Serveur MCP

FetchSandbox

io.github.fetchsandbox/mcp
Outils développeur Public et accessible MCP 2025-11-25

Ce que fait ce MCP

Tests and diagnoses API integrations by importing specifications, running workflows and failure scenarios, proposing fixes, and producing behavioral proof receipts.

coach
Conversational integration coach for FetchSandbox. Server-side orchestrator that walks the user through adding an API integration (payments / email / auth / etc.) — intake the goal, elicit domain-aware discovery questions from the spec's brain.yaml, route to the right workflow, prove the contract via FetchSandbox, surface compliance notes. Call this BEFORE any other FetchSandbox tool when the user has an open-ended 'help me add X', 'integrate X', 'test my X integration' ask. BEHAVIOR — strict, do exactly this each turn: (1) Say `message_for_user` to the user (verbatim or lightly paraphrased to fit your voice — but don't add new content). (2) If `next_action=wait_for_user` AND `options` is present + non-empty: USE YOUR CLIENT'S NATIVE QUESTION-PICKER TOOL (in Cursor / Claude Code this is `AskUserQuestion`) to render the lettered picker with the `question` text, the `options[].label` as rows, `default_option` as default, and an 'Other...' freeform row when `allow_freeform=true`. When the user picks or types, call coach again with `{session_id, user_response: <picked value or freeform text>}`. (3) If `next_action=wait_for_user` AND no `options`: just wait for free text. (4) If `next_action=call_tool`: invoke `tool_call.tool` with `tool_call.args`, then call coach again with the result in `context`. (5) If `next_action=done`: end the session. For a hosted app-builder request to build or test an integration, keep the user's simple goal intact and let the server route all named providers into one validation session. When FetchSandbox returns twin bindings, treat those as temporary TEST credentials: configure them server-side in the app-builder project, never ask the user for live Paddle/Resend keys, and never claim they were applied until the builder reports the change and the verifier observes app traffic. Infer app configuration details from the project when available; ask the user only for a fact the builder cannot discover. The deterministic verifier, not this conversation, owns the verdict. The state machine is server-side — DON'T try to predict the next step or skip ahead; let the server drive.
Lecture seule Accès externe Idempotent
Schéma d’entrée
{'type': 'object', 'properties': {'intent': {'type': 'string', 'description': "User's free-form integration ask, on the FIRST call only. Pass through verbatim â\x80\x94 the server's intent router benefits from the full phrasing."}, 'context': {'type': 'object', 'description': "Optional context the LLM brings to the turn â\x80\x94 e.g. a summary of the user's repo (if you ran an introspect step), or the result of a previously-instructed `tool_call`."}, 'session_id': {'type': 'string', 'description': 'Returned by a previous coach call. Required on every call after the first.'}, 'user_response': {'type': 'string', 'description': "The user's reply to the previous coach turn's question. Required when the previous turn returned `next_action: wait_for_user`."}}}
guide
ROUTE a symptom to the provider behaviour that explains it. Use this when the user names a provider or a domain (payments, email, auth, SMS, subscriptions) and you need to know what that provider ACTUALLY does — not what its docs say, and not what can be inferred from reading the integration code. Reading the code tells you what your app does with a field. It cannot tell you what the field MEANS at the provider — whether a line item is a seat count, whether a 200 body carries ok:false, whether an event can arrive out of order. That is the class of bug this routes. Returns {spec, workflow, scenario, confidence, reasoning} plus `next_actions`: a typed list of what to call next, with arguments pre-filled. Follow it rather than improvising the next step.
Lecture seule Accès externe Idempotent
Schéma d’entrée
{'type': 'object', 'required': ['intent'], 'properties': {'hints': {'type': 'object', 'properties': {'spec': {'type': 'string', 'description': 'Force a specific spec slug.'}, 'scenario': {'type': 'string', 'description': 'Force a specific failure scenario name.'}, 'workflow': {'type': 'string', 'description': 'Force a specific workflow_id.'}}, 'description': 'Optional caller-supplied overrides. Each field short-circuits the corresponding detection step.'}, 'intent': {'type': 'string', 'description': "The developer's free-form prompt as they typed it. Don't pre-process or shorten â\x80\x94 the router benefits from the full phrasing (capture timing, geo cues, failure mode language)."}}}
list_workflows
List the named, runnable workflows for a previously-imported spec. Workflows are realistic multi-step API journeys (e.g. 'create customer → attach payment method → create subscription'). Use this after import_spec for exploration ("what can I do?", "show me the flows") OR before run_all_workflows when the user wants a SCOPED validation: list, filter by user intent ("checkout", "webhooks"), then pass the matching ids as `workflow_names` to run_all_workflows. Returns the workflows AND the failure scenarios this spec can simulate — each with a plain description and the exact call to run it. Read the scenarios out to the user and ask which matter; do not guess scenario names.
