MCP restrictions

Read-only access to a subset of the API

The tools call 32 of the API's 133 public operations.

• No tool can modify data. Favorites, webhooks, support tickets, reports and seller offers are not available over MCP. Changes to your account must be made by you, not by a model.
• Account, billing and usage endpoints are not available as tools. Use the API or your account page instead.
• For an operation that is not available as a tool, call the API directly or use an SDK.

Your key

• The server does not store your key. It forwards the key to the GunSpec API for a single request and then discards it.
• The key is never written to logs. Calls are recorded against a one-way fingerprint of the key.
• Store the key in your client configuration or environment, never in a prompt. A model can repeat any text that appears in a prompt.
• When you revoke or rotate a key in your account, it stops working over MCP at the same moment it stops working on the API, because the server keeps no copy.

The data

• Tool results are catalog data and are subject to the same terms as the API.
• The catalog describes firearms. It does not state what is lawful to own, carry or buy in your jurisdiction.
• A model can misread or misquote a result. Verify figures against the record before relying on them.