Skip to content

org.cashbackpro/cashbackpro

by cashbackpro.org · remote · no sign-in to list tools · v0.3.0 · published by org.cashbackpro

Search AliExpress with real prices, live promo codes and the true post-cashback cost.

Changes · 2

5 tools: 2 change things and 3 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cashbackpro https://cashbackpro.org/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "get_cashback_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_cashback_link" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Changes things 2Claude Code: ask
  • calculate_cashbackWork out the cashback on a purchase: commission = price × commission rate, of which the buyer receives a share set by their CashbackPro level (Bronze 30%, Silver 45%, Gold 60%, Pla…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Work out the cashback on a purchase: commission = price × commission rate, of which the buyer receives a share set by their CashbackPro level (Bronze 30%, Silver 45%, Gold 60%, Platinum 80%). Returns the figure for every level. Pure calculation — nothing is looked up.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 3Claude Code: allow
  • get_product_detailsLook up one AliExpress product by its numeric ID: authoritative price, rating, sales volume, commission rate and category, plus what the cashback would come to at each CashbackPro …No findings

    Why it is in this group

    • The name "get_product_details" says "get": a word for reading.
    Description, as the server wrote it
    Look up one AliExpress product by its numeric ID: authoritative price, rating, sales volume, commission rate and category, plus what the cashback would come to at each CashbackPro level.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_promo_codesAliExpress promo codes currently active on the global (USD) site: platform-wide codes and product-specific ones, with minimum spend, remaining quantity and expiry.No findings

    Why it is in this group

    • The name "get_promo_codes" says "get": a word for reading.
    Description, as the server wrote it
    AliExpress promo codes currently active on the global (USD) site: platform-wide codes and product-specific ones, with minimum spend, remaining quantity and expiry. Expired codes are excluded and the set refreshes daily. Codes stack with cashback, so a code and a CashbackPro link apply to the same purchase.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_productsSearch the AliExpress catalogue and return compact product cards with price, rating, sales volume and the affiliate commission rate — the data needed to judge what a product actual…No findings

    Why it is in this group

    • The name "search_products" says "search": a word for reading.
    Description, as the server wrote it
    Search the AliExpress catalogue and return compact product cards with price, rating, sales volume and the affiliate commission rate — the data needed to judge what a product actually costs. Low-quality listings are filtered out automatically (blocked categories, minimum price). Product URLs in the result are CashbackPro affiliate links.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cashbackpro https://cashbackpro.org/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cashbackpro__search_products",
      "mcp__cashbackpro__get_product_details",
      "mcp__cashbackpro__get_promo_codes"
    ],
    "ask": [
      "mcp__cashbackpro__calculate_cashback",
      "mcp__cashbackpro__get_cashback_link"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cashbackpro. Review it before you use it.