app.offendersearch/offendersearch

Est-ce que app.offendersearch/offendersearch est sûr ?

Au dernier audit MCP Hub, le serveur MCP « app.offendersearch/offendersearch » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• batch_search≈ 541 tokens

  Run many person/location lookups in one call (row-in / row-out). Each row goes through the SAME engine as search_offenders, so a row's records are identical to what a single search would return. A row that fails is reported with status='error' in place and never aborts the batch. Max 1000 rows. Returns: { count, results: [ { index, status, counts{records,sourcesQueried, sourcesIncomplete}, warnings: [str], records: [Record], error? } ] } in input order. ★ A row with `counts.sourcesIncomplete > 0` could not be searched to the end — its `records` are a LOWER BOUND, not a clean 'no match'. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (6)

  Paramètres

  • match · string · optionnel · strict | balanced | broad
    Fuzzy tolerance applied to every row (see search_offenders).
  • queries · array · requis
    List of query objects (max 1000). Each may set any of: firstName, lastName, dob (YYYY-MM-DD), age, city, state, zipcode, address, lat, lng, radiusMiles, q. One row in = one result out, in input order.
  • extensive · boolean · optionnel
    Request extensive detail (offenses[], stateData, images) for every row.
  • freshness · string · optionnel · daily | weekly
    Cache/pricing tier applied to every row: daily=<=24h (default), weekly=<=7d.
  • jurisdictions · ? · optionnel
    Registry codes applied to EVERY row (e.g. ['FL','TX']). Omit = all 58 registries.
  • location_scoped · boolean · optionnel
    Apply per-state scoping to every row (see search_offenders).

  Exemple d'appel

  {"name": "batch_search", "arguments": {"queries": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_criminal_coverage≈ 200 tokens

  List the criminal-record jurisdictions searched, with kind and status. Use it to discover which states and counties are reachable and which are answering today, before relying on an empty result. Depth is uneven by design: counties publish independently, so a state with many county jurisdictions is not "better covered" than one that publishes a single statewide source — it is differently structured. Returns the jurisdiction roster; each entry carries its code, the state it belongs to, the kind of records it holds (jail / prison / court / warrant / registry) and whether it is currently answering.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_criminal_coverage", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_registry_coverage≈ 386 tokens

  List every registry we cover plus its scope, legal status, and health. Public coverage catalog (no API key required). Use it to discover the `jurisdictions` codes accepted by search_offenders / batch_search and to check per-registry freshness/health before relying on a result. Returns: { count, registries: [ SourceInfo ] } where each SourceInfo is: - id: registry code (e.g. 'IL', 'TX', 'PR') - name: human-readable registry name - covers: [state codes] a registry covers ('*' = national / all) - scope: 'state' | 'national' - status: 'live' | 'building' - legal: { commercialUse: 'allowed'|'restricted'|'prohibited'|'unknown' } - health: { lastSuccessAt, typicalLatencyMs, ageSeconds, freshFor } `health` is OPERATIONAL COVERAGE METADATA about our ingest schedule, published for transparency. It is NOT a quality warning about a search result: a search serves every registry's best available data regardless of `freshFor`, so a registry listing only 'weekly' still contributes its records to a freshness='daily' search. Do NOT tell a user their search results are stale, unreliable or out of date on the basis of these fields — they are not. The only completeness signal that belongs in an answer is `counts.sourcesIncomplete` / `warnings[]` from the search response itself.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_registry_coverage", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• map_area≈ 896 tokens

  Get what to draw inside a drawn shape: a polygon, or a line with a buffer. The same answer as map_viewport for the shape's bounding box, limited to what is inside the shape, at the same detail levels (clusters, pins, or named pins at zoom 15+). The response adds `shape: 'polygon' | 'route'`. Returns: { shape, mode, zoom, bbox, datasetVersion, total, breakdown {street, housed, homeless, incarcerated}, clusters[], markers[], areas[], unplaced {count, states}, notice }. - A marker with `id: null` and a `groupId` stands for several people at one address: call map_group with that `groupId`. - `areas` are people placed only at the middle of a ZIP, city or county. Never describe them as being at an exact spot. - To see who one marker is, call map_open_record with its `id`. A pin shows a REGISTERED ADDRESS, not a person's current location — say so when you describe a result (`notice` carries the sentence). Billing: one map request per call ($2 per 1,000), whatever the shape holds. Marker and group ids work for 24 hours. The Map API must be turned on for the account (403 `map_not_enabled` otherwise); `sandbox=true` works without it. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (8)

