together; every demo is flagged demo:true and carries a clear notice. real_only excludes every demo business; demos_only returns ONLY demo businesses. A discovery-disabled, inactive, or otherwise ineligible tenant never appears in any mode — not even when its catalog uniquely matches the query.
  • include_demo · boolean · optionnel
    Back-compat alias: true is equivalent to tenant_mode 'include_demos' and false to 'real_only'. When omitted, tenant_mode defaults to include_demos. Every demo result carries demo:true and a demo_notice. Supplying both include_demo and tenant_mode with disagreeing demo-inclusion is invalid_tenant_mode.
  • radius_miles · integer · optionnel
    Radius in miles (default 25) — OPERATIVE when the location resolves to coordinates (2.6); otherwise answered with a truthful distance_note instead of a fabricated distance.
  • agent_address · string · optionnel
    Exact public locator `<handle>@kirah.ai`; case-insensitive ASCII only. A locator, never authentication or owner authority. Reserved, malformed, unlisted, disabled, non-bookable, and tenant_mode-ineligible addresses do not resolve. Exact mode never fuzzy-matches a near miss.
  • max_price_cents · integer · optionnel
    Only services with a parseable price at or under this amount are returned; unpriced services are excluded when this is set.

  Exemple d'appel

  {"name": "search_businesses", "arguments": {"limit": 1, "query": "texte", "cursor": "texte", "location": "texte", "tenant_mode": "real_only", "include_demo": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_services≈ 381 tokens

  Ranks up to five services in one published Kirah business catalog against a short free-text query. Returns catalog-grounded candidate identifiers, names, scores and match evidence.

  Paramètres, retour & exemple (2)

  Paramètres

  • query · string · requis
  • tenant · string · requis
    The tenant to operate on: the provider.tenant_slug value from the tenant's /.well-known/kirah.json manifest (the tenant's full domain, e.g. <slug>.kirah.ai).

  Exemple d'appel

  {"name": "search_services", "arguments": {"query": "texte", "tenant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://kirah.ai/api/mcp-registry-v1