Booqable MCP by usefulapi

io.usefulapi/booqableusefulapi.iostreamable-httpv1.16.4Scanned 6 hours ago

Browse rental orders, customers, products and availability, and create bookings in Booqable.

21 tools: 7 can delete or cancel things, 1 change things and 13 only read.

Reads private data · 4
Reads text others write · 1
Can send data out · 0
1 finding

Tools listed without sign-in. Remote posture

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

21 tools

Deletes or cancels 7Removes, cancels or revokes something.Claude Code: deny

booqable_book_productAdd a quantity of a product to an order, allocating inventory (creates a planning and a line).No findings
Why it is in this group
- The description's first verb is "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Add a quantity of a product to an order, allocating inventory (creates a planning and a line). By default adds to an existing planning for the same product if there is one. Booqable: POST /api/4/order_fulfillments with a book_product action.
Annotations the server declares
- title: Book a product on an order
- destructiveHint: true
booqable_create_customerCreate a new customer.No findings
Why it is in this group
- The name "booqable_create_customer" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create a new customer. Booqable: POST /api/4/customers.
Annotations the server declares
- title: Create a customer
- destructiveHint: true
booqable_create_noteAttach an internal note to a customer, order, product or other record.No findings
Why it is in this group
- The name "booqable_create_note" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Attach an internal note to a customer, order, product or other record. Booqable: POST /api/4/notes.
Annotations the server declares
- title: Add a note
- destructiveHint: true
booqable_create_orderCreate an EMPTY order for a rental period (status new or draft).No findings
Why it is in this group
- The name "booqable_create_order" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create an EMPTY order for a rental period (status new or draft). Then add products with booqable_book_product and reserve it with booqable_transition_order_status. Locations default to the first active location. Booqable: POST /api/4/orders.
Annotations the server declares
- title: Create an order
- destructiveHint: true
booqable_transition_order_statusMove an order between statuses: new→draft, draft→reserved (reserves the items and assigns an order number), stopped→archived, or back to an earlier status with revert: true.1 finding
Why it is in this group
- The name "booqable_transition_order_status" says "status": a word for reading.
- The description's first verb is "move": a word for a change.
- The server marks it destructive (destructiveHint: true).
Findings
- Warn
  The server marks "booqable_transition_order_status" destructive (destructiveHint: true), and its name says "status", a word for reading.
  Matched text
  annotations: {"destructiveHint":true}; The name "booqable_transition_order_status" says "status": a word for reading.
  What this check looks for
Description, as the server wrote it
Move an order between statuses: new→draft, draft→reserved (reserves the items and assigns an order number), stopped→archived, or back to an earlier status with revert: true. Canceling is deliberately NOT offered (Booqable cannot un-cancel). started/stopped are reached by picking up/returning items, so they are only valid here with revert: true. Booqable: POST /api/4/order_status_transitions.
Annotations the server declares
- title: Change an order's status
- destructiveHint: true
booqable_update_customerUpdate a customer's name, email, legal type, tags, default discount or marketing consent.No findings
Why it is in this group
- The name "booqable_update_customer" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update a customer's name, email, legal type, tags, default discount or marketing consent. Only the fields you pass change. Booqable: PUT /api/4/customers/{id}.
Annotations the server declares
- title: Update a customer
- destructiveHint: true
booqable_update_orderChange an order's rental period, customer, locations or tags.No findings
Why it is in this group
- The name "booqable_update_order" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Change an order's rental period, customer, locations or tags. Moving dates can cause a shortage: the call then fails with the shortage details, and a shortage *warning* can be accepted by retrying with confirm_shortage: true. Booqable: PUT /api/4/orders/{id}.
Annotations the server declares
- title: Update an order
- destructiveHint: true

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

booqable_check_inventory_availabilityHow many units of one or more products can be booked for an exact period at a location.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
How many units of one or more products can be booked for an exact period at a location. Returns `available` and `plannable` (plannable can exceed available when shortage is allowed). Get location ids from booqable_list_locations. Booqable: GET /api/4/inventory_availabilities.
Annotations the server declares
- title: Check inventory availability
- readOnlyHint: true

