Hiboutik MCP by usefulapi

io.usefulapi/hiboutikusefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Read Hiboutik products, stock, customers, sales and turnover; edit customers and sale comments.

31 tools: 2 can delete or cancel things, 6 change things and 23 only read.

Reads private data · 4
Reads text others write · 31
Can send data out · 1
No findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

31 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

hiboutik_set_sale_commentWRITE: add or replace the comment of a sale (it overwrites any existing comment).Reads text others writeCan send data outNo findings
Why it is in this group
- The name "hiboutik_set_sale_comment" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "hiboutik_set_sale_comment" says "set" and "comment": it writes something other people read.
Description, as the server wrote it
WRITE: add or replace the comment of a sale (it overwrites any existing comment). POST /sales/comments/.
Annotations the server declares
- title: Set sale comment
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
hiboutik_update_customerWRITE: change ONE attribute of a customer (it overwrites the current value).Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_update_customer" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: change ONE attribute of a customer (it overwrites the current value). Attributes: gender (0 unknown, 1 male, 2 female), last_name, first_name, email, company, phone, vat, country, date_of_birth, customers_code, comments, validity, customers_ref_ext, customers_misc. PUT /customer/{customers_id}/.
Annotations the server declares
- title: Update a customer attribute
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

hiboutik_create_customerWRITE: create a customer in Hiboutik.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_create_customer" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a customer in Hiboutik. Needs at least a last name, first name, company or email. Returns the new customer id. POST /customers/.
Annotations the server declares
- title: Create customer
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
hiboutik_report_products_soldProducts sold in a store during one month: quantities and revenue per product.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Products sold in a store during one month: quantities and revenue per product. GET /reports/products/{store_id}/{year}/{month}.
Annotations the server declares
- title: Products sold report
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_report_turnoverSales total (turnover) of a store for one day, or per day for a whole month when day is omitted.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Sales total (turnover) of a store for one day, or per day for a whole month when day is omitted. GET /reports/turnover/{store_id}/{year}/{month}[/{day}].
Annotations the server declares
- title: Turnover report
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_stock_all_warehousesAvailable stock per product and variant across warehouses, optionally filtered by category, brand, supplier or archived state.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Available stock per product and variant across warehouses, optionally filtered by category, brand, supplier or archived state. GET /stock_available/all_wh.
Annotations the server declares
- title: Stock in all warehouses
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_stock_by_productAvailable stock of one product per variant and warehouse, with the inventory alert level.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Available stock of one product per variant and warehouse, with the inventory alert level. GET /stock_available/product_id/{product_id}.
Annotations the server declares
- title: Stock of one product
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_stock_by_warehouseAvailable stock per product and variant in one warehouse, optionally filtered.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Available stock per product and variant in one warehouse, optionally filtered. GET /stock_available/warehouse_id/{warehouse_id}.
Annotations the server declares
- title: Stock in one warehouse
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 23Looks things up and changes nothing.Show 23 read-only tools

