TicketSpice MCP by usefulapi

io.usefulapi/ticketspiceusefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Read TicketSpice forms, orders, tickets, customers, coupons; create or delete coupons.

15 tools: 1 can delete or cancel things, 2 change things and 12 only read.

Reads private data · 4
Reads text others write · 15
Can send data out · 0
1 finding

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

ticketspice_delete_couponWRITE: permanently delete a coupon from the live TicketSpice account; its codes stop working immediately and this cannot be undone.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_delete_coupon" says "delete": a word for removing or ending something.
- The description says "permanently delete".
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: permanently delete a coupon from the live TicketSpice account; its codes stop working immediately and this cannot be undone. Show the coupon (ticketspice_get_coupon) and get the user's approval first, then call with confirm: true. GET /coupons/{id}, then DELETE /coupons/{id}.
Annotations the server declares
- title: Delete coupon
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

ticketspice_create_couponWRITE: create a discount coupon in the live TicketSpice account (it can be redeemed by ticket buyers right away).Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_create_coupon" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a discount coupon in the live TicketSpice account (it can be redeemed by ticket buyers right away). One discount (fixed amount or percent) and one or more codes; optionally limited to one form, to a number of uses, and to an expiry date. Not idempotent: calling it twice creates two coupons. POST /coupons.
Annotations the server declares
- title: Create coupon
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
ticketspice_list_couponsList TicketSpice coupons: account-wide ones, or only those of one form when form_id is given.Reads text others write1 finding
Why it is in this group
- The name "ticketspice_list_coupons" says "list": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "ticket": it reads issues, which other people can write.
Findings
- Warn
  The server marks "ticketspice_list_coupons" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "ticketspice_list_coupons" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List TicketSpice coupons: account-wide ones, or only those of one form when form_id is given. Shows discounts, codes, availability, redeemed count and expiry. GET /coupons/global or /coupons/forms/{id}.
Annotations the server declares
- title: List coupons
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 12Looks things up and changes nothing.Show 12 read-only tools

ticketspice_get_couponOne coupon by id with its discounts, codes, availability and redeemed counts.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_coupon" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One coupon by id with its discounts, codes, availability and redeemed counts. GET /coupons/{id}.
Annotations the server declares
- title: Get coupon
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_customerOne customer record by id: email, billing details and total of the customer's transactions.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_customer" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
One customer record by id: email, billing details and total of the customer's transactions. GET /search/customers/{id}.
Annotations the server declares
- title: Get customer
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_formOne form by id: name, status, accounting reference, time zone and its field layout.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_form" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One form by id: name, status, accounting reference, time zone and its field layout. GET /forms/{id}.
Annotations the server declares
- title: Get event
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_form_inventoryInventory items of a form (limited-quantity items): path, name, sold and remaining quantity.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_form_inventory" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Inventory items of a form (limited-quantity items): path, name, sold and remaining quantity. GET /forms/{id}/inventory.
Annotations the server declares
- title: Get form inventory
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_orderOne order by id with the buyer's billing details, event, totals and status.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_order" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One order by id with the buyer's billing details, event, totals and status. Set include_tickets to embed the order's tickets and include_transactions its payments (charges and refunds). GET /search/orders/{id}.
Annotations the server declares
- title: Get order
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_ticketOne ticket by id: buyer, event, level, amount, fee, total, status, scan count, last scan time and the buyer's form answers.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_ticket" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "ticketspice_get_ticket" says "get" and "ticket": it reads issues, which other people can write.
- untrusted-inputThe description's first sentence says "ticket": it reads issues, which other people can write.
Description, as the server wrote it
One ticket by id: buyer, event, level, amount, fee, total, status, scan count, last scan time and the buyer's form answers. GET /search/tickets/{id}.
Annotations the server declares
- title: Get ticket
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_get_transactionOne transaction by id: amounts, type, payment method, masked card, gateway message and status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "ticketspice_get_transaction" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "message": it reads messages.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
Description, as the server wrote it
One transaction by id: amounts, type, payment method, masked card, gateway message and status. GET /search/transactions/{id}.
Annotations the server declares
- title: Get transaction
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_list_customersList customer records (buyers): id, email, billing name and address, total spent, created and updated dates.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "ticketspice_list_customers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List customer records (buyers): id, email, billing name and address, total spent, created and updated dates. Filter by email or dates. New customers can take up to 5 minutes to appear. GET /search/customers.
Annotations the server declares
- title: List customers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_list_formsList the account's TicketSpice forms (ticketed events / order pages): id, name, status (open, closed, scheduled or archived), created and updated dates.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_list_forms" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "ticket": it reads issues, which other people can write.
Description, as the server wrote it
List the account's TicketSpice forms (ticketed events / order pages): id, name, status (open, closed, scheduled or archived), created and updated dates. Use the form ids to filter orders, tickets and transactions. GET /forms.
Annotations the server declares
- title: List events
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_list_ordersList orders (one per checkout): order number, buyer billing name and address, form, total, currency and status, newest or oldest first.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_list_orders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List orders (one per checkout): order number, buyer billing name and address, form, total, currency and status, newest or oldest first. Filter by event (form), status, buyer email, customer id, order number or dates. GET /search/orders.
Annotations the server declares
- title: List orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_list_ticketsList sold tickets (one record per ticket): id, buyer billing name, event, ticket level, amount, fee, total, status, scan count and last scan time, event date.Reads text others writeNo findings
Why it is in this group
- The name "ticketspice_list_tickets" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "ticketspice_list_tickets" says "list" and "ticket": it reads issues, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "ticket": it reads issues, which other people can write.
Description, as the server wrote it
List sold tickets (one record per ticket): id, buyer billing name, event, ticket level, amount, fee, total, status, scan count and last scan time, event date. Filter by event (form), status, order, buyer email, customer id or dates. Use it for attendee lists and check-in status. GET /search/tickets.
Annotations the server declares
- title: List tickets
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
ticketspice_list_transactionsList payment transactions (money movements): amount, currency, type (charge, refund, voucher), payment method, masked card, status, form and buyer email.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "ticketspice_list_transactions" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List payment transactions (money movements): amount, currency, type (charge, refund, voucher), payment method, masked card, status, form and buyer email. Filter by type, method, form, order, donor or dates. GET /search/transactions.
Annotations the server declares
- title: List transactions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4: Reads files, mail, messages, databases, secrets, calendars or repositories.; ticketspice_get_customer
ticketspice_get_transaction
ticketspice_list_customers
ticketspice_list_transactions
Reads text others write15: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; ticketspice_create_coupon
ticketspice_delete_coupon
ticketspice_get_coupon
ticketspice_get_customer
ticketspice_get_form
ticketspice_get_form_inventory
ticketspice_get_order
ticketspice_get_ticket
ticketspice_get_transaction
ticketspice_list_coupons
ticketspice_list_customers
ticketspice_list_forms
and 3 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnticketspice_list_coupons
The server marks "ticketspice_list_coupons" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "ticketspice_list_coupons" says "list": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ticketspice https://ticketspice.usefulapi.io/mcp

