WebMCP & MCP API

Quick start

Browser WebMCP

Open naczarter.pl/en in a compatible browser, then check whether the registration API is available.

typeof document.modelContext?.registerTool === "function"

Remote MCP

Configure https://naczarter.pl/api/mcp as a read-only Streamable HTTP endpoint. It exposes three public read tools and no reservation or payment mutation. Every POST must use Content-Type: application/json.

curl -s https://naczarter.pl/api/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "initialize",
    "params": {
      "protocolVersion": "2025-11-25",
      "capabilities": {},
      "clientInfo": { "name": "docs-example", "version": "1.0" }
    }
  }'

curl -s https://naczarter.pl/api/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -H 'MCP-Protocol-Version: 2025-11-25' \
  -d '{
    "jsonrpc": "2.0",
    "id": 2,
    "method": "tools/list"
  }'

curl -s https://naczarter.pl/api/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -H 'MCP-Protocol-Version: 2025-11-25' \
  -d '{
    "jsonrpc": "2.0",
    "id": 3,
    "method": "tools/call",
    "params": {
      "name": "search_charters",
      "arguments": {
        "city": "Giżycko",
        "minPeople": 6
      }
    }
  }'

tools/list is the runtime contract: it returns required fields, enums, limits, annotations and the exact three-tool remote catalogue. Supported protocol revisions are 2025-11-25 and 2025-06-18. The WebMCP manifest is descriptive, not runtime discovery.

Tools

This is a compact summary rendered from the shared AGENT_TOOL_CONTRACT. Use tools/list for the exact remote inputSchema, including required fields, enums and bounds.

Remote MCP exposes the first three read-only tools only. Browser WebMCP exposes all four tools. Calls to book_charter return an authentication hand-off until the signed-in user's account e-mail has been verified.

Scroll the table horizontally to inspect every column.

Browser annotations mark discovery tools read-only and book_charter consequential. Catalogue-backed output is marked untrusted where applicable; server validation remains authoritative.

Browser vs remote

Scroll the table horizontally to compare both transports.

Browser booking

book_charter is not available over remote MCP. A compatible browser registers it for discovery, but the server creates a hold only when the current user is signed in to a NaCzarter account with a verified e-mail. Otherwise the tool returns a sign-in hand-off and makes no state change.

1. 1. Quote. Call quote_charter for the selected yacht, dates and one-way option. It returns online charter price, mandatory on-site fees, currency, terms revision and a server-revalidated acceptedQuote snapshot.
2. 2. Identify. The booking contact e-mail must match the verified e-mail of the signed-in account. The server enforces this again when the hold is created.
3. 3. Confirm. NaCzarter opens its own in-tab dialog with the fresh quote, customer details, linked terms and a required consent checkbox. A human-verification proof from that dialog is bound to this booking action and checked by the server. Cancelling, expiry or timing out creates no reservation.
4. 4. Revalidate. The server checks the authenticated account, matching contact e-mail, quote snapshot, price and availability, locks the yacht row and repeats the overlap check.
5. 5. Hold. A successful call creates an unpaid PENDING order that temporarily holds the selected dates. The tool does not charge or receive payment credentials.
6. 6. Hand off. The customer opens checkoutUrl and pays personally. If checkout startup fails after the hold exists, the tool returns the authenticated customer's account-page URL. Do not create a second hold for the same dates.

Consent and telemetry

Browser cancellation before confirmation prevents the mutation. A late abort is not a rollback and requires state reconciliation. Booking contact data is stored on the reservation but excluded from the tool-call summary; telemetry includes a salted IP hash and user agent, so it is pseudonymous rather than anonymous. Read calls also emit operational telemetry even though they do not change booking or catalogue state.