Lecture seule Accès externe Idempotent
Schéma d’entrée
{'type': 'object', 'properties': {'spec_id': {'type': 'string', 'description': 'The spec_id returned by import_spec.'}, 'spec_slug': {'type': 'string', 'description': "A human name like 'resend' or 'stripe'. Use this when you do not have a spec_id â\x80\x94 you do not need to look one up first."}}, 'additionalProperties': False}
quickrun
Run a curated proof workflow against a KNOWN, bundled spec (stripe, clerk, descope, resend, twilio, and 50+ others) in ONE call — it spins up the sandbox by slug, so you do NOT need import_spec or a sandbox_id first. This is the normal path when the user is testing an integration with a well-known provider: call `guide` on their prompt, then call `quickrun` with the returned spec + workflow. To reproduce a failure, pass the `scenario` from guide's matched_bug_pattern.reproduce_with.scenario (e.g. webhook_retries, payment_declined). Returns sandbox_id + flow_run_id — pass BOTH to verify_behavior to prove the fix — plus a receipt URL. Use run_workflow instead ONLY when you already hold a sandbox_id from import_spec of a custom/private spec.
Accès externe
Schéma d’entrée
{'type': 'object', 'required': ['spec_slug', 'workflow_name'], 'properties': {'scenario': {'type': 'string', 'description': "OPTIONAL failure scenario to reproduce (e.g. webhook_retries, payment_declined). Take it from guide's matched_bug_pattern.reproduce_with.scenario. Omit for the happy path."}, 'spec_slug': {'type': 'string', 'description': "The bundled spec slug from guide (e.g. 'stripe'). Lowercase."}, 'workflow_name': {'type': 'string', 'description': "The workflow id from guide (e.g. 'accept_payment')."}}, 'additionalProperties': False}
run_workflow
Execute ONE specific workflow by name and return its step-by-step trace PLUS a `share_url` — a public, replayable proof URL that renders the full timeline (every request, response, webhook event) for this run. The share_url is the canonical 'here's what happened' artifact: surface it verbatim in any reply that needs evidence (PR comments, Slack threads, blog posts, X replies). Do NOT substitute a docs URL or any other link as the proof — the share_url is the only valid receipt. Use ONLY when the user explicitly names a single workflow to run (e.g., "run accept_payment", "just check the refund workflow"). For ANY validation-style request — "validate stripe", "check coverage", "run all workflows", "test this integration", or even "validate stripe checkout" (multiple workflows match "checkout") — use `run_all_workflows` instead. The batch tool collapses N approvals to 1 and supports a workflow_names filter for scope. Calling this in a loop is an anti-pattern.
Accès externe
Schéma d’entrée
{'type': 'object', 'required': ['sandbox_id', 'workflow_name'], 'properties': {'scenario': {'type': 'string', 'description': "OPTIONAL failure scenario to exercise (e.g. payment_declined, insufficient_funds, fraud_hold). Toggles the sandbox engine's scenario for the duration of the run, then restores. Use this for 'test with declined card' / 'simulate failure X' intents. Omit for the happy path."}, 'sandbox_id': {'type': 'string', 'description': 'The sandbox_id returned by import_spec.'}, 'workflow_name': {'type': 'string', 'description': 'Workflow id or name from list_workflows. Case-insensitive; dashes and underscores are interchangeable.'}}, 'additionalProperties': False}
validate_integration
Start a validation session for the user's integration. quickrun and run_workflow execute OUR curated workflow against a twin — green there says the provider behaves as documented, and says nothing about whether their integration wired to it correctly. This instead hands back a FRESH twin per provider and asks the user to point their app at it, then reads external provider traffic. Direct agent calls also appear there; caller identity is not established. Use it when someone wants their integration verified before launch. Call once with `providers`, then follow the returned `next_action`. Inspect the app and supply a complete `receipt_config` before configuring the suite; the application suite drives its own purchases and webhooks, so do not ask the user to run a manual flow first. The matrix is returned before any traffic: pass `arm` with a probe ID before exercising the app. Send the returned request_headers on every provider request in that attempt, then pass `probe` and `run_id` to evaluate. Use `cancel: true` with `run_id` to abort or retry failed cleanup. Request logs alone do not prove application state or production readiness. For a supported payment-to-receipt integration, follow the structured `next_action`; call `next_tool_call` only when it is non-null and its arguments are complete. Never execute while host-side setup is pending. Do not