AdvocateMCP
by advocatemcp.com · remote · no sign-in to list tools · v1.0.0 · published by com.advocatemcp
MCP layer for local businesses: discover, query, book, and transact with verified SMB AI agents.
18 tools: 7 can delete or cancel things, 5 change things and 6 only read.
Scanned Oct 21, 2026
- Deletes or cancels7Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things5Claude Code: ask: see these tools
- Only reads6Claude Code: allow: see these tools
6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http advocate https://api.advocatemcp.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnget_quote
The server marks "get_quote" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_quote" says "get": a word for reading.
The server marks "query_business_agent" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "query_business_agent" says "query": a word for reading.
The server marks "get_payment_handoff_url" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_payment_handoff_url" says "get": a word for reading.
The server marks "create_booking_payment_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_booking_payment_link" says "create": a word for a change.
- Infoget_credentials
The title mentions "Credentials".
What this check looks forMatched text
title: "Get Business Credentials"
The description mentions "credential".
What this check looks forMatched text
description: "...402 challenge, then the person's wallet credential); no code is sent to the customer for a..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
18 tools
Deletes or cancels 7Claude Code: deny
cancel_bookingCancels a paid, confirmed booking using the cancel_token from its payment receipt.No findings
Why it is in this group
- The name "cancel_booking" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Cancels a paid, confirmed booking using the cancel_token from its payment receipt. Within 60 minutes of paying, or before the business's refund window, the full refund is requested; report it as full only after the payment ledger confirms it. After that window the deposit is forfeited under the booking's policy. A pending refund means cancellation is complete while refund verification or retry continues. Only the agent that paid holds the token. Cancelling twice answers already_cancelled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
confirm_bookingConfirm a reservation made with reserve_slot.No findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Confirm a reservation made with reserve_slot. Present the returned stored booking_details to the customer and relay only the customer-supplied 6-digit code received at their email or phone; never generate, guess, or fetch it. For an active configured calendar, a verified code attempts a direct commit to the selected calendar with no owner approval. booking_pending means the provider outcome is uncertain; repeat confirm_booking later to check the stored outcome, but it never retries a provider write automatically. A paid booking (reserve_slot returned payment.required = true) has no code: this answers payment_required — pay it with create_booking_payment_link — or payment_in_flight while its payment is settling.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
initiate_handoffBegin a handoff from the agent to either a human operator (SMS/email via lead_routing_json) or another agent (signed continuation URL).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Begin a handoff from the agent to either a human operator (SMS/email via lead_routing_json) or another agent (signed continuation URL). In human mode the notification body is composed by the server from the contact and reason fields — callers supply those fields, not the message text. Idempotent: re-using the same idempotency_key returns the original handoff.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
request_callbackSubmit a callback request on behalf of a user.No findings
Why it is in this group
- The name "request_callback" says "request": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Submit a callback request on behalf of a user. Advocate attempts a notification through the business's configured lead routing channel (SMS/email); provider acceptance is not proof the business read it. A failed or pending result can require direct follow-up or a retry. Idempotent: re-using the same idempotency_key returns the original request.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
reserve_slotReserve a time slot on an active configured calendar.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Reserve a time slot on an active configured calendar. Returns a pending_offer reservation and sends a 6-digit confirmation code to the customer's email or phone. The reservation expires in 15 minutes if not confirmed. Idempotent: re-using the same idempotency_key returns the original reservation without resending the code. At a business that takes a deposit for agent bookings, pass the offer_id from get_quote (without it the answer is quote_required); no code is sent and the result's payment block carries the amount to pay instead.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
submit_quote_requestAfter the customer explicitly agrees, save their service requirements and contact details and send a notification to the business's configured email or opted-in SMS destination.No findings
Why it is in this group
- The name "submit_quote_request" says "submit": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it After the customer explicitly agrees, save their service requirements and contact details and send a notification to the business's configured email or opted-in SMS destination. This requests a business response, not a price commitment, booking or payment. Use context from request_service. Reuse the same idempotency_key AND details to check an uncertain submission; never automatically start a new request. Exclude medical, payment-card and authentication information.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
- idempotentHint: true
subscribe_to_updatesStart a pending email subscription to updates from a business.No findings
Why it is in this group
- The name "subscribe_to_updates" says "subscribe": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Start a pending email subscription to updates from a business. Returns a confirmation URL that only the user must click within 7 days; no subscription is active until that confirmation. Idempotent: re-using the same idempotency_key returns the original subscription.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Changes things 5Claude Code: ask
create_booking_payment_linkFor a reservation that reserve_slot returned with payment.required = true: returns the MPP payment link, the amount charged now, and the balance due at the visit.2 findings
Why it is in this group
- The name "create_booking_payment_link" says "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...402 challenge, then the person's wallet credential); no code is sent to the customer for a..."
- Warn
The server marks "create_booking_payment_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_booking_payment_link" says "create": a word for a change.
Description, as the server wrote it For a reservation that reserve_slot returned with payment.required = true: returns the MPP payment link, the amount charged now, and the balance due at the visit. The agent pays it itself (HTTP 402 challenge, then the person's wallet credential); no code is sent to the customer for a paid booking. A free booking answers not_payable — confirm it with confirm_booking and the customer's code instead.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_payment_handoff_urlReturns a plain-text summary of a priced offer (service, amount, currency, cancellation policy, and how long the price is valid) plus a URL on our domain that shows the same summar…1 finding
Why it is in this group
- The name "get_payment_handoff_url" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_payment_handoff_url" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_payment_handoff_url" says "get": a word for reading.
