Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Hiboutik MCP by usefulapi

Read Hiboutik products, stock, customers, sales and turnover; edit customers and sale comments.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 184 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://hiboutik.usefulapi.io/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 1.18.1

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 3 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • hiboutik_create_customer
    • hiboutik_update_customer
    • hiboutik_set_sale_comment
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 31 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (31)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • hiboutik_list_storesList the shops (stores) of the account: id, name, warehouse id, currency, time zone, address. Use store ids for sales, payment types and reports. GET /stores.Read-only
  • hiboutik_list_warehousesList warehouses (stock locations) with id and name. Use the ids for stock levels. GET /warehouses.Read-only
  • hiboutik_list_usersList the Hiboutik users (staff, sales vendors): id, name, email, access level. The id is the vendor_id of a sale. Passwords and keys are never returned. GET /users.Read-only
  • hiboutik_list_taxesList the tax (VAT) rates with id, name, value and default flag. GET /taxes.Read-only
  • hiboutik_list_payment_typesList the payment types enabled in a store (cash, card, cheque...) with currency and flags. GET /payment_types/{store_id}/.Read-only
  • hiboutik_list_categoriesList product categories (newest id first) with parent id and flags. GET /categories.Read-only
  • hiboutik_list_brandsList product brands (newest id first). GET /brands.Read-only
  • hiboutik_list_suppliersList the suppliers with id, name and contact details. GET /suppliers/.Read-only
  • hiboutik_list_size_typesList the variant (size) types, such as clothing sizes or colours. Use an id with hiboutik_list_sizes. GET /size_types.Read-only
  • hiboutik_list_sizesList the variants (sizes) of one variant type: size_id and name. The size_id identifies a variant of a product in stock and sales. GET /sizes/{size_type_id}.Read-only
  • hiboutik_list_productsList products (default newest id first) with model, barcode, price, supply price, brand, category, supplier and stock management flag. 250 per page. GET /products/.Read-only
  • hiboutik_get_productOne product with its full details. GET /products/{product_id}.Read-only
  • hiboutik_search_products_by_nameFind products whose model (name) matches the text. GET /products/search/name/{q}.Read-only
  • hiboutik_find_product_by_barcodeFind the product (and variant) with this barcode. GET /products/search/barcode/{barcode}/.Read-only
  • hiboutik_search_productsSearch products by model, category, brand, supplier, archived state, supplier or external reference. GET /products/search/.Read-only
  • hiboutik_stock_all_warehousesAvailable stock per product and variant across warehouses, optionally filtered by category, brand, supplier or archived state. GET /stock_available/all_wh.Read-only
  • hiboutik_stock_by_warehouseAvailable stock per product and variant in one warehouse, optionally filtered. GET /stock_available/warehouse_id/{warehouse_id}.Read-only
  • hiboutik_stock_by_productAvailable stock of one product per variant and warehouse, with the inventory alert level. GET /stock_available/product_id/{product_id}.Read-only
  • hiboutik_list_stock_ordersList the stock orders / goods receipts. GET /inventory_inputs/.Read-only
  • hiboutik_list_customersList customers (newest id first) with name, email, phone, country, loyalty points and store credit. Personal data of the shop's customers. GET /customers/.Read-only
  • hiboutik_search_customersSearch customers by last name, first name, email, phone, VAT number, country, customer code or external reference (each text value needs at least 3 characters). Dates: yyyy-mm-dd, or prefix with > <…Read-only
  • hiboutik_get_customerOne customer with full details. GET /customer/{customers_id}.Read-only
  • hiboutik_list_customer_salesList the sales made to one customer (newest first). GET /customer/{customers_id}/sales/.Read-only
  • hiboutik_get_saleOne sale with its header, totals, payment and line items. GET /sales/{sale_id}.Read-only
  • hiboutik_list_open_salesList the sales not yet closed in a store (newest first). GET /open_sales/{store_id}.Read-only
  • hiboutik_list_closed_salesList the closed (completed) sales of a store for one day, or for a whole month when day is omitted. GET /closed_sales/{store_id}/{year}/{month}[/{day}].Read-only
  • hiboutik_report_turnoverSales total (turnover) of a store for one day, or per day for a whole month when day is omitted. GET /reports/turnover/{store_id}/{year}/{month}[/{day}].Read-only
  • hiboutik_report_products_soldProducts sold in a store during one month: quantities and revenue per product. GET /reports/products/{store_id}/{year}/{month}.Read-only
  • hiboutik_create_customerWRITE: create a customer in Hiboutik. Needs at least a last name, first name, company or email. Returns the new customer id. POST /customers/.Can change things
  • hiboutik_update_customerWRITE: change ONE attribute of a customer (it overwrites the current value). Attributes: gender (0 unknown, 1 male, 2 female), last_name, first_name, email, company, phone, vat, country, date_of_birt…Can change things
  • hiboutik_set_sale_commentWRITE: add or replace the comment of a sale (it overwrites any existing comment). POST /sales/comments/.Can change things

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200184 ms
initializedHTTP 20243 ms
tools/listHTTP 20083 ms
prompts/listHTTP 20090 ms
unknown-methodHTTP 40194 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.