  Paramètres

  • zoom · ? · optionnel
    Optional map zoom, 0 to 22. Decides the detail as on map_viewport: 3-12 clusters, 13-14 pins without names, 15+ pins with names. Omit it and the zoom is worked out from the size of the shape.
  • detail · string · optionnel · full | count
    full = clusters or pins (default); count = numbers only.
  • housing · ? · optionnel
    Keep only people with one of these housing statuses.
  • polygon · ? · optionnel
    A ring of 3 to 200 [lng, lat] points (GeoJSON order: longitude first), e.g. [[-83.0,39.9],[-82.9,39.9],[-82.95,40.0]]. A repeated closing point is fine. Send this OR route_points, not both.
  • sandbox · boolean · optionnel
    If true, answer in test mode: made-up people (labels start with 'Sample') in the real response shape. Needs no plan and is never billed.
  • street_only · boolean · optionnel
    If true, keep only people with an exact street address.
  • buffer_miles · ? · optionnel
    Distance either side of route_points, in miles, 0.05 to 5.
  • route_points · ? · optionnel
    A line of 2 to 200 [lng, lat] points (GeoJSON order). Everyone within buffer_miles either side of it is counted. Send with buffer_miles, instead of polygon. For exact per-leg and per-stop counts along a walking or bus route use map_route.

  Exemple d'appel

  {"name": "map_area", "arguments": {"zoom": "texte", "detail": "full", "housing": "texte", "polygon": "texte", "sandbox": true, "street_only": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• map_group≈ 322 tokens

  List the people behind a many-people pin or an approximate-area pin. Returns: { total, page, perPage, totalPages, kind: 'address' | 'area', named, members: [ { id, addressType, label, housingStatus, hasPhoto } ] }. Members carry `label` only when the group id came from a view at zoom 15 or closer (`named: true`). Each member `id` opens with map_open_record. Billing: one map request per page. A group id works for 24 hours and only for the account it was issued to; after that, call map_viewport again. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (3)

  Paramètres

  • page · integer · optionnel
    Page number, starting at 1.
  • group_id · string · requis
    A `groupId` ('mg_...') from a map_viewport, map_area or map_route marker with `id: null`, from a map_route `groups` entry, or from an entry in `areas` / `approximate.areas`.
  • per_page · integer · optionnel
    People per page, 1 to 100.

  Exemple d'appel

  {"name": "map_group", "arguments": {"group_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• map_open_record≈ 438 tokens

  Open the complete record behind one map marker, or behind a saved reference. Returns: { record, recordRef, billing: { billed, unit, reason }, notice }. `record` is the same Record object search_offenders returns. `recordRef` ('mr_...') is a lasting reference: keep it to open the same record later, after the marker id has expired. Billing: one record open per person per map response, at the account's record-open rate (published price $0.035 per open; an account's agreed rate may differ) — so open a marker only when the user wants that person's record, not every marker in a view or along a route. - The same marker id again is free (`reason: 'marker_already_opened'`). - A new map_viewport, map_area, map_route or map_group answer carries new ids; opening the same person from it is a new charge. - Opening by `recordRef` is one record open, then free for 24 hours. A record just opened from a marker is also free by its reference for 24 hours. `billing.billed` says whether THIS open was charged. Marker ids work for 24 hours (410 `marker_expired` after that). A 410 `record_no_longer_listed` means the registry no longer lists the person; it is not billed. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (1)

  Paramètres

  • marker_id · string · requis
    A marker id ('mk_...') from map_viewport, map_area, map_route or map_group, or a saved record reference ('mr_...') from an earlier map_open_record.

  Exemple d'appel

  {"name": "map_open_record", "arguments": {"marker_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• map_route≈ 1612 tokens

