Salai MCP (Beta)

Israeli grocery shopping and price-comparison assistant over Salai MCP. Use when you need product search, autocomplete, cross-retailer price comparison, cart...

Security Scan

The skill's requirements and runtime instructions are consistent with a grocery price‑comparison assistant that calls Salai's MCP API; nothing requested is disproportionate to that purpose.

Purpose & Capability

Name, description, and declared primary credential (SALAI_API_KEY) match the SKILL.md instructions to call Salai's MCP endpoint for product search, pricing, and cart operations. No unrelated binaries, credentials, or config paths are requested.

Instruction Scope

Instructions explicitly call the external endpoint (https://mcp.salai.co.il/mcp) and describe header-based auth and specific API methods; they do not instruct reading local files or unrelated environment variables. Note: using the skill will send product queries and cart data to the remote Salai service (expected for this kind of integration).

Install Mechanism

No install spec or code is included (instruction-only), so nothing is written to disk or downloaded during install. This is the lowest-risk install posture.

Credentials

The only required credential is SALAI_API_KEY (declared as primary and secret). That single API key is proportionate to a remote-API grocery/comparison skill; there are no extraneous secrets requested.

Persistence & Privilege

The skill is not configured as always:true and does not request modifications to other skills or system-wide settings. Model invocation is allowed (default), which is expected for skills; no elevated persistence is requested.

Assessment

This skill appears coherent: it legitimately needs a Salai API key and calls Salai's MCP endpoint to perform searches, price comparisons, and cart operations. Before installing, confirm you trust the Salai service and that the API key you provide was obtained from https://app.salai.co.il (beta access). Do not paste your API key into public chat or logs; treat it as a secret. Be aware that product queries and cart contents will be transmitted to the external Salai endpoint (expected behaviour). If you have operational concerns, limit the agent's autonomy or require explicit user approval before the skill runs, and rotate the API key if you believe it was exposed.

Salai MCP Skill

Use Salai's remote MCP server for Israeli grocery discovery, comparison, and cart workflows.

Access requirements

• Salai MCP is currently in beta.
• Users must register to the beta program and be approved.
• Only approved beta users can generate an API key from Salai Profile and use MCP tools.
• Registration: go to https://app.salai.co.il, create an account (Sign up), and wait for beta approval.
• Beta access contact: [e-mail]

Connection

• Endpoint: https://mcp.salai.co.il/mcp
• Auth: send a user API key from Salai Profile using either:
  • Authorization: Bearer <SALAI_API_KEY>
  • X-API-Key: <SALAI_API_KEY>

Use the full /mcp endpoint directly for best client compatibility.

Tools

• Discovery:
  • get_stores
  • get_retailers
• Search:
  • autocomplete_products
  • search_products
• Pricing and comparison:
  • get_product_prices
  • compare_prices
  • cart_of_israel
• Cart management:
  • get_cart
  • get_my_cart
  • update_cart_items
  • add_cart_item
  • remove_cart_item
  • delete_cart
• Recommendations:
  • get_complementary_recommendations

Recommended workflow

1. Resolve products quickly with autocomplete_products (method: text first, then semantic if empty).
2. Use search_products for richer semantic results and recommendations.
3. Build/modify the active user cart with get_my_cart, add_cart_item, update_cart_items, and remove_cart_item.
4. Compare total cost across retailers with compare_prices.
5. Use cart_of_israel for one-shot comparison of the default Cart of Israel list.

Store scope conventions

When filtering by store, prefer retailerId + storeId.

subChainId may be accepted by some tools for backward compatibility, but is deprecated for store identity.

Error handling

• If access is denied, instruct the user to complete beta signup and wait for approval.
• If an auth error occurs, request a valid Salai API key and retry.
• If a product is not found in one store, continue comparison with available alternatives.
• For ambiguous product names, call autocomplete_products before cart mutations.

Security

• Never log or expose API keys in output.
• Treat all API keys as secrets.