eSIMpass
by esimpass.com · remote · no sign-in to list tools · v1.2.1 · published by com.esimpass
Travel eSIMs for 200+ countries: live prices, phone check, checkout link, one-tap install.
7 tools: 2 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http esimpass https://www.esimpass.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "create_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_checkout_link" says "create": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Changes things 2Claude Code: ask
check_deviceWhether a phone model supports eSIM, from the models eSIMpass documents (Apple, Samsung, Google).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Whether a phone model supports eSIM, from the models eSIMpass documents (Apple, Samsung, Google). The phone must also be carrier-unlocked; a model not in the list is not necessarily incompatible.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_checkout_linkA checkout URL on esimpass.com with one plan already selected.1 finding
Why it is in this group
- The name "create_checkout_link" says "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "create_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "create_checkout_link" says "create": a word for a change.
Description, as the server wrote it A checkout URL on esimpass.com with one plan already selected. It does not pay or place an order: the traveller opens it, enters their email and pays (card, Apple Pay, Google Pay, PayPal or crypto). Minutes later the confirmation page has an Install button (one tap on iPhone and Android), a QR code and a private eSIM link. Takes a plan name as get_plans returns it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 5Claude Code: allow
fetchOne destination as a document: plans, live prices and a checkout link per plan.No findings
Why it is in this group
- The name "fetch" says "fetch": a word for reading.
Description, as the server wrote it One destination as a document: plans, live prices and a checkout link per plan. The id comes from search.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_esim_installAfter the traveller has paid: one-tap install links for their eSIM, for iPhone (iOS 17.4+) and Android (10+), plus the manual-entry codes.No findings
Why it is in this group
- The name "get_esim_install" says "get": a word for reading.
Description, as the server wrote it After the traveller has paid: one-tap install links for their eSIM, for iPhone (iOS 17.4+) and Android (10+), plus the manual-entry codes. Takes the private eSIM link from the traveller's order confirmation page (https://www.esimpass.com/…/my-esim/…); any other value is refused. Each install link installs the eSIM when opened on the phone that will use it. The result is that traveller's private eSIM details.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_plansThe plans on sale for one destination right now, with live prices, data, validity and the product page URL.No findings
Why it is in this group
- The name "get_plans" says "get": a word for reading.
Description, as the server wrote it The plans on sale for one destination right now, with live prices, data, validity and the product page URL. For a regional plan it also lists every country covered; a country missing from that list is not covered. Prices and plans change, so these are the current ones.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
searchSearch eSIMpass destinations by place name, in the shape ChatGPT connectors use.No findings
Why it is in this group
- The name "search" says "search": a word for reading.
Description, as the server wrote it Search eSIMpass destinations by place name, in the shape ChatGPT connectors use. Returns ids that fetch takes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_destinationsFind the eSIMpass travel eSIM for a place: a country ("Japan"), a region ("Europe", "Asia", "Global") or a city ("Tokyo", which is covered by its country's plans).No findings
Why it is in this group
- The name "search_destinations" says "search": a word for reading.
Description, as the server wrote it Find the eSIMpass travel eSIM for a place: a country ("Japan"), a region ("Europe", "Asia", "Global") or a city ("Tokyo", which is covered by its country's plans). Returns matching destinations with the slug that get_plans and create_checkout_link take.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.2.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http esimpass https://www.esimpass.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__esimpass__search_destinations",
"mcp__esimpass__get_plans",
"mcp__esimpass__get_esim_install",
"mcp__esimpass__search",
"mcp__esimpass__fetch"
],
"ask": [
"mcp__esimpass__check_device",
"mcp__esimpass__create_checkout_link"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as esimpass. Review it before you use it.