Skip to content

Synchronity

by themewireco · remote · local (npm) · no sign-in to list tools · v0.5.21 · published by GitHub user themewireco

Shop connected e-commerce stores: search, compare, cart, and checkout with buyer approval.

Deletes · 5Changes · 10

26 tools: 5 can delete or cancel things, 10 change things and 11 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http synchronity https://api.synchronity.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The description contains "all other tools", wording about other tools or servers.

    Matched text

    description: "...d get its site_id, which is required by all other tools."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

26 tools

Deletes or cancels 5Claude Code: deny
  • execute_checkoutExecute checkout for a cart to create an order.No findings

    Why it is in this group

    • The name "execute_checkout" says "execute": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute checkout for a cart to create an order. Requires a buyer delegation token (from user auth) and a shipping address. The order is created UNPAID (status "pending"). IMPORTANT — do NOT stop here or just hand the user the payment_url. Immediately continue the in-chat payment flow: call get_payment_methods for the returned order_id, present the available channels to the buyer, and ask which they want to use; then drive initiate_payment → (submit_payment_otp if needed) → poll get_payment_status until the order is paid. The payment_url in the response is only a manual fallback if the buyer declines in-chat payment. Always offer to collect payment in the chat first.

    Annotations the server declares

    • title: Place order (checkout)
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • initiate_paymentSTEP 2 of the in-chat payment flow.No findings

    Why it is in this group

    • The name "initiate_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    STEP 2 of the in-chat payment flow. Starts a payment session for an order and returns a PaymentSession with an `instruction` the agent renders in chat. REQUIRES a buyer_delegation_token — obtain it exactly like execute_checkout: call request_delegation, have the user approve in chat, then check_delegation to get the token (spending money always needs human approval). For channel "mobile_money" you MUST collect the buyer's `phone` (Ghana: 055… or +233…) and `provider` — use codes mtn, vod (Vodafone/Telecel), or tgo (AirtelTigo); aliases telecel→vod, tigo→tgo are accepted. ALWAYS quote the **Show this instruction to the buyer** line from the response verbatim (Paystack display_text). For channel "card", no phone/provider is needed; the response instruction contains an `authorization_url` you send the user to. After calling: if instruction.action == "submit_otp", ask the user for the OTP and call submit_payment_otp. If instruction.action == "approve_on_phone", tell the user to approve the prompt on their phone, then poll get_payment_status. If instruction.action == "redirect" (card), send the user the authorization_url, then poll get_payment_status.

    Annotations the server declares

    • title: Start payment
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • remove_from_cartRemove a line item from the cart.No findings

    Why it is in this group

    • The name "remove_from_cart" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a line item from the cart. Requires the item_id from the cart contents.

    Annotations the server declares

    • title: Remove item from cart
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • set_cart_quantitySet a cart line's quantity (the server cart is the checkout source of truth, so this updates it live).No findings

    Why it is in this group

    • The name "set_cart_quantity" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Set a cart line's quantity (the server cart is the checkout source of truth, so this updates it live). Requires the item_id from the cart contents and the new absolute quantity. A quantity of 0 removes the line. Returns the updated cart card.

    Annotations the server declares

    • title: Set item quantity
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • submit_payment_otpSTEP 3 (mobile_money only, when initiate_payment returned instruction.action == "submit_otp").No findings

    Why it is in this group

    • The name "submit_payment_otp" says "submit": a word for a change.
    • The name "submit_payment_otp" also says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    STEP 3 (mobile_money only, when initiate_payment returned instruction.action == "submit_otp"). Submits the one-time password the buyer received to authorise the mobile-money charge. REQUIRES the same buyer_delegation_token used for initiate_payment. After submitting, poll get_payment_status until payment_status is "paid"/"processing" or "failed".

    Annotations the server declares

    • title: Submit payment code
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
Changes things 10Claude Code: ask
  • add_to_cartAdd a product variant (or base product) to an existing cart.No findings

    Why it is in this group

    • The name "add_to_cart" says "add": a word for a change.
    Description, as the server wrote it
    Add a product variant (or base product) to an existing cart. Reuse the active cart_id from the chat history if one already exists. Only call create_cart first if no cart exists yet.

