store.buynearby/mcp

Est-ce que store.buynearby/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « store.buynearby/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• book_courier≈ 602 tokens

  Get a courier price quote, book a REAL point-to-point courier/parcel delivery in Calgary, check a booking's status, or cancel one - no BuyNearby account needed. action:'book' immediately creates the booking and auto-assigns a driver if one is available, exactly like a human finishing the form at buynearby.store/courier-book.php; the response's booking_ref is a real, live booking, not a draft. Payment is a link texted to the customer afterward (this call never charges a card). Use action:'quote' first if you just need a price before the user has decided to book. Use action:'status' to check on an existing booking, and action:'cancel' to self-cancel one (only while it's still 'pending' or 'assigned' — once a driver has picked up the package, direct the customer to support instead).

  Paramètres, retour & exemple (14)

  Paramètres

  • action · string · requis · quote | book | status | cancel
  • size_tier · string · optionnel · small | standard | heavy
  • booking_ref · string · optionnel
    Required for action 'status'/'cancel', e.g. 'CB-20260912-0007'
  • cancel_reason · string · optionnel
    Optional, action 'cancel' only
  • customer_name · string · optionnel
    Required for action 'book'
  • package_count · integer · optionnel
  • customer_email · string · optionnel
  • customer_phone · string · optionnel
    Required for action 'book', 'status', and 'cancel' — for 'status'/'cancel' this must match the phone on the booking (it's the ownership check, since booking_ref alone is guessable)
  • delivery_notes · string · optionnel
  • pickup_address · string · optionnel
    Required for action 'quote'/'book'
  • idempotency_key · string · optionnel
    Optional, action 'book' only — pass the same value on a retry (e.g. after a dropped connection) to avoid creating a duplicate booking
  • delivery_address · string · optionnel
    Required for action 'quote'/'book'
  • preferred_pickup_time · string · optionnel
    Any parseable date/time; omit for ASAP dispatch
  • preferred_dropoff_time · string · optionnel
    Any parseable date/time the customer needs the delivery completed by, e.g. 'today 10pm'; must not be before preferred_pickup_time

  Exemple d'appel

  {"name": "book_courier", "arguments": {"action": "quote"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_stock≈ 118 tokens

  Check live stock level for a specific product. Optionally filter by store. If the caller's API key is a store-scoped partner key, the result is limited to that key's own store regardless of store_id.

  Paramètres, retour & exemple (2)

  Paramètres

  • store_id · integer · optionnel
    Store ID (optional)
  • product_id · string · requis
    Product ID from search results

  Exemple d'appel

  {"name": "check_stock", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_stores≈ 54 tokens

  Get a list of local stores in Calgary with location info.

  Paramètres, retour & exemple (1)

  Paramètres

  • city · string · optionnel

  Exemple d'appel

  {"name": "get_stores", "arguments": {"city": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_todays_deals≈ 150 tokens

  Get today's real discounted products and active flash deals — products currently priced below their regular price, and time-limited flash deals. This is the actual sale/discount data; search_products has no discount flag so a text search for "sale" or "deals" won't find this.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Max results per section. Default 20, max 50
  • store_id · integer · optionnel
    Limit to one store (optional — omit for deals across all stores)

  Exemple d'appel

  {"name": "get_todays_deals", "arguments": {"limit": 1, "store_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• place_cart_order≈ 433 tokens

  Shop BuyNearby's real marketplace catalog: add multiple products (from one store or several) to a cart and check out as ONE real order in a single call - price/stock for every item is looked up from the live catalog server-side (you cannot supply your own price). Use this instead of place_order whenever the user wants more than one item, or items from different stores. Uses the exact same tax/delivery-fee/coupon pricing engine as the human checkout page, so the total you quote back to the user is authoritative. Creates a REAL order immediately - not a draft - visible right away in the store's dashboard for confirmation. Payment is a pre-authorization link texted/emailed to the customer (card held, not charged) - the actual charge happens once the store confirms.

  Paramètres, retour & exemple (9)

  Paramètres

  • items · array · requis
  • express · boolean · optionnel
  • coupon_code · string · optionnel
  • customer_name · string · requis
  • customer_email · string · optionnel
  • customer_phone · string · requis
  • tip_percentage · number · optionnel
    Only set this if the user explicitly chose a tip - don't default one in on their behalf
  • delivery_address · string · requis
    Required unless fulfillment_type is 'pickup'
  • fulfillment_type · string · optionnel · delivery | pickup

  Exemple d'appel

  {"name": "place_cart_order", "arguments": {"items": [], "customer_name": "texte", "customer_phone": "texte", "delivery_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• place_order≈ 252 tokens

  Place an order for a single product from BuyNearby's own catalog (stores running the BuyNearby POS - stock/price are live and guaranteed). Requires API key authentication. A store-scoped partner key can only order products from its own store. Payment is a pre-authorization link texted/emailed to the customer (card is held, not charged) - the actual charge happens once the store confirms the order, not at booking time.

  Paramètres, retour & exemple (6)

  Paramètres

  • express · boolean · optionnel
    Adds an express fee (default $4.99 CAD)
  • quantity · integer · optionnel
  • product_id · string · requis
  • customer_email · string · requis
  • delivery_address · string · requis
  • requested_by_time · string · optionnel
    Any parseable date/time, e.g. 'today 22:00' - recorded on the order, not an enforced SLA at this tier

  Exemple d'appel

  {"name": "place_order", "arguments": {"product_id": "texte", "customer_email": "texte", "delivery_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_products≈ 162 tokens

  Search for products available at local Calgary stores. Returns product name, store, price, stock level, and store categories. Use this when the user asks about finding, buying, or locating any product locally.

  Paramètres, retour & exemple (3)

  Paramètres

  • q · string · requis
    Product search query — can be a product name, ingredient, or natural language description
  • city · string · optionnel
    City to search. Default: Calgary
  • limit · integer · optionnel
    Number of results (max 50)

  Exemple d'appel

  {"name": "search_products", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• shop_and_deliver≈ 396 tokens

  Book a REAL personal-shopper run - a BuyNearby driver goes into a named physical store, shops from the given item list, and delivers it. Works even for stores that aren't BuyNearby partners (set needs_verification expectations: our team calls ahead to confirm stock first for those). This immediately creates the order, exactly like a customer finishing the Shop & Deliver chat flow on buynearby.store - it is not a draft. Estimate each item's price yourself (or via search_products if it's a known BuyNearby-catalog item) since the customer is only charged the driver's actual receipt total afterward, not this estimate.

  Paramètres, retour & exemple (7)

  Paramètres

  • items · array · requis
  • notes · string · optionnel
  • store_hint · string · requis
    Physical store name, e.g. 'Purdys Chocolatier Chinook Centre'
  • customer_name · string · requis
  • customer_email · string · optionnel
  • customer_phone · string · requis
  • delivery_address · string · requis

  Exemple d'appel

  {"name": "shop_and_deliver", "arguments": {"items": [], "store_hint": "texte", "customer_name": "texte", "customer_phone": "texte", "delivery_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://buynearby.store/api/v1/mcp-server.php