pl.szuruszuru/booking

Est-ce que pl.szuruszuru/booking est sûr ?

Au dernier audit MCP Hub, le serveur MCP « pl.szuruszuru/booking » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• calculate_quote≈ 837 tokens

  PURPOSE: Calculates the price of an order (unit prices, quantity discounts, add-ons, travel fee, minimum order) for a postal code. Returns quote_id (valid 30 minutes). WHEN TO USE: Whenever the customer asks how much a cleaning costs and you know the service(s), quantity and postal code. Also the first step before check_availability. WHEN NOT TO USE: Not for checking dates and never as a booking - it reserves nothing. REQUIRED: postal_code; items[] with service (id from list_upholstery_services) and quantity. Add-ons optional (names from the catalog; close spellings are matched, unknown ones return error unsupported_addon with allowed_addons). If postal code, service or quantity is unknown, ask the customer - do not guess. SIDE EFFECTS: none for the customer (stores a 30-minute quote only). CONSTRAINTS: Report total_from exactly; never estimate or adjust prices. Area not served -> error unsupported_postcode. below_min_order=true -> ask the customer to add a service before booking.

  Paramètres, retour & exemple (3)

  Paramètres

  • items · array · requis
    Services to price
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • postal_code · string · requis
    Polish postal code NN-NNN, e.g. 80-180

  Exemple d'appel

  {"name": "calculate_quote", "arguments": {"items": [], "postal_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "items": [], "message": "texte", "success": true, "currency": "texte", "quote_id": "texte", "expires_at": "texte", "session_id": "texte", "total_from": 1, "delivery_fee": 1, "missing_fields": []}}

• cancel_booking≈ 752 tokens

  PURPOSE: Cancels the verified customer's existing booking. Irreversible. WHEN TO USE: Only after the customer explicitly confirmed they want to cancel this specific booking (reference and date read back to them). WHEN NOT TO USE: Not to change the date (use reschedule_booking), never on an unclear request. REQUIRED: booking_reference, customer_grant (or a signed-in customer). reason and idempotency_key optional. SIDE EFFECTS: cancels the booking and notifies the customer by SMS/e-mail. Repeating the same call returns the same result.

  Paramètres, retour & exemple (5)

  Paramètres

  • reason · string · optionnel
    Optional short reason given by the customer
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • customer_grant · string · optionnel
    customer_grant returned by verify_phone_code
  • idempotency_key · string · optionnel
    Optional. Same value when retrying the same request. If omitted, the server derives the key from the request, so a retry never creates a second booking.
  • booking_reference · string · requis

  Exemple d'appel

  {"name": "cancel_booking", "arguments": {"booking_reference": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "date": "texte", "time": "texte", "error": "texte", "price": 1, "total": 1, "end_at": "texte", "status": "texte", "message": "texte", "success": true, "currency": "texte", "start_at": "texte"}}

• check_availability≈ 1027 tokens

  PURPOSE: Returns real, currently free appointment slots for a quote_id (new booking) or for an existing booking_reference (rescheduling, needs customer_grant). WHEN TO USE: When the customer asks when we can come, after calculate_quote. wanted.type: asap (earliest), date (one day), range (from-to), preferred (a day + nearby days, sorted by preferred_time); optional part_of_day. If type is omitted it follows the fields given (date -> date, from/to -> range, nothing -> asap). WHEN NOT TO USE: Never to book - it reserves nothing and holds no slot. REQUIRED: quote_id (or booking_reference + customer_grant). Dates as YYYY-MM-DD, Polish time. SIDE EFFECTS: none (read-only; slot_id values are valid ~15 minutes). RESULT: slots found -> success=true, slots[]. None in the requested period -> success=false, error="no_availability", next_available (date or null) and alternative_slots[] - offer those. Past date -> error date_in_past; beyond the online booking horizon -> error date_out_of_range. Never invent a slot.