    Annotations the server declares

    • title: Add item to cart
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • apply_couponApply a discount or promotional code to the cart.No findings

    Why it is in this group

    • The name "apply_coupon" says "apply": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Apply a discount or promotional code to the cart. Returns the updated cart with discount applied.

    Annotations the server declares

    • title: Apply coupon
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • check_delegationPoll for human approval of a delegation request.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Poll for human approval of a delegation request. When status is "approved", returns the delegation_token to use as buyer_delegation_token in execute_checkout.

    Annotations the server declares

    • title: Check approval status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • create_cartCreate a new shopping cart for a specific site.No findings

    Why it is in this group

    • The name "create_cart" says "create": a word for a change.
    Description, as the server wrote it
    Create a new shopping cart for a specific site. Returns a cart_id. IMPORTANT: Reuse the active cart_id across multiple products in the same session. Do NOT call create_cart again if you already have a cart_id for this site in the chat history.

    Annotations the server declares

    • title: Create cart
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • quick_checkoutAssemble checkout-ready cart(s) in ONE call for a multi-product (and optionally multi-store) request.No findings

    Why it is in this group

    • The name "quick_checkout" says "checkout": a word for a change.
    Description, as the server wrote it
    Assemble checkout-ready cart(s) in ONE call for a multi-product (and optionally multi-store) request. Creates a cart per store, adds all items, and sets the shipping address — then returns the cart(s) with delivery options to choose. Use this when the buyer lists several products at once (optionally across stores) and/or gives their address up front, instead of calling create_cart/add_to_cart/set_shipping_address separately. Does NOT select delivery, check out, or pay — the buyer picks delivery (select_shipping_option) and approves checkout/payment per store afterward. Out-of-stock items are reported; pass customer.email to auto-arm a back-in-stock alert for them.

    Annotations the server declares

    • title: Quick checkout (build carts)
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • request_back_in_stockSubscribe the buyer to a back-in-stock alert for an out-of-stock product.No findings

    Why it is in this group

    • The name "request_back_in_stock" says "request": a word for a change.
    Description, as the server wrote it
    Subscribe the buyer to a back-in-stock alert for an out-of-stock product. Use when the buyer asks to be notified/told/pinged when an item restocks ("notify me when X is back", "let me know when it's in stock"). Collect the buyer's email so the alert can reach them (without it only the demand is recorded for the merchant). The buyer is emailed when the product is next seen in stock. Returns whether an email alert was armed.

    Annotations the server declares

    • title: Notify me when back in stock
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • request_delegationStart the human delegation (approval) flow needed for checkout/payment.No findings

    Why it is in this group

    • The name "request_delegation" says "request": a word for a change.
    Description, as the server wrote it
    Start the human delegation (approval) flow needed for checkout/payment. PREFERRED: pass the buyer's `email` — the gateway emails them a 6-digit code and returns a device_code; ask the user for the code and call submit_delegation_otp. This keeps approval fully in-chat (no link) and you never see the code, so you cannot approve on their behalf. If you omit `email`, it falls back to a browser approval link (device flow) which the user must open; then poll check_delegation. You can never approve a delegation yourself.

    Annotations the server declares

    • title: Request buyer approval
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • select_shipping_optionSelect one of the shipping options returned by set_shipping_address.No findings

    Why it is in this group

    • The name "select_shipping_option" says "select": a word for a change.
    Description, as the server wrote it
    Select one of the shipping options returned by set_shipping_address. Binds the rate to the cart so the total includes shipping; call before execute_checkout so the hosted checkout opens pre-filled.

    Annotations the server declares

    • title: Select shipping option
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • set_shipping_addressSet the cart shipping destination (collected from the buyer) and return available shipping options with costs.No findings

    Why it is in this group

    • The name "set_shipping_address" says "set": a word for a change.
    Description, as the server wrote it
    Set the cart shipping destination (collected from the buyer) and return available shipping options with costs. Call after items are in the cart and before select_shipping_option. country_code is required; include postal_code/state for accurate rates.

    Annotations the server declares

    • title: Set shipping address
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • submit_delegation_otpSubmit the 6-digit code the buyer received by email (from request_delegation with an email) to approve the delegation in-chat.No findings

    Why it is in this group

    • The name "submit_delegation_otp" says "submit": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Submit the 6-digit code the buyer received by email (from request_delegation with an email) to approve the delegation in-chat. On success returns a delegation_token to use as buyer_delegation_token for checkout/payment. You cannot obtain this code yourself — the user must read it from their email and give it to you.

