Inspection report
amazon-agent-iris-mcp
Vendor MCP server from Kuudo. Tool list: code-checked5.
The answer
2
What can it change in your account?
2 of 12 tools can change data, in these areas: Listings.
name based Read and write here are inferred from tool names and descriptions, not from a test.
| Area | Access | Write tools | Read tools |
|---|---|---|---|
| Orders | · Orders no tool on record | 0 | 0 |
| Ads | · Ads no tool on record | 0 | 0 |
| Listings | W Listings can change data | 2 | 10 |
| Pricing | · Pricing no tool on record | 0 | 0 |
| Inventory | · Inventory no tool on record | 0 | 0 |
| Reports | · Reports no tool on record | 0 | 0 |
| Finance | · Finance no tool on record | 0 | 0 |
Record
The facts on file.
Tools
All 12 tools we found.
Grouped by what they do to your data. The access column shows why we put a tool there.
write Can change data 2
| Tool | Description | Area | Access basis |
|---|---|---|---|
| create_upload_url | Catalog entry. Runs in your Kuudo deployment, not here. Create the expiring signed URL needed to upload LOCAL image bytes. Use this when you have an image on disk (or raw bytes)… | Listings | name based |
| start_here | Catalog entry. Runs in your Kuudo deployment, not here. Call this FIRST to understand how to use this image and video generation server. Returns workflow documentation for: -… | Listings | name based |
read Reads data 10
| Tool | Description | Area | Access basis |
|---|---|---|---|
| generate_image | Catalog entry. Runs in your Kuudo deployment, not here. Generate or edit images with Google Gemini (Nano Banana) from natural language instructions. For OpenAI gpt-image-2, use… | Listings | name based |
| generate_openai_image | Catalog entry. Runs in your Kuudo deployment, not here. Generate images with OpenAI gpt-image-2 via the Responses API. The additive OpenAI provider, sibling to generate_image… | Listings | name based |
| generate_video | Catalog entry. Runs in your Kuudo deployment, not here. Generate video with Google Veo 3.1 from text, a first image, first/last frames, up to three reference images, or a… | Listings | name based |
| get_prompt | Catalog entry. Runs in your Kuudo deployment, not here. Get a prompt by name with optional arguments. Returns the rendered prompt as JSON with a messages array. Arguments should… | Listings | name based |
| get_video_status | Catalog entry. Runs in your Kuudo deployment, not here. Probe one video operation (exactly one of recovery_id / operation_name). Makes at most one Google status call and never… | Listings | name based |
| list_prompts | Catalog entry. Runs in your Kuudo deployment, not here. List all available prompts. Returns JSON with prompt metadata including name, description, and optional arguments. | Listings | name based |
| list_resources | Catalog entry. Runs in your Kuudo deployment, not here. List all available resources and resource templates. Returns JSON with resource metadata. Static resources have a 'uri'… | Listings | name based |
| list_video_operations | Catalog entry. Runs in your Kuudo deployment, not here. List the video operations submitted with this key, newest first. Reads only the local operation store, no Google call. Use… | Listings | name based |
| read_resource | Catalog entry. Runs in your Kuudo deployment, not here. Read a resource by its URI. For static resources, provide the exact URI. For templated resources, provide the URI with… | Listings | name based |
| server_status | Catalog entry. Runs in your Kuudo deployment, not here. Return server diagnostics for auth, models, storage, uploads, resources, and health. | Listings | name based |
Method
How we checked this server.
We read the tool definitions in the source code. We did not run the server against a seller account.5
Not tested with credentials. We did not connect this server to a seller or ads account. A tool marked read can still have side effects we could not see, and a vendor can add write tools at any time. Check the list again before you grant access.
Areas come from keywords in tool names, as explained on the matrix page.
Notes
Sources for this report
- 1Source repository or product pagegithub.com
- 2Documentationgithub.com
- 3License: GitHub API repo.license (search 2026-10-30)
- 4Authentication: static scan of repo (env names / code patterns)
- 5Our MCP inventory of Oct 30, 2026: tool list, access marks, stars and last commit. GitHub repository search (22 queries, unauthenticated) -> shallow clone -> static extraction (extract_tools.py) -> optional runtime tools/list (mcp_probe.py); vendor/official from public docs. access=read|write is a name/description heuristic unless access_basis says otherwise.