Synchronity
by themewireco · remote · local (npm) · no sign-in to list tools · v0.5.21 · published by GitHub user themewireco
Shop connected e-commerce stores: search, compare, cart, and checkout with buyer approval.
26 tools: 5 can delete or cancel things, 10 change things and 11 only read.
Scanned Oct 21, 2026
- Deletes or cancels5Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things10Claude Code: ask: see these tools
- Only reads11Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http synchronity https://api.synchronity.app/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnlist_sites
The description contains "all other tools", wording about other tools or servers.
What this check looks forMatched text
description: "...d get its site_id, which is required by all other tools."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
26 tools
Deletes or cancels 5Claude Code: deny
execute_checkoutExecute checkout for a cart to create an order.No findings
Why it is in this group
- The name "execute_checkout" says "execute": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Execute checkout for a cart to create an order. Requires a buyer delegation token (from user auth) and a shipping address. The order is created UNPAID (status "pending"). IMPORTANT — do NOT stop here or just hand the user the payment_url. Immediately continue the in-chat payment flow: call get_payment_methods for the returned order_id, present the available channels to the buyer, and ask which they want to use; then drive initiate_payment → (submit_payment_otp if needed) → poll get_payment_status until the order is paid. The payment_url in the response is only a manual fallback if the buyer declines in-chat payment. Always offer to collect payment in the chat first.
Annotations the server declares
- title: Place order (checkout)
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
initiate_paymentSTEP 2 of the in-chat payment flow.No findings
Why it is in this group
- The name "initiate_payment" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it STEP 2 of the in-chat payment flow. Starts a payment session for an order and returns a PaymentSession with an `instruction` the agent renders in chat. REQUIRES a buyer_delegation_token — obtain it exactly like execute_checkout: call request_delegation, have the user approve in chat, then check_delegation to get the token (spending money always needs human approval). For channel "mobile_money" you MUST collect the buyer's `phone` (Ghana: 055… or +233…) and `provider` — use codes mtn, vod (Vodafone/Telecel), or tgo (AirtelTigo); aliases telecel→vod, tigo→tgo are accepted. ALWAYS quote the **Show this instruction to the buyer** line from the response verbatim (Paystack display_text). For channel "card", no phone/provider is needed; the response instruction contains an `authorization_url` you send the user to. After calling: if instruction.action == "submit_otp", ask the user for the OTP and call submit_payment_otp. If instruction.action == "approve_on_phone", tell the user to approve the prompt on their phone, then poll get_payment_status. If instruction.action == "redirect" (card), send the user the authorization_url, then poll get_payment_status.
Annotations the server declares
- title: Start payment
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
remove_from_cartRemove a line item from the cart.No findings
Why it is in this group
- The name "remove_from_cart" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a line item from the cart. Requires the item_id from the cart contents.
Annotations the server declares
- title: Remove item from cart
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
set_cart_quantitySet a cart line's quantity (the server cart is the checkout source of truth, so this updates it live).No findings
Why it is in this group
- The name "set_cart_quantity" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Set a cart line's quantity (the server cart is the checkout source of truth, so this updates it live). Requires the item_id from the cart contents and the new absolute quantity. A quantity of 0 removes the line. Returns the updated cart card.
Annotations the server declares
- title: Set item quantity
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
submit_payment_otpSTEP 3 (mobile_money only, when initiate_payment returned instruction.action == "submit_otp").No findings
Why it is in this group
- The name "submit_payment_otp" says "submit": a word for a change.
- The name "submit_payment_otp" also says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it STEP 3 (mobile_money only, when initiate_payment returned instruction.action == "submit_otp"). Submits the one-time password the buyer received to authorise the mobile-money charge. REQUIRES the same buyer_delegation_token used for initiate_payment. After submitting, poll get_payment_status until payment_status is "paid"/"processing" or "failed".
Annotations the server declares
- title: Submit payment code
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
Changes things 10Claude Code: ask
add_to_cartAdd a product variant (or base product) to an existing cart.No findings
Why it is in this group
- The name "add_to_cart" says "add": a word for a change.
Description, as the server wrote it Add a product variant (or base product) to an existing cart. Reuse the active cart_id from the chat history if one already exists. Only call create_cart first if no cart exists yet.
