Welcome to D MALL ONLINE.
Build agents that act.
Every approved learner gets a private copy of India’s everything app: travel, banking, shopping, inventory and healthcare, with 105 API tools. Build MCP servers and AI agents against real-looking data that only you can see and change.
# Your key only ever opens your own sandbox curl -H "Authorization: Bearer mbz_…" \ "https://dmall.online/api/v1/bank/customers/summary?customer_email=dinesh.kumar@mahabazaar.in" 200 OK X-RateLimit-Remaining: 119 { "customer_name": "Dinesh Kumar", "total_balance": 2888374.67, "loans_outstanding": 5310873.41, "monthly_emi": 61491.42 }
Five apps, one customer
Everything an agent needs to reason across real tasks
The same D MALL ONLINE you know from class, with the same 105 endpoints, the same rules and the same data, now running in a private space for each learner.
Travel
~28k flights, 6k train runs, 15k buses and 228 hotels with seat allocation, fare calendars and refund tiers.
Bank
Savings, salary and current accounts, a reconciled ledger, UPI/IMPS/NEFT/RTGS limits, cards, payees and loans.
Shop
205 products, carts, coupons, warehouse allocation, tracking history, cancellations and returns.
Inventory
10 fulfilment centres, stock movements, low-stock alerts, transfers and supplier purchase orders.
Health
241 doctors across 32 hospitals, 55k bookable slots, video consults, rescheduling and refunds.
Built for MCP
A standard OpenAPI 3.1 spec with readable operation ids, so an MCP server turns every endpoint into a tool automatically.
How it works
From sign-up to your first agent in minutes
Request access
Register with your name, email and how you’ll use D MALL ONLINE.
Get approved
An administrator reviews and approves your account. Until then nothing is accessible.
Open your sandbox
Your private copy of all five apps is created on first visit, with dates starting today.
Connect your agent
Create an API key and point your MCP server, LangChain or custom agent at your sandbox.
One MCP server per learner
Each student’s tools act on their own data
An API key identifies its owner, so the server always routes it to that person’s sandbox. Two students can both call transfer_funds or delete_flight at the same time and never affect each other.
- check_circleRead-only or read-write keys, with optional expiry
- check_circlePer-user rate limits with standard
X-RateLimit-*headers - check_circleReady-made Python MCP server and client configs in your account
- check_circleReset your sandbox any time to start a lesson fresh
// claude_desktop_config.json { "mcpServers": { "mahabazaar": { "command": "python", "args": ["server.py"], "env": { "MAHABAZAAR_API_URL": "https://dmall.online", "MAHABAZAAR_API_KEY": "mbz_…your key…" } } } }
Secure by design
Protection at every layer
Built with the OWASP recommendations for authentication, sessions and APIs. See the full security overview →
Approval first
No access until an admin approves the account.
Strong sign-in
Argon2id passwords, lockouts and authenticator-app 2FA.
Bot defences
Rate limits, honeypots, timing checks and optional CAPTCHA.
Full audit trail
Every sign-in, approval, key and reset is logged.
Learn to build apps like this
D MALL ONLINE is a teaching platform from Dinesh AI Academy’s AI Engineering programme: RAG, agents, tool calling and MCP, built on production-grade patterns.