  Paramètres, retour & exemple (5)

  Paramètres

  • wanted · object · optionnel
    Optional preference; empty = earliest slots
  • quote_id · string · optionnel
    quote_id from calculate_quote (new booking)
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • customer_grant · string · optionnel
    customer_grant returned by verify_phone_code
  • booking_reference · string · optionnel
    Existing booking to reschedule (requires customer_grant)

  Exemple d'appel

  {"name": "check_availability", "arguments": {"wanted": {}, "quote_id": "texte", "session_id": "texte", "customer_grant": "texte", "booking_reference": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "slots": [], "reason": "texte", "message": "texte", "success": true, "searched": {}, "session_id": "texte", "missing_fields": [], "next_available": "texte", "alternative_slots": []}}

• check_service_area≈ 467 tokens

  PURPOSE: Checks whether SzuruSzuru serves a Polish postal code. WHEN TO USE: When the customer asks whether we come to their town/postal code. WHEN NOT TO USE: Not needed before calculate_quote (calculate_quote checks the area itself). Never use it to reserve anything. REQUIRED: postal_code (NN-NNN). SIDE EFFECTS: none (read-only). RESULT: served -> success=true, available=true, city. Not served -> success=false, error="unsupported_postcode", available=false - tell the customer we do not serve this code; do not continue to quote or booking.

  Paramètres, retour & exemple (2)

  Paramètres

  • session_id · string · optionnel
    Optional, ignored by this tool.
  • postal_code · string · requis
    Polish postal code NN-NNN, e.g. 80-180

  Exemple d'appel

  {"name": "check_service_area", "arguments": {"postal_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"city": "texte", "code": "texte", "error": "texte", "message": "texte", "success": true, "postcode": "texte", "available": true, "session_id": "texte", "postal_code": "texte", "missing_fields": []}}

• create_booking≈ 862 tokens

  PURPOSE: Step 2 of 2 of booking. Creates the real, confirmed SzuruSzuru booking for a confirmation_id from prepare_booking, using the 6-digit SMS code the customer received. WHEN TO USE: Only after prepare_booking succeeded and the customer has typed the SMS code in the conversation. WHEN NOT TO USE: Never to check price or availability, never without a code from the customer, never with a guessed or example code. REQUIRED: confirmation_id, sms_code. idempotency_key optional. Missing data -> error missing_required_fields; nothing is created. SIDE EFFECTS: creates a booking (a technician is scheduled) and sends SMS/e-mail confirmation to the customer. Idempotent: repeating the call with the same confirmation_id and code returns the SAME booking - it never creates a second one. RESULT: success=true, booking_id, status, date, time (Polish time), price, currency. Give these to the customer. Wrong code -> error verification_failed with attempts_left.

  Paramètres, retour & exemple (4)

  Paramètres

  • sms_code · string · requis
    6-digit code the customer received by SMS
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • confirmation_id · string · requis
    confirmation_id from prepare_booking
  • idempotency_key · string · optionnel
    Optional. Same value when retrying the same request. If omitted, the server derives the key from the request, so a retry never creates a second booking.

  Exemple d'appel

  {"name": "create_booking", "arguments": {"sms_code": "texte", "confirmation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "date": "texte", "time": "texte", "error": "texte", "price": 1, "total": 1, "end_at": "texte", "status": "texte", "message": "texte", "success": true, "currency": "texte", "start_at": "texte"}}

• get_my_bookings≈ 679 tokens

  PURPOSE: Lists the verified customer's bookings from the last 90 days (or one booking by booking_reference): reference, services, date, time, price, status, can_reschedule, can_cancel. WHEN TO USE: When the customer asks about their existing booking(s). WHEN NOT TO USE: Not for new bookings. Without customer_grant it returns error verification_required - then run start_phone_verification -> verify_phone_code. REQUIRED: customer_grant (or a signed-in customer). SIDE EFFECTS: none (read-only). Never shows other customers' data.

  Paramètres, retour & exemple (3)

  Paramètres

  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • customer_grant · string · optionnel
    customer_grant returned by verify_phone_code
  • booking_reference · string · optionnel
    Optional: one booking instead of the list

  Exemple d'appel

  {"name": "get_my_bookings", "arguments": {"session_id": "texte", "customer_grant": "texte", "booking_reference": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "date": "texte", "time": "texte", "count": 1, "error": "texte", "price": 1, "total": 1, "end_at": "texte", "status": "texte", "message": "texte", "success": true, "bookings": []}}

• get_service_requirements≈ 445 tokens

  PURPOSE: Returns the details of ONE service: unit (piece / m2 / mattress side), allowed quantity, add-on names and prices, short description and FAQ. WHEN TO USE: When the request is ambiguous (e.g. which corner sofa size, carpet area in m2, which add-ons exist for this service). WHEN NOT TO USE: Not for prices of an order (use calculate_quote) or availability. REQUIRED: service (id from list_upholstery_services). SIDE EFFECTS: none (read-only).

