Access, credits and limits
Connections and plans
| Connection | Who can use it | URL |
|---|---|---|
| Pulltrader account | Signed-in Free and paid accounts | https://mcp.pulltrader.app/mcp |
Initialization and tool discovery require sign-in. Eight public commands also accept direct calls without an account; they are included in the signed-in list.
Free accounts get photo identification, catalog matching, collections, photo saving and listing drafts. Active/trialing Operations, Business and Managed add ten show commands through Companion. Business and Managed additionally get six read-only Seller commands within the same connection. All eight public commands are also available when signed in. Full permissions expose 27 commands on Free, 37 on Operations and 43 on Business or Managed. Plan and permission checks hide ineligible commands and reject direct calls. No subscription is needed for Companion account research, but a sufficient credit balance is required.
Permissions and approval
collection:read: account, catalog, photo identification, collection, draft and saved-research reads; show reads also need an eligible plan.collection:write: collection edits, saving photos and creating/editing drafts; show writes also need an eligible plan.research:spend: new research after approval of the specific quoted query and cost.seller:read: read-only Seller tools within the Pulltrader connection; also requires Business or Managed eligibility.
Companion requires collection-read permission even when granting other scopes. Tokens must be for the intended connection. Deleted/demo accounts and machine access are rejected by Companion. Read-only connections omit write commands; collection-write permission does not imply permission to spend credits.
Approve show allocations and prices, request opening Checkout, and confirm actual packed and returned counts. A prepared transaction is not a completed payment. A seller repricing preview is not approval or execution. MCP exposes no listing publication, collection deletion, direct repricing execution or automatic ongoing business authorization.
Credits
Identification, catalog matching, photos, collections, listing drafts and show
workflows use zero research credits. quote_card_research is free. A new successful
research_card call currently costs one credit after quote approval. Insufficient
credits prevent research. Failed/no-result research and conflicting-price evidence
are not charged. read_card_research is free and reuses saved evidence, not fresh
research. Included balances and top-ups depend on the account; this documentation
does not promise a specific allowance.
Request and capacity limits
| Connection or action | Default limit |
|---|---|
| Public requests | 60 requests/minute per IP |
| Public text identification, research and stolen-card checks | 8/minute and 40/day per IP |
| Shared card-processing capacity | 10,000/day across public and signed-in requests |
| Companion requests | 60/minute per account per backend instance |
| Companion photo identification, photo saving and research | 8/minute per account per backend instance |
| Authenticated card processing | No daily per-account MCP cap; shared capacity still applies |
| Seller requests | 30/minute per account per backend instance |
Public batches accept up to five messages. Signed-in connections accept one JSON-RPC message per request. Edge capacity checks also cover Companion candidate search. Retry attempts may consume request capacity; shared counters are eventually consistent, and backend minute limits are per instance rather than global quotas. Public coarse limiting fails open if its storage is unavailable; card-processing budgets fail closed.
Inputs, retries and results
Writes, photo identification, candidate search and new research use UUID request
IDs. Retry an identical request with the same ID. Changed payloads return
REQUEST_CONFLICT; replay returns the original saved response. This prevents
repeated saved writes or duplicate research charges.
Collection additions allow up to 20 items. Collection costs are dollars per copy; use distinct copy IDs for distinct copies/holdings. Saved values are not current valuations. Photos accept JPEG, PNG or WebP up to 4 MiB and 25 million pixels per image; direct URLs must satisfy supported-host and HTTPS validation. Photo saving removes metadata and produces JPEG. Inline image/chart/photo panels vary by client.
Amounts are USD. Exact card identity, printing and condition must be retained. Missing history is not filled in. Seller comparisons and fee estimates preserve unknown costs rather than assuming profit. See schemas for per-field limits and fee schedules for estimate assumptions.
Verification status
On October 12, 2026, an authenticated production scan through ChatGPT returned
all 43 tools from /mcp. Live account, show and seller reads passed on the owner's
Business account. Initialization and discovery now return a sign-in challenge
without credentials. Fresh Claude sign-in through the existing Pulltrader MCP
application passed at /mcp; the owner has one connected Pulltrader entry with
43 tools. Actual account, show, collection and business-setting reads passed.
Local signed-JWT tests cover the four plan boundaries; separate production
accounts were not created. Directory publication remains a separate review.
Older release notes are historical evidence only.