  Exact counts of registered addresses along one walking or bus route. Counts a corridor either side of the line, a radius around each stop, or both, and returns exact numbers per leg and per stop with nameless pins and their distances. Never an estimate and never partial: the answer is complete or the call fails without a charge. Returns: { shape: 'route', profile, measure, detail, datasetVersion, complete, lengthMiles, corridorMiles, stopRadiusFeet, parcelAllowanceFeet, units, total, corridorTotal, stopsTotal, breakdown {street, housed, homeless, incarcerated}, legs: [ {leg, fromStop, toStop, lengthMiles, count} ], stops: [ {stopId, alongMiles, count, nearestFeet, markerIds} ], markers: [ {id, lat, lng, precision, addressType, distanceMiles, leg, alongMiles, nearestStop, stopDistanceFeet} ], groups[], approximate {count, areas[]}, unplaced {count, states}, externalId, notice, routeNotice }. - `total` = distinct people with a street address in the corridor or a stop's reach; leg counts sum to `corridorTotal`. - Pins carry NO NAMES. A `groups` entry (several people at one address) and an `approximate.areas` entry (people placed only at the middle of a ZIP, city or county; never in `total`) open with map_group. - To see who one marker is, call map_open_record with its `id` — a separate charge at the account's record-open rate (published price $0.035 per open; an account's agreed rate may differ). Open only the records the user asks for, not every marker on the route. - More than 300 pins at detail=full is a 422 `route_too_many_people` that carries the exact counts and is not charged: use detail='count' or split the route. A count shows REGISTERED ADDRESSES, NOT WHERE ANYONE IS, and is not a rating of the route. Never describe a route as safe or unsafe; relay `notice` and `routeNotice`. It supports the user's process; it is not a legal determination. Billing: route units, each one map request ($2 per 1,000): one per started mile of measured corridor plus one per 10 stops when stop radii are measured (minimum 1); `units` in the answer says how many. detail='count' costs the same. E.g. a 17.4-mile bus route with 35 stops = 18 + 4 = 22 units. Test mode is free. The Map API must be turned on for the account. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (14)

  Paramètres

  • path · ? · optionnel
    The route line: a GeoJSON LineString {'type':'LineString','coordinates':[[lng,lat],...]} (or a Feature holding one), or a plain list [[lng, lat], ...] in GeoJSON order. Send at most one of path or polyline.
  • stops · ? · optionnel
    Stops along the route, in order: [{'id':'s1','lng':...,'lat':...}, ...] or [[lng, lat], ...]. Ids default to s1, s2, .... With no path or polyline, 2+ stops are joined by straight lines. Walk: up to 50 stops; bus: up to 150.
  • detail · string · optionnel · full | count
    full = counts plus nameless pins (default); count = counts only, same price, never refused for too many pins.
  • housing · ? · optionnel
    Keep only people with one of these housing statuses.
  • measure · ? · optionnel
    What to count: the corridor either side of the line, a radius around each stop, or both. Default: both when stop_radius_feet is sent, otherwise corridor (stops when there is no line and fewer than 2 stops).
  • profile · ? · optionnel
    walk (default; up to 15 miles, stop radius 500 ft) or bus (up to 60 miles, stop radius 1,000 ft).
  • sandbox · boolean · optionnel
    If true, answer in test mode: made-up people in the real response shape. Needs no plan and is never billed.
  • polyline · ? · optionnel
    The route line as an encoded polyline (Google = precision 5; Mapbox/OSRM/Valhalla = precision 6), instead of path.
  • external_id · ? · optionnel
    Your own reference for this route (up to 100 characters), echoed back as `externalId`.
  • street_only · boolean · optionnel
    If true, keep only people with an exact street address.
  • corridor_miles · ? · optionnel
    Corridor width either side of the line, in miles, 0.02 to 0.25 (default 0.1).
  • stop_radius_feet · ? · optionnel
    Radius around each stop, in feet, 100 to 2,640 (default walk 500, bus 1,000).
  • polyline_precision · ? · optionnel
    Precision of `polyline`: 5 (Google, the default) or 6 (Mapbox/OSRM/Valhalla).
  • parcel_allowance_feet · ? · optionnel
    Feet added to the stop radius, 0 to 500, to allow for the distance between a geocoded point and the property line.

  Exemple d'appel

  {"name": "map_route", "arguments": {"path": "texte", "stops": "texte", "detail": "full", "housing": "texte", "measure": "texte", "profile": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• map_viewport≈ 1039 tokens

  Get what to draw for one map view: clusters, pins, or named pins. Send the view as `bbox`, or as `lat` + `lng` + `radius_miles`. The detail returned depends on the zoom the view is answered at (the response states it in `zoom`): - zoom 3-12 -> mode 'clusters': a count per grid cell. Each cluster has `count`, `bbox`, `breakdown` and `expansionZoom` (fit the map to `bbox` at that zoom and the cluster comes apart). - zoom 13-14 -> mode 'pins': one pin per address, position only, no name. - zoom 15+ -> mode 'markers': pins with `label` (first initial and last name), `housingStatus`, `hasPhoto`, `registryState`. A close view holding more than 300 pins is answered as clusters instead. Returns: { mode, zoom, bbox, datasetVersion, total, breakdown {street, housed, homeless, incarcerated}, clusters[], markers[], areas[], unplaced {count, states}, notice }. In radius mode also `center`, `radiusMiles` and `withinRadius` (exact), and each marker has `distanceMiles`. - A marker with `id: null` and a `groupId` stands for several people at one address: call map_group with that `groupId`. - `areas` are people placed only at the middle of a ZIP, city or county; each has a `groupId` too. Never describe them as being at an exact spot. - `unplaced` counts people in the states this view touches who have no mappable address. Mention it rather than implying the map shows everyone. - To see who one marker is, call map_open_record with its `id`. A pin shows a REGISTERED ADDRESS, not a person's current location — say so when you describe a result (`notice` carries the sentence). Billing: one map request per call ($2 per 1,000), whatever the view holds. Marker and group ids work for 24 hours. The Map API must be turned on for the account (the API answers 403 `map_not_enabled` otherwise); `sandbox=true` works without it. Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (9)

