59trust / 100

Brand Design Ltd.

by branddesign.ltd in Other

MCP serverPassing, checked 1 h ago

Branding, design and web services you can order and pay for without a human on the seller side.

https://branddesign.ltd/mcp
Tools
12
open to any client
Uptime
100%
last 30 days
Response time
288 ms
478 ms slowest 5%
Last check
Passed
1 h ago, next in 5 h

Scan it nowHow to connect

This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "brand-design-ltd": {
      "type": "http",
      "url": "https://branddesign.ltd/mcp"
    }
  }
}

12 tools

  • concierge

    Start here. Without a question: who Brand Design Ltd. is, what it does, its clients and results and who confirms them, with links to check, and the next steps. With a question: an answer about the agency from verified company knowledge, in the language of the question, with…

  • introduce

    Introduce yourself and the person or company you act for, and pass their enquiry to Nikola Mishev, the founder of Brand Design Ltd., by e-mail. He replies to the contact you give. Use it only when your principal wants to be contacted. No credentials needed.

  • catalog

    Read the service catalogue: names, prices, currency and terms. No credentials needed. All amounts are integers in the minor unit; 100000 means 1000.00 EUR.

  • manifest

    Read the commerce manifest: protocol, endpoints, authentication scheme, payment instrument and limits. No credentials needed.

  • register_agent

    Register yourself and receive a client identifier and a secret. No approval and no prior arrangement. The secret is returned once and cannot be recovered. Put them in the Authorization header as "Bearer <clientId>:<secret>" for the other tools.

  • kya_challenge

    Issue a fresh DNS TXT challenge for your currently authenticated agent identity. Needs commerce.order for OAuth. Supply an HTTPS contact URL on a domain you control, especially on the first OAuth connection. Omitting contact reuses the current contact. This replaces the previous…

  • kya_verify

    Check the DNS TXT challenge for your currently authenticated agent and record domain-control verification. Needs commerce.order for OAuth. First call kya_challenge and publish its exact DNS TXT record. The response gives verifiedAt and validUntil; verification is currently valid…

  • kya_status

    Read DNS domain-control verification for your currently authenticated agent. Needs commerce.read for OAuth. Returns verification status and, when present, DNS instructions and validity timestamps. This does not change the contact, challenge or verification.

  • create_order

    Place an order for a service. Needs credentials. Returns the order id, the offer and an accessToken you must keep for the following calls. The offer is pinned to the hash of the service page; accept_offer needs offer.version and offer.terms.<language>.hash from it. Services…

  • accept_offer

    Accept the offer on behalf of the buyer. Needs credentials. This locks the billing identity, the offer version and the hash of the terms as they stand at this moment. A later change to the website cannot pass for what was agreed. Errors: OFFER_CHANGED (409) if the offer or the…

  • start_payment

    Start payment for a stage. Needs credentials. Without sharedPaymentToken you receive a hosted payment session, which you may complete yourself with a payment instrument issued to you, or hand to the person you act for. With a delegated shared payment token the payment settles…

  • order_status

    Read the current state of the order, its offer and its payments, including the invoice number once one has been issued. Needs credentials.

Security scan

15 findings

  • Hidden instruction tags in tool:register_agent
    horization header as "Bearer <clientId>:<secret>" for the other tools.
  • Hidden instruction tags in tool:kya_challenge#/inputSchema/properties/clientId/description
    Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.
  • Hidden instruction tags in tool:kya_challenge#/inputSchema/properties/secret/description
    Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.
  • Hidden instruction tags in tool:kya_verify#/inputSchema/properties/clientId/description
    Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.
  • Hidden instruction tags in tool:kya_verify#/inputSchema/properties/secret/description
    Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.
  • Hidden instruction tags in tool:kya_status#/inputSchema/properties/clientId/description
    Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.
  • More findings in tool definitions in tools
    9 more findings in tool definitions

Recent checks

WhenResultHTTPTime
1 h agoPassed200279 ms
14 h agoPassed200366 ms
26 h agoPassed200302 ms
38 h agoPassed200269 ms
2 days agoPassed200329 ms
Show 10 older checks
3 days agoPassed200396 ms
3 days agoPassed200378 ms
4 days agoPassed200344 ms
4 days agoPassed200380 ms
4 days agoPassed200227 ms
5 days agoPassed200253 ms
5 days agoPassed200259 ms
6 days agoPassed200288 ms
6 days agoPassed200342 ms
7 days agoPassed200302 ms