SecretBox MCP — Documentation · Console Secretbox

Official connector for Claude.ai · Catalog of gastronomic gift-box experiences
Version 4.4.0 · Published by API & YOU

About

SecretBox MCP is a Model Context Protocol connector that allows Claude.ai to search the SecretBox catalog of gastronomic gift-box experiences (Michelin-starred restaurants, hotels, tasting events…) and to display the results as an interactive map and detailed cards.

Typical use cases:

“Find me a gourmet gift box near Lyon, max 200 €”
“Which tasting boxes from a Michelin-starred chef in Burgundy?”
“Show me the details of the Soirée gourmande box from chef X”
“A 5★ hotel experience in Var for two people”

Connect to Claude.ai

Open Claude.ai → Settings → Connectors.

Click Add custom connector.

Enter the server URL: https://mcp-claude.api-and-you.com/mcp

The OAuth 2.1 flow (Dynamic Client Registration + PKCE) runs automatically — no manual action required.

Once connected, two tools are available in the picker: Search SecretBox catalog and Get SecretBox experience details.

Usage examples

Simple search

User: I'm looking for a gourmet gift box for two
      in Bordeaux, max 150 €.

Claude (uses search_item): Here are 3 matching boxes…
[interactive map + 3 cards]

Multilingual search

User: Je cherche une expérience cadeau près de Nice,
      autour de 100 euros.

Claude (search_item, query auto-translated to FR, locale=fr_FR):
Voici 4 expériences près de Nice…

The query text is translated to French before the catalog lookup (the catalog is indexed in FR), but Claude’s reply stays in the user’s language.

Item detail

User: Tell me more about box SBX-12345.

Claude (uses get_item): "Gastronomic dinner" box
at chef Pierre Dupont's restaurant, 2 Michelin stars…
[interactive detail card]

Exposed MCP tools

Name	Title	Type	Short description
`search_item`	Search SecretBox catalog	Read-only	Multilingual catalog search with structured filters.
`get_item`	Get SecretBox experience details	Read-only	Retrieves the full details of an experience by `global_id`.

`search_item`

Structured search with relevance scoring and per-establishment deduplication.

Parameter	Type	Required	Description
`query`	string (FR)	yes	Search text, in French.
`locale`	string	no	`fr_FR`, `en_US`, `es_ES`, `it_IT`, `de_DE`. Default: `fr_FR`.
`limit`	number	no	1–8. Default: 4.
`filters.productType`	`"box"` \| `"giftcard"` \| `"article"`	no	Product type.
`filters.city`	string	no	Filter by city.
`filters.region`	string	no	Filter by region.
`filters.department`	string	no	French department (e.g. “Jura”).
`filters.priceMax`	number	no	Maximum price in euros.
`filters.deliveryMode`	`"mail"` \| `"email"` \| `"onsite"`	no	Delivery mode.
`filters.geo`	object	no	`{ lat, lon, radius }` for proximity search.

`get_item`

Retrieves a gift box by its global identifier.

Parameter	Type	Required	Description
`global_id`	string	yes	Unique gift-box identifier.

Widgets

Both tools automatically render an interactive widget (MCP Apps extension), shown in a sandboxed iframe inside the Claude conversation:

Catalog widget (on search_item): Leaflet map centered on the establishments + scrollable card slider, with a side detail panel.
Item detail widget (on get_item): full card with hero image, gastronomic distinctions, hotel rating, booking button.

Images and map tiles are pre-fetched on the server side and embedded as data: URIs in the response, in order to comply with the connect-src 'self' CSP of the Claude iframe.

Authentication

OAuth 2.1 compliant with RFC 8414 (Authorization Server Metadata), 9728 (Protected Resource Metadata) and 7591 (Dynamic Client Registration), with PKCE S256.

Endpoint	RFC
`/.well-known/oauth-authorization-server`	RFC 8414
`/.well-known/oauth-protected-resource`	RFC 9728
`/register`	RFC 7591 (DCR)
`/authorize`	OAuth 2.1
`/token`	OAuth 2.1 + PKCE S256

Single scope: mcp:tools. Access token TTL: 24h.

Limits & quotas

limit max: 8 results per search_item call.
geo filter: do not combine with city (the geo filter takes precedence).
OSM tiles: pre-fetch limited to a reasonable number of zoom levels (overview + 8 levels per marker). Intermediate levels are reconstructed by widget-side ancestor fallback.
Images: resized to a max width of 400 px, WebP format quality 55. Unavailable source images are silently omitted.

Common errors

Code	Message	Cause	Resolution
403	`origin_not_allowed`	Origin header outside the allowlist.	Call from Claude.ai or MCP Inspector only.
-32601	`Method not found`	Unknown JSON-RPC method.	Allowed list: `initialize`, `tools/list`, `tools/call`, `resources/list`, `resources/read`, `ping`.
-32602	`Invalid arguments`	Invalid tool parameters (Zod schema).	Check parameter names/types.
500	Elasticsearch error	ES unavailable or missing index.	Check `/health`, contact support.

Changelog

v4.4.0 — April 28, 2026

Added title annotation on both tools (Anthropic compliance).
Origin-header validation on /mcp.
Hardened logs: query text no longer appears in stderr (length only).
Privacy Policy published at /privacy.
Public documentation published at /docs.

v4.3.x — previous

MCP Apps implementation (interactive widgets, structuredContent).
Migration to plain JSON-RPC (workaround for the Anthropic SSE description truncation).
Full OAuth 2.1 + PKCE for the Connectors Directory.

Services

Benefits

Commitments

Activité

Pierre-Olivier Bouchot

SecretBox MCP — Documentation