    Annotations the server declares

    • title: Submit approval code
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Only reads 11Claude Code: allow
  • compare_productsCompare products across multiple registered e-commerce sites simultaneously.No findings

    Why it is in this group

    • The name "compare_products" says "compare": a word for reading.
    Description, as the server wrote it
    Compare products across multiple registered e-commerce sites simultaneously. Uses fail-open strategy: partial results from successful sites are returned even if some sites time out.

    Annotations the server declares

    • title: Compare products across stores
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_active_cartRetrieve the buyer's in-progress cart for a site (resumes a conversation).No findings

    Why it is in this group

    • The name "get_active_cart" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the buyer's in-progress cart for a site (resumes a conversation). Call this before assuming a new cart when a shopping conversation continues or after a cart error. Returns the cart with its items rebuilt if the connector cart expired, or null if no cart exists.

    Annotations the server declares

    • title: Resume active cart
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_cartRetrieve current cart contents, including items, pricing, discounts, and totals.No findings

    Why it is in this group

    • The name "get_cart" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve current cart contents, including items, pricing, discounts, and totals. The card already shows the line items and totals to the user, so keep your text reply to one brief sentence — do not re-list the cart contents.

    Annotations the server declares

    • title: View cart
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_orderRetrieve details for an order by its ID, including items, status, shipping, and tracking information.No findings

    Why it is in this group

    • The name "get_order" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve details for an order by its ID, including items, status, shipping, and tracking information. Orders are buyer-private — pass `buyer_delegation_token` (the delegation token from this buyer's checkout approval) so the gateway can confirm the buyer owns this order. If checking if an order is paid: a status of 'pending' or 'pending_payment' means the order has NOT been paid. Do NOT assume that the vendor storefront has synchronization delays or database lag; treat 'pending' as unpaid. When an order is unpaid, offer to collect payment in the chat by starting the in-chat payment flow (get_payment_methods → initiate_payment → get_payment_status) rather than only pointing the user at the payment_url. Do not mark the purchase task as successful until the status updates to 'processing' or 'completed'.

    Annotations the server declares

    • title: Get order details
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_payment_methodsSTEP 1 of the in-chat payment flow.No findings

    Why it is in this group

    • The name "get_payment_methods" says "get": a word for reading.
    Description, as the server wrote it
    STEP 1 of the in-chat payment flow. Returns the payment channels available for an order (e.g. "mobile_money", "card") plus a `gateways` array of the enabled payment gateways (each with id, label, and its channels). When more than one gateway is listed, ask the buyer which they want to use and pass it as `gateway` to initiate_payment. Call this first, after an order exists. Then call initiate_payment with the chosen channel (and gateway if more than one). site_id falls back to DEFAULT_SITE_ID if omitted.

    Annotations the server declares

    • title: Get payment methods
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_payment_statusFINAL STEP of the in-chat payment flow.No findings

    Why it is in this group

    • The name "get_payment_status" says "get": a word for reading.
    Description, as the server wrote it
    FINAL STEP of the in-chat payment flow. Returns the current PaymentSession for an order. Poll this (every ~5 seconds) after initiate_payment/submit_payment_otp until payment_status becomes "paid" or "processing" (success — the order is confirmed) or "failed" (tell the user; they can retry by initiating a new payment). Do NOT treat the purchase as complete until this returns "paid" or "processing". No delegation needed (read-only).

    Annotations the server declares

    • title: Check payment status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_productRetrieve detailed information about a specific product including variants, pricing, images, and availability.No findings

    Why it is in this group

    • The name "get_product" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve detailed information about a specific product including variants, pricing, images, and availability. May also return `addons` — customer-selectable options defined by the store (e.g. engraving, gift wrap, size add-ons). When a product has addons, present them to the buyer and collect every addon with `required: true` before calling add_to_cart; for any option carrying a `price_modifier`, show that surcharge so the buyer knows the added cost. The card already shows the product details to the user, so keep your text reply brief and do not re-describe what the card displays.