hiboutik_find_product_by_barcodeFind the product (and variant) with this barcode.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_find_product_by_barcode" says "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Find the product (and variant) with this barcode. GET /products/search/barcode/{barcode}/.
Annotations the server declares
- title: Find product by barcode
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_get_customerOne customer with full details.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_get_customer" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One customer with full details. GET /customer/{customers_id}.
Annotations the server declares
- title: Get customer
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_get_productOne product with its full details.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_get_product" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One product with its full details. GET /products/{product_id}.
Annotations the server declares
- title: Get product
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_get_saleOne sale with its header, totals, payment and line items.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_get_sale" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One sale with its header, totals, payment and line items. GET /sales/{sale_id}.
Annotations the server declares
- title: Get sale
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_brandsList product brands (newest id first).Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_brands" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List product brands (newest id first). GET /brands.
Annotations the server declares
- title: List brands
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_categoriesList product categories (newest id first) with parent id and flags.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_categories" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List product categories (newest id first) with parent id and flags. GET /categories.
Annotations the server declares
- title: List categories
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_closed_salesList the closed (completed) sales of a store for one day, or for a whole month when day is omitted.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_closed_sales" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the closed (completed) sales of a store for one day, or for a whole month when day is omitted. GET /closed_sales/{store_id}/{year}/{month}[/{day}].
Annotations the server declares
- title: List closed sales
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_customer_salesList the sales made to one customer (newest first).Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_customer_sales" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the sales made to one customer (newest first). GET /customer/{customers_id}/sales/.
Annotations the server declares
- title: List sales of a customer
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_customersList customers (newest id first) with name, email, phone, country, loyalty points and store credit.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_customers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List customers (newest id first) with name, email, phone, country, loyalty points and store credit. Personal data of the shop's customers. GET /customers/.
Annotations the server declares
- title: List customers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_open_salesList the sales not yet closed in a store (newest first).Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_open_sales" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the sales not yet closed in a store (newest first). GET /open_sales/{store_id}.
Annotations the server declares
- title: List open sales
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_payment_typesList the payment types enabled in a store (cash, card, cheque...) with currency and flags.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_payment_types" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the payment types enabled in a store (cash, card, cheque...) with currency and flags. GET /payment_types/{store_id}/.
Annotations the server declares
- title: List payment types
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_productsList products (default newest id first) with model, barcode, price, supply price, brand, category, supplier and stock management flag.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_products" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List products (default newest id first) with model, barcode, price, supply price, brand, category, supplier and stock management flag. 250 per page. GET /products/.
Annotations the server declares
- title: List products
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_size_typesList the variant (size) types, such as clothing sizes or colours.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_size_types" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the variant (size) types, such as clothing sizes or colours. Use an id with hiboutik_list_sizes. GET /size_types.
Annotations the server declares
- title: List variant types
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_sizesList the variants (sizes) of one variant type: size_id and name.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_sizes" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the variants (sizes) of one variant type: size_id and name. The size_id identifies a variant of a product in stock and sales. GET /sizes/{size_type_id}.
Annotations the server declares
- title: List variants of a type
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_stock_ordersList the stock orders / goods receipts.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_stock_orders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the stock orders / goods receipts. GET /inventory_inputs/.
Annotations the server declares
- title: List stock orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_storesList the shops (stores) of the account: id, name, warehouse id, currency, time zone, address.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_stores" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the shops (stores) of the account: id, name, warehouse id, currency, time zone, address. Use store ids for sales, payment types and reports. GET /stores.
Annotations the server declares
- title: List stores
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_suppliersList the suppliers with id, name and contact details.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_suppliers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the suppliers with id, name and contact details. GET /suppliers/.
Annotations the server declares
- title: List suppliers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_taxesList the tax (VAT) rates with id, name, value and default flag.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_taxes" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the tax (VAT) rates with id, name, value and default flag. GET /taxes.
Annotations the server declares
- title: List taxes
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_usersList the Hiboutik users (staff, sales vendors): id, name, email, access level.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_users" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List the Hiboutik users (staff, sales vendors): id, name, email, access level. The id is the vendor_id of a sale. Passwords and keys are never returned. GET /users.
Annotations the server declares
- title: List users
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_list_warehousesList warehouses (stock locations) with id and name.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_list_warehouses" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List warehouses (stock locations) with id and name. Use the ids for stock levels. GET /warehouses.
Annotations the server declares
- title: List warehouses
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_search_customersSearch customers by last name, first name, email, phone, VAT number, country, customer code or external reference (each text value needs at least 3 characters).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "hiboutik_search_customers" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Search customers by last name, first name, email, phone, VAT number, country, customer code or external reference (each text value needs at least 3 characters). Dates: yyyy-mm-dd, or prefix with > < >= <= to compare. GET /customers/search/.
Annotations the server declares
- title: Search customers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_search_productsSearch products by model, category, brand, supplier, archived state, supplier or external reference.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_search_products" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search products by model, category, brand, supplier, archived state, supplier or external reference. GET /products/search/.
Annotations the server declares
- title: Search products by filters
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
hiboutik_search_products_by_nameFind products whose model (name) matches the text.Reads text others writeNo findings
Why it is in this group
- The name "hiboutik_search_products_by_name" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Find products whose model (name) matches the text. GET /products/search/name/{q}.
Annotations the server declares
- title: Search products by name
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

124 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; hiboutik_list_customers
hiboutik_list_suppliers
hiboutik_list_users
hiboutik_search_customers
Reads text others write31: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; hiboutik_create_customer
hiboutik_find_product_by_barcode
hiboutik_get_customer
hiboutik_get_product
hiboutik_get_sale
hiboutik_list_brands
hiboutik_list_categories
hiboutik_list_closed_sales
hiboutik_list_customer_sales
hiboutik_list_customers
hiboutik_list_open_sales
hiboutik_list_payment_types
and 19 more
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; hiboutik_set_sale_comment

