Combien d'outils expose com.4chems/platform-api ?

com.4chems/platform-api expose 32 outil(s). Le coût de contexte pour les charger tous est d'environ 11224 tokens (coût unique au chargement, pas par appel).

accueil / serveurs / Finance & Paiement / com.4chems/platform-api

com.4chems/platform-api

serveur MCP (Model Context Protocol) · platform-api-customer 0.12.1

▸ Finance & Paiement

[ Non encore testé ]

Verdict MCP Hub
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.

streamable-httpType / transport

directAccès

~11224 tokensCoût de contexte

32Outils

Est-ce que com.4chems/platform-api est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.4chems/platform-api » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 32 outils

accept_invitation≈ 368 tokens
Accept a pending invitation and grant the invitee's first role assignment. Call this when an invitee has a valid invite link and wants to join the tenant; single-use, consuming the token marks it accepted.
Paramètres, retour & exemple (2)
Paramètres
- token · string · requis
- authorization · string · requis
Exemple d'appel
```
{"name": "accept_invitation", "arguments": {"token": "texte", "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "email": "texte", "level": "texte", "status": "texte", "tenant_id": "texte", "created_at": "texte", "expires_at": "texte", "invited_by": "texte", "accepted_at": "texte", "billing_contact": true}}
```
add_tenant_service≈ 216 tokens
Request a new service subscription for the caller's tenant and return its status. Call this when a tenant admin wants to add a service (ADR 0016 code fix: requires `admin`, was `customer` realm role only).
Paramètres, retour & exemple (3)
Paramètres
- body · object · optionnel
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "add_tenant_service", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}]}
```
approve_access_request≈ 403 tokens
Approve a pending access request: issue a `member` invitation to the requester and resolve the request (level `admin` or `owner` of the request's tenant). The response carries the single-use invitation token to hand to the requester, who accepts via `accept_invitation`. 409 `access_request.not_pending` unless the request is pending.
Paramètres, retour & exemple (2)
Paramètres
- authorization · string · requis
- access_request_id · string · requis
Exemple d'appel
```
{"name": "approve_access_request", "arguments": {"authorization": "texte", "access_request_id": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "token": "texte", "status": "texte", "tenant_id": "texte", "created_at": "texte", "updated_at": "texte", "invitation_id": "texte"}}
```
complete_billing≈ 711 tokens
Complete the tenant's billing details: legal-entity name and type, VAT id, invoice address, invoice email and optional PO reference. Call this when the owner or a billing contact has the details. EU VAT ids are validated against VIES by the worker; a failed operation with `billing.vat_check_unavailable` can be retried by submitting again. Returns `202` with an operation to poll.
Paramètres, retour & exemple (3)
Paramètres
- body · object · optionnel
  `complete_billing` body. `vat_id` is checked against the tenant's country in the service.
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "complete_billing", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"type": "texte", "error": "texte", "result": "texte", "status": "texte", "target_id": "texte", "created_at": "texte", "finished_at": "texte", "target_type": "texte", "operation_id": "texte"}}
```

create_access_request≈ 362 tokens

Request access to the tenant that owns the caller's verified email domain.

Paramètres, retour & exemple (1)

Paramètres

authorization · string · requis

Exemple d'appel

{"name": "create_access_request", "arguments": {"authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"type": "texte", "error": "texte", "result": "texte", "status": "texte", "target_id": "texte", "created_at": "texte", "finished_at": "texte", "target_type": "texte", "operation_id": "texte"}}

