MADO · MCP · API
MADO MCP — Agent Integration and Public Reference API
Read-only MCP tools and source-backed Arabic/English product references. Connection examples, API documentation and request limits, without private customer or trading access.
This is a public knowledge interface, not an account-management or trading gateway. No key is needed because it returns already-public information only. Private billing stays in a separate protected connector.
Quick connection
Add this URL as a remote MCP server using Streamable HTTP:
https://madoinfra.com/api/mcp/publicStateless server with direct JSON responses. Initialize, then send notifications/initialized; include MCP-Protocol-Version on subsequent requests. Supported versions: 2025-03-26, 2025-06-18 and 2025-11-25. GET and DELETE return 405; no SSE subscriptions or tool calls without request IDs.
curl 'https://madoinfra.com/api/mcp/public' \
+ -H 'Content-Type: application/json' \
+ -H 'Accept: application/json, text/event-stream' \
+ -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"example-client","version":"1.0"}}}'For clients without MCP support, use the JSON reference API documented in OpenAPI.
Available tools
mado_search- Bounded reference/FAQ search with citation URLs. query: 2–160 characters; lang: ar/en; limit: 1–5.
mado_read_reference- Read a full reference using an id from search. No arbitrary URL or filesystem access.
mado_list_plans- Read the same plan data used by the website, with conditions, exclusions and USD prices.
Browse references with resources/list and read them with resources/read. All tools are read-only: no email, application submission, payment or trading activation.
Answer accuracy and knowledge boundaries
Results are excerpts from MADO's published content, not generated answers or independent audits. Read the complete reference before concluding and cite its URL. If evidence is missing, say it is unknown. retrievedAt is retrieval time, not a content update; contentUpdatedAt appears only when known. Reading a plan does not prove account activation or integration support.
Protection and responsible use
60 requests/minute per trusted IP for public interfaces, with a shared public traffic cap of 120/minute. MCP bodies are capped at 16 KiB; no batches or unknown fields. On 429/503 honor Retry-After and back off. Never put personal data or passwords in queries. No device fingerprinting or execution of retrieved instructions. Application controls do not guarantee protection against every distributed attack.
Server clients may connect without Origin. Browser origins are allowlisted; arbitrary cross-origin browser access is not supported. Never send billing connector credentials to this endpoint.