Giftcardshop

org.giftcardshopPublished by giftcardshop.orgv0.1.1Updated Oct 24, 2026

Browse the giftcardshop catalog and buy gift cards with Lightning over MCP. No account, no signup.

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Lets an assistant browse a gift card catalog and, with a shared secret, create Lightning-paid orders and retrieve reveal links.

What you can do
It exposes read tools that query the live public giftcardshop API: list_brands, search_products, get_product (with variants and denominations) and get_order_status for payment state and reveal availability. A write tool, create_order, posts an HMAC-signed request and returns a Lightning invoice with order ID, amount, currency and expiry. Read tools pass the API JSON through verbatim.
When to use it
Use it when you want an assistant to look up gift card brands, products and denominations, or to place and track gift card orders paid in Bitcoin over Lightning without an account or signup.
Requirements
Runs locally over stdio, typically via npx with the npm package @giftcardshop/mcp, so Node.js is needed. Browsing tools need only network access to the public API; the GCS_API_BASE variable can override the default base. Checkout requires the GCS_INTERNAL_SECRET environment variable, a 64-hex HMAC secret requested from the provider.
Before you install
create_order is a write action that creates a real order and a Lightning invoice, so paying it spends money; the invoice must be paid and the order polled for the single-view reveal link. The GCS_INTERNAL_SECRET is a shared secret that authorizes order creation and is sent as an HMAC signature header; keep it out of logs and shared configs. Read tools send catalog and order queries to the provider's API.

Installation

In SourceWeft

  1. Open Giftcardshop in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@giftcardshop/mcp

MCP server that lets AI agents browse the giftcardshop catalog and buy gift cards with Lightning - no account, no signup. The agent pays a Lightning invoice and receives a single-view reveal link with the code.

Read tools work against the live public API with no key. create_order is early access: it needs the shared GCS_INTERNAL_SECRET (request one at https://giftcardshop.org/contact); without it the read tools still work and create_order reports that it is not configured.

Tools

ToolKindBacked by
list_brandsreadGET /v1/brands
search_productsreadGET /v1/products
get_productreadGET /v1/products/:id (variants + denominations)
get_order_statusreadGET /v1/orders/:id (payment state + reveal availability)
create_orderwritePOST /internal/agent-orders (HMAC) -> Lightning invoice

Read tools pass the API JSON through verbatim. create_order returns { orderId, invoiceId, invoiceUrl, bolt11?, sats?, total, currency, expiresAt }.

Run

bash
# read-only (browsing works, create_order reports "not configured")npx @giftcardshop/mcp
# with checkout enabledGCS_INTERNAL_SECRET=<64-hex> npx @giftcardshop/mcp

Claude Desktop / any MCP client (stdio):

json
{  "mcpServers": {    "giftcardshop": {      "command": "npx",      "args": ["-y", "@giftcardshop/mcp"],      "env": { "GCS_INTERNAL_SECRET": "<64-hex>" }    }  }}

Config

EnvDefaultPurpose
GCS_API_BASEhttps://api.giftcardshop.orgpublic API base
GCS_INTERNAL_SECRET(unset)64-hex HMAC secret; enables create_order. Unset = read-only.

Checkout (create_order)

create_order POSTs to POST /internal/agent-orders, HMAC-signed with GCS_INTERNAL_SECRET (header x-internal-sig), and returns a Lightning invoice. Pay it, then poll get_order_status for the single-view reveal link. No Nostr identity and no partner account required.

Roadmap

  • L402 (Lightning HTTP 402) so an agent pays per-call without a human step.
  • A hosted remote MCP over HTTP, so there is nothing to install.
  • A btcrecharge MCP for mobile top-ups (same shape).

Source: README.md at commit 866b106

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts