Gooten MCP by usefulapi
REMOTE · GOOTEN.USEFULAPI.IO
Browse the Gooten catalog, stock, shipping and price quotes; search orders and cancel items.
Available components
Last scanned (11 hours ago)
Scores higher than 47% of remote servers
Reachable. Last reached 25 Oct 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security78
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2353 tokens (~138/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
- Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 17 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Stability: unverified → 0.03 ▲ functional
- Server version: 1.3.0 → 1.4.0 functional
- Server version: 1.2.0 → 1.3.0 functional
- Server version: 1.0.0 → 1.2.0 functional
- 23 Oct 26 62
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Probed https://gooten.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of gooten.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 38690, 57355 | 8, 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 302 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://gooten.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://gooten.usefulapi.io/.well-known/oauth-protected-resource/mcp"Protected resource metadata
| Document | https://gooten.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://gooten.usefulapi.io/mcp |
| Authorisation server | https://gooten.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://gooten.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/gooten/ |
| http (plaintext) | http://gooten.usefulapi.io/mcp | Inconclusive | 302 | http://gooten.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
gooten_cancel_order_items Cancel order items ~107
WRITE: cancel specific items of an order (cannot be undone). Only items of orders in a pre-production status can be cancelled. Pass the numeric Gooten order id and the order item ids (OrderItemId from gooten_get_order). PUT /orderCancel.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | integer | yes | Numeric Gooten order id (GootenId). |
| order_item_ids | array | yes | Order item ids to cancel (OrderItemId), 1-100. |
No output schema declared.
No examples provided.
gooten_check_stock Check stock for SKUs ~141
Which of the given SKUs are out of stock for a destination (country, state, postal code). Returns only the out-of-stock SKUs; an empty list means all are available. Unknown SKUs are an error. POST /variantstatus (a read: nothing is changed).
| Name | Type | Req | Description |
|---|---|---|---|
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| postal_code | string | yes | Shipping postal code. |
| skus | array | yes | SKUs to check (1-50). |
| state | string | – | Shipping state/province code, e.g. NY (omit for countries without states). |
No output schema declared.
No examples provided.
gooten_get_order Get order ~82
One order by its Safe Order ID: items with status, tracking numbers and carriers, images, options, totals, shipping and billing addresses, discount and metadata. GET /orders.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Gooten Safe Order ID (the long id like 13-f91acc87-...), as returned by gooten_search_orders (Id). |
No output schema declared.
No examples provided.
gooten_get_order_billing Get order billing ~108
Billing breakdown of an order: product cost per item, shipping, surcharge, tax, fees, discount and total. Takes the numeric Gooten order id (GootenId from gooten_get_order), not the Safe Order ID. Needs the Partner Billing Key. GET /orderbilling.
| Name | Type | Req | Description |
|---|---|---|---|
| currency_code | string | – | 3-letter currency code (default USD). See gooten_list_currencies. |
| order_id | integer | yes | Numeric Gooten order id. |
No output schema declared.
No examples provided.
gooten_get_price_estimate Get price estimate for an order ~180
Estimate the cost of an order before placing it: per-item partner price, customer price and tax, plus shipping total, for SKUs shipped to an address. POST /price (a quote: nothing is ordered or charged).
| Name | Type | Req | Description |
|---|---|---|---|
| address_line1 | string | yes | Shipping address line 1. |
| address_line2 | string | – | Shipping address line 2. |
| city | string | yes | Shipping city. |
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| currency_code | string | – | 3-letter currency code (default USD). See gooten_list_currencies. |
| items | array | yes | Order lines (1-50). |
| postal_code | string | yes | Shipping postal code. |
| state | string | – | Shipping state/province code, if any. |
No output schema declared.
No examples provided.
gooten_get_product_templates Get product templates ~82
Print templates for a SKU: how many images are needed, required pixel sizes/DPI, print spaces and layer coordinates, and preview assets. GET /producttemplates.
| Name | Type | Req | Description |
|---|---|---|---|
| sku | string | yes | Gooten SKU (product variant), e.g. CanvsWrp-ImgWrp-10x10. See gooten_list_product_variants. |
No output schema declared.
No examples provided.
gooten_get_shipping_estimate Get shipping estimate for a product ~112
Shipping price range and delivery time for a product to a country: whether expedited is possible and estimated shipping days, plus min/max price and producing country when Gooten returns them. GET /shippriceestimate.
| Name | Type | Req | Description |
|---|---|---|---|
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| currency_code | string | – | 3-letter currency code (default USD). See gooten_list_currencies. |
| product_id | integer | yes | Catalog product id. |
No output schema declared.
No examples provided.
gooten_get_shipping_options Get shipping options for a cart ~135
Available shipping methods (Standard, Expedited, Overnight) with price and delivery days for a cart of SKUs to a destination. POST /shippingprices (a quote: nothing is ordered).
| Name | Type | Req | Description |
|---|---|---|---|
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| currency_code | string | – | 3-letter currency code (default USD). See gooten_list_currencies. |
| items | array | yes | Cart lines (1-50). |
| postal_code | string | yes | Destination postal code. |
| state | string | – | Destination state/province code, if any. |
No output schema declared.
No examples provided.
gooten_list_currencies List supported currencies ~33
Currencies Gooten can quote prices in (name, code, display format). GET /currencies.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
gooten_list_print_ready_products List print-ready products ~71
Your print-ready products (PRPs: SKUs with artwork already attached) with their variant counts. Paging starts at 1. GET /prpproducts.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, from 1 (default 1). Pass the previous reply's next_page. |
No output schema declared.
