agentPickup

Working · 194 ms Security A

io.github.dav3trad3r/agentpickupv0.1.1 GitHub verified

Order from a shop, pay in USDC over x402, and get the QR to collect in person.

Commerce

Watch Source Website Registry entry

Maintained by@dav3trad3r(verified)Also a maintainer?

Try it

Call this server's tools from your browser. Nothing to install.

https://agentpickup.app/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

create_pickup_order

Create an order to collect in person. Returns the order id and total; pay it with pay_order. The shop emails the pickup QR to `email` once it's paid.

emailstring, required

The user's email. The pickup QR goes here.

itemsarray, required

namestring

Name for the order, shown to staff

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

Run in a terminal

claude mcp add --transport http agentpickup https://agentpickup.app/mcp

Tools (5)

create_pickup_order

Create an order to collect in person. Returns the order id and total; pay it with pay_order. The shop emails the pickup QR to `email` once it's paid.

Argument	Type	Description
name	string	Name for the order, shown to staff
email*	string	The user's email. The pickup QR goes here.
items*	array

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "items",
    "email"
  ],
  "properties": {
    "name": {
      "type": "string",
      "maxLength": 100,
      "description": "Name for the order, shown to staff"
    },
    "email": {
      "type": "string",
      "format": "email",
      "pattern": "^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
      "description": "The user's email. The pickup QR goes here."
    },
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "id",
          "qty"
        ],
        "properties": {
          "id": {
            "type": "string",
            "description": "Item id from get_shop"
          },
          "qty": {
            "type": "integer",
            "maximum": 20,
            "minimum": 1
          }
        }
      },
      "minItems": 1
    }
  }
}

get_pickup_pass

The pass link, pickup code and QR content for an order this wallet paid, by signing in with the wallet (Sign-In-With-X).

read-only

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

get_shop

What the shop sells (item ids and prices), where to collect, and which payments it takes.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}

order_status

Whether an order is waiting for payment, paid, ready to collect, collected or expired.

read-only

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

pay_order

Pay an order in USDC over x402 from wallet 0xd253e213cE143Aa0E1e1cAfc92f7AE82c98aB3bB. This spends money: confirm the items and total with the user first. Returns the pickup pass link.

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 3, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works

Try it

Call this server's tools from your browser. Nothing to install.

https://agentpickup.app/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

create_pickup_order

Create an order to collect in person. Returns the order id and total; pay it with pay_order. The shop emails the pickup QR to `email` once it's paid.

emailstring, required

The user's email. The pickup QR goes here.

itemsarray, required

namestring

Name for the order, shown to staff

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Tools (5)

create_pickup_order

Create an order to collect in person. Returns the order id and total; pay it with pay_order. The shop emails the pickup QR to `email` once it's paid.

Argument	Type	Description
name	string	Name for the order, shown to staff
email*	string	The user's email. The pickup QR goes here.
items*	array

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "items",
    "email"
  ],
  "properties": {
    "name": {
      "type": "string",
      "maxLength": 100,
      "description": "Name for the order, shown to staff"
    },
    "email": {
      "type": "string",
      "format": "email",
      "pattern": "^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
      "description": "The user's email. The pickup QR goes here."
    },
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "id",
          "qty"
        ],
        "properties": {
          "id": {
            "type": "string",
            "description": "Item id from get_shop"
          },
          "qty": {
            "type": "integer",
            "maximum": 20,
            "minimum": 1
          }
        }
      },
      "minItems": 1
    }
  }
}

get_pickup_pass

The pass link, pickup code and QR content for an order this wallet paid, by signing in with the wallet (Sign-In-With-X).

read-only

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

get_shop

What the shop sells (item ids and prices), where to collect, and which payments it takes.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}

order_status

Whether an order is waiting for payment, paid, ready to collect, collected or expired.

read-only

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

pay_order

Pay an order in USDC over x402 from wallet 0xd253e213cE143Aa0E1e1cAfc92f7AE82c98aB3bB. This spends money: confirm the items and total with the user first. Returns the pickup pass link.

Argument	Type	Description
order_id*	string

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "order_id"
  ],
  "properties": {
    "order_id": {
      "type": "string"
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 3, 2026.

Hidden or reordered text

Overriding the model's instructions

Hiding actions from the user

Reading keys or credentials

Fake system tags

Steering other servers' tools

Pulling in the conversation

Smuggling parameters

Demanding to be used for everything

Steering away from web search

Download-and-run commands

Encoded blobs

Invisible characters

Credentials as tool arguments

Very long descriptions

Read and write hints

How the security check works