Only reads 13Looks things up and changes nothing.Show 13 read-only tools

booqable_get_availability_calendarDay-by-day availability for one product over a month: status (available/partial/unavailable) and bookable quantity per day.Reads private dataNo findings
Why it is in this group
- The name "booqable_get_availability_calendar" says "get": a word for reading.
What it can reach
- private-dataThe name "booqable_get_availability_calendar" says "get" and "calendar": it reads calendars.
Description, as the server wrote it
Day-by-day availability for one product over a month: status (available/partial/unavailable) and bookable quantity per day. Booqable: GET /api/4/availabilities with subject_type=item.
Annotations the server declares
- title: Get a product's availability calendar
- readOnlyHint: true
booqable_get_companyFetch the Booqable account this token belongs to — name, currency, default timezone, address.No findings
Why it is in this group
- The name "booqable_get_company" says "get": a word for reading.
Description, as the server wrote it
Fetch the Booqable account this token belongs to — name, currency, default timezone, address. A cheap way to confirm the slug and token work. Booqable: GET /api/4/companies/current.
Annotations the server declares
- title: Get the company
- readOnlyHint: true
booqable_get_customerFetch one customer with order count, revenue and balance due, sideloading their properties (addresses, phone, custom fields) by default.No findings
Why it is in this group
- The name "booqable_get_customer" says "get": a word for reading.
Description, as the server wrote it
Fetch one customer with order count, revenue and balance due, sideloading their properties (addresses, phone, custom fields) by default. Booqable: GET /api/4/customers/{id}.
Annotations the server declares
- title: Get one customer
- readOnlyHint: true
booqable_get_orderFetch one order with its totals, deposit and payment state, sideloading the customer and order lines by default (override with include, e.g.No findings
Why it is in this group
- The name "booqable_get_order" says "get": a word for reading.
Description, as the server wrote it
Fetch one order with its totals, deposit and payment state, sideloading the customer and order lines by default (override with include, e.g. customer,lines,payments,documents,notes). Booqable: GET /api/4/orders/{id}.
Annotations the server declares
- title: Get one order
- readOnlyHint: true
booqable_list_customersList customers, optionally searched by name/email or filtered by email, tag or archived state.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "booqable_list_customers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List customers, optionally searched by name/email or filtered by email, tag or archived state. Booqable: GET /api/4/customers.
Annotations the server declares
- title: List customers
- readOnlyHint: true
booqable_list_documentsList invoices, quotes and contracts, with totals and payment status.Reads private dataNo findings
Why it is in this group
- The name "booqable_list_documents" says "list": a word for reading.
What it can reach
- private-dataThe name "booqable_list_documents" says "list" and "document": it reads documents.
Description, as the server wrote it
List invoices, quotes and contracts, with totals and payment status. Filter by type, order, customer or status. Booqable: GET /api/4/documents.
Annotations the server declares
- title: List documents
- readOnlyHint: true
booqable_list_locationsList pickup/return locations (warehouses, stores) with address and pickup/delivery capability.No findings
Why it is in this group
- The name "booqable_list_locations" says "list": a word for reading.
Description, as the server wrote it
List pickup/return locations (warehouses, stores) with address and pickup/delivery capability. Location ids are needed for availability checks and orders. Booqable: GET /api/4/locations.
Annotations the server declares
- title: List locations
- readOnlyHint: true
booqable_list_notesList internal notes attached to a customer, order, product or other record.Reads private dataNo findings
Why it is in this group
- The name "booqable_list_notes" says "list": a word for reading.
What it can reach
- private-dataThe name "booqable_list_notes" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
Description, as the server wrote it
List internal notes attached to a customer, order, product or other record. Booqable: GET /api/4/notes.
Annotations the server declares
- title: List notes
- readOnlyHint: true
booqable_list_ordersList rental orders.No findings
Why it is in this group
- The name "booqable_list_orders" says "list": a word for reading.
Description, as the server wrote it
List rental orders. Filter by free-text search (order number, customer name/email/address, tags, custom fields), status, payment status, customer, or rental-period range. Booqable: GET /api/4/orders.
Annotations the server declares
- title: List orders
- readOnlyHint: true
booqable_list_paymentsList payments (charges, authorizations and refunds) with amount, deposit, currency, provider and status.No findings
Why it is in this group
- The name "booqable_list_payments" says "list": a word for reading.
Description, as the server wrote it
List payments (charges, authorizations and refunds) with amount, deposit, currency, provider and status. Filter by order, customer or payment type. Read only — this server never moves money. Booqable: GET /api/4/payments.
Annotations the server declares
- title: List payments
- readOnlyHint: true
booqable_list_planningsList plannings — which product is booked on which order, how many, when, and how many are started (out) or stopped (returned).No findings
Why it is in this group
- The name "booqable_list_plannings" says "list": a word for reading.
Description, as the server wrote it
List plannings — which product is booked on which order, how many, when, and how many are started (out) or stopped (returned). Filter by order, product, or reservation window. Booqable: GET /api/4/plannings.
Annotations the server declares
- title: List plannings
- readOnlyHint: true
booqable_list_product_groupsList product groups — the catalogue entries (name, SKU, product type, tracking type, pricing).No findings
Why it is in this group
- The name "booqable_list_product_groups" says "list": a word for reading.
Description, as the server wrote it
List product groups — the catalogue entries (name, SKU, product type, tracking type, pricing). A group holds one or more bookable products (variations). Booqable: GET /api/4/product_groups.
Annotations the server declares
- title: List product groups
- readOnlyHint: true
booqable_list_productsList bookable products (the variations inside product groups).No findings
Why it is in this group
- The name "booqable_list_products" says "list": a word for reading.
Description, as the server wrote it
List bookable products (the variations inside product groups). Use a product id for availability checks and booking. Booqable: GET /api/4/products.
Annotations the server declares
- title: List products
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; booqable_get_availability_calendar
booqable_list_customers
booqable_list_documents
booqable_list_notes
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; booqable_list_customers
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 22, 2026, 15:24 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 8
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: https://booqable.usefulapi.io/.well-known/oauth-protected-resource/mcp
Authorization servers: https://booqable.usefulapi.io
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

