Search / shop.nagora/nagora
protogridR0· no sign-inBuy real goods with Nano (XNO) through escrow. Search, purchase, track orders, get signed receipts.
v1.0.1 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"nagora": {
"type": "http",
"url": "https://api.nagora.shop/mcp"
}
}
}claude mcp add --transport http nagora https://api.nagora.shop/mcp[mcp_servers.nagora]
url = "https://api.nagora.shop/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nagora": {
"type": "remote",
"url": "https://api.nagora.shop/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"nagora": {
"type": "http",
"url": "https://api.nagora.shop/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=nagora&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLm5hZ29yYS5zaG9wL21jcCJ9"
}{
"servers": {
"nagora": {
"type": "http",
"url": "https://api.nagora.shop/mcp"
}
}
}{
"mcpServers": {
"nagora": {
"httpUrl": "https://api.nagora.shop/mcp"
}
}
}extensions:
"nagora":
enabled: true
name: "nagora"
type: streamable_http
uri: "https://api.nagora.shop/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsonly 5 of 9 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_listings (destructiveHint, idempotentHint, openWorldHint); register_agent (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_order (destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 1,732 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes1 tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulnsno known advisory in 98 resolved packagesdeps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or laterdeps.resolvable@nagora/[email protected] resolved: 98 packagesget_orderchangeddescriptionPolls an order placed by this agent. Returns orderStatus, escrowStatus, funding timestamps, tracking info, and the receipt ID once available. Poll after funding the deposit address, and after the seller ships, before calling confirm_delivery.
Polls an order placed by this agent. Returns orderStatus, escrowStatus, funding timestamps, tracking info, and the receipt ID once available. Poll after funding the deposit address, and after the seller ships, before calling confirm_delivery. For digital listings, digitalContent holds what was bought once the order is paid.
Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +dns-namespace +website +reachable +uptime-99% ~updated-40d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
@nagora/[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | high | @modelcontextprotocol/[email protected]MCP SDK, direct | fixed in 1.31.0 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.nagora.shop/mcp streamable-http | none | yes | 99% | 521 ms | 2025-11-25 | 2026-10-20 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
@nagora/mcp | npm | 0.1.0 | – |
cancel_order | Cancels an order whose escrow is still Initiated (no on-chain funds sent yet). Restores listing stock. Cannot cancel once escrow is Funded; use the dispute or refund flow on the website instead. |
confirm_delivery | Confirms the goods or digital content arrived and releases the escrowed funds to the seller. Requires the order's escrowStatus to be Shipped. Call promptly once delivery is verified: the seller is waiting on this to get paid. If never called, an auto-finalise timer releases funds after the configured window. |
create_purchase | Places an order against a listing. Returns a depositAddress (per-order escrow Nano account) and amountNano. IMPORTANT: the order is not funded by this call. Send exactly amountNano to depositAddress from the agent's Nano wallet to fund escrow. Once funds are detected the order moves to AwaitingShipment automatically. Physical listings require a shippingAddress. |
get_listingread-only | Fetch a single listing by ID. No API key required. Returns full detail including variants, delivery options, and pricing. Use the returned Nano total as quotedTotalNano when purchasing to guard against exchange-rate drift. |
get_orderread-only | Polls an order placed by this agent. Returns orderStatus, escrowStatus, funding timestamps, tracking info, and the receipt ID once available. Poll after funding the deposit address, and after the seller ships, before calling confirm_delivery. For digital listings, digitalContent holds what was bought once the order is paid. |
get_receiptread-only | Returns the cryptographically signed receipt for a completed order, including the seller's Nano address, the on-chain payout block hash, and Nagora's KMS signature. Available only after escrow is Released; returns an error while the order is still in progress. |
register_agent | Creates a Nagora agent and mints its API key in one call. No Nagora account or signup required. IMPORTANT: this is a remote server with no local storage, so the key is returned ONCE in the result. Store it securely and pass it as the apiKey argument on subsequent calls in this session; for long-lived setups reconnect with an 'Authorization: Bearer <key>' header instead. Skip this tool if a credential is already configured; check with whoami. |
search_listingsread-only | Full-text search over active listings on nagora.shop. No API key required. Returns an items array and total count. Use get_listing for full detail before purchasing. |
whoamiread-only | Verifies the configured credential and returns the agent's identity, spending caps, callback URL, and webhook secret. Call this first to confirm the credential works. |
Schemas: list_tools.
{
"name": "shop.nagora/nagora",
"title": "Nagora",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.nagora.shop/mcp",
"type": "streamable-http"
}
],
"version": "1.0.1",
"packages": [
{
"version": "0.1.0",
"transport": {
"type": "stdio"
},
"identifier": "@nagora/mcp",
"registryType": "npm"
}
],
"repository": {
"url": "https://github.com/m-flex/nagora-mcp",
"source": "github"
},
"websiteUrl": "https://nagora.shop",
"description": "Buy real goods with Nano (XNO) through escrow. Search, purchase, track orders, get signed receipts."
}