Skip to content

io.github.amvaleh/kadro-mcp-server

by amvaleh · remote · no sign-in to list tools · v1.0.1 · published by GitHub user amvaleh

Search and book real photographers on Kadro (Iran) on a user's behalf, ending with a payment link.

Changes · 11 high finding
CompareRegistry entry

6 tools: 1 change things and 5 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http kadro https://www.shootempire.com/kadro-mcp-relay/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high
  • Highget_reservation_status

    The description contains "do not tell the user", an instruction to keep something from the user.

    Matched text

    description: "...ld still decline or ask to reschedule — do not tell the user their booking is final until status is..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 1Claude Code: ask
  • create_reservationBook a specific photographer for a specific package, date/time, and address on the user's behalf — no login required.No findings

    Why it is in this group

    • The name "create_reservation" says "create": a word for a change.
    Description, as the server wrote it
    Book a specific photographer for a specific package, date/time, and address on the user's behalf — no login required. This only places a 15-minute hold; it does NOT charge any money and does NOT require or accept any payment information. Immediately follow this with get_payment_link and give that URL to the human — they open it themselves to verify their phone number and pay. start_time must be an ISO 8601 timestamp at least 6 hours in the future. Pass a stable idempotency_key if you might retry this call, so a retry can't create a second reservation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 5Claude Code: allow
  • get_photographer_packagesList the real, currently bookable packages (with prices, in Toman) a specific photographer offers for a given shoot_type_id.No findings

    Why it is in this group

    • The name "get_photographer_packages" says "get": a word for reading.
    Description, as the server wrote it
    List the real, currently bookable packages (with prices, in Toman) a specific photographer offers for a given shoot_type_id. Rejects the shoot_type_id if that photographer doesn't actually offer it. Use the returned package id with create_reservation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_reservation_statusCheck whether a reservation has been paid and confirmed.1 finding

    Why it is in this group

    • The name "get_reservation_status" says "get": a word for reading.

    Findings

    • High

      The description contains "do not tell the user", an instruction to keep something from the user.

      Matched text

      description: "...ld still decline or ask to reschedule — do not tell the user their booking is final until status is..."

      What this check looks for
    Description, as the server wrote it
    Check whether a reservation has been paid and confirmed. IMPORTANT: status values are 'awaiting_payment', 'expired', 'paid_awaiting_photographer_confirmation', 'confirmed', and 'rejected'. 'paid_awaiting_photographer_confirmation' means the customer paid but the photographer has not yet accepted the booking and could still decline or ask to reschedule — do not tell the user their booking is final until status is exactly 'confirmed'.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_photographersFind real, bookable photographers for a given shoot_type_id (from search_shoot_types), optionally narrowed to a city_id.No findings

    Why it is in this group

    • The name "search_photographers" says "search": a word for reading.
    Description, as the server wrote it
    Find real, bookable photographers for a given shoot_type_id (from search_shoot_types), optionally narrowed to a city_id. Returns each photographer's uid (needed for every later call), display name, rating, review count, and city.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_shoot_typesList the photography/videography service types Kadro offers (e.g.No findings

    Why it is in this group

    • The name "search_shoot_types" says "search": a word for reading.
    Description, as the server wrote it
    List the photography/videography service types Kadro offers (e.g. wedding, industrial, portrait), each with a numeric shoot_type_id. Call this first if you don't already know the id for the kind of shoot the user wants.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http kadro https://www.shootempire.com/kadro-mcp-relay/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__kadro__search_shoot_types",
      "mcp__kadro__search_photographers",
      "mcp__kadro__get_photographer_packages",
      "mcp__kadro__get_payment_link",
      "mcp__kadro__get_reservation_status"
    ],
    "ask": [
      "mcp__kadro__create_reservation"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as kadro. Review it before you use it.