Annotations the server declares
- title: Add item to cart
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
apply_couponApply a discount or promotional code to the cart.No findings
Why it is in this group
- The name "apply_coupon" says "apply": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it Apply a discount or promotional code to the cart. Returns the updated cart with discount applied.
Annotations the server declares
- title: Apply coupon
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
check_delegationPoll for human approval of a delegation request.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Poll for human approval of a delegation request. When status is "approved", returns the delegation_token to use as buyer_delegation_token in execute_checkout.
Annotations the server declares
- title: Check approval status
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
create_cartCreate a new shopping cart for a specific site.No findings
Why it is in this group
- The name "create_cart" says "create": a word for a change.
Description, as the server wrote it Create a new shopping cart for a specific site. Returns a cart_id. IMPORTANT: Reuse the active cart_id across multiple products in the same session. Do NOT call create_cart again if you already have a cart_id for this site in the chat history.
Annotations the server declares
- title: Create cart
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
quick_checkoutAssemble checkout-ready cart(s) in ONE call for a multi-product (and optionally multi-store) request.No findings
Why it is in this group
- The name "quick_checkout" says "checkout": a word for a change.
Description, as the server wrote it Assemble checkout-ready cart(s) in ONE call for a multi-product (and optionally multi-store) request. Creates a cart per store, adds all items, and sets the shipping address — then returns the cart(s) with delivery options to choose. Use this when the buyer lists several products at once (optionally across stores) and/or gives their address up front, instead of calling create_cart/add_to_cart/set_shipping_address separately. Does NOT select delivery, check out, or pay — the buyer picks delivery (select_shipping_option) and approves checkout/payment per store afterward. Out-of-stock items are reported; pass customer.email to auto-arm a back-in-stock alert for them.
Annotations the server declares
- title: Quick checkout (build carts)
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
request_back_in_stockSubscribe the buyer to a back-in-stock alert for an out-of-stock product.No findings
Why it is in this group
- The name "request_back_in_stock" says "request": a word for a change.
Description, as the server wrote it Subscribe the buyer to a back-in-stock alert for an out-of-stock product. Use when the buyer asks to be notified/told/pinged when an item restocks ("notify me when X is back", "let me know when it's in stock"). Collect the buyer's email so the alert can reach them (without it only the demand is recorded for the merchant). The buyer is emailed when the product is next seen in stock. Returns whether an email alert was armed.
Annotations the server declares
- title: Notify me when back in stock
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
request_delegationStart the human delegation (approval) flow needed for checkout/payment.No findings
Why it is in this group
- The name "request_delegation" says "request": a word for a change.
Description, as the server wrote it Start the human delegation (approval) flow needed for checkout/payment. PREFERRED: pass the buyer's `email` — the gateway emails them a 6-digit code and returns a device_code; ask the user for the code and call submit_delegation_otp. This keeps approval fully in-chat (no link) and you never see the code, so you cannot approve on their behalf. If you omit `email`, it falls back to a browser approval link (device flow) which the user must open; then poll check_delegation. You can never approve a delegation yourself.
Annotations the server declares
- title: Request buyer approval
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
select_shipping_optionSelect one of the shipping options returned by set_shipping_address.No findings
Why it is in this group
- The name "select_shipping_option" says "select": a word for a change.
Description, as the server wrote it Select one of the shipping options returned by set_shipping_address. Binds the rate to the cart so the total includes shipping; call before execute_checkout so the hosted checkout opens pre-filled.
Annotations the server declares
- title: Select shipping option
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
set_shipping_addressSet the cart shipping destination (collected from the buyer) and return available shipping options with costs.No findings
Why it is in this group
- The name "set_shipping_address" says "set": a word for a change.
Description, as the server wrote it Set the cart shipping destination (collected from the buyer) and return available shipping options with costs. Call after items are in the cart and before select_shipping_option. country_code is required; include postal_code/state for accurate rates.
Annotations the server declares
- title: Set shipping address
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
submit_delegation_otpSubmit the 6-digit code the buyer received by email (from request_delegation with an email) to approve the delegation in-chat.No findings
Why it is in this group
- The name "submit_delegation_otp" says "submit": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it Submit the 6-digit code the buyer received by email (from request_delegation with an email) to approve the delegation in-chat. On success returns a delegation_token to use as buyer_delegation_token for checkout/payment. You cannot obtain this code yourself — the user must read it from their email and give it to you.