substitute guide, quickrun, list_workflows, or reference probes for application verification. Use the widest suite the server recommends. receipt_recovery_v1 includes R1-R4 and adds checks R5-R8 for accepted-send response loss, concurrent redelivery, source/email transient failures and delayed redelivery. Pass suite plus receipt_config with the app's exact webhook URL, test recipients and observable purchase marker. FetchSandbox freezes all four receipt rules for both same-customer and different-customer purchases. You are responsible for completing this setup: treat the target as a disposable test app, not the user's live production service, until its declared suite passes. For a greenfield app, keep live billing disabled and publish a temporary test build first to obtain its stable public origin. Use the published webhook URL, not a private preview URL. Inspect the app and identify the exact webhook route before suite configuration. Before requesting or applying test secrets, send an unsigned POST to that exact URL from outside the workspace; a 400 signature rejection is expected, while a 307/login redirect is a blocker. Keep signature validation enabled. After the successful preflight, configure the suite with its complete receipt_config. Apply the returned twin URLs, X-Flow-Run-Id, and three temporary credentials only to this disposable app; execute only after the host-side setup actions are complete. The credentials are twin-only test values: PADDLE_API_KEY, RESEND_API_KEY, and PADDLE_WEBHOOK_SECRET. Use the platform's supported secret store or secret-writing tool and never use real provider credentials or enable live billing. After every required check is held, remove only the test secrets and twin config this run added, including from the disposable test app's published scope. Never modify a separate live production app or delete pre-existing, shared, or real-provider values. Confirm the temporary names are absent, then hand the app to its owner to configure separate development/staging credentials. If the suite is failing or inconclusive, retain test config for repair and a fresh run. The configure_app response contains public twin URLs/IDs and a secret_handoff_url, never the secret values themselves. If the host exposes no safe way for you to write test secrets, explain that specific limitation and show the human the link to open while signed in to the owning FetchSandbox account; they can copy the three values directly into the platform secret store. Do not ask the human to discover endpoints, call FetchSandbox manually, or paste secret values into chat, project files, or logs. Wait for confirmation only when the human must complete that secure-store action. Then call execute:true with its run_id. FetchSandbox drives signed events and independently observes accepted email records. Keep every check and the observation windows in your report. Restore any temporary host privacy setting after the test. On an inconclusive execute result, inspect and report its `execution_diagnostics` field directly; do not ask the human to infer a cause from the public receipt page, which intentionally omits private proof. If you cannot configure the app, report that blocker; reference tests cannot replace app execution. A verified receipt suite covers only its declared rules and windows, never all production behavior. A missing or untriggered recovery fault stays unmeasured. This application suite requires sign-in.
Accès externe
Schéma d’entrée
{'type': 'object', 'properties': {'arm': {'type': 'string', 'description': 'Probe ID from the matrix to arm before running the app. Requires session_id.'}, 'probe': {'type': 'string', 'description': 'Probe ID from the matrix to evaluate after running the app. Requires session_id and run_id.'}, 'suite': {'enum': ['receipt_delivery_v1', 'receipt_recovery_v1'], 'type': 'string', 'description': 'Configure the declared application receipt suite on this session.'}, 'cancel': {'type': 'boolean', 'description': 'Abort the attempt or retry failed cleanup. Requires session_id and run_id; cannot combine with arm or probe.'}, 'run_id': {'type': 'string', 'description': 'Attempt ID returned by arm. Required with probe or cancel; prevents stale calls from consuming a newer attempt.'}, 'execute': {'type': 'boolean', 'description': 'Drive the configured app and evaluate the frozen receipt suite. Requires session_id/run_id; configuration acknowledgment alone is not proof.'}, 'providers': {'type': 'array', 'items': {'type': 'string'}, 'description': "Provider slugs the app integrates, e.g. ['stripe'] or ['paddle','resend']. Required to start a session."}, 'session_id': {'type': 'string', 'description': 'Returned by the first call. Pass it back after their app has run a flow to see what it did.'