Atlas entry

`fotofoto.app`

20 capabilities over ARD, MCP and OpenAPI. The inventory is incomplete. First atlas observation.

Observed 5 Nov 2026, 12:16 UTC · passive: no tools called, no credentials sent · sha256:c6b9dd…d95d

20 capabilities, 17 of them tools or operations. 3 only read. 5 change records. 1 moves money. 7 have no reading.

AI reading, beta. side-effects v1 on jev-1.14.0 and claude-haiku-5.5, calibrated on OpenAPI and MCP (golden-1 and golden-3). Only readings above a measured precision count. Counts are tools, not calls: no tool was called.

AI summary · beta

create_book, createPhotoInvitation, uploadPhoto, createPaymentQuote and createBook are read as creating records.

get_book, get_catalog and compare_photo_book_prices are read as reading only.

pay_book is read as moving money.

uploadPhoto, createPaymentQuote and createCheckout are read as asking a human first.

Written by claude-haiku-5.5 from the tool names and the readings on this page, then checked against them. It can still be wrong; it never lowers or hides a fact.

What an agent can do here

AI readings, beta · Readings on 5 of 8 MCP tools, and on 5 of 9 operations. 1 reads as moving money.

Moves money
1 capability
- pay_book0.85
Deletes or cancels records
0
No capability read this way.
Sends messages to people
0
No capability read this way.
Changes permissions
0
No capability read this way.
Runs code
0
No capability read this way.
Should ask a person first
3 capabilities
- POST createCheckout0.86
- POST createPaymentQuote0.82
- POST uploadPhoto0.81
The signed label counts 0. Labels count MCP readings only and can lag behind newer ones. The readings on this page are shown, not dropped.

No counted reading 7 capabilities No reading was counted, so any effect above is possible for them: create_checkout, create_payment_quote, start_photo_book, GET getBook, GET getCatalog, GET comparePhotoBookPrices, POST payQuote.

What changed

First atlas observation. Atlas history

Look first

AI reading, beta: AI adds items here; it never removes one.

pay_bookMoves money · 0.85
POST createCheckoutShould ask a person first · 0.86
POST createPaymentQuoteShould ask a person first · 0.82
POST uploadPhotoShould ask a person first · 0.81

Surfaces

5 protocols checked

ARD	Valid	v0.91 · 1 retrieved artifact
A2A	Not found	0 skills
MCP	Valid	2025-11-25 · 8 tools · 3 resources · prompts not advertised
OpenAPI	Valid	3.1.0 · 9 operations
WebMCP	Not detected	0 declarative form tools · experimental

Exact states and meaning

ARD
observed
Exact state: valid · Revision v0.91 · 1 retrieved artifact
A usable protocol document was retrieved and validated.
Directly observed
A2A
absent
Exact state: not found · 0 skills
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
MCP
observed
Exact state: valid · Revision 2025-11-25 · 8 tools · 3 resources · prompts not advertised
A usable protocol document was retrieved and validated.
Directly observed
OpenAPI
observed
Exact state: valid · Revision 3.1.0 · 9 operations
A usable protocol document was retrieved and validated.
Directly observed
WebMCP
absent
Exact state: not detected · 0 declarative form tools · experimental
No named declarative WebMCP form tools were observed in the origin root HTML.
Script-registered tools and other pages are not observed, so this does not mean the site has no WebMCP tools.
Not observed / not fetched

20 · inventory incomplete

Inventory incomplete (OpenAPI operations). The displayed count is a lower bound; missing items do not prove removal.

Showing 20 of 20.