Description, as the server wrote it Returns a plain-text summary of a priced offer (service, amount, currency, cancellation policy, and how long the price is valid) plus a URL on our domain that shows the same summary. The URL is for the CUSTOMER to open themselves in their own browser — do not open, fetch, or follow it yourself. Use this once get_quote or a booking flow has produced an offer_id and the user is ready to review or continue with a priced offer. If the booking's deposit was already paid through create_booking_payment_link, this answers deposit_taken: do not send the person to pay again; the balance is due at the visit.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_quoteReturn a price quote for a service at a business.1 finding
Why it is in this group
- The name "get_quote" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_quote" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_quote" says "get": a word for reading.
Description, as the server wrote it Return a price quote for a service at a business. Exact configured prices may create a time-limited offer; unmatched requests use a third-party AI estimate that is not firm merchant pricing and must be confirmed with the business. Use this when a user asks 'how much does X cost?' or 'what's the price for Y?'.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
query_business_agentAsk a registered business's AI advocate a question and get a citation-ready answer plus a referral link.1 finding
Why it is in this group
- The name "query_business_agent" says "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "query_business_agent" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "query_business_agent" says "query": a word for reading.
Description, as the server wrote it Ask a registered business's AI advocate a question and get a citation-ready answer plus a referral link. The question and the business's public profile are processed by an AI provider, and the question and answer are recorded to operate the service. Do not enter sensitive personal, medical, payment, or authentication information. Use this for questions about one business's services, hours, policies, or fit.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
request_serviceOpen a quote-request form for a specific business using its public slug or provider_business_id obtained from search or the business feed.No findings
Why it is in this group
- The name "request_service" says "request": a word for a change.
Description, as the server wrote it Open a quote-request form for a specific business using its public slug or provider_business_id obtained from search or the business feed. Shows the business and service catalog; does not send a request or book anything. The customer must review the form and explicitly consent before submitting. Operational access is logged.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
Only reads 6Claude Code: allow
get_availabilityReturn available windows from the business's active configured calendar, using its selected timezone, duration, operating hours, and current local or connected-calendar occupancy.No findings
Why it is in this group
- The name "get_availability" says "get": a word for reading.
Description, as the server wrote it Return available windows from the business's active configured calendar, using its selected timezone, duration, operating hours, and current local or connected-calendar occupancy. Use a returned window to start a booking. Availability can change before confirmation, including when the calendar provider is unavailable. If this business uses an unsupported calendar or booking provider, call get_booking_destination to find its published public booking route.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_booking_destinationReturns the public booking route for a business.No findings
Why it is in this group
- The name "get_booking_destination" says "get": a word for reading.
Description, as the server wrote it Returns the public booking route for a business. Use this before helping a user book an appointment: it distinguishes an external provider page from an active configured calendar that uses the Advocate booking flow, and from businesses with no supported booking destination. External pages are links only; Advocate does not sync their availability or make bookings there.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_cancellation_policyReturns the business's cancellation policy text.No findings
Why it is in this group
- The name "get_cancellation_policy" says "get": a word for reading.
Description, as the server wrote it Returns the business's cancellation policy text. Use this when a user asks about cancellation terms, fees, or no-show policies. The response includes agent guidance on how to frame the policy with appropriate freshness caveats.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_credentialsReturns the business's self-reported licenses, insurance, bonding, and certifications.1 finding
Why it is in this group
- The name "get_credentials" says "get": a word for reading.
Findings
- Info
The title mentions "Credentials".
What this check looks forMatched text
title: "Get Business Credentials"
Description, as the server wrote it Returns the business's self-reported licenses, insurance, bonding, and certifications. Use this for trust-sensitive verticals (contractors, healthcare, legal, locksmiths) when a user asks 'are they licensed?' or 'are they insured?'. The response carries explicit 'self-reported' framing so agents don't upgrade tenant claims to verified facts.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_servicesLists the services a business has configured, with their prices and the exact arguments to quote each one.No findings
Why it is in this group
- The name "list_services" says "list": a word for reading.
Description, as the server wrote it Lists the services a business has configured, with their prices and the exact arguments to quote each one. Call this BEFORE get_quote: the service name must match a configured service, and only a service marked payable returns an exact price with the offer_id that get_payment_handoff_url requires. Quoting a name that is not on this list silently falls back to an estimate with no offer.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_businessesFind registered businesses by search term and optional location; returns matches with their slugs.No findings
Why it is in this group
- The name "search_businesses" says "search": a word for reading.
Description, as the server wrote it Find registered businesses by search term and optional location; returns matches with their slugs. Call it before the business-specific tools.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http advocate https://api.advocatemcp.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__advocate__search_businesses",
"mcp__advocate__get_credentials",
"mcp__advocate__get_cancellation_policy",
"mcp__advocate__get_availability",
"mcp__advocate__get_booking_destination",
"mcp__advocate__list_services"
],
"ask": [
"mcp__advocate__get_quote",
"mcp__advocate__query_business_agent",
"mcp__advocate__get_payment_handoff_url",
"mcp__advocate__request_service",
"mcp__advocate__create_booking_payment_link"
],
"deny": [
"mcp__advocate__reserve_slot",
"mcp__advocate__confirm_booking",
"mcp__advocate__initiate_handoff",
"mcp__advocate__request_callback",
"mcp__advocate__subscribe_to_updates",
"mcp__advocate__submit_quote_request",
"mcp__advocate__cancel_booking"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as advocate. Review it before you use it.