org. cashbackpro/ cashbackpro
by cashbackpro.org · remote · no sign-in to list tools · v0.3.0 · published by org.cashbackpro
Search AliExpress with real prices, live promo codes and the true post-cashback cost.
5 tools: 2 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http cashbackpro https://cashbackpro.org/api/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "get_cashback_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_cashback_link" says "get": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Changes things 2Claude Code: ask
calculate_cashbackWork out the cashback on a purchase: commission = price × commission rate, of which the buyer receives a share set by their CashbackPro level (Bronze 30%, Silver 45%, Gold 60%, Pla…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Work out the cashback on a purchase: commission = price × commission rate, of which the buyer receives a share set by their CashbackPro level (Bronze 30%, Silver 45%, Gold 60%, Platinum 80%). Returns the figure for every level. Pure calculation — nothing is looked up.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_cashback_linkReturn the CashbackPro purchase link for an AliExpress product.1 finding
Why it is in this group
- The name "get_cashback_link" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_cashback_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_cashback_link" says "get": a word for reading.
Description, as the server wrote it Return the CashbackPro purchase link for an AliExpress product. These are affiliate links: with a connected CashbackPro account (extension token in the Authorization Bearer header, obtained at https://cashbackpro.org/connect-extension?utm_source=mcp) part of the commission goes back to the buyer as cashback; without one the link still works but pays none. Which case applies is stated in the response, along with the disclosure text to pass on to the user.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 3Claude Code: allow
get_product_detailsLook up one AliExpress product by its numeric ID: authoritative price, rating, sales volume, commission rate and category, plus what the cashback would come to at each CashbackPro …No findings
Why it is in this group
- The name "get_product_details" says "get": a word for reading.
Description, as the server wrote it Look up one AliExpress product by its numeric ID: authoritative price, rating, sales volume, commission rate and category, plus what the cashback would come to at each CashbackPro level.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_promo_codesAliExpress promo codes currently active on the global (USD) site: platform-wide codes and product-specific ones, with minimum spend, remaining quantity and expiry.No findings
Why it is in this group
- The name "get_promo_codes" says "get": a word for reading.
Description, as the server wrote it AliExpress promo codes currently active on the global (USD) site: platform-wide codes and product-specific ones, with minimum spend, remaining quantity and expiry. Expired codes are excluded and the set refreshes daily. Codes stack with cashback, so a code and a CashbackPro link apply to the same purchase.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_productsSearch the AliExpress catalogue and return compact product cards with price, rating, sales volume and the affiliate commission rate — the data needed to judge what a product actual…No findings
Why it is in this group
- The name "search_products" says "search": a word for reading.
Description, as the server wrote it Search the AliExpress catalogue and return compact product cards with price, rating, sales volume and the affiliate commission rate — the data needed to judge what a product actually costs. Low-quality listings are filtered out automatically (blocked categories, minimum price). Product URLs in the result are CashbackPro affiliate links.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.3.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http cashbackpro https://cashbackpro.org/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__cashbackpro__search_products",
"mcp__cashbackpro__get_product_details",
"mcp__cashbackpro__get_promo_codes"
],
"ask": [
"mcp__cashbackpro__calculate_cashback",
"mcp__cashbackpro__get_cashback_link"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cashbackpro. Review it before you use it.