claude mcp add --transport http ticketspice https://ticketspice.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__ticketspice__ticketspice_list_forms",
      "mcp__ticketspice__ticketspice_get_form",
      "mcp__ticketspice__ticketspice_get_form_inventory",
      "mcp__ticketspice__ticketspice_list_orders",
      "mcp__ticketspice__ticketspice_get_order",
      "mcp__ticketspice__ticketspice_list_transactions",
      "mcp__ticketspice__ticketspice_get_transaction",
      "mcp__ticketspice__ticketspice_list_tickets",
      "mcp__ticketspice__ticketspice_get_ticket",
      "mcp__ticketspice__ticketspice_list_customers",
      "mcp__ticketspice__ticketspice_get_customer",
      "mcp__ticketspice__ticketspice_get_coupon"
    ],
    "ask": [
      "mcp__ticketspice__ticketspice_list_coupons",
      "mcp__ticketspice__ticketspice_create_coupon"
    ],
    "deny": [
      "mcp__ticketspice__ticketspice_delete_coupon"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as ticketspice. Review it before you use it.

Capability tags behind 15 rules

mcp__ticketspice__ticketspice_list_forms untrusted-input
mcp__ticketspice__ticketspice_get_form untrusted-input
mcp__ticketspice__ticketspice_get_form_inventory untrusted-input
mcp__ticketspice__ticketspice_list_orders untrusted-input
mcp__ticketspice__ticketspice_get_order untrusted-input
mcp__ticketspice__ticketspice_list_transactions private-data, untrusted-input
mcp__ticketspice__ticketspice_get_transaction private-data, untrusted-input
mcp__ticketspice__ticketspice_list_tickets untrusted-input
mcp__ticketspice__ticketspice_get_ticket untrusted-input
mcp__ticketspice__ticketspice_list_customers private-data, untrusted-input
mcp__ticketspice__ticketspice_get_customer private-data, untrusted-input
mcp__ticketspice__ticketspice_list_coupons untrusted-input
mcp__ticketspice__ticketspice_get_coupon untrusted-input
mcp__ticketspice__ticketspice_create_coupon untrusted-input
mcp__ticketspice__ticketspice_delete_coupon untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/ticketspice/verify?hash=e912b2d322f178227bc04e5cad7c3f27b9530178aea7289973d7ae7f0ca657c8" | jq -e '.changed == false'

Pinned hash e912b2d322f1, from Oct 25, 2026, 23:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/ticketspice/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/ticketspice.svg)](https://anlyon.dev/servers/io.usefulapi/ticketspice)

Source: MCP Registry · repository. Synced Oct 25, 2026, 23:18 UTC.