MCP server

Filmo public API (rental management for audiovisual equipment). Every tool maps to one REST v1 operation and runs with the same credential, scopes, rate limits and tenancy as the REST endpoint.

Retries: writes accept idempotencyKey; resend the same key to retry safely (same key with other arguments: 422 idempotency_key_reused). 4 tools (filmo_orders_line_items_return, filmo_purchase_orders_receive, filmo_treasury_payments_create, filmo_workflows_run) duplicate something irreversible on a blind retry: always send your own UUID with them. Results echo the key in meta.idempotencyKey (the server generates one for those 4 if you omit it), and meta.idempotentReplay is true when you got the stored result of an earlier call.

Errors: a failed call returns isError and, as text, the RFC 9457 problem JSON { type, title, status, code, detail, requestId, errors? }. Branch on code, not on detail. 429 rate_limited carries retryAfter (seconds to wait).

Dates: writes take instants as ISO 8601 with offset; responses use UTC ("Z"). In list tools use dateFilters: { field: { gte, lte, gt, lt, on } }; there a bare day ("2026-10-17") is interpreted in the business timezone of the account: the start of that day for gte/on, the end of that day for lte; gt means after the end of that day, lt before its start. An instant with offset is applied as is, except with on, which covers the whole business day that contains it.

Money: decimal strings ("1234.50") plus the currency of the document. Ids are opaque strings. Detail reads return meta.etag; pass it as ifMatch on a write to get 412 precondition_failed instead of overwriting a newer change.

No credential was presented during discovery, so this list is the full catalogue: at call time each tool requires the scope named in its description, and some require an add-on on the account.

Rate limits: 120 calls per minute per credential across all tools, plus a separate 30 per minute shared by the availability tools. Every result carries the quota left in meta.rateLimit { limit, remaining, reset }.

Lists are paginated: pass pagination.nextCursor back as cursor, keeping the same limit (default 50, maximum 500); set includeTotal to true when you need pagination.total; every list tool but the unavailabilities one accepts sort, a comma-separated list of fields with a leading "-" for descending (the tool description names the sortable fields), and the cursor is bound to it.

Error codes: unauthorized and the api_key_* codes (401), insufficient_scope (403) with requiredScope, forbidden (403), addon_required (402) with requiredAddon, validation_error (400, with every field error in errors[]), not_found (404), conflict (409), contact_in_use and address_in_use (409, what uses it counted per type in errors[]), insufficient_stock (409, requested/available/shortfall per item in errors[]), precondition_failed (412), idempotency_key_reused (422), rate_limited (429, with retryAfter), internal_error (500), service_unavailable (503: the feature is switched off for the account; retrying does not help until it is switched on). detail and errors[].message follow the Accept-Language of the MCP request; quote requestId when reporting a problem.