Annotations the server declares
- title: Submit approval code
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
Only reads 11Claude Code: allow
compare_productsCompare products across multiple registered e-commerce sites simultaneously.No findings
Why it is in this group
- The name "compare_products" says "compare": a word for reading.
Description, as the server wrote it Compare products across multiple registered e-commerce sites simultaneously. Uses fail-open strategy: partial results from successful sites are returned even if some sites time out.
Annotations the server declares
- title: Compare products across stores
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_active_cartRetrieve the buyer's in-progress cart for a site (resumes a conversation).No findings
Why it is in this group
- The name "get_active_cart" says "get": a word for reading.
Description, as the server wrote it Retrieve the buyer's in-progress cart for a site (resumes a conversation). Call this before assuming a new cart when a shopping conversation continues or after a cart error. Returns the cart with its items rebuilt if the connector cart expired, or null if no cart exists.
Annotations the server declares
- title: Resume active cart
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_cartRetrieve current cart contents, including items, pricing, discounts, and totals.No findings
Why it is in this group
- The name "get_cart" says "get": a word for reading.
Description, as the server wrote it Retrieve current cart contents, including items, pricing, discounts, and totals. The card already shows the line items and totals to the user, so keep your text reply to one brief sentence — do not re-list the cart contents.
Annotations the server declares
- title: View cart
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_orderRetrieve details for an order by its ID, including items, status, shipping, and tracking information.No findings
Why it is in this group
- The name "get_order" says "get": a word for reading.
Description, as the server wrote it Retrieve details for an order by its ID, including items, status, shipping, and tracking information. Orders are buyer-private — pass `buyer_delegation_token` (the delegation token from this buyer's checkout approval) so the gateway can confirm the buyer owns this order. If checking if an order is paid: a status of 'pending' or 'pending_payment' means the order has NOT been paid. Do NOT assume that the vendor storefront has synchronization delays or database lag; treat 'pending' as unpaid. When an order is unpaid, offer to collect payment in the chat by starting the in-chat payment flow (get_payment_methods → initiate_payment → get_payment_status) rather than only pointing the user at the payment_url. Do not mark the purchase task as successful until the status updates to 'processing' or 'completed'.
Annotations the server declares
- title: Get order details
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_payment_methodsSTEP 1 of the in-chat payment flow.No findings
Why it is in this group
- The name "get_payment_methods" says "get": a word for reading.
Description, as the server wrote it STEP 1 of the in-chat payment flow. Returns the payment channels available for an order (e.g. "mobile_money", "card") plus a `gateways` array of the enabled payment gateways (each with id, label, and its channels). When more than one gateway is listed, ask the buyer which they want to use and pass it as `gateway` to initiate_payment. Call this first, after an order exists. Then call initiate_payment with the chosen channel (and gateway if more than one). site_id falls back to DEFAULT_SITE_ID if omitted.
Annotations the server declares
- title: Get payment methods
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_payment_statusFINAL STEP of the in-chat payment flow.No findings
Why it is in this group
- The name "get_payment_status" says "get": a word for reading.
Description, as the server wrote it FINAL STEP of the in-chat payment flow. Returns the current PaymentSession for an order. Poll this (every ~5 seconds) after initiate_payment/submit_payment_otp until payment_status becomes "paid" or "processing" (success — the order is confirmed) or "failed" (tell the user; they can retry by initiating a new payment). Do NOT treat the purchase as complete until this returns "paid" or "processing". No delegation needed (read-only).
Annotations the server declares
- title: Check payment status
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_productRetrieve detailed information about a specific product including variants, pricing, images, and availability.No findings
Why it is in this group
- The name "get_product" says "get": a word for reading.
Description, as the server wrote it Retrieve detailed information about a specific product including variants, pricing, images, and availability. May also return `addons` — customer-selectable options defined by the store (e.g. engraving, gift wrap, size add-ons). When a product has addons, present them to the buyer and collect every addon with `required: true` before calling add_to_cart; for any option carrying a `price_modifier`, show that surcharge so the buyer knows the added cost. The card already shows the product details to the user, so keep your text reply brief and do not re-describe what the card displays.
