com.servecounter/booking

Est-ce que com.servecounter/booking est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.servecounter/booking » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• find_business≈ 720 tokens

  Find businesses on ServeCounter that take bookings from assistants: by name (`query`, at least 3 letters, such as "studio noord"), by trade (`trade`, such as "barber" or "nail-salon"; the trade's key or its English or Dutch name), by place (`city`, or `latitude` and `longitude` with `radiusKm`, 10 by default and at most 50) and, with `freeOn` (YYYY-MM-DD), only those with a free time that day. Give at least one of name, trade, city or coordinates. Needs no sign-in. Answers up to 20 businesses a page with their address, which the other tools take as `business`; ask again with the answer's `nextCursor` for the next page. How results are ordered, always the same way: nearest first when coordinates are given, then the earliest free time on `freeOn` when it is given, then name A to Z. A `city` alone only limits the results to that city: ServeCounter does not measure from a city's centre, so give coordinates for distance. A city alone is ordered by first free time, then name (the free time needs `freeOn`; without it, by name). There is no paid placement: no business can pay to be listed higher, and the answer says how it was ordered in `orderedBy`. Only businesses whose booking page is live and that allow assistants are listed.

  Paramètres, retour & exemple (9)

  Paramètres

  • city · string · optionnel
    The city, as it is written in the business's address, such as "Amsterdam". Limits the results to it; it does not rank by distance.
  • limit · integer · optionnel
    How many businesses a page: 20 by default and at most 20.
  • query · string · optionnel
    Part of the business's name or booking address, at least 3 letters.
  • trade · string · optionnel
    The trade: its key ("barber", "hairdresser", "nail-salon") or its English or Dutch name ("Kapsalon").
  • cursor · string · optionnel
    The `nextCursor` of the previous page of this same search.
  • freeOn · string · optionnel
    A day, YYYY-MM-DD: only businesses with a free time then, the earliest first after distance. At most 40 businesses are checked, in order of distance, then name, and the answer says when a request's limit on work left some unchecked.
  • latitude · number · optionnel
    Where you are looking from, WGS 84 degrees; needs `longitude`. Results are then the nearest first.
  • radiusKm · number · optionnel
    How far from the coordinates, in kilometres: 10 by default, at most 50.
  • longitude · number · optionnel
    WGS 84 degrees; needs `latitude`.

  Exemple d'appel

  {"name": "find_business", "arguments": {"city": "texte", "limit": 1, "query": "texte", "trade": "texte", "cursor": "texte", "freeOn": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_booking_status≈ 161 tokens

  Where an order you prepared stands: `open` (the person has not ordered yet), `booked` (with a link to manage it) or `ended` (expired). Only for orders of the person who allowed you. Needs their sign-in.

  Paramètres, retour & exemple (2)

  Paramètres

  • order · string · requis
    The order's code, the last part of the orderUrl, or the whole link.
  • business · string · requis
    The business's address.

  Exemple d'appel

  {"name": "get_booking_status", "arguments": {"order": "texte", "business": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_business≈ 187 tokens

  A business's locations, services, prices, add-ons and what it asks to be paid up front, the same as its booking page shows and nothing else. Needs no sign-in. With more than one open location, answer again with its `locationId` to see its services.

  Paramètres, retour & exemple (2)

  Paramètres

  • business · string · requis
    The business's address from find_business, such as "studio-noord", or its booking page link.
  • locationId · integer · optionnel
    A location's id, when the business has more than one open location.

  Exemple d'appel

  {"name": "get_business", "arguments": {"business": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_free_times≈ 311 tokens

  The free times for one service at one location, day by day, as the booking page offers them: at most 14 days a request. Needs no sign-in. Times are in the location's own time zone.

  Paramètres, retour & exemple (8)

  Paramètres

  • from · string · requis
    The first day, YYYY-MM-DD.
  • until · string · requis
    The last day, YYYY-MM-DD, at most 14 days from `from`.
  • addOnIds · array · optionnel
    Add-ons chosen with the service.
  • business · string · requis
    The business's address, such as "studio-noord".
  • personId · integer · optionnel
    Who it is with, from get_business people; leave out for no preference.
  • serviceId · integer · requis
    The service's id from get_business.
  • variantId · integer · optionnel
    A variant of the service, when it has them.
  • locationId · integer · requis
    The location's id from get_business.

  Exemple d'appel

  {"name": "get_free_times", "arguments": {"from": "texte", "until": "texte", "business": "texte", "serviceId": 1, "locationId": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• prepare_booking≈ 606 tokens

  Prepares a booking for the person who allowed you, for a free time. Nothing is booked yet: it returns a link (`orderUrl`) to give to the person. They read who the seller is and the terms, tick two boxes and press the button, and only then is it booked. Needs the person's own ServeCounter sign-in (OAuth). The booking is always for that person, whatever name or email you send; their phone number and full name are needed only when their account has none. Send an `idempotencyKey` (a new random value for each booking you mean to make) so that asking again after a lost answer is safe: the same key with the same arguments, within 24 hours, gives the first answer again and makes no second order; the same key with other arguments is refused with `idempotency-key-reused`.

  Paramètres, retour & exemple (12)

  Paramètres

  • date · string · requis
    The day, YYYY-MM-DD, from get_free_times.
  • name · string · optionnel
    The person's full name, if their account has none.
  • phone · string · optionnel
    The person's phone number, if their account has none.
  • start · string · requis
    The start time, HH:MM, from get_free_times.
  • payment · string · optionnel · now | at-shop
    Only where the business lets the customer choose: pay the full amount now, or pay at the business with a deposit now. Defaults to the deposit.
  • addOnIds · array · optionnel
    Add-ons chosen with the service.
  • business · string · requis
    The business's address, such as "studio-noord".
  • personId · integer · optionnel
    Who it is with; leave out for no preference.
  • serviceId · integer · requis
    The service's id from get_business.
  • variantId · integer · optionnel
    A variant of the service, when it has them.
  • locationId · integer · requis
    The location's id from get_business.
  • idempotencyKey · string · optionnel
    A value you make up once per booking, at most 255 characters, such as a UUID. Send the same one again only to repeat this same call.

  Exemple d'appel

  {"name": "prepare_booking", "arguments": {"date": "texte", "start": "texte", "business": "texte", "serviceId": 1, "locationId": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.servecounter.com/mcp