com.postalform/postalform

Est-ce que com.postalform/postalform est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.postalform/postalform » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• complete_checkout≈ 2134 tokens

  After the buyer approves the prepared order and total, pay its existing checkout session using a compatible Stripe payment token, including a shared payment token (spt_...). Pass the order ID as checkout_session_id; do not resend the document or addresses. On an interrupted request, retry the same checkout and token. Existing authorized, processing, or paid payments are reused; follow the returned status and messages.

  Paramètres, retour & exemple (3)

  Paramètres

  • buyer · ? · requis
    Buyer identity details for the approved checkout.
  • payment_data · object · requis
    Buyer-authorized payment token details. Use provider=stripe.
  • checkout_session_id · string · requis
    The checkout session id to finalize.

  Exemple d'appel

  {"name": "complete_checkout", "arguments": {"buyer": "texte", "payment_data": {}, "checkout_session_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "buyer": {}, "links": [], "order": {}, "status": "not_ready_for_payment", "totals": [], "currency": "texte", "messages": [], "line_items": [], "fulfillment_address": {}, "fulfillment_options": [], "fulfillment_option_id": "texte"}}

• postalform.create_form_order_draft≈ 2649 tokens

  Prepare a supported workflow form for mailing and return the order ID, total, hosted checkout URL, and checkout session. After buyer approval, a compatible client can use complete_checkout with a Stripe shared payment token; otherwise present the hosted checkout URL. To prepare for MPP, set payment_protocol=mpp and buyer_email; receive a PDF preview, hosted checkout_url fallback and MPP challenge, then use postalform.pay_order with the order_id after buyer approval. Draft creation never pays. For x402, use postalform.create_machine_order.

  Paramètres, retour & exemple (23)

  Paramètres

  • slug · string · requis
  • color · boolean · optionnel
  • fields · object · optionnel
  • certified · boolean · optionnel
  • buyer_name · string · optionnel
    Receipt name; defaults to sender_name for MPP.
  • mail_class · string · optionnel · standard | priority | express
  • request_id · string · optionnel
  • attachments · array · optionnel
  • buyer_email · string · optionnel
    Required for MPP receipt delivery.
  • sender_name · string · requis
  • double_sided · boolean · optionnel
  • recipient_name · string · optionnel
  • payment_protocol · string · optionnel · hosted | mpp
    Optional payment path. Defaults to hosted checkout. Choose mpp to return a payment challenge for this same prepared order; buyer_email is required. Draft creation never pays.
  • sender_address_id · string · optionnel
  • sender_address_text · string · optionnel
  • sender_address_type · string · requis · Address | Container | Manual
  • recipient_address_id · string · optionnel
  • sender_address_manual · object · optionnel
  • recipient_address_text · string · optionnel
  • recipient_address_type · string · optionnel · Address | Container | Manual
  • use_workflow_recipient · boolean · optionnel
    Deprecated compatibility field. Predefined and computed workflow recipients are always enforced and cannot be overridden.
  • certified_return_receipt · boolean · optionnel
  • recipient_address_manual · object · optionnel

  Exemple d'appel

  {"name": "postalform.create_form_order_draft", "arguments": {"slug": "texte", "sender_name": "texte", "sender_address_type": "Address"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "payment": {}, "order_id": "texte", "price_usd": "texte", "page_count": "texte", "preview_url": "texte", "sender_name": "texte", "checkout_url": "texte", "recipient_name": "texte", "checkout_session": {}, "payment_protocol": "hosted", "sender_address_text": "texte"}}

• postalform.create_letter_order_draft≈ 2714 tokens

  Prepare letter text for mailing and return the order ID, total, hosted checkout URL, and checkout session. Accepts text directly; no PDF upload or browser is needed. Letter drafts may include typed or drawn signatures. After buyer approval, a compatible client can use complete_checkout with a Stripe shared payment token; otherwise present the hosted checkout URL. To prepare for MPP, set payment_protocol=mpp and buyer_email; receive a PDF preview, hosted checkout_url fallback and MPP challenge, then use postalform.pay_order with the order_id after buyer approval. Draft creation never pays. For x402, use postalform.create_machine_order.

