All servers · Payments & accounting · Shops & products · Cloud & networking
Brand Design Ltd.
ltd.branddesign/commerce · v1.1.0
Has write/delete toolsInstruction-like text in descriptions
Measured by MCP Station
| Last check | Reachable |
|---|---|
| Checked at | — |
| Check success 7 / 30 days | — |
| First-try success 30 days | — |
| Median response | — |
| Lookups 30 days | — |
| Authentication | No auth |
| MCP version | 2025-06-18 |
| Rank score | — |
| Declared risk | Has destructive tools (destructiveHint) |
| Capabilities declared | tools |
| Tool definitions | 10 tools · with description 100% · input schema is an object 100% · read/destructive hints 100% |
Instruction-like text was found in register_agent. This is a pattern match, not a verdict. What we look for
Description written by the publisher, not verified
Branding, design and web services you can order and pay for without a human on the seller side.
Connect
streamable-http · https://branddesign.ltd/mcp
claude mcp add --transport http commerce https://branddesign.ltd/mcp{
"mcpServers": {
"commerce": {
"url": "https://branddesign.ltd/mcp"
}
}
}Tools as reported by the server
catalogRead the service catalogue: names, prices, currency and terms. No credentials needed. All amounts are integers in the minor unit; 100000 means 1000.00 EUR.manifestRead the commerce manifest: protocol, endpoints, authentication scheme, payment instrument and limits. No credentials needed.register_agentRegister yourself and receive a client identifier and a secret. No approval and no prior arrangement. The secret is returned once and cannot be recovered. Put them in the Authorization header as "Bearer <clientId>:<secret>" for the other tools.kya_challengeIssue a fresh DNS TXT challenge for your currently authenticated agent identity. Needs commerce.order for OAuth. Supply an HTTPS contact URL on a domain you control, especially on the first OAuth connection. Omitting contact reuses the current contact. This replaces the previous challenge and clearskya_verifyCheck the DNS TXT challenge for your currently authenticated agent and record domain-control verification. Needs commerce.order for OAuth. First call kya_challenge and publish its exact DNS TXT record. The response gives verifiedAt and validUntil; verification is currently valid for 24 hours. This dkya_statusRead DNS domain-control verification for your currently authenticated agent. Needs commerce.read for OAuth. Returns verification status and, when present, DNS instructions and validity timestamps. This does not change the contact, challenge or verification.create_orderPlace an order for a service. Needs credentials. Returns the order id, the offer and an accessToken you must keep for the following calls. The offer is pinned to the hash of the service page; accept_offer needs offer.version and offer.terms.<language>.hash from it. Services without a catalogue priceaccept_offerAccept the offer on behalf of the buyer. Needs credentials. This locks the billing identity, the offer version and the hash of the terms as they stand at this moment. A later change to the website cannot pass for what was agreed. Errors: OFFER_CHANGED (409) if the offer or the terms changed since yostart_paymentwrite/deleteStart payment for a stage. Needs credentials. Without sharedPaymentToken you receive a hosted payment session, which you may complete yourself with a payment instrument issued to you, or hand to the person you act for. With a delegated shared payment token the payment settles directly. A self-registorder_statusRead the current state of the order, its offer and its payments, including the invoice number once one has been issued. Needs credentials.
JSON · Text for agents · Registry updated 2026-10-15