QAmcp

Copied. Paste it into Claude Code, Cursor or Codex:Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.

Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions

SoonYour score can change any day. QAmcp Monitor tests your server every hour and emails you when it breaks.See what Monitor does →

Directory / KlickyMart

KlickyMart

Q: Is KlickyMart MCP server safe?

QAmcp's test on 1 Nov 2026: None of the hidden-instruction wordings we know were found in its tool descriptions. 0 of its 15 tools are labeled read-only; the others may change or send things. Overall it scored 77/100 on 1 Nov 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by klickymart.com · https://klickymart.com/mcp

Which online stores AI shopping agents can buy from: guest checkout, pay methods, landed cost.

15 tools✓ no account neededPricing: not listed

Visit website

77 /100

PASS · WITH NOTES

Partial: 8 of 11 checks · 1 Nov 2026

Is KlickyMart MCP server safe?

None of the hidden-instruction wordings we know were found in its tool descriptions.
0 of its 15 tools are labeled read-only; the others may change or send things.
Overall it scored 77/100 on 1 Nov 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

15 tools, in the server's own words.

search_merchants

Search KlickyMart merchant records (same filters as GET /q)

get_record

Fetch one merchant record by domain

check_domain

Can my agent shop here?

find_offers

Product-level offers KlickyBot observed on store pages (schema.org JSON-LD or Shopify JSON): price, currency, stock, URL, checked_at.

get_landed_price

One call: a product's landed price at a US ZIP.

build_experience_note

Returns an UNSIGNED Nostr kind 422 'shopping experience' event template for a store, for you to sign with your own (ideally site-specific) key and publish to y…

get_checkout_map

Checkout steps our probe reached for a store (stopping at the payment screen, never submitting), the first blocker (bot-wall, http-refusal, network-error, no-p…

recheck_domain

Re-read robots.txt and the home-page status for an indexed store now.

watch_item

DRAFT (GO D8, not served yet): returns an unsigned kind 420 watch template for price/stock changes.

find_alternatives

Where else can my agent buy this?

find_agent_native

Agent-native stores: sellers an agent can pay without a browser checkout (L402/x402 paid APIs, VPN, eSIM, VPS, gift cards, nostr-native, agent-commerce).

get_reviews

Kind 422 reviews of a merchant (signed claims by pseudonymous keys; not verified by KlickyMart).

submit_review

Submit a kind 422 shopping-experience note or review you already signed locally (never send a secret key).

submit_store

Suggest a store KlickyMart has not indexed yet.

wallet_setup_guide

Non-custodial wallet setup guide for agents: Nostr key, self-custodial or agent-friendly Lightning options (NWC, Alby Hub, phoenixd, LNbits) with who holds the…

Test results

Safe mode: only tools labeled read-only were run. How the test works

!
Ready for the newest MCP version
1 warning
- !Uses an older MCP version (2024-11-05). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
note
!
Every tool is described
13 warnings
- !search_merchants: Inputs with no description: status, btc_min, btc_any, pay_all, pay_group, scope, ag_min, co_min, ease_min, guest, tos, ships_us, an_cat, rail_status, limit
- !get_record: Inputs with no description: domain
- !find_offers: Inputs with no description: gtin, mpn, q, domain, zip, in_stock, max_price, live, limit
- !get_landed_price: Inputs with no description: q, gtin, mpn, domain, in_stock, live, condition, type, brand_strict, limit
- !build_experience_note: Inputs with no description: domain, account_required, blocker, walls, btc_route, tax_shown_before_payment, shipping_shown_before_payment, price_seen, shipping, tax, total, currency, duration_s, steps, agent, delivered, delivery_days, rating
- !get_checkout_map: Inputs with no description: domain
- !recheck_domain: Inputs with no description: domain
- !watch_item: Inputs with no description: gtin, domain, max_price, in_stock, note
- and 5 more
note
!
Tools are labeled safe or dangerous
1 warning
- !15 of 15 tools have no safety label (read-only or dangerous): search_merchants, get_record, check_domain, find_offers, get_landed_price, build_experience_note, get_checkout_map, recheck_domain, watch_item, find_alternatives, find_agent_nati
note
!
Follows MCP best practices (not scored yet)
2 tips (not scored)
- !15 tools not labeled read-only don't say whether running them twice is safe (idempotentHint): search_merchants, get_record, check_domain, find_offers, get_landed_price, build_experience_note and 9 more
- !15 tools don't say whether they reach outside services like the web (openWorldHint): search_merchants, get_record, check_domain, find_offers, get_landed_price, build_experience_note and 9 more
note
✓
ConnectsConnected in 853 ms
pass
✓
Lists its toolsFound 15 tools
pass
✓
No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.
pass
✓
Fast enough
All good
- ✓Connecting took 853 ms
- ✓Listing tools took 94 ms
pass
–
Tools work with good inputs
Not tested
- –search_merchants: Not run: no safety label (if you own this server, test again in owner mode)
- –get_record: Not run: no safety label (if you own this server, test again in owner mode)
- –check_domain: Not run: no safety label (if you own this server, test again in owner mode)
- –find_offers: Not run: no safety label (if you own this server, test again in owner mode)
- –get_landed_price: Not run: no safety label (if you own this server, test again in owner mode)
- –build_experience_note: Not run: no safety label (if you own this server, test again in owner mode)
- –get_checkout_map: Not run: no safety label (if you own this server, test again in owner mode)
- –recheck_domain: Not run: no safety label (if you own this server, test again in owner mode)
- and 7 more
not tested
–
Bad inputs give a clean errorNot tested
not tested
–
Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)
not tested
–
No secrets leakedNo error messages to check
not tested

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://klickymart.com/mcp

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

[![QAmcp score](https://qamcp.dev/s/com-klickymart-klickymart.svg)](https://qamcp.dev/s/com-klickymart-klickymart.html)

Score over time

1 Nov 202677

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use KlickyMart, signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works