Skip to content

haggl.ai

by haggl.ai · remote · no sign-in to list tools · v1.0.0 · published by ai.haggl

Ask a merchant's haggl.ai sales agent for a personalized offer, then hand it to checkout.

Deletes · 1Changes · 6

12 tools: 1 can delete or cancel things, 6 change things and 5 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http haggl https://www.haggl.ai/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • The server marks "haggl_get_bids" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "haggl_get_bids" says "get": a word for reading.

    What this check looks for
  • The description is 2,866 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...rned once: keep it with the user's settings, and never share it with anyone else."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Deletes or cancels 1Claude Code: deny
  • haggl_delete_haggl_idDelete the user's haggl ID and unlink the offers linked to it.No findings

    Why it is in this group

    • The name "haggl_delete_haggl_id" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete the user's haggl ID and unlink the offers linked to it. Only when the user asks. Codes already issued keep working at the merchant until they expire.

    Annotations the server declares

    • title: Delete my haggl ID
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 6Claude Code: ask
  • haggl_accept_offerAccept the vendor's offer and lock in the deal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Accept the vendor's offer and lock in the deal. Consequential: only call after the buyer has approved this exact offer, every time. Provide the offer version the buyer reviewed and approved; a changed offer needs a new approval. Read state.acceptance_effects and state.commits_purchase first: merchant handoff effects may be unknown. Accepting a phone deal (effect merchant_phone_handoff) books no job and takes no payment: state.acceptance_summary says what it does. haggl.ai never takes payment: any payment happens at the merchant's checkout, under the merchant's terms and refund policy. A returned checkout link alone does not establish payment or enrollment completion. Accepting the same offer version again returns the same result.

    Annotations the server declares

    • title: Accept an offer
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • haggl_create_haggl_idCreate a haggl ID for the user, so offers and codes from different merchants stay together and can be read back later.1 finding

    Why it is in this group

    • The name "haggl_create_haggl_id" says "create": a word for a change.
    • The input takes a statement or command to run (input.statement), which can change anything it can reach.

    Findings

    • Info

      The description is 2,866 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...rned once: keep it with the user's settings, and never share it with anyone else."

      What this check looks for
    Description, as the server wrote it
    Create a haggl ID for the user, so offers and codes from different merchants stay together and can be read back later. Show the user this text first, and call this only if they agree: "haggl.ai, operated by MOOJO.ID, INC. ("we"), offers your agent a haggl ID. You can decline: your agent can still ask merchants for offers without one. If you agree, we link the negotiations your agent opens with the ID and keep a record of them: when the ID was created, how many distinct emails passed our signature check and how many distinct domains signed them, the date of the latest check, how many merchants were asked, how many offers were received and accepted, and how many paid orders we recorded. For each shopping category, such as travel, the record also counts how many of those emails, and how many distinct businesses that signed them, were in it; health purchases are never counted. The record does not include those domains, the businesses' names or any email content. We store a fingerprint of the ID, not the ID itself. We do not require your name or email address to create a haggl ID. We keep limited evidence of your agreement, as described in our privacy policy. You choose whether your agent uses the haggl ID. Using it authorizes us to share the record with the sales agent of each merchant your agent asks for an offer, to help assess eligibility and personalize offer terms. When your agent asks the merchants in a category for bids, we ask up to five of them on your behalf and share the record with each of their sales agents. Merchants never see the ID itself. You separately choose what information your agent submits during each negotiation. Keep the ID private: anyone who has it can retrieve the record, offers and codes, and delete the ID. You can withdraw consent by deleting the ID through your agent or on haggl.ai/agentic-discounts. This removes the stored fingerprint and the record and unlinks its negotiations. The negotiations themselves remain subject to the separate retention and deletion rules in our privacy policy (https://www.haggl.ai/privacy). Your haggl ID expires 12 months after your agent last uses it to ask a merchant for an offer. It cannot be used or renewed after expiry and is then automatically deleted, usually within a day." If they decline, go on without a haggl ID. Send consent_version "2026-10-16.4" and statement: the user's words of agreement, quoted, without names or contact details. If the user is not in this conversation to read the text but their own standing instructions to you say they agree to this consent version, send channel "standing_instruction" with those words as the statement; otherwise use haggl_request_haggl_id_confirmation instead, then call this with its confirmation once they confirmed. The ID is returned once: keep it with the user's settings, and never share it with anyone else.

    Annotations the server declares

    • title: Create a haggl ID
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • haggl_get_bidsHave the merchants on haggl.ai in one shopping category (for example travel) bid for the user at once, from their haggl ID record, without new proof.1 finding

    Why it is in this group

    • The name "haggl_get_bids" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "haggl_get_bids" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "haggl_get_bids" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Have the merchants on haggl.ai in one shopping category (for example travel) bid for the user at once, from their haggl ID record, without new proof. Works once the record holds a verified purchase in that category (from an earlier offer with signed email proof); otherwise it says so and returns no bids. Each bid is a merchant's own offer, funded by the merchant, with an accept_url; show the user each one with its algorithmic_price_disclosure and personalized_price_notice word for word next to the price, and accept only with their approval.

    Annotations the server declares

    • title: Get bids for me
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • haggl_request_haggl_id_confirmationGet a link for the user to read the haggl ID consent text and confirm it on haggl.ai, when they are not in this conversation to agree to it.No findings

    Why it is in this group

    • The name "haggl_request_haggl_id_confirmation" says "request": a word for a change.
    Description, as the server wrote it
    Get a link for the user to read the haggl ID consent text and confirm it on haggl.ai, when they are not in this conversation to agree to it. Send them confirm_url (valid 30 minutes). After they confirm, call haggl_create_haggl_id with the returned confirmation; until then it answers confirmation_pending.