create_invitation≈ 597 tokens
Invite an email address to the caller's tenant at the specified access level and return the invitation, including the raw single-use accept token. Call this when a tenant admin wants to add a new member; the invitee accepts via `accept_invitation`.
Paramètres, retour & exemple (3)
Paramètres
- body · object · optionnel
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "create_invitation", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "email": "texte", "level": "texte", "token": "texte", "status": "texte", "tenant_id": "texte", "created_at": "texte", "expires_at": "texte", "invited_by": "texte", "accepted_at": "texte", "billing_contact": true}}
```
create_self_service_tenant≈ 874 tokens
Create a 7-day trial tenant for the caller's business email domain (UC-052). Needs a verified email on a business domain and `attestation: true`; answers `auth.email_not_verified`, `tenant.attestation_required`, `tenant.free_mail_domain` (free-mail address), `tenant.domain_exists` (a live trial tenant on the domain) or `trial.exists_for_domain` (the domain already had its one trial; call `start_inquiry`). The trial lasts exactly 7 days; `ttl` / `expires_at` in the body are ignored.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
  Request body for POST /v1/onboarding/tenants (UC-052). The domain is derived from the caller's verified token email claim (NFR-006 pt 4) — it is not a request parameter. attestation must be true; the endpoint raises 422 if false (NFR-006 §8a).
- authorization · string · requis
Exemple d'appel
```
{"name": "create_self_service_tenant", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"type": "texte", "error": "texte", "result": "texte", "status": "texte", "target_id": "texte", "created_at": "texte", "finished_at": "texte", "target_type": "texte", "operation_id": "texte"}}
```
dismiss_access_request≈ 321 tokens
Dismiss a pending access request (level `admin` or `owner` of the request's tenant). The requester is mailed — naming the tenant, never the dismissing admin — and may ask again. 409 `access_request.not_pending` unless the request is pending.
Paramètres, retour & exemple (2)
Paramètres
- authorization · string · requis
- access_request_id · string · requis
Exemple d'appel
```
{"name": "dismiss_access_request", "arguments": {"authorization": "texte", "access_request_id": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "status": "texte", "tenant_id": "texte", "created_at": "texte", "updated_at": "texte"}}
```

enrich_domain≈ 294 tokens

Fetch the caller's domain imprint and suggest legal-entity details (UC-057).

Paramètres, retour & exemple (1)

Paramètres

authorization · string · requis

Exemple d'appel

{"name": "enrich_domain", "arguments": {"authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"country": "texte", "confidence": 1, "source_url": "texte", "entity_type": "texte", "legal_entity_name": "texte"}}

get_billing≈ 519 tokens

Return the tenant's stored billing details: VAT id, invoice address, invoice email and PO reference. Call this to check whether billing is complete; only the owner and billing contacts may read it (`403 rbac.insufficient_level`).

Paramètres, retour & exemple (2)

Paramètres

tenant_id · string · optionnel
authorization · string · requis

Exemple d'appel

{"name": "get_billing", "arguments": {"authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"city": "texte", "name": "texte", "vat_id": "texte", "country": "texte", "other_label": "texte", "postal_code": "texte", "po_reference": "texte", "address_line1": "texte", "address_line2": "texte", "invoice_email": "texte", "vat_validated_at": "texte", "billing_completed": true}}

get_catalog_templates≈ 522 tokens
Return the enabled ApplicationTemplate catalog, ordered by name. Call this to discuss trial and template options with a prospect or customer before starting a trial. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.
Paramètres, retour & exemple (1)
Paramètres
- authorization · string · optionnel
Exemple d'appel
```
{"name": "get_catalog_templates", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```
get_legal_entity_types≈ 278 tokens
Return the legal-entity types available for *country*, ordered alphabetically. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.
Paramètres, retour & exemple (2)
Paramètres
- country · string · requis
  ISO 3166-1 alpha-2 country code
- authorization · string · optionnel
Exemple d'appel
```
{"name": "get_legal_entity_types", "arguments": {"country": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```
get_my_access≈ 416 tokens
Return the caller's access level per related tenant. Call this to check what the current caller is authorized to do before attempting an action that requires a specific level, or to discover a pending invitation or access request.
Paramètres, retour & exemple (1)
Paramètres
- authorization · string · requis
Exemple d'appel
```
{"name": "get_my_access", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```

get_my_operation≈ 390 tokens

Return the status, result and error of an operation the caller started, such as the `Location` of a `202` from `complete_billing`. Call this to poll it to completion.

Paramètres, retour & exemple (2)

Paramètres

operation_id · string · requis
authorization · string · requis

Exemple d'appel

{"name": "get_my_operation", "arguments": {"operation_id": "texte", "authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"type": "texte", "error": "texte", "result": "texte", "status": "texte", "target_id": "texte", "created_at": "texte", "finished_at": "texte", "target_type": "texte", "operation_id": "texte"}}

get_onboarding_route≈ 545 tokens

Return the next onboarding step. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.

Paramètres, retour & exemple (1)

Paramètres

authorization · string · optionnel

Exemple d'appel

{"name": "get_onboarding_route", "arguments": {"authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"action": "texte", "next_step": "texte", "tenant_name": "texte", "subscription": "texte", "registration_url": "texte", "registration_methods": "texte"}}

grant_assignment≈ 370 tokens