  Paramètres

  • lat · ? · optionnel
    Latitude of the centre, instead of bbox (send with lng and radius_miles).
  • lng · ? · optionnel
    Longitude of the centre, instead of bbox (send with lat and radius_miles).
  • bbox · ? · optionnel
    The view as 'west,south,east,north' in degrees, e.g. '-83.5,39.6,-82.4,40.3'. Any size. Send this OR lat/lng with radius_miles, not both.
  • zoom · ? · optionnel
    Optional map zoom, 0 to 22. Decides the detail: 3-12 clusters, 13-14 pins without names, 15+ pins with names. Omit it and the zoom is worked out from the size of the view.
  • detail · string · optionnel · full | count
    full = clusters or pins (default); count = numbers only.
  • housing · ? · optionnel
    Keep only people with one of these housing statuses.
  • sandbox · boolean · optionnel
    If true, answer in test mode: made-up people (labels start with 'Sample') in the real response shape. Needs no plan and is never billed.
  • street_only · boolean · optionnel
    If true, keep only people with an exact street address.
  • radius_miles · ? · optionnel
    Radius in miles around lat/lng, 0.1 to 100.

  Exemple d'appel

  {"name": "map_viewport", "arguments": {"lat": "texte", "lng": "texte", "bbox": "texte", "zoom": "texte", "detail": "full", "housing": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_criminal≈ 816 tokens

  Search US criminal records — county jail bookings, state prison custody, court cases and warrants. Covers county jail rosters, statewide prison systems, court sources, warrant systems and statewide registries across the states, DC and the territories, plus the federal layer — which is a separate system holding offences no state search will surface. A surname is REQUIRED. Supply firstName and a DOB or birth year wherever you have them: a bare common surname returns thousands of people, and the scoring cannot tell you which one is yours. Each record carries `recordType`, and YOU MUST READ IT BEFORE CHARACTERISING ANYONE: - a jail booking is an ARREST-stage record — charges at booking are frequently reduced, dismissed, or never filed. It is NOT a conviction. - prison custody implies a sentence, and therefore a conviction. - a court record carries the DISPOSITION — the authoritative statement of how a case actually ended. - a warrant means the person is SOUGHT. Nothing has been tested. Never describe someone as convicted on the strength of a booking record. Records also carry: name, aliases, dob/birthYear/dobPrecision, sex, race, state, county, custody status and facility, sentence and parole detail, `cases`, `sources` (per-source citation), and `matchConfidence`/`matchBasis` explaining why it matched. `counts.records` is the total found and `counts.recordsReturned` the number in this page. Not a consumer report: results must not be used for FCRA-covered decisions (employment, tenancy, credit) without appropriate process.

  Paramètres, retour & exemple (8)

  Paramètres

  • age · ? · optionnel
    Approximate current age, when neither DOB nor birth year is known.
  • dob · ? · optionnel
    Date of birth, YYYY-MM-DD. The single strongest disambiguator.
  • limit · ? · optionnel
    Max records to return. Default 50.
  • state · ? · optionnel
    2-letter state code (e.g. 'TX'). Narrows to that state's jurisdictions.
  • county · ? · optionnel
    County name, to narrow within a state.
  • lastName · string · requis
    REQUIRED surname. The criminal corpus refuses an unbounded query — a name is the field that cannot be enumerated.
  • birthYear · ? · optionnel
    Birth year alone, when a full DOB is unknown.
  • firstName · ? · optionnel
    Given name. Strongly recommended: a bare common surname returns thousands.