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__hiboutik__hiboutik_set_sale_comment"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hiboutik https://hiboutik.usefulapi.io/mcp

claude mcp add --transport http hiboutik https://hiboutik.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__hiboutik__hiboutik_list_stores",
      "mcp__hiboutik__hiboutik_list_warehouses",
      "mcp__hiboutik__hiboutik_list_users",
      "mcp__hiboutik__hiboutik_list_taxes",
      "mcp__hiboutik__hiboutik_list_payment_types",
      "mcp__hiboutik__hiboutik_list_categories",
      "mcp__hiboutik__hiboutik_list_brands",
      "mcp__hiboutik__hiboutik_list_suppliers",
      "mcp__hiboutik__hiboutik_list_size_types",
      "mcp__hiboutik__hiboutik_list_sizes",
      "mcp__hiboutik__hiboutik_list_products",
      "mcp__hiboutik__hiboutik_get_product",
      "mcp__hiboutik__hiboutik_search_products_by_name",
      "mcp__hiboutik__hiboutik_find_product_by_barcode",
      "mcp__hiboutik__hiboutik_search_products",
      "mcp__hiboutik__hiboutik_list_stock_orders",
      "mcp__hiboutik__hiboutik_list_customers",
      "mcp__hiboutik__hiboutik_search_customers",
      "mcp__hiboutik__hiboutik_get_customer",
      "mcp__hiboutik__hiboutik_list_customer_sales",
      "mcp__hiboutik__hiboutik_get_sale",
      "mcp__hiboutik__hiboutik_list_open_sales",
      "mcp__hiboutik__hiboutik_list_closed_sales"
    ],
    "ask": [
      "mcp__hiboutik__hiboutik_stock_all_warehouses",
      "mcp__hiboutik__hiboutik_stock_by_warehouse",
      "mcp__hiboutik__hiboutik_stock_by_product",
      "mcp__hiboutik__hiboutik_report_turnover",
      "mcp__hiboutik__hiboutik_report_products_sold",
      "mcp__hiboutik__hiboutik_create_customer"
    ],
    "deny": [
      "mcp__hiboutik__hiboutik_update_customer",
      "mcp__hiboutik__hiboutik_set_sale_comment"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as hiboutik. Review it before you use it.

Capability tags behind 31 rules

mcp__hiboutik__hiboutik_list_stores untrusted-input
mcp__hiboutik__hiboutik_list_warehouses untrusted-input
mcp__hiboutik__hiboutik_list_users private-data, untrusted-input
mcp__hiboutik__hiboutik_list_taxes untrusted-input
mcp__hiboutik__hiboutik_list_payment_types untrusted-input
mcp__hiboutik__hiboutik_list_categories untrusted-input
mcp__hiboutik__hiboutik_list_brands untrusted-input
mcp__hiboutik__hiboutik_list_suppliers private-data, untrusted-input
mcp__hiboutik__hiboutik_list_size_types untrusted-input
mcp__hiboutik__hiboutik_list_sizes untrusted-input
mcp__hiboutik__hiboutik_list_products untrusted-input
mcp__hiboutik__hiboutik_get_product untrusted-input
mcp__hiboutik__hiboutik_search_products_by_name untrusted-input
mcp__hiboutik__hiboutik_find_product_by_barcode untrusted-input
mcp__hiboutik__hiboutik_search_products untrusted-input
mcp__hiboutik__hiboutik_stock_all_warehouses untrusted-input
mcp__hiboutik__hiboutik_stock_by_warehouse untrusted-input
mcp__hiboutik__hiboutik_stock_by_product untrusted-input
mcp__hiboutik__hiboutik_list_stock_orders untrusted-input
mcp__hiboutik__hiboutik_list_customers private-data, untrusted-input
mcp__hiboutik__hiboutik_search_customers private-data, untrusted-input
mcp__hiboutik__hiboutik_get_customer untrusted-input
mcp__hiboutik__hiboutik_list_customer_sales untrusted-input
mcp__hiboutik__hiboutik_get_sale untrusted-input
mcp__hiboutik__hiboutik_list_open_sales untrusted-input
mcp__hiboutik__hiboutik_list_closed_sales untrusted-input
mcp__hiboutik__hiboutik_report_turnover untrusted-input
mcp__hiboutik__hiboutik_report_products_sold untrusted-input
mcp__hiboutik__hiboutik_create_customer untrusted-input
mcp__hiboutik__hiboutik_update_customer untrusted-input
mcp__hiboutik__hiboutik_set_sale_comment untrusted-input, outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/hiboutik/verify?hash=86ae7525eb796e02a256ba488f49dda5adf3f12c192f732834f7950b9c4400f8" | jq -e '.changed == false'

Pinned hash 86ae7525eb79, from Oct 25, 2026, 13:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/hiboutik/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/hiboutik.svg)](https://anlyon.dev/servers/io.usefulapi/hiboutik)

Source: MCP Registry · repository. Synced Oct 25, 2026, 13:18 UTC.