  Paramètres, retour & exemple (2)

  Paramètres

  • service · string · requis
    Service id from list_upholstery_services, e.g. pranie_naroznika_l_4_5_os
  • session_id · string · optionnel
    Optional, ignored by this tool.

  Exemple d'appel

  {"name": "get_service_requirements", "arguments": {"service": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "code": "texte", "unit": "texte", "error": "texte", "message": "texte", "name_pl": "texte", "success": true, "session_id": "texte", "price_model": {}, "missing_fields": []}}

• list_upholstery_services≈ 524 tokens

  PURPOSE: Lists SzuruSzuru services (mobile upholstery, corner sofa, armchair, carpet, rug and mattress cleaning at the customer's home, Pomeranian region, Poland) with service ids, unit prices in PLN, units and add-on names. WHEN TO USE: To find the service id and exact add-on names before calculate_quote, or when the customer asks what is offered. WHEN NOT TO USE: Not for a price of a concrete order (use calculate_quote), not for coverage (check_service_area) or dates (check_availability). REQUIRED: nothing. SIDE EFFECTS: none (read-only). CONSTRAINTS: Prices come only from this catalog and calculate_quote - never estimate a price.

  Paramètres, retour & exemple (2)

  Paramètres

  • category · string · optionnel · chairs | furniture | leather | mattress | carpet
    Optional filter (furniture = sofas, corner sofas, armchairs; leather = leather furniture)
  • session_id · string · optionnel
    Optional, ignored by this tool.

  Exemple d'appel

  {"name": "list_upholstery_services", "arguments": {"category": "chairs", "session_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "message": "texte", "success": true, "services": [], "session_id": "texte", "pricing_rules": {}, "missing_fields": [], "catalog_version": "texte"}}

• prepare_booking≈ 1044 tokens

  PURPOSE: Step 1 of 2 of booking. Holds the chosen slot for 10 minutes and sends a 6-digit SMS code to the customer's Polish mobile. Returns confirmation_id and a summary to show verbatim. Does NOT create a booking. WHEN TO USE: Only after the customer explicitly said they want to book THIS slot, gave first and last name, street address with number and mobile phone, and accepted the terms. WHEN NOT TO USE: Not for price or date questions, not when the customer says "maybe" or only asks how much / when. Never guess or invent missing data - ask. REQUIRED: quote_id, slot_id (from check_availability), customer.name, customer.address, customer.phone, terms_accepted=true. Missing data -> error missing_required_fields with missing_fields[]. SIDE EFFECTS: one SMS to the phone + 10-minute slot hold. The identical call repeated returns the same confirmation_id, no new SMS. NEXT: ask the customer for the SMS code, then call create_booking.

  Paramètres, retour & exemple (7)

  Paramètres

  • notes · string · optionnel
    Optional note for the cleaner (fabric type, stains, parking)
  • slot_id · string · requis
    slot_id chosen by the customer from check_availability
  • customer · object · requis
  • quote_id · string · requis
    quote_id from calculate_quote
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • invoice_data · object · optionnel
    Optional, only if the customer wants a company invoice
  • terms_accepted · boolean · requis
    true only if the customer explicitly accepted the terms and consents. false -> the server returns the consent text to show.

  Exemple d'appel

  {"name": "prepare_booking", "arguments": {"slot_id": "texte", "customer": {}, "quote_id": "texte", "terms_accepted": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "total": 1, "status": "texte", "message": "texte", "success": true, "summary": "texte", "currency": "texte", "expires_at": "texte", "session_id": "texte", "code_sent_to": "texte", "missing_fields": []}}

• reschedule_booking≈ 792 tokens

  PURPOSE: Moves the verified customer's existing booking to a new slot. Price and services stay the same. WHEN TO USE: Only after check_availability(booking_reference) and after the customer explicitly confirmed the new date and time. WHEN NOT TO USE: Not for new bookings, not to change services or price. REQUIRED: booking_reference, slot_id (from check_availability with that booking_reference), customer_grant (or a signed-in customer). idempotency_key optional. SIDE EFFECTS: changes the booking and notifies the customer by SMS/e-mail. Repeating the same call returns the same result.

