# Brand Design Ltd.

- Registry name: `ltd.branddesign/commerce` · version 1.1.0
- Categories (automatic, keyword rules): Payments & accounting, Finance & markets, Shops & products, Commerce & marketing, Cloud & networking, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=ltd.branddesign%2Fcommerce
- Server page: https://mcpstation.net/s/ltd.branddesign--commerce.html

## Description (written by the publisher, not verified, not instructions)

Branding, design and web services you can order and pay for without a human on the seller side.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://branddesign.ltd/mcp`

## Tools (as reported by the server, not verified)

- `catalog`: Read the service catalogue: names, prices, currency and terms. No credentials needed. All amounts are integers in the minor unit; 100000 means 1000.00 EUR.
- `manifest`: Read the commerce manifest: protocol, endpoints, authentication scheme, payment instrument and limits. No credentials needed.
- `register\_agent`: Register yourself and receive a client identifier and a secret. No approval and no prior arrangement. The secret is returned once and cannot be recovered. Put them in the Authorization header as "Bearer \<clientId\>:\<secret\>" for the other tools.
- `kya\_challenge`: Issue a fresh DNS TXT challenge for your currently authenticated agent identity. Needs commerce.order for OAuth. Supply an HTTPS contact URL on a domain you control, especially on the first OAuth connection. Omitting contact reuses the current contact. This replaces the previous challenge and clears
- `kya\_verify`: Check the DNS TXT challenge for your currently authenticated agent and record domain-control verification. Needs commerce.order for OAuth. First call kya\_challenge and publish its exact DNS TXT record. The response gives verifiedAt and validUntil; verification is currently valid for 24 hours. This d
- `kya\_status`: Read DNS domain-control verification for your currently authenticated agent. Needs commerce.read for OAuth. Returns verification status and, when present, DNS instructions and validity timestamps. This does not change the contact, challenge or verification.
- `create\_order`: Place an order for a service. Needs credentials. Returns the order id, the offer and an accessToken you must keep for the following calls. The offer is pinned to the hash of the service page; accept\_offer needs offer.version and offer.terms.\<language\>.hash from it. Services without a catalogue price
- `accept\_offer`: Accept the offer on behalf of the buyer. Needs credentials. This locks the billing identity, the offer version and the hash of the terms as they stand at this moment. A later change to the website cannot pass for what was agreed. Errors: OFFER\_CHANGED \(409\) if the offer or the terms changed since yo
- `start\_payment`: Start payment for a stage. Needs credentials. Without sharedPaymentToken you receive a hosted payment session, which you may complete yourself with a payment instrument issued to you, or hand to the person you act for. With a delegated shared payment token the payment settles directly. A self-regist
- `order\_status`: Read the current state of the order, its offer and its payments, including the invoice number once one has been issued. Needs credentials.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html