  Paramètres, retour & exemple (20)

  Paramètres

  • color · boolean · optionnel
  • letter · object · requis
  • certified · boolean · optionnel
  • buyer_name · string · optionnel
    Receipt name; defaults to sender_name for MPP.
  • mail_class · string · optionnel · standard | priority | express
  • request_id · string · optionnel
  • buyer_email · string · optionnel
    Required for MPP receipt delivery.
  • sender_name · string · requis
  • double_sided · boolean · optionnel
  • recipient_name · string · requis
  • payment_protocol · string · optionnel · hosted | mpp
    Optional payment path. Defaults to hosted checkout. Choose mpp to return a payment challenge for this same prepared order; buyer_email is required. Draft creation never pays.
  • sender_address_id · string · optionnel
  • sender_address_text · string · optionnel
  • sender_address_type · string · requis · Address | Container | Manual
  • recipient_address_id · string · optionnel
  • sender_address_manual · object · optionnel
  • recipient_address_text · string · optionnel
  • recipient_address_type · string · requis · Address | Container | Manual
  • certified_return_receipt · boolean · optionnel
  • recipient_address_manual · object · optionnel

  Exemple d'appel

  {"name": "postalform.create_letter_order_draft", "arguments": {"letter": {}, "sender_name": "texte", "recipient_name": "texte", "sender_address_type": "Address", "recipient_address_type": "Address"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "payment": {}, "order_id": "texte", "price_usd": "texte", "page_count": "texte", "preview_url": "texte", "sender_name": "texte", "checkout_url": "texte", "recipient_name": "texte", "checkout_session": {}, "payment_protocol": "hosted", "sender_address_text": "texte"}}

• postalform.create_machine_order≈ 3079 tokens

  Create a single PDF, letter, workflow-form order, or bulk letter campaign and pay through MPP or x402 after buyer approval. For bulk, provide exactly one of bulk.csv_content or bulk.recipients (JSON address objects with optional merge_fields), plus a shared PDF or text/HTML template. Omit top-level recipient fields and review campaign_url, recipient count and total. Bulk MPP orders can also use postalform.pay_order after fetching its challenge. The unpaid response also includes checkout_url and status_url for this same order. Without an available compatible wallet, give the buyer checkout_url and poll status_url; never recreate the order to change payment paths. Single-recipient clients with a Stripe shared payment token can instead use a draft tool followed by complete_checkout; other clients should present the hosted checkout URL.

  Paramètres, retour & exemple (29)