    Annotations the server declares

    • title: Get product details
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_product_reviews🔍 **RECOMMENDED STEP** — Fetch product reviews and authenticity consensus before making purchase decisions.No findings

    Why it is in this group

    • The name "get_product_reviews" says "get": a word for reading.
    Description, as the server wrote it
    🔍 **RECOMMENDED STEP** — Fetch product reviews and authenticity consensus before making purchase decisions. Returns: average rating, trust score (0.0-1.0), review sentiment analysis, authenticity flags (fake reviews, seller issues, negative trends), and recent reviews with verified purchase status. Always call this for each product before adding to cart to verify quality and detect scams.

    Annotations the server declares

    • title: Get product reviews
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_ordersList recent orders for a site, optionally filtered by status (pending, processing, completed, cancelled, refunded).No findings

    Why it is in this group

    • The name "list_orders" says "list": a word for reading.
    Description, as the server wrote it
    List recent orders for a site, optionally filtered by status (pending, processing, completed, cancelled, refunded). Orders are buyer-private — pass `buyer_delegation_token` (from this buyer's checkout approval); only that buyer's orders are returned.

    Annotations the server declares

    • title: List orders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_sitesList all registered e-commerce sites.1 finding

    Why it is in this group

    • The name "list_sites" says "list": a word for reading.

    Findings

    • Warn

      The description contains "all other tools", wording about other tools or servers.

      Matched text

      description: "...d get its site_id, which is required by all other tools."

      What this check looks for
    Description, as the server wrote it
    List all registered e-commerce sites. Use this first to find a site by name (e.g. "Pronto Partners") and get its site_id, which is required by all other tools.

    Annotations the server declares

    • title: List connected stores
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • search_productsFind products on a registered store.No findings

    Why it is in this group

    • The name "search_products" says "search": a word for reading.
    Description, as the server wrote it
    Find products on a registered store. To BROWSE a store's catalog (open-ended requests like "what do they sell", "show me what's available"), call with NO query — this returns the store's products. To SEARCH, pass `query` (a product name/keyword). Returns paginated products as an interactive card. ALWAYS translate a buyer's budget or price constraint into the price params on THIS call instead of filtering in your reply: "under/below/within X" or "X budget" → `max_price: X`; "over/above/at least X" → `min_price: X`; "between X and Y" → both. Likewise pass `in_stock: true` for "available"/"in stock" and `category` when they name one. The card renders exactly what this call returns, so the filter MUST be applied here — never fetch the full catalog and then narrow it in text. Call once with your best intent (browse OR a single query); if a real search is genuinely empty, ask the user to clarify rather than re-firing reworded queries. The card shows products, prices, IDs, and Add-to-cart controls — keep your text reply to one brief sentence and do not re-list what the card shows.

    Annotations the server declares

    • title: Search products
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.21. Values in angle brackets are yours to fill in.

claude mcp add --transport http synchronity https://api.synchronity.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__synchronity__list_sites",
      "mcp__synchronity__search_products",
      "mcp__synchronity__get_product",
      "mcp__synchronity__get_product_reviews",
      "mcp__synchronity__compare_products",
      "mcp__synchronity__get_cart",
      "mcp__synchronity__get_active_cart",
      "mcp__synchronity__get_order",
      "mcp__synchronity__list_orders",
      "mcp__synchronity__get_payment_methods",
      "mcp__synchronity__get_payment_status"
    ],
    "ask": [
      "mcp__synchronity__request_back_in_stock",
      "mcp__synchronity__create_cart",
      "mcp__synchronity__add_to_cart",
      "mcp__synchronity__quick_checkout",
      "mcp__synchronity__apply_coupon",
      "mcp__synchronity__set_shipping_address",
      "mcp__synchronity__select_shipping_option",
      "mcp__synchronity__request_delegation",
      "mcp__synchronity__submit_delegation_otp",
      "mcp__synchronity__check_delegation"
    ],
    "deny": [
      "mcp__synchronity__remove_from_cart",
      "mcp__synchronity__set_cart_quantity",
      "mcp__synchronity__execute_checkout",
      "mcp__synchronity__initiate_payment",
      "mcp__synchronity__submit_payment_otp"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as synchronity. Review it before you use it.