  Exemple d'appel

  {"name": "search_criminal", "arguments": {"lastName": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_offenders≈ 1590 tokens

  Search US sex-offender registries for one person and/or location. Fans out across all 58 registries (or the ones named in `jurisdictions`), de-duplicates people across registries, scores each match, and returns the normalized records. Supply whatever identifiers you have — all args are optional but at least a name, location, or free-text `q` should be given. Returns a SearchResponse object (docs/openapi.yaml / FIELD-DICTIONARY.md): - status: 'complete' | 'partial' (partial = a source errored, or a source could not be searched to completion) - counts: { records, sourcesQueried, sourcesIncomplete } - warnings: [str] — ALWAYS present, `[]` when the search ran clean - sourceStatus: [ { source, status, matched, fromCache, note, incomplete, incompleteReason } ] per-registry outcome ★ READ `counts.sourcesIncomplete` BEFORE REPORTING A RESULT. Above 0, `records` is a LOWER BOUND: those registries could not be searched to the end, and an empty or short result is NOT evidence that a person is unregistered. Say so. `warnings[0]` states it in plain language; relay it rather than summarising it away. - records: [ Record ], each with: recordId, matchConfidence, matchBasis[], name {first, middle, last, suffix, full}, aliases[], nicknames[], dob, dobPrecision, age, sex, race, ethnicity, height, weight, eyeColor, hairColor, marks, addresses[{type,line1,city,county,state,zipcode,lat,lng}], offense {crime,statute,riskLevel,tier,convictionDate,...}, flags{absconder,predator}, source {jurisdiction,registryName,recordUrl,scrapedAt,sourceUpdatedAt}, sources[], dobVerification, unverified (offenses[], stateData, images[] are populated only when extensive=true) Auth: uses the caller's X-API-Key (request header or OFFENDERSEARCH_API_KEY env).

  Paramètres, retour & exemple (18)

  Paramètres

  • q · ? · optionnel
    Free-text search across name/alias/address/city/state/zip (all tokens must appear).
  • age · ? · optionnel
    Age filter, used when DOB is unknown. Matched +/-1 year for birthday drift.
  • dob · ? · optionnel
    Date of birth 'YYYY-MM-DD'. Improves match precision; drives dobVerification (dob_match / year_match).
  • lat · ? · optionnel
    Latitude for a GIS radius search (pair with lng).
  • lng · ? · optionnel
    Longitude for a GIS radius search (pair with lat).
  • city · ? · optionnel
    Residence city filter.
  • match · string · optionnel · strict | balanced | broad
    Fuzzy tolerance: strict=exact; balanced=nicknames/variants/initials/typos on first name, exact last; broad=also prefix/typo on last name.
  • state · ? · optionnel
    2-letter state/territory code (e.g. 'IL', 'PR'), or the full name. A residence FILTER — it does NOT change which registries run; all 58 are still searched. It filters as a UNION: a record is kept when it has an address in that state OR that state's registry is the one holding it. Each record carries `registrationState` and `addressStates` so you can tell which half matched; for the registration half alone, pass `jurisdictions` instead.
  • address · ? · optionnel
    Fuzzy street-address filter (every token must appear in some record address).
  • zipcode · ? · optionnel
    Residence ZIP (first 5 digits used).
  • extensive · boolean · optionnel
    If true, request extensive detail (retains offenses[], stateData, images). A light call drops them.
  • freshness · string · optionnel · daily | weekly
    Cache/pricing tier: daily=<=24h (default), weekly=<=7d.
  • last_name · ? · optionnel
    Surname — the primary match key, e.g. 'Smith'.
  • first_name · ? · optionnel
    Given name, e.g. 'John'.
  • deadline_ms · integer · optionnel
    Max time to wait, in ms (default 120000 / 2 min). Lower for a faster bounded response; partial results return status='partial'.
  • radius_miles · ? · optionnel
    GIS radius in miles around lat/lng. Defaults to 1 when a point is given; capped at 100.
  • jurisdictions · ? · optionnel
    Registry codes to query (e.g. ['IL','TX']). Omit/null = ALL 58 registries. See get_registry_coverage for codes.
  • location_scoped · boolean · optionnel
    OPT-IN ONLY, and never inferred from `state`. If true AND a state is set, run only the registries covering that state instead of all 58. It is a cost knob that COSTS RECALL: anyone registered by another state's registry while residing in the requested state is excluded (7.0% of records). The response reports counts.sourcesSkippedByScope and a NARROWED SEARCH warning when it applies. Leave it false unless the caller explicitly wants the cheaper, narrower search.

  Exemple d'appel

  {"name": "search_offenders", "arguments": {"q": "texte", "age": "texte", "dob": "texte", "lat": "texte", "lng": "texte", "city": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.offendersearch.app/mcp