  Paramètres

  • pdf · ? · optionnel
    Existing PDF to mail. For a single recipient, provide exactly one of pdf, letter, or form. For bulk.content_mode=pdf, this PDF is sent to every CSV or JSON recipient. Prefer upload_token from postalform.create_pdf_upload.
  • bulk · object · optionnel
    Bulk letter campaign: exactly one of csv_content or recipients (JSON list), plus shared PDF or text/HTML template. Omit single-recipient fields, letter, form, and postcard options. color and double_sided apply to every mailpiece.
  • form · object · optionnel
    Workflow form payload from postalform.get_form_schema. Provide exactly one of pdf, letter, or form.
  • color · boolean · optionnel
  • letter · object · optionnel
    Letter text to render and mail. Provide exactly one of pdf, letter, or form. Optional format may be text, html, markdown, or rtf; default is text. Optional signature may be a typed string or drawn signature payload.
  • certified · boolean · optionnel
  • file_name · string · optionnel
  • buyer_name · string · requis
    Buyer name for receipts.
  • mail_class · string · optionnel · standard | priority | express
  • request_id · string · optionnel
    Idempotency key. Reuse the same value and same order fields after a payment challenge.
  • buyer_email · string · requis
    Buyer email for receipts.
  • sender_name · string · requis
  • double_sided · boolean · optionnel
  • postcard_size · string · optionnel · 4x6 | 6x9 | 11x6
  • mailpiece_type · string · optionnel · letter | postcard
  • recipient_name · string · optionnel
    Required for a single recipient. Omit when bulk supplies the recipient list.
  • payment_protocol · string · optionnel · mpp | x402
    Direct machine payment protocol. Use mpp for Link CLI/Link MCP or Stripe SPT; use x402 for x402 wallet clients. Defaults to mpp.
  • payment_signature · string · optionnel
    x402 retry value after paying the PAYMENT-REQUIRED challenge.
  • sender_address_id · string · optionnel
  • signature_required · boolean · optionnel
  • sender_address_text · string · optionnel
  • sender_address_type · string · optionnel · Address | Manual
  • recipient_address_id · string · optionnel
  • payment_authorization · string · optionnel
    MPP retry value after paying with Link CLI/Link MCP. Pass the full Authorization header value, usually "Payment ...".
  • sender_address_manual · object · optionnel
  • recipient_address_text · string · optionnel
  • recipient_address_type · string · optionnel · Address | Manual
  • certified_return_receipt · boolean · optionnel
  • recipient_address_manual · object · optionnel

  Exemple d'appel

  {"name": "postalform.create_machine_order", "arguments": {"buyer_name": "texte", "buyer_email": "texte", "sender_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bulk": {}, "view": "texte", "status": "texte", "is_paid": true, "payment": "texte", "currency": "texte", "endpoint": "texte", "order_id": "texte", "protocol": "mpp", "next_step": "texte", "price_usd": "texte", "page_count": "texte"}}

• postalform.create_order_draft≈ 3098 tokens

  Prepare an existing PDF for mailing and return the order ID, total, hosted checkout URL, and checkout session. After buyer approval, a compatible client can pass a Stripe shared payment token to complete_checkout; otherwise present the hosted checkout URL. To prepare for MPP, set payment_protocol=mpp and buyer_email; receive a PDF preview, hosted checkout_url fallback and MPP challenge, then use postalform.pay_order with the order_id after buyer approval. Draft creation never pays. For x402, use postalform.create_machine_order.

  Paramètres, retour & exemple (21)

  Paramètres

  • pdf · ? · requis
    The PDF to mail. Accepts attachment objects ({ download_url, file_id }). Fallbacks: upload_token from postalform.create_pdf_upload, data:application/pdf;base64,..., or a public HTTPS download URL.
  • color · boolean · optionnel
    Whether to print in color (default: false).
  • certified · boolean · optionnel
    Whether to add proof mail: USPS Certified Mail for US destinations, Canada Post Registered Mail through PostGrid for Canadian destinations, or PinGen registered mail for supported European destinations (default: false).
  • file_name · string · optionnel
    Optional display file name.
  • buyer_name · string · optionnel
    Receipt name; defaults to sender_name for MPP.
  • mail_class · string · optionnel · standard | priority | express
    Mail service level (standard, priority, express).
  • request_id · string · optionnel
    Optional idempotency key. Reuse the same value if retrying the call.
  • buyer_email · string · optionnel
    Required for MPP receipt delivery.
  • sender_name · string · requis
    Sender's name (return address).
  • double_sided · boolean · optionnel
    Whether to print double-sided (default: true).
  • recipient_name · string · requis
    Recipient's name.
  • payment_protocol · string · optionnel · hosted | mpp
    Optional payment path. Defaults to hosted checkout. Choose mpp to return a payment challenge for this same prepared order; buyer_email is required. Draft creation never pays.
  • sender_address_id · string · optionnel
    Loqate address id for the sender (required when sender_address_type is Address).
  • sender_address_text · string · optionnel
    Human-readable sender address preview (required when sender_address_type is Address; optional for Manual).
  • sender_address_type · string · requis · Address | Container | Manual
    Address suggestion type for the sender (from postalform.search_addresses). Use Manual to pass a structured address with countryCode when outside the US.
  • recipient_address_id · string · optionnel
    Loqate address id for the recipient (required when recipient_address_type is Address).
  • sender_address_manual · object · optionnel
    Sender manual address fields (required when sender_address_type is Manual).
  • recipient_address_text · string · optionnel
    Human-readable recipient address preview (required when recipient_address_type is Address; optional for Manual).
  • recipient_address_type · string · requis · Address | Container | Manual
    Address suggestion type for the recipient (from postalform.search_addresses). Use Manual to pass a structured address with countryCode when outside the US.
  • certified_return_receipt · boolean · optionnel
    Add Electronic Return Receipt for US Certified Mail. Ignored for Canada Post Registered Mail and PinGen registered-mail destinations (default: false).
  • recipient_address_manual · object · optionnel
    Recipient manual address fields (required when recipient_address_type is Manual).

