Skip to content

MCP tools

The MCP server returns only the tools the current token can use. Calls outside the effective permission set fail in-band so the model can read and correct the request.

Namespace Tools Permission
products.* list, get products:read
products.* create, create_image_upload, update, delete products:manage
orders.* list, get, transition orders:manage
orders.* refund payments:manage
users.* list, get users:read
users.* assign_role, revoke_role users:manage
reports.* sales_summary payments:read
reports.* top_products, order_status_breakdown orders:manage
reports.* customer_growth users:read
settings.* get, list_themes settings:read
settings.* update settings:manage
events.* list, get, list_for_aggregate events:read
events.* replay events:manage
disputes.* list, get disputes:read
webhooks.* list webhooks:read
plugins.* list, get, health plugins:read
plugins.* install, upgrade, enable, disable, uninstall, purge plugins:manage
  • Money travels as integer cents.
  • Order transitions go through the domain transition rules.
  • Double refunds, illegal transitions, and unsafe user-management operations return structured tool errors.
  • Product image uploads are two-step: request a signed upload URL, PUT the file, then update the product with the returned image fields.

Reports return structured rows suitable for a second chart MCP server such as @antv/mcp-server-chart. Keep chart rendering as a separate client capability; Agentful reports remain transport-neutral data.