makeup.land
by makeup.land · remote · no sign-in to list tools · v1.0.0 · published by land.makeup
Israeli cosmetics retailer: ΔE shade matching, customer wallet, cart, orders, gift cards.
8 tools: 1 change things and 7 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads7Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http v1 https://makeup.land/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Changes things 1Claude Code: ask
validate_gift_cardCheck a gift card's remaining balance using its code.No findings
Why it is in this group
- The name "validate_gift_card" says "validate": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it Check a gift card's remaining balance using its code. Public endpoint — no bearer required (gated on knowledge of the code).
Only reads 7Claude Code: allow
get_cartReturn the customer's most-recently-updated cart with per-line and total reward projection.No findings
Why it is in this group
- The name "get_cart" says "get": a word for reading.
Description, as the server wrote it Return the customer's most-recently-updated cart with per-line and total reward projection. Bearer + phone required.
get_customerReturn tags, ℳ-credit balance, M Club tier for the customer with the given E.164 phone.No findings
Why it is in this group
- The name "get_customer" says "get": a word for reading.
Description, as the server wrote it Return tags, ℳ-credit balance, M Club tier for the customer with the given E.164 phone. Bearer required.
get_customer_best_dealsTop deal projections based on the customer's tags + M Club tier.No findings
Why it is in this group
- The name "get_customer_best_deals" says "get": a word for reading.
Description, as the server wrote it Top deal projections based on the customer's tags + M Club tier. Bearer + phone required.
list_brandsReturn every brand with product counts and slugs.No findings
Why it is in this group
- The name "list_brands" says "list": a word for reading.
Description, as the server wrote it Return every brand with product counts and slugs. Bearer required.
list_ordersRecent orders with 6-axis status (order / payment / fulfillment / delivery / return / review).No findings
Why it is in this group
- The name "list_orders" says "list": a word for reading.
Description, as the server wrote it Recent orders with 6-axis status (order / payment / fulfillment / delivery / return / review). Bearer + phone required.
list_payment_linksPending payment_requests on the customer's unpaid orders.No findings
Why it is in this group
- The name "list_payment_links" says "list": a word for reading.
Description, as the server wrote it Pending payment_requests on the customer's unpaid orders. Bearer + phone required.
list_productsBrowse the catalog with tag, brand, near_hex (color-distance shade match), hue_family, and sort filters.No findings
Why it is in this group
- The name "list_products" says "list": a word for reading.
Description, as the server wrote it Browse the catalog with tag, brand, near_hex (color-distance shade match), hue_family, and sort filters. Bearer becomes required when passing `phone` (rewards projection).
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http v1 https://makeup.land/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__v1__list_products",
"mcp__v1__list_brands",
"mcp__v1__get_customer",
"mcp__v1__get_cart",
"mcp__v1__list_orders",
"mcp__v1__list_payment_links",
"mcp__v1__get_customer_best_deals"
],
"ask": [
"mcp__v1__validate_gift_card"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as v1. Review it before you use it.