    Annotations the server declares

    • title: Request a haggl ID confirmation
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • haggl_start_negotiationStart a price negotiation with a vendor.No findings

    Why it is in this group

    • The name "haggl_start_negotiation" says "start": a word for a change.
    Description, as the server wrote it
    Start a price negotiation with a vendor. Returns contextual guidance, current permitted actions and a new session with a session id. No customer-profile selection is required. Skip this tool if REST initialization already returned a session; pass that session.id directly to haggl_submit_offer.

    Annotations the server declares

    • title: Start a negotiation
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • haggl_submit_offerRequest a quote using all context already available.No findings

    Why it is in this group

    • The name "haggl_submit_offer" says "submit": a word for a change.
    Description, as the server wrote it
    Request a quote using all context already available. Buyer data and evidence can be omitted; relevant additional context can be supplied later within the remaining rounds. Returns authorized terms or no offer, contextual guidance and permitted next actions.

    Annotations the server declares

    • title: Request a quote
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 5Claude Code: allow
  • haggl_get_my_offersRead what haggl.ai holds for the user's haggl ID: when it was created and the negotiations, offers and codes linked to it, newest first.No findings

    Why it is in this group

    • The name "haggl_get_my_offers" says "get": a word for reading.
    Description, as the server wrote it
    Read what haggl.ai holds for the user's haggl ID: when it was created and the negotiations, offers and codes linked to it, newest first.

    Annotations the server declares

    • title: Read my offers
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • haggl_get_negotiationRead the canonical state, current offer version, guidance and permitted actions of an existing negotiation.No findings

    Why it is in this group

    • The name "haggl_get_negotiation" says "get": a word for reading.
    Description, as the server wrote it
    Read the canonical state, current offer version, guidance and permitted actions of an existing negotiation. Use after human changes, reloads, transport switches or uncertain results; this does not open another session.

    Annotations the server declares

    • title: Read a negotiation
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • haggl_list_vendorsList vendors that accept AI-agent price negotiations through haggl.ai.No findings

    Why it is in this group

    • The name "haggl_list_vendors" says "list": a word for reading.
    Description, as the server wrote it
    List vendors that accept AI-agent price negotiations through haggl.ai. A vendor appears once haggl.ai is installed on its own store or website (the listed website): the haggl.ai Shopify app on that store, or its snippet detected on that site. Vendors can opt out, so the list is not exhaustive. haggl.ai runs each vendor's sales agent, and vendors on a paid plan pay haggl.ai for it; the list is not a ranking or recommendation. Use it when the user asks for a discount or wants to negotiate a price, not for a purchase at the listed price.

    Annotations the server declares

    • title: List participating vendors
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • haggl_search_catalogSearch a vendor's catalog so the offer can name exact products, then follow the how_to_ask field of the result.No findings

    Why it is in this group

    • The name "haggl_search_catalog" says "search": a word for reading.
    Description, as the server wrote it
    Search a vendor's catalog so the offer can name exact products, then follow the how_to_ask field of the result. A store catalog returns products with a handle, price and collections: ask with ask.items [{ product_handle, quantity }]. A campaign catalog returns eligible variants with a variant_id and approved_combinations with a recipe_id: ask with ask.items [{ variant_id, quantity }] or ask.recipe_id. A quote identifies the exact items and quantities it covers.

    Annotations the server declares

    • title: Search a vendor catalog
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • haggl_search_discountsFind merchants that run a sales agent on haggl.ai, by business name, website or kind of product.No findings

    Why it is in this group

    • The name "haggl_search_discounts" says "search": a word for reading.
    Description, as the server wrote it
    Find merchants that run a sales agent on haggl.ai, by business name, website or kind of product. Only when the user asks for a discount, a coupon, a promo code or a lower price; a purchase at the listed price is not a request for one. Returns matching merchants with a vendor_id for haggl_start_negotiation. Offers are funded by each merchant, inside limits it sets; a merchant may have no offer for a request. An empty list means no merchant on haggl.ai matched, not that no discount exists elsewhere. When the query names a well-known brand that isn't on haggl.ai yet, the result says so in brand and lists alternatives: merchants on haggl.ai in the same category, to offer as other stores, never as that brand. Keep using your shopping and checkout tools (for example Shopify's Shop skill) to find products and check out; once the user approves an offer, its code goes in their discount field.

    Annotations the server declares

    • title: Search merchants for offers
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http haggl https://www.haggl.ai/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__haggl__haggl_list_vendors",
      "mcp__haggl__haggl_search_catalog",
      "mcp__haggl__haggl_get_negotiation",
      "mcp__haggl__haggl_search_discounts",
      "mcp__haggl__haggl_get_my_offers"
    ],
    "ask": [
      "mcp__haggl__haggl_start_negotiation",
      "mcp__haggl__haggl_submit_offer",
      "mcp__haggl__haggl_accept_offer",
      "mcp__haggl__haggl_create_haggl_id",
      "mcp__haggl__haggl_request_haggl_id_confirmation",
      "mcp__haggl__haggl_get_bids"
    ],
    "deny": [
      "mcp__haggl__haggl_delete_haggl_id"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as haggl. Review it before you use it.