HighThe whole server
The endpoint served tools/list without credentials, and the list has 8 tools that change things (7 destructive, 1 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://booqable.usefulapi.io/mcp: tools/list returned 21 tools to an anonymous client, including booqable_create_customer (destructive), booqable_update_customer (destructive), booqable_create_order (destructive), booqable_update_order (destructive), booqable_book_product (destructive) and 3 more
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnbooqable_transition_order_status
The server marks "booqable_transition_order_status" destructive (destructiveHint: true), and its name says "status", a word for reading.
Matched text
annotations: {"destructiveHint":true}; The name "booqable_transition_order_status" says "status": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.16.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http booqable https://booqable.usefulapi.io/mcp

claude mcp add --transport http booqable https://booqable.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__booqable__booqable_get_company",
      "mcp__booqable__booqable_list_orders",
      "mcp__booqable__booqable_get_order",
      "mcp__booqable__booqable_list_customers",
      "mcp__booqable__booqable_get_customer",
      "mcp__booqable__booqable_list_product_groups",
      "mcp__booqable__booqable_list_products",
      "mcp__booqable__booqable_get_availability_calendar",
      "mcp__booqable__booqable_list_plannings",
      "mcp__booqable__booqable_list_documents",
      "mcp__booqable__booqable_list_payments",
      "mcp__booqable__booqable_list_locations",
      "mcp__booqable__booqable_list_notes"
    ],
    "ask": [
      "mcp__booqable__booqable_check_inventory_availability"
    ],
    "deny": [
      "mcp__booqable__booqable_create_customer",
      "mcp__booqable__booqable_update_customer",
      "mcp__booqable__booqable_create_order",
      "mcp__booqable__booqable_update_order",
      "mcp__booqable__booqable_book_product",
      "mcp__booqable__booqable_transition_order_status",
      "mcp__booqable__booqable_create_note"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as booqable. Review it before you use it.

Capability tags behind 4 rules

mcp__booqable__booqable_list_customers private-data, untrusted-input
mcp__booqable__booqable_get_availability_calendar private-data
mcp__booqable__booqable_list_documents private-data
mcp__booqable__booqable_list_notes private-data

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/booqable/verify?hash=3d7070e4fad7c55392892e5460349382d3fef32fc6a6a6bd2d2122192142a370" | jq -e '.changed == false'

Pinned hash 3d7070e4fad7, from Oct 22, 2026, 11:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/booqable/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/booqable.svg)](https://anlyon.dev/servers/io.usefulapi/booqable)

Source: MCP Registry · repository. Synced Oct 22, 2026, 11:18 UTC.