No examples provided.
gooten_list_print_ready_variants List print-ready variants ~88
Orderable SKUs of your print-ready products, optionally for one PRP product name (from gooten_list_print_ready_products). GET /prpvariants.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, from 1 (default 1). Pass the previous reply's next_page. |
| product_name | string | – | A PRP product name; omit for all variants. |
No output schema declared.
No examples provided.
gooten_list_product_variants List product variants (SKUs) ~172
The orderable variants (SKUs) of a catalog product for a destination country, with option values (size, color, ...) and Gooten's price for your account. SKUs differ by region (inch vs cm sizes). GET /productvariants.
| Name | Type | Req | Description |
|---|---|---|---|
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| currency_code | string | – | 3-letter currency code (default USD). See gooten_list_currencies. |
| page | integer | – | Page number, from 1 (default 1). Pass the previous reply's next_page. |
| page_size | integer | – | Results per page, 1-100 (default 25). |
| product_id | integer | yes | Catalog product id from gooten_list_products. |
No output schema declared.
No examples provided.
gooten_list_products List catalog products ~174
Browse the Gooten print-on-demand product catalog (public data): product id, name, categories, cheapest price and shipping, stock and deprecation flags. Filter by name text or category; use product_id with gooten_list_product_variants. Prices are in USD for the cheapest variant.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Only products in this category (exact name, case-insensitive; see the categories list in the reply). |
| include_deprecated | boolean | – | Include deprecated products (default false). |
| page | integer | – | Page number, from 1 (default 1). Pass the previous reply's next_page. |
| page_size | integer | – | Results per page, 1-100 (default 25). |
| query | string | – | Only products whose name contains this text (case-insensitive). |
No output schema declared.
No examples provided.
gooten_list_shipping_countries List shipping countries ~64
Countries Gooten ships to (code, name, whether supported, measurement system, default currency). By default only supported countries. GET /countries.
| Name | Type | Req | Description |
|---|---|---|---|
| include_unsupported | boolean | – | Also list countries Gooten does not ship to (default false). |
No output schema declared.
No examples provided.
gooten_search_orders Search orders ~229
Search your Gooten orders by free text (name, address, phone...), last name, email, postal code, creation date range or your own user id. Returns order id, items with status and tracking, totals and addresses. Needs the Partner Billing Key. GET /ordersearch.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | Customer email on the order. | |
| end_date | string | – | Orders created on or before this date, yyyy-mm-dd. |
| last_name | string | – | Customer last name on the order. |
| page | integer | – | Page number, from 1 (default 1). Pass the previous reply's next_page. |
| page_size | integer | – | Results per page, 1-100 (default 25). |
| postal_code | string | – | Postal code on the order. |
| start_date | string | – | Orders created on or after this date, yyyy-mm-dd. |
| text | string | – | Any value related to the order (partner name, address, phone, ...). |
| unique_user_id | string | – | Your own user id stored on the orders. |
No output schema declared.
No examples provided.
gooten_set_order_status Set order status ~180
WRITE: change an order's status. Allowed targets: Cancelled (cancels the whole order), Hold (pause before production) and New (re-submit an order that was fixed, e.g. after an image or address issue; it then goes on to production and billing). Only orders in AccountingIssue, AddressIssue, HoldByCIImageIssue, ImageIssue, NeedsManualApproval, New, ReadyForAccounting, ReadyForImageDl or Pending can change; a held order cannot be released through the API (Gooten support must release it); otherwise Gooten refuses. POST /orderstatus.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Gooten Safe Order ID (the long id like 13-f91acc87-...), as returned by gooten_search_orders (Id). |
| status | string | yes | The new status. |
No output schema declared.
No examples provided.
gooten_validate_address Validate a shipping address ~113
Check a shipping address: validity, a score and Gooten's suggested corrected address. GET /addressvalidation.
| Name | Type | Req | Description |
|---|---|---|---|
| city | string | yes | City. |
| country_code | string | yes | 2-letter ISO 3166-1 country code, e.g. US. |
| line1 | string | yes | Address line 1. |
| line2 | string | – | Address line 2. |
| postal_code | string | yes | Postal code. |
| state | string | – | State/province code, if any. |
No output schema declared.
No examples provided.
How do I install the Gooten MCP by usefulapi server?
Gooten MCP by usefulapi is a hosted endpoint at https://gooten.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · gooten.usefulapi.io
claude mcp add --transport http io-usefulapi-gooten 'https://gooten.usefulapi.io/mcp'
What is the Gooten MCP by usefulapi server?
Gooten MCP by usefulapi is listed in the public MCP registry as io.usefulapi/gooten. Browse the Gooten catalog, stock, shipping and price quotes; search orders and cancel items. This page covers its hosted endpoint (https://gooten.usefulapi.io/mcp).
Is the Gooten MCP by usefulapi server safe to use?
Gooten MCP by usefulapi scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Gooten MCP by usefulapi server expose?
Gooten MCP by usefulapi exposes 17 tools: gooten_list_products, gooten_list_product_variants, gooten_get_product_templates, gooten_check_stock, gooten_get_shipping_estimate, and 12 more. Their descriptions and schemas cost roughly 2,071 tokens of context every time the server is loaded.
Does the Gooten MCP by usefulapi server require authentication?
Yes. Gooten MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Gooten MCP by usefulapi server still maintained?
Gooten MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.