Skip to content

Vaanzari Commerce

by vaanzari.com · remote · no sign-in to list tools · v1.0.0 · published by com.vaanzari

Discover Banarasi sarees and manage authorized Vaanzari shopping workflows with hosted checkout.

Deletes · 13Changes · 3
CompareRegistry entry

29 tools: 13 can delete or cancel things, 3 change things and 13 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http commerce https://vaanzari.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnvalidate_coupon

    The server marks "validate_coupon" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "validate_coupon" says "validate": a word for reading.

    What this check looks for
  • Warnget_payment_status

    The server marks "get_payment_status" destructive (destructiveHint: true), and its name says "get", a word for reading.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":true}; The name "get_payment_status" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

29 tools

Deletes or cancels 13Claude Code: deny
  • cancel_orderCancel an eligible customer order and send cancellation notices after signed-in browser approval.No findings

    Why it is in this group

    • The name "cancel_order" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel an eligible customer order and send cancellation notices after signed-in browser approval.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • cancel_payment_attemptCancel an unpaid Cashfree session or check Razorpay/PhonePe/Paytm status after signed-in browser approval, then persist provider state.No findings

    Why it is in this group

    • The name "cancel_payment_attempt" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel an unpaid Cashfree session or check Razorpay/PhonePe/Paytm status after signed-in browser approval, then persist provider state. May restore reservations or finalize an already-paid order; does not capture payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • close_support_ticketClose a customer support ticket and send a closing remark to Vaanzari support staff after signed-in browser approval.No findings

    Why it is in this group

    • The name "close_support_ticket" says "close": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Close a customer support ticket and send a closing remark to Vaanzari support staff after signed-in browser approval.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • create_support_ticketSend a new customer support request to Vaanzari staff after signed-in browser approval.No findings

    Why it is in this group

    • The name "create_support_ticket" says "create": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Send a new customer support request to Vaanzari staff after signed-in browser approval. The submitted message cannot be unsent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • get_payment_statusRefresh a customer payment attempt from Razorpay, Cashfree, PhonePe, or Paytm and persist its server-verified state.1 finding

    Why it is in this group

    • The name "get_payment_status" says "get": a word for reading.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Warn

      The server marks "get_payment_status" destructive (destructiveHint: true), and its name says "get", a word for reading.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":true}; The name "get_payment_status" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Refresh a customer payment attempt from Razorpay, Cashfree, PhonePe, or Paytm and persist its server-verified state. May finalize an already-paid order and send confirmation notices; does not initiate or capture payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • remove_from_cartRemove one customer cart item.No findings

    Why it is in this group

    • The name "remove_from_cart" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove one customer cart item.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • remove_pickRemove one saree from customer picks.No findings

    Why it is in this group

    • The name "remove_pick" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove one saree from customer picks.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • reply_support_ticketSend a reply to Vaanzari support staff after signed-in browser approval, reopening a closed ticket if needed.No findings

    Why it is in this group

    • The name "reply_support_ticket" says "reply": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Send a reply to Vaanzari support staff after signed-in browser approval, reopening a closed ticket if needed. The submitted message cannot be unsent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • resume_paymentSynchronize provider state and return an existing unpaid hosted checkout after signed-in browser approval.No findings

    Why it is in this group

    • The name "resume_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Synchronize provider state and return an existing unpaid hosted checkout after signed-in browser approval. May finalize an already-paid order and send confirmation notices; does not capture payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • retry_paymentCreate a replacement hosted Razorpay, Cashfree, PhonePe, or Paytm checkout for a failed or terminated attempt after signed-in browser approval, reserving stock/rewards.No findings

    Why it is in this group

    • The name "retry_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Create a replacement hosted Razorpay, Cashfree, PhonePe, or Paytm checkout for a failed or terminated attempt after signed-in browser approval, reserving stock/rewards. Does not capture payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • set_cart_quantitySet quantity for one customer cart item.No findings

    Why it is in this group

    • The name "set_cart_quantity" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Set quantity for one customer cart item.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • start_checkoutCreate a hosted Razorpay, Cashfree, PhonePe, or Paytm checkout after signed-in browser approval, reserving stock/rewards and clearing the active cart.No findings

    Why it is in this group

    • The name "start_checkout" says "start": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Create a hosted Razorpay, Cashfree, PhonePe, or Paytm checkout after signed-in browser approval, reserving stock/rewards and clearing the active cart. First call get_checkout_summary with the same addresses, discounts and points; submit its approved total/currency as expected_total/expected_currency. International delivery requires Razorpay in the delivery currency. Paytm supports domestic INR only. Synchronizes any active payment first and may finalize an already-paid order. No payment is captured by this tool.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • update_profileUpdate customer name, phone, and delivery address after signed-in browser approval.No findings

    Why it is in this group

    • The name "update_profile" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update customer name, phone, and delivery address after signed-in browser approval.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 3Claude Code: ask
  • add_to_cartAdd a visible saree to customer cart.No findings