Tool and inputs							◇ AI reading, beta · confidence
Read as one of the six effects 4 AI only raises attention: these rows come first.
bookToken, quoteId◇ AIMoves money 0.85	Moves money 0.85						Moves money0.85
`pay_book` inputs `bookToken` (required), `quoteId` (required) AI Moves money 0.85
Idempotency-Key, bookId, bookToken, country* and 2 more◇ AIShould ask a person first 0.86						Should ask a person first 0.86	Should ask a human first0.86
`POST` createCheckout inputs `Idempotency-Key`, `bookId` (required), `bookToken` (required), `country` (required) and 2 more AI Should ask a human first 0.86
no inputs◇ AIShould ask a person first 0.81						Should ask a person first 0.81	Creates records0.93
`POST` uploadPhoto AI · beta Creates records 0.93 Should ask a human first 0.81
Idempotency-Key, bookId, bookToken, country* and 3 more◇ AIShould ask a person first 0.82						Should ask a person first 0.82	Creates records0.94
`POST` createPaymentQuote inputs `Idempotency-Key`, `bookId` (required), `bookToken` (required), `country` (required) and 3 more AI · beta Creates records 0.94 Should ask a human first 0.82
Read as none of the six 6 Not a clearance.
binding, cover, pages, paper							Reads only0.80
`compare_photo_book_prices` inputs `binding`, `cover`, `pages`, `paper` AI Reads only 0.80
attachments, idempotencyKey*, language, photos and 3 more							Creates records0.84
`create_book` inputs `attachments`, `idempotencyKey` (required), `language`, `photos` and 3 more AI Creates records 0.84
bookId, bookToken, country, language							Reads only0.90
`get_book` inputs `bookId` (required), `bookToken` (required), `country`, `language` AI Reads only 0.90
no inputs							Reads only0.88
`get_catalog` AI Reads only 0.88
Idempotency-Key, attachments, idempotencyKey*, photos and 3 more							Creates records0.99
`POST` createBook inputs `Idempotency-Key`, `attachments`, `idempotencyKey` (required), `photos` and 3 more AI Creates records 0.99
Idempotency-Key, idempotencyKey, photos, title*							Creates records0.97
`POST` createPhotoInvitation inputs `Idempotency-Key`, `idempotencyKey` (required), `photos` (required), `title` (required) AI Creates records 0.97
No counted reading 7 No reading was counted, so any effect is possible.
bookId, bookToken, country, idempotencyKey and 1 more	unknown	unknown	unknown	unknown	unknown	unknown	No reading
`create_checkout` inputs `bookId` (required), `bookToken` (required), `country` (required), `idempotencyKey` (required) and 1 more
bookId, bookToken, country, idempotencyKey and 2 more	unknown	unknown	unknown	unknown	unknown	unknown	No reading
`create_payment_quote` inputs `bookId` (required), `bookToken` (required), `country` (required), `idempotencyKey` (required) and 2 more
language, title	unknown	unknown	unknown	unknown	unknown	unknown	No reading
`start_photo_book` inputs `language`, `title`
X-Fotofoto-Book-Token, bookId, country	unknown	unknown	unknown	unknown	unknown	unknown	No reading · declared read method
`GET` getBook inputs `X-Fotofoto-Book-Token` (required), `bookId` (required), `country`
no inputs	unknown	unknown	unknown	unknown	unknown	unknown	No reading · declared read method
`GET` getCatalog
binding, cover, pages, paper	unknown	unknown	unknown	unknown	unknown	unknown	No reading · declared read method
`GET` comparePhotoBookPrices inputs `binding`, `cover`, `pages`, `paper`
Authorization, X-Fotofoto-Book-Token, X-PAYMENT, quoteId	unknown	unknown	unknown	unknown	unknown	unknown	No reading
`POST` payQuote inputs `Authorization`, `X-Fotofoto-Book-Token` (required), `X-PAYMENT`, `quoteId` (required)
MCP resources 3 Not read by AI.
no inputs							Not read
`name not shown`
no inputs							Not read
`name not shown`
no inputs							Not read
`name not shown`

Read as this effect No reading: unknown Not read as this effect◇ AI readings, beta. A zero is a count, not a clearance.

Not observed in this Passport: A2A skills, MCP prompts.

The atlas shows each capability by its plain identifier, inputs and declared sign-in. Publisher descriptions, paths, links and source evidence are not published here.

The comparison with the previous observation is shown only to the account that recorded it.

Atlas history

1 observation

5 Nov 2026, 12:16 UTC20 capabilities · ARD, MCP 2025-11-25, MCP Server Card and OpenAPI 3.1.0 · MCP endpoint valid · 1 incomplete inventory groupFirst observation
Fingerprint and versions
Fingerprint
c6b9dd0faf473250eabea83676bee380fc17e68fb507b8a95d696c0462d7d95d (incomplete)
Passport schema
0.5.0, passport-semantic-v4
Consistency
ARD_DECLARED_MCP_SERVER_CARD: mismatch · ARD_OPENAPI_ARTIFACT_OBSERVED: match · MCP_PROMPTS_ADVERTISEMENT_LIST: not applicable · MCP_RESOURCES_ADVERTISEMENT_LIST: match · MCP_TOOLS_ADVERTISEMENT_LIST: match · OPENAPI_MCP_EXPLICIT_MAPPING: not applicable · OPENAPI_SERVER_SUBJECT_ALIGNMENT: match

Each class compares an observation with the previous atlas observation. Runs of unchanged observations are grouped. Struck values are what the previous observation recorded; inserted values are what this one recorded.

Declared and observed

8 tools declare hints; the AI readings agree with all 5 that have a reading.

A disagreement is not a finding about the service: either side can be wrong. How we compare declarations and readings.

About this entry

app.fotofoto/photo-book
Listed
Official MCP Registry · first listed 28 Oct 2026 · last listed 28 Oct 2026

Passive observations of a public interface listed in the Official MCP Registry. An observation does not verify security, ownership or compliance, and InterfaceDelta assigns no scores or rankings. Methodology · Report an inaccuracy · Ask for removal

Identity and snapshot

Target key: sha256:49e70f3d01bc0cb4d175faf572208dda5cc3016d0d3492a851a4c902aa81fd2d
Locator SHA-256: 6d1a6ac7983cf23995a35bc2f82ed2dd1ada2095b84737986c39b3ed83260d4a
Snapshot generated: 5 Nov 2026, 14:55 UTC

The entry is one exact observed target, not a real-world service identity, and implies no ownership. Endpoint paths are not published; the locator hash lets an operator confirm their own URL.

Capability facts

As observed from outside, at the time below

Observed: 5 Nov 2026, 12:16 UTC
Signed: 5 Nov 2026, 12:37 UTC

Protocols: ARD, MCP, MCP server card, OpenAPI
Tools: 17
Declared sign-in: None declared

Effects counted AI readings, beta

Moves money: 1
Deletes or cancels records: 0
Sends messages to people: 0
Changes permissions: 0
Runs code: 0
Asks a person: 0

17 tools examined; 5 counted above a measured threshold.

Declared vs read disagreements

Declared read-only, read as writing: 0
Declared destructive, read as not writing: 0
Declared non-destructive, read as deleting: 0
Declared closed-world, read as reaching out: 0

Change since previous: First observation
Label status: Current