Gift Up! MCP by usefulapi

by usefulapi.io · remote · no sign-in to list tools · v1.3.4 · published by io.usefulapi

Read Gift Up! gift cards, orders, items, promotions and transactions (read-only, codes masked).

Changes · 2

Compare Registry entry

13 tools: 2 change things and 11 only read.

Scanned Oct 22, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things2Claude Code: ask: see these tools
Only reads11Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gift-up https://gift-up.usefulapi.io/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warngiftup_get_gift_card
The server marks "giftup_get_gift_card" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "giftup_get_gift_card" says "get": a word for reading.
What this check looks for
Warngiftup_list_transactions
The server marks "giftup_list_transactions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "giftup_list_transactions" says "list": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

giftup_get_gift_cardOne gift card by its code: balance (remainingValue / remainingUnits), status flags, expiry, recipient, order, fulfilment and the full ledger of events (created, redeemed, topped up…Reads text others write1 finding
Why it is in this group
- The name "giftup_get_gift_card" says "get": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "giftup_get_gift_card" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "giftup_get_gift_card" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
One gift card by its code: balance (remainingValue / remainingUnits), status flags, expiry, recipient, order, fulfilment and the full ledger of events (created, redeemed, topped up, voided). Returns the code in full because you asked for this card by code; do not repeat it elsewhere. Read-only: it never redeems or changes the card. GET /gift-cards/{code}.
Annotations the server declares
- title: Get gift card
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_transactionsThe immutable financial transaction log: OrderPlaced (income, fees, tip), GiftCardCreated, CreditAdded, Redeemed, Expired, Unexpired, Voided, Reactivated, with who, where, reason, …Reads text others write1 finding
Why it is in this group
- The name "giftup_list_transactions" says "list": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "giftup_list_transactions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "giftup_list_transactions" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
The immutable financial transaction log: OrderPlaced (income, fees, tip), GiftCardCreated, CreditAdded, Redeemed, Expired, Unexpired, Voided, Reactivated, with who, where, reason, Gift Up fee and the value change. Gift card codes are MASKED (at least 6 characters stay hidden). Filter by time range, event type, user email, location id or one gift card code. GET /reports/transactions.
Annotations the server declares
- title: List report transactions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 11Looks things up and changes nothing.Claude Code: allow

