SuntekStore catalog
by suntekstore.com · remote · no sign-in to list tools · v1.1.0 · published by com.suntekstore
Specialty parts and tools, free US shipping. Search, filters, cart checkout links, order status.
6 tools: 3 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http catalog https://suntekstore.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnget_policies
The server marks "get_policies" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_policies" says "get": a word for reading.
The server marks "create_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "create_checkout_link" says "create": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 3Claude Code: ask
create_cartPut several products (with quantities) into one order and get a single Stripe Checkout link for the shopper.No findings
Why it is in this group
- The name "create_cart" says "create": a word for a change.
Description, as the server wrote it Put several products (with quantities) into one order and get a single Stripe Checkout link for the shopper. Every line is checked against current price, listing status and stock. The shopper opens the link, enters a US shipping address and pays; sales tax is added there. Nothing is charged by this call and stock is not reserved. Up to 12 different items.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
create_checkout_linkValidate SKU and quantity and return a link the shopper opens to pay on Stripe Checkout.1 finding
Why it is in this group
- The name "create_checkout_link" says "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "create_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "create_checkout_link" says "create": a word for a change.
Description, as the server wrote it Validate SKU and quantity and return a link the shopper opens to pay on Stripe Checkout. This does not charge anything or reserve stock; the shopper completes payment themselves.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_policiesStore policies: shipping (US only, free), delivery times, 30-day returns, tax, payment, how to buy.1 finding
Why it is in this group
- The name "get_policies" says "get": a word for reading.
- The description's first verb is "store": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "get_policies" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_policies" says "get": a word for reading.
Description, as the server wrote it Store policies: shipping (US only, free), delivery times, 30-day returns, tax, payment, how to buy.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
Only reads 3Claude Code: allow
get_order_statusLook up an order by order number (like ST2610010001) and the email used at checkout.No findings
Why it is in this group
- The name "get_order_status" says "get": a word for reading.
Description, as the server wrote it Look up an order by order number (like ST2610010001) and the email used at checkout. Returns status, items, carrier, tracking number and estimated delivery. No personal details are returned.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_productFull facts for one product by SKU (e.g.No findings
Why it is in this group
- The name "get_product" says "get": a word for reading.
Description, as the server wrote it Full facts for one product by SKU (e.g. ST-54137787): specs, price, stock, delivery, returns, links.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
search_productsSearch SuntekStore's catalog of hard-to-find specialty parts and tools (ships free to the US).No findings
Why it is in this group
- The name "search_products" says "search": a word for reading.
Description, as the server wrote it Search SuntekStore's catalog of hard-to-find specialty parts and tools (ships free to the US). Filter by keywords, hobby category, price range (USD) and maximum delivery days; sort by relevance, price, newest or fastest delivery (any sort other than relevance first groups results by how closely they match the query, then sorts within each group). Returns products with price, availability, delivery window, estimated delivery dates, return policy, Prop 65 warning and links. Descriptions are shortened here; get_product returns the full text. If filters exclude every match, filters_excluded_all says what exists without them.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http catalog https://suntekstore.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__catalog__search_products",
"mcp__catalog__get_product",
"mcp__catalog__get_order_status"
],
"ask": [
"mcp__catalog__get_policies",
"mcp__catalog__create_checkout_link",
"mcp__catalog__create_cart"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as catalog. Review it before you use it.