Annotations the server declares
- title: Get product details
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
get_product_reviews🔍 **RECOMMENDED STEP** — Fetch product reviews and authenticity consensus before making purchase decisions.No findings
Why it is in this group
- The name "get_product_reviews" says "get": a word for reading.
Description, as the server wrote it 🔍 **RECOMMENDED STEP** — Fetch product reviews and authenticity consensus before making purchase decisions. Returns: average rating, trust score (0.0-1.0), review sentiment analysis, authenticity flags (fake reviews, seller issues, negative trends), and recent reviews with verified purchase status. Always call this for each product before adding to cart to verify quality and detect scams.
Annotations the server declares
- title: Get product reviews
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
list_ordersList recent orders for a site, optionally filtered by status (pending, processing, completed, cancelled, refunded).No findings
Why it is in this group
- The name "list_orders" says "list": a word for reading.
Description, as the server wrote it List recent orders for a site, optionally filtered by status (pending, processing, completed, cancelled, refunded). Orders are buyer-private — pass `buyer_delegation_token` (from this buyer's checkout approval); only that buyer's orders are returned.
Annotations the server declares
- title: List orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
list_sitesList all registered e-commerce sites.1 finding
Why it is in this group
- The name "list_sites" says "list": a word for reading.
Findings
- Warn
The description contains "all other tools", wording about other tools or servers.
What this check looks forMatched text
description: "...d get its site_id, which is required by all other tools."
Description, as the server wrote it List all registered e-commerce sites. Use this first to find a site by name (e.g. "Pronto Partners") and get its site_id, which is required by all other tools.
Annotations the server declares
- title: List connected stores
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
search_productsFind products on a registered store.No findings
Why it is in this group
- The name "search_products" says "search": a word for reading.
Description, as the server wrote it Find products on a registered store. To BROWSE a store's catalog (open-ended requests like "what do they sell", "show me what's available"), call with NO query — this returns the store's products. To SEARCH, pass `query` (a product name/keyword). Returns paginated products as an interactive card. ALWAYS translate a buyer's budget or price constraint into the price params on THIS call instead of filtering in your reply: "under/below/within X" or "X budget" → `max_price: X`; "over/above/at least X" → `min_price: X`; "between X and Y" → both. Likewise pass `in_stock: true` for "available"/"in stock" and `category` when they name one. The card renders exactly what this call returns, so the filter MUST be applied here — never fetch the full catalog and then narrow it in text. Call once with your best intent (browse OR a single query); if a real search is genuinely empty, ask the user to clarify rather than re-firing reworded queries. The card shows products, prices, IDs, and Add-to-cart controls — keep your text reply to one brief sentence and do not re-list what the card shows.
Annotations the server declares
- title: Search products
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.5.21. Values in angle brackets are yours to fill in.
claude mcp add --transport http synchronity https://api.synchronity.app/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__synchronity__list_sites",
"mcp__synchronity__search_products",
"mcp__synchronity__get_product",
"mcp__synchronity__get_product_reviews",
"mcp__synchronity__compare_products",
"mcp__synchronity__get_cart",
"mcp__synchronity__get_active_cart",
"mcp__synchronity__get_order",
"mcp__synchronity__list_orders",
"mcp__synchronity__get_payment_methods",
"mcp__synchronity__get_payment_status"
],
"ask": [
"mcp__synchronity__request_back_in_stock",
"mcp__synchronity__create_cart",
"mcp__synchronity__add_to_cart",
"mcp__synchronity__quick_checkout",
"mcp__synchronity__apply_coupon",
"mcp__synchronity__set_shipping_address",
"mcp__synchronity__select_shipping_option",
"mcp__synchronity__request_delegation",
"mcp__synchronity__submit_delegation_otp",
"mcp__synchronity__check_delegation"
],
"deny": [
"mcp__synchronity__remove_from_cart",
"mcp__synchronity__set_cart_quantity",
"mcp__synchronity__execute_checkout",
"mcp__synchronity__initiate_payment",
"mcp__synchronity__submit_payment_otp"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as synchronity. Review it before you use it.