  Exemple d'appel

  {"name": "postalform.create_order_draft", "arguments": {"pdf": "texte", "sender_name": "texte", "recipient_name": "texte", "sender_address_type": "Address", "recipient_address_type": "Address"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "payment": {}, "order_id": "texte", "price_usd": "texte", "page_count": "texte", "preview_url": "texte", "sender_name": "texte", "checkout_url": "texte", "recipient_name": "texte", "checkout_session": {}, "payment_protocol": "hosted", "sender_address_text": "texte"}}

• postalform.create_pdf_upload≈ 440 tokens

  Use this when the host cannot provide a PDF file param directly. It creates a short-lived PDF upload URL and upload token (multipart/form-data, file field). Let the HTTP client generate Content-Type with its multipart boundary.

  Paramètres, retour & exemple (4)

  Paramètres

  • file_name · string · optionnel
    Optional original file name.
  • request_id · string · optionnel
    Optional idempotency key. Reuse the same value if retrying the call.
  • content_type · string · optionnel
    Optional content type hint (application/pdf).
  • content_length · integer · optionnel
    Optional content length in bytes.

  Exemple d'appel

  {"name": "postalform.create_pdf_upload", "arguments": {"file_name": "texte", "request_id": "texte", "content_type": "texte", "content_length": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"max_bytes": 1, "expires_at": "texte", "upload_url": "texte", "upload_token": "texte", "required_headers": {}}}

• postalform.get_form_schema≈ 763 tokens

  Use this when you need a machine-usable schema for one supported single-mailpiece PostalForm workflow (fields, groups, attachments, and dependencies).

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    Workflow slug (e.g. "8822").

  Exemple d'appel

  {"name": "postalform.get_form_schema", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"llms": true, "name": "texte", "slug": "texte", "fields": [], "groups": [], "topics": [], "aliases": [], "pricing": {}, "category": "texte", "bulk_form": "texte", "indexable": true, "recipient": {}}}

• postalform.get_order_status≈ 1236 tokens

  Read payment, processing, stored mailing/carrier status, the latest 50 public tracking events, and electronic return receipt availability. Bulk orders also return campaign_url, recipient count and per-status counts; use the campaign dashboard for individual recipients. Missing carrier evidence is null; processing or a tracking number alone does not prove mailing or delivery. This read does not pay, mail, or acquire receipts.

  Paramètres, retour & exemple (1)

  Paramètres

  • order_id · string · requis
    PostalForm order id.

  Exemple d'appel

  {"name": "postalform.get_order_status", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bulk": {}, "view": "texte", "error": "texte", "found": true, "carrier": "texte", "is_paid": true, "order_id": "texte", "signed_by": "texte", "page_count": "texte", "status_url": "texte", "next_action": "texte", "campaign_url": "texte"}}

• postalform.list_forms≈ 485 tokens

  Use this when you need the published single-mailpiece PostalForm workflow catalog available to agents. Coordinated statutory multi-recipient workflows are excluded.