giftup_get_companyThe Gift Up account this API key belongs to: id, name, currency, whether onboarding is complete and whether the checkout is live.Reads text others writeNo findings
Why it is in this group
- The name "giftup_get_company" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The Gift Up account this API key belongs to: id, name, currency, whether onboarding is complete and whether the checkout is live. GET /company.
Annotations the server declares
- title: Get company
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_get_itemOne item (gift card product) by id.Reads text others writeNo findings
Why it is in this group
- The name "giftup_get_item" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One item (gift card product) by id. Pre-generated codes are reduced to a count and masked tails. GET /items/{id}.
Annotations the server declares
- title: Get item
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_get_item_groupOne item group by id.Reads text others writeNo findings
Why it is in this group
- The name "giftup_get_item_group" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One item group by id. GET /groups/{id}.
Annotations the server declares
- title: Get item group
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_get_orderOne order by id: totals, purchaser, promotions, custom fields, sales taxes, notes, metadata and payment provider.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "giftup_get_order" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One order by id: totals, purchaser, promotions, custom fields, sales taxes, notes, metadata and payment provider. GET /orders/{id}.
Annotations the server declares
- title: Get order
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_get_transactionOne report transaction by id.Reads text others writeNo findings
Why it is in this group
- The name "giftup_get_transaction" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One report transaction by id. The gift card code inside is MASKED (at least 6 characters stay hidden). GET /reports/transactions/{id}.
Annotations the server declares
- title: Get report transaction
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_gift_cardsList gift cards with balance, status flags (canBeRedeemed, hasExpired, notYetValid, isVoided), title, recipient, expiry and the order they came from.Reads text others writeNo findings
Why it is in this group
- The name "giftup_list_gift_cards" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List gift cards with balance, status flags (canBeRedeemed, hasExpired, notYetValid, isVoided), title, recipient, expiry and the order they came from. Codes are MASKED (at least 6 characters stay hidden); to see one card in full (code and ledger) use giftup_get_gift_card with its code. Filter by state, creation/update time, order, SKU, recipient/purchaser email or payment transaction id. GET /gift-cards.
Annotations the server declares
- title: List gift cards
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_item_groupsList item groups (the sections that organize items in the checkout): id, name, description, sort order, auto-expand.Reads text others writeNo findings
Why it is in this group
- The name "giftup_list_item_groups" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List item groups (the sections that organize items in the checkout): id, name, description, sort order, auto-expand. GET /groups.
Annotations the server declares
- title: List item groups
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_itemsList the gift card products on sale (items): name, price, value, price type, availability window, group, stock level, per-order limit, SKU and terms.Reads text others writeNo findings
Why it is in this group
- The name "giftup_list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the gift card products on sale (items): name, price, value, price type, availability window, group, stock level, per-order limit, SKU and terms. Pre-generated codes are reduced to a count and masked tails. Optionally only one group. GET /items.
Annotations the server declares
- title: List items
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_locationsList the locations (stores) of the account; their ids filter and label report transactions.Reads text others writeNo findings
Why it is in this group
- The name "giftup_list_locations" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the locations (stores) of the account; their ids filter and label report transactions. GET /locations.
Annotations the server declares
- title: List locations
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_ordersList orders (the purchases that created gift cards), newest first: order number, purchaser, revenue, tip, fees, discount, applied promotions, source, notes, metadata and payment pr…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "giftup_list_orders" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List orders (the purchases that created gift cards), newest first: order number, purchaser, revenue, tip, fees, discount, applied promotions, source, notes, metadata and payment provider. Filter by creation time, purchaser email or source. GET /orders.
Annotations the server declares
- title: List orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
giftup_list_promotionsList promotions (checkout discounts and bonus credit): name, published/stopped dates, benefits (percentage and fixed discounts, extra credit), usage counts and revenue, limitations…Reads text others writeNo findings
Why it is in this group
- The name "giftup_list_promotions" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List promotions (checkout discounts and bonus credit): name, published/stopped dates, benefits (percentage and fixed discounts, extra credit), usage counts and revenue, limitations and triggers (items, groups, spend and quantity thresholds, promo code). Read-only. GET /promotions.
Annotations the server declares
- title: List promotions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; giftup_get_order
giftup_list_orders
Reads text others write13: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; giftup_get_company
giftup_get_gift_card
giftup_get_item
giftup_get_item_group
giftup_get_order
giftup_get_transaction
giftup_list_gift_cards
giftup_list_item_groups
giftup_list_items
giftup_list_locations
giftup_list_orders
giftup_list_promotions
and 1 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 15:28 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 2
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://gift-up.usefulapi.io/.well-known/oauth-protected-resource/mcp
Authorization servers: https://gift-up.usefulapi.io
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 2 tools that change things (2 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://gift-up.usefulapi.io/mcp: tools/list returned 13 tools to an anonymous client, including giftup_get_gift_card (write), giftup_list_transactions (write)
What this check looks for

Install

Pinned to version 1.3.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http gift-up https://gift-up.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__gift-up__giftup_get_company",
      "mcp__gift-up__giftup_list_gift_cards",
      "mcp__gift-up__giftup_list_orders",
      "mcp__gift-up__giftup_get_order",
      "mcp__gift-up__giftup_list_items",
      "mcp__gift-up__giftup_get_item",
      "mcp__gift-up__giftup_list_item_groups",
      "mcp__gift-up__giftup_get_item_group",
      "mcp__gift-up__giftup_list_locations",
      "mcp__gift-up__giftup_list_promotions",
      "mcp__gift-up__giftup_get_transaction"
    ],
    "ask": [
      "mcp__gift-up__giftup_get_gift_card",
      "mcp__gift-up__giftup_list_transactions"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as gift-up. Review it before you use it.

Capability tags behind 13 rules

mcp__gift-up__giftup_get_company untrusted-input
mcp__gift-up__giftup_list_gift_cards untrusted-input
mcp__gift-up__giftup_get_gift_card untrusted-input
mcp__gift-up__giftup_list_orders private-data, untrusted-input
mcp__gift-up__giftup_get_order private-data, untrusted-input
mcp__gift-up__giftup_list_items untrusted-input
mcp__gift-up__giftup_get_item untrusted-input
mcp__gift-up__giftup_list_item_groups untrusted-input
mcp__gift-up__giftup_get_item_group untrusted-input
mcp__gift-up__giftup_list_locations untrusted-input
mcp__gift-up__giftup_list_promotions untrusted-input
mcp__gift-up__giftup_list_transactions untrusted-input
mcp__gift-up__giftup_get_transaction untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/gift-up/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

2 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 22, 2026, 11:18 UTC.

For agents: Markdown · JSON · report this listing