shop.nagora/nagora

Est-ce que shop.nagora/nagora est sûr ?

Au dernier audit MCP Hub, le serveur MCP « shop.nagora/nagora » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• cancel_order≈ 138 tokens

  Cancels an order whose escrow is still Initiated (no on-chain funds sent yet). Restores listing stock. Cannot cancel once escrow is Funded; use the dispute or refund flow on the website instead.

  Paramètres, retour & exemple (2)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header
  • orderId · string · requis
    Order ID to cancel

  Exemple d'appel

  {"name": "cancel_order", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• confirm_delivery≈ 168 tokens

  Confirms the goods or digital content arrived and releases the escrowed funds to the seller. Requires the order's escrowStatus to be Shipped. Call promptly once delivery is verified: the seller is waiting on this to get paid. If never called, an auto-finalise timer releases funds after the configured window.

  Paramètres, retour & exemple (2)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header
  • orderId · string · requis
    Order ID to confirm

  Exemple d'appel

  {"name": "confirm_delivery", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_purchase≈ 476 tokens

  Places an order against a listing. Returns a depositAddress (per-order escrow Nano account) and amountNano. IMPORTANT: the order is not funded by this call. Send exactly amountNano to depositAddress from the agent's Nano wallet to fund escrow. Once funds are detected the order moves to AwaitingShipment automatically. Physical listings require a shippingAddress.

  Paramètres, retour & exemple (7)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header
  • quantity · integer · optionnel
    Quantity, default 1
  • listingId · string · requis
    Listing to purchase
  • variantId · string|null · optionnel
    Variant ID from get_listing, when the listing has variants
  • quotedTotalNano · number|null · optionnel
    Total in XNO from a recent get_listing call. Rejected if more than 2% off the live rate; omit to skip the guard
  • shippingAddress · object|null · optionnel
    Required for physical delivery; omit for digital listings
  • deliveryOptionId · integer|null · optionnel
    Delivery option ID from get_listing, when the listing offers several

  Exemple d'appel

  {"name": "create_purchase", "arguments": {"listingId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_listing≈ 120 tokens

  Fetch a single listing by ID. No API key required. Returns full detail including variants, delivery options, and pricing. Use the returned Nano total as quotedTotalNano when purchasing to guard against exchange-rate drift.

  Paramètres, retour & exemple (1)

  Paramètres

  • listingId · string · requis
    Listing ID from search_listings

  Exemple d'appel

  {"name": "get_listing", "arguments": {"listingId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_order≈ 184 tokens

  Polls an order placed by this agent. Returns orderStatus, escrowStatus, funding timestamps, tracking info, and the receipt ID once available. Poll after funding the deposit address, and after the seller ships, before calling confirm_delivery. For digital listings, digitalContent holds what was bought once the order is paid.

  Paramètres, retour & exemple (2)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header
  • orderId · string · requis
    Order ID returned by create_purchase

  Exemple d'appel

  {"name": "get_order", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_receipt≈ 168 tokens

  Returns the cryptographically signed receipt for a completed order, including the seller's Nano address, the on-chain payout block hash, and Nagora's KMS signature. Available only after escrow is Released; returns an error while the order is still in progress.

  Paramètres, retour & exemple (2)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header
  • orderId · string · requis
    Order ID to fetch the receipt for

  Exemple d'appel

  {"name": "get_receipt", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_agent≈ 300 tokens

  Creates a Nagora agent and mints its API key in one call. No Nagora account or signup required. IMPORTANT: this is a remote server with no local storage, so the key is returned ONCE in the result. Store it securely and pass it as the apiKey argument on subsequent calls in this session; for long-lived setups reconnect with an 'Authorization: Bearer <key>' header instead. Skip this tool if a credential is already configured; check with whoami.

  Paramètres, retour & exemple (5)

  Paramètres

  • name · string · requis
    Agent name, e.g. 'claude-shopper' (max 64 chars)
  • callbackUrl · string|null · optionnel
    Optional webhook URL; Nagora POSTs signed order state-change events to it
  • homepageUrl · string|null · optionnel
    Optional homepage describing the agent
  • nanoAddress · string · requis
    Nano (XNO) address refunds should be sent to: the wallet this agent pays from
  • contactEmail · string|null · optionnel
    Optional contact email for order issues

  Exemple d'appel

  {"name": "register_agent", "arguments": {"name": "texte", "nanoAddress": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_listings≈ 268 tokens

  Full-text search over active listings on nagora.shop. No API key required. Returns an items array and total count. Use get_listing for full detail before purchasing.

  Paramètres, retour & exemple (7)

  Paramètres

  • q · string|null · optionnel
    Free-text search query, e.g. 'mechanical keyboard'
  • count · integer|null · optionnel
    Page size 1-100, default 20
  • sortBy · string|null · optionnel
    Sort order: newest, price_asc, or price_desc. Default newest
  • maxPrice · number|null · optionnel
    Maximum price filter
  • minPrice · number|null · optionnel
    Minimum price filter
  • categoryId · integer|null · optionnel
    Numeric category filter
  • startIndex · integer|null · optionnel
    Pagination offset, default 0

  Exemple d'appel

  {"name": "search_listings", "arguments": {"q": "texte", "count": 1, "sortBy": "texte", "maxPrice": 1, "minPrice": 1, "categoryId": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• whoami≈ 112 tokens

  Verifies the configured credential and returns the agent's identity, spending caps, callback URL, and webhook secret. Call this first to confirm the credential works.

  Paramètres, retour & exemple (1)

  Paramètres

  • apiKey · string|null · optionnel
    Agent API key (nag_agt_...). Omit when connected with an Authorization header

  Exemple d'appel

  {"name": "whoami", "arguments": {"apiKey": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.nagora.shop/mcp