  Paramètres, retour & exemple (3)

  Paramètres

  • q · string · optionnel
    Optional search query (matches slug/name).
  • limit · integer · optionnel
    Max results (default 50).
  • cursor · string · optionnel
    Pagination cursor (opaque string).

  Exemple d'appel

  {"name": "postalform.list_forms", "arguments": {"q": "texte", "limit": 1, "cursor": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"forms": [], "next_cursor": "texte"}}

• postalform.pay_order≈ 1026 tokens

  Get an MPP challenge or pay an existing MPP PDF, letter, workflow-form order, or bulk letter campaign after buyer approval. Use the order_id returned by any draft tool with payment_protocol=mpp or by create_machine_order. When switching from create_machine_order, omit the credential first to get this payment endpoint’s challenge. Review the preview or campaign_url, recipient count and total. No document or addresses are resubmitted. Without payment_authorization this only returns a challenge; with it, this can pay and send real mail. Reuse the same order_id on retries and follow the returned payment status.

  Paramètres, retour & exemple (2)

  Paramètres

  • order_id · string · requis
  • payment_authorization · string · optionnel
    Buyer-approved MPP Authorization header, usually Payment ... . Omit to retrieve the challenge.

  Exemple d'appel

  {"name": "postalform.pay_order", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bulk": {}, "view": "texte", "status": "texte", "is_paid": true, "payment": "texte", "currency": "texte", "endpoint": "texte", "order_id": "texte", "protocol": "mpp", "next_step": "texte", "price_usd": "texte", "page_count": "texte"}}

• postalform.ping≈ 166 tokens

  Use this when you want a quick health check that the PostalForm MCP server is reachable.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "postalform.ping", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "title": "texte", "message": "texte"}}

• postalform.preview_letter_order_draft≈ 1824 tokens

  Use this to prepare a non-writing preview for a mailed letter before creating checkout. It renders the letter, validates the addresses, and returns a widget with a create-draft action.

  Paramètres, retour & exemple (17)

  Paramètres

  • color · boolean · optionnel
  • letter · object · requis
  • certified · boolean · optionnel
  • mail_class · string · optionnel · standard | priority | express
  • request_id · string · optionnel
  • sender_name · string · requis
  • double_sided · boolean · optionnel
  • recipient_name · string · requis
  • sender_address_id · string · optionnel
  • sender_address_text · string · optionnel
  • sender_address_type · string · requis · Address | Container | Manual
  • recipient_address_id · string · optionnel
  • sender_address_manual · object · optionnel
  • recipient_address_text · string · optionnel
  • recipient_address_type · string · requis · Address | Container | Manual
  • certified_return_receipt · boolean · optionnel
  • recipient_address_manual · object · optionnel

  Exemple d'appel

  {"name": "postalform.preview_letter_order_draft", "arguments": {"letter": {}, "sender_name": "texte", "recipient_name": "texte", "sender_address_type": "Address", "recipient_address_type": "Address"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "price_usd": 1, "page_count": 1, "sender_name": "texte", "draft_request": {}, "recipient_name": "texte", "sender_address_text": "texte", "recipient_address_text": "texte"}}

• postalform.search_addresses≈ 469 tokens

  Use this to search for a mailing address and return Loqate suggestions with IDs. Pass country_code to filter by country; it defaults to US. If a suggestion has type "Container" (building/complex), call this tool again with container=<id> and a refined query to drill down to type "Address". Only type "Address" is valid for order creation.

  Paramètres, retour & exemple (4)

  Paramètres

  • query · string · requis
    Partial address text, e.g. "123 Main St"
  • target · string · optionnel · sender | recipient
    Which address field is being searched (used for UI context).
  • container · string · optionnel
    Loqate container id for drilling into suggestions, if provided
  • country_code · string · optionnel
    Two-letter country code to filter suggestions. Defaults to US.

  Exemple d'appel

  {"name": "postalform.search_addresses", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"view": "texte", "query": "texte", "target": "sender", "suggestions": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://postalform.com/mcp