Remote MCP server for order investigation.
| URL | https://mcp.tefter.com/mcp |
|---|---|
| Transport | MCP Streamable HTTP, stateless, JSON responses. POST only. |
| Auth | Authorization: Bearer tftk_… — exactly one header, managed key with audience mcp. |
| Reachable | Only / and /mcp are routed from the internet. |
orders:read.mcp and scope orders:read.TEFTER_MCP_KEY.A key reads one organization only: the one that minted it. Revoke the key in Kredencijali to cut access.
opencode — opencode.json (project) or ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"tefter": {
"type": "remote",
"url": "https://mcp.tefter.com/mcp",
"enabled": true,
"oauth": false,
"headers": { "Authorization": "Bearer {env:TEFTER_MCP_KEY}" }
}
}
}
Claude Code:
claude mcp add --transport http tefter https://mcp.tefter.com/mcp \
--header "Authorization: Bearer ${TEFTER_MCP_KEY}"
List the tools your key can see:
curl -s https://mcp.tefter.com/mcp \
-H "Authorization: Bearer ${TEFTER_MCP_KEY}" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Read one order (canonical order ID or the supplier's inbound document ID):
curl -s https://mcp.tefter.com/mcp \
-H "Authorization: Bearer ${TEFTER_MCP_KEY}" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"tefter_get_order_detail","arguments":{"order_id":"<order-id>"}}}'
| Tool | Scope | What it returns |
|---|---|---|
tefter_get_order_detail | orders:read | One TX order from your organization's viewpoint: status, pause reason, parties, paginated article lines. |
| Response | Meaning |
|---|---|
401 | Key malformed, expired, revoked, wrong audience, or minted for another environment. The body is the same for all of these on purpose. |
403 | Browser Origin not trusted. CLI clients send no Origin. |
400 header mismatch | Mcp-Method / Mcp-Name headers disagree with the JSON-RPC body. Remove or fix them. |
503 | The server could not reach a dependency. Retry shortly. |
| Empty tool list | The key lacks the orders:read scope. |