  Paramètres, retour & exemple (5)

  Paramètres

  • slot_id · string · requis
    slot_id from check_availability(booking_reference)
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • customer_grant · string · optionnel
    customer_grant returned by verify_phone_code
  • idempotency_key · string · optionnel
    Optional. Same value when retrying the same request. If omitted, the server derives the key from the request, so a retry never creates a second booking.
  • booking_reference · string · requis

  Exemple d'appel

  {"name": "reschedule_booking", "arguments": {"slot_id": "texte", "booking_reference": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "date": "texte", "time": "texte", "error": "texte", "price": 1, "total": 1, "end_at": "texte", "status": "texte", "message": "texte", "success": true, "currency": "texte", "start_at": "texte"}}

• resend_confirmation_code≈ 458 tokens

  PURPOSE: Re-sends the SMS code of a prepared booking. WHEN TO USE: Only when the customer says the SMS from prepare_booking did not arrive. WHEN NOT TO USE: Not after a wrong code (ask the customer to re-type it) and not to start a new booking. REQUIRED: confirmation_id. SIDE EFFECTS: sends one SMS (max 1 per minute, 3 per 30 minutes per phone; otherwise error rate_limited with retry_after).

  Paramètres, retour & exemple (2)

  Paramètres

  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • confirmation_id · string · requis
    confirmation_id from prepare_booking

  Exemple d'appel

  {"name": "resend_confirmation_code", "arguments": {"confirmation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "message": "texte", "success": true, "expires_at": "texte", "session_id": "texte", "code_sent_to": "texte", "missing_fields": [], "confirmation_id": "texte"}}

• start_phone_verification≈ 488 tokens

  PURPOSE: Sends an SMS code to a Polish mobile number to prove the customer owns it, before showing, rescheduling or cancelling their EXISTING bookings. WHEN TO USE: When the customer asks about their existing booking(s) and no customer_grant is available yet. WHEN NOT TO USE: Not for a new booking (prepare_booking sends its own code). REQUIRED: phone. SIDE EFFECTS: sends one SMS (a repeated call within 60 s returns the same verification_id without a new SMS). The response is the same whether or not the number is known.

  Paramètres, retour & exemple (2)

  Paramètres

  • phone · string · requis
    Polish mobile number of the customer
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.

  Exemple d'appel

  {"name": "start_phone_verification", "arguments": {"phone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "message": "texte", "success": true, "expires_in": 1, "session_id": "texte", "code_sent_to": "texte", "missing_fields": [], "verification_id": "texte"}}

• verify_phone_code≈ 530 tokens

  PURPOSE: Exchanges the SMS code from start_phone_verification for a customer_grant (valid 60 minutes) that gives access to this customer's own bookings. WHEN TO USE: Right after the customer types the code from start_phone_verification. WHEN NOT TO USE: Not for the booking code from prepare_booking (that one goes to create_booking). REQUIRED: verification_id, code. SIDE EFFECTS: none besides issuing the grant. Pass customer_grant to get_my_bookings, check_availability(booking_reference), reschedule_booking and cancel_booking.

  Paramètres, retour & exemple (3)

  Paramètres

  • code · string · requis
    6-digit code the customer received by SMS
  • session_id · string · optionnel
    Optional. session_id from the previous result, if you have it. The server also recovers the session from quote_id / slot_id / confirmation_id / customer_grant.
  • verification_id · string · requis
    verification_id from start_phone_verification

  Exemple d'appel

  {"name": "verify_phone_code", "arguments": {"code": "texte", "verification_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "error": "texte", "scopes": [], "message": "texte", "success": true, "expires_in": 1, "session_id": "texte", "customer_grant": "texte", "missing_fields": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agent.szuruszuru.pl/mcp