}, 'app_base_url': {'type': 'string', 'description': 'Where their app is deployed, if known. Recorded so a later step can deliver webhooks to it.'}, 'receipt_config': {'type': 'object', 'required': ['webhook_url', 'recipient_a', 'recipient_b', 'purchase_marker', 'app_version', 'source_lookup_required'], 'properties': {'app_version': {'type': 'string', 'description': 'Declared application build identifier; not code attestation.'}, 'recipient_a': {'type': 'string', 'description': 'Expected test recipient for purchase A, fixed before execution.'}, 'recipient_b': {'type': 'string', 'description': 'Different test recipient for the different-customer case.'}, 'webhook_url': {'type': 'string', 'description': 'Exact normal application webhook URL, including path.'}, 'purchase_marker': {'type': 'object', 'required': ['field'], 'properties': {'field': {'enum': ['html', 'text', 'subject', 'tags'], 'type': 'string'}, 'tag_name': {'type': 'string'}}, 'description': 'Where the normal receipt includes its Paddle transaction ID; same-record recipient/marker matching is required.', 'additionalProperties': False}, 'purchase_context': {'type': 'object', 'description': 'Application routing custom_data, e.g. test workspace ID. Never credentials.'}, 'observation_seconds': {'type': 'number', 'maximum': 5, 'minimum': 0.1, 'description': 'Observation window after each checkpoint; default 2 seconds. Verdict covers only measured windows.'}, 'source_lookup_required': {'type': 'boolean', 'description': 'Whether the app reads the source provider during its normal webhook handler.'}}, 'additionalProperties': False}}, 'additionalProperties': False}
verify_behavior
Prove a known fix survives a bug — the 'prove' half of reproduce→prove. The backend spawns a buggy AND a fixed reference handler and fires the bug_pattern's probes at both, returning the side-by-side diff (e.g. the buggy handler double-charges on a duplicate webhook, the fixed handler dedupes). Call this AFTER run_workflow reproduces a failure, when the matched bug_pattern has a simulation block, to show the fix actually holds — not just that the failure reproduced. Pass sandbox_id + flow_run_id from the run so the diff is saved onto that run's receipt URL. bug_pattern_id comes from guide's matched_bug_pattern. The buggy/fixed handlers are FetchSandbox reference implementations, NOT the user's code. A confirmed reference result does not verify the user's app or show that it is ready to ship. Keep the returned provider and evidence scope with any reported result.
Accès externe
Schéma d’entrée
{'type': 'object', 'required': ['bug_pattern_id'], 'properties': {'prompt': {'type': 'string', 'description': "OPTIONAL. The user's own description of the symptom. For patterns that can originate in the handler OR the provider, this classifies which side to simulate. Omit to run both."}, 'sandbox_id': {'type': 'string', 'description': "OPTIONAL. The sandbox from the run. Pass with flow_run_id to save the diff onto that run's receipt. This binds the pattern to that sandbox's provider; provide it when verifying a provider integration."}, 'flow_run_id': {'type': 'string', 'description': 'OPTIONAL. The flow_run_id returned by run_workflow. Pass with sandbox_id so the receipt URL renders the diff alongside the steps.'}, 'bug_pattern_id': {'type': 'string', 'description': "The bug_pattern to prove (e.g. webhook_duplicate_side_effect). Comes from guide's matched_bug_pattern.id or the spec's brain."}}, 'additionalProperties': False}
Modifié
validate_integration
2 October 2026 02:41
Modifié
verify_behavior
30 September 2026 02:41
Modifié
validate_integration
30 September 2026 02:41
Modifié
coach
30 September 2026 02:41
Supprimé
submit_proof
26 September 2026 02:40
Supprimé
set_scenario
26 September 2026 02:40
Supprimé
run_all_workflows
26 September 2026 02:40
Supprimé
prove_fix
26 September 2026 02:40
Supprimé
list_specs
26 September 2026 02:40
Supprimé
list_scenarios
26 September 2026 02:40
Supprimé
list_runs
26 September 2026 02:40
Supprimé
import_spec
26 September 2026 02:40
Supprimé
fix_bug
26 September 2026 02:40
Supprimé
find_bugs
26 September 2026 02:40
Ajouté
validate_integration
26 September 2026 02:40
Modifié
list_workflows
24 September 2026 02:40
Ajouté
set_scenario
22 September 2026 02:40
Ajouté
list_scenarios
22 September 2026 02:40
Ajouté
list_runs
22 September 2026 02:40
Ajouté
submit_proof
22 September 2026 02:40
Ajouté
verify_behavior
22 September 2026 02:40
Ajouté
run_workflow
22 September 2026 02:40
Ajouté
run_all_workflows
22 September 2026 02:40
Ajouté
list_workflows
22 September 2026 02:40
Ajouté
import_spec
22 September 2026 02:40
Ajouté
list_specs
22 September 2026 02:40
Ajouté
quickrun
22 September 2026 02:40
Ajouté
guide
22 September 2026 02:40
Ajouté
prove_fix
22 September 2026 02:40
Ajouté
fix_bug
22 September 2026 02:40