    Why it is in this group

    • The name "add_to_cart" says "add": a word for a change.
    Description, as the server wrote it
    Add a visible saree to customer cart.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • save_pickSave one visible saree to customer picks.No findings

    Why it is in this group

    • The name "save_pick" says "save": a word for a change.
    Description, as the server wrote it
    Save one visible saree to customer picks.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • validate_couponValidate a coupon against the authorized customer cart.1 finding

    Why it is in this group

    • The name "validate_coupon" says "validate": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "validate_coupon" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "validate_coupon" says "validate": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Validate a coupon against the authorized customer cart.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 13Claude Code: allow
  • get_accountRead the authorized customer account profile.No findings

    Why it is in this group

    • The name "get_account" says "get": a word for reading.
    Description, as the server wrote it
    Read the authorized customer account profile.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_artisanGet one public Vaanzari artisan profile.No findings

    Why it is in this group

    • The name "get_artisan" says "get": a word for reading.
    Description, as the server wrote it
    Get one public Vaanzari artisan profile.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cartRead customer cart and current totals.No findings

    Why it is in this group

    • The name "get_cart" says "get": a word for reading.
    Description, as the server wrote it
    Read customer cart and current totals.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_checkout_summaryRevalidate cart, discounts, points, addresses, and checkout total without placing an order.No findings

    Why it is in this group

    • The name "get_checkout_summary" says "get": a word for reading.
    Description, as the server wrote it
    Revalidate cart, discounts, points, addresses, and checkout total without placing an order.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_orderGet one authorized customer order.No findings

    Why it is in this group

    • The name "get_order" says "get": a word for reading.
    Description, as the server wrote it
    Get one authorized customer order.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_picksRead saved Vaanzari picks.No findings

    Why it is in this group

    • The name "get_picks" says "get": a word for reading.
    Description, as the server wrote it
    Read saved Vaanzari picks.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_rewardsRead customer reward balance and recent point transactions.No findings

    Why it is in this group

    • The name "get_rewards" says "get": a word for reading.
    Description, as the server wrote it
    Read customer reward balance and recent point transactions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_sareeGet one visible Vaanzari saree by public catalogue ID or canonical locator.No findings

    Why it is in this group

    • The name "get_saree" says "get": a word for reading.
    Description, as the server wrote it
    Get one visible Vaanzari saree by public catalogue ID or canonical locator. Includes its canonical storefront url; include that url as a clickable product link when presenting the product.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_support_ticketGet one authorized customer support ticket and its messages.No findings

    Why it is in this group

    • The name "get_support_ticket" says "get": a word for reading.
    Description, as the server wrote it
    Get one authorized customer support ticket and its messages.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_artisansList public artisan profiles connected to the visible Vaanzari catalogue.No findings

    Why it is in this group

    • The name "list_artisans" says "list": a word for reading.
    Description, as the server wrote it
    List public artisan profiles connected to the visible Vaanzari catalogue.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_ordersList authorized customer orders.No findings

    Why it is in this group

    • The name "list_orders" says "list": a word for reading.
    Description, as the server wrote it
    List authorized customer orders.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_support_ticketsList authorized customer support tickets.No findings

    Why it is in this group

    • The name "list_support_tickets" says "list": a word for reading.
    Description, as the server wrote it
    List authorized customer support tickets.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_sareesSearch visible Vaanzari sarees using verified catalogue fields.No findings

    Why it is in this group

    • The name "search_sarees" says "search": a word for reading.
    Description, as the server wrote it
    Search visible Vaanzari sarees using verified catalogue fields. Each result includes its canonical storefront url; include that url as a clickable product link when presenting products. Missing attributes remain unset.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http commerce https://vaanzari.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__commerce__search_sarees",
      "mcp__commerce__get_saree",
      "mcp__commerce__list_artisans",
      "mcp__commerce__get_artisan",
      "mcp__commerce__get_account",
      "mcp__commerce__get_cart",
      "mcp__commerce__get_picks",
      "mcp__commerce__get_rewards",
      "mcp__commerce__get_checkout_summary",
      "mcp__commerce__list_orders",
      "mcp__commerce__get_order",
      "mcp__commerce__list_support_tickets",
      "mcp__commerce__get_support_ticket"
    ],
    "ask": [
      "mcp__commerce__add_to_cart",
      "mcp__commerce__save_pick",
      "mcp__commerce__validate_coupon"
    ],
    "deny": [
      "mcp__commerce__update_profile",
      "mcp__commerce__set_cart_quantity",
      "mcp__commerce__remove_from_cart",
      "mcp__commerce__remove_pick",
      "mcp__commerce__start_checkout",
      "mcp__commerce__cancel_order",
      "mcp__commerce__get_payment_status",
      "mcp__commerce__resume_payment",
      "mcp__commerce__retry_payment",
      "mcp__commerce__cancel_payment_attempt",
      "mcp__commerce__create_support_ticket",
      "mcp__commerce__reply_support_ticket",
      "mcp__commerce__close_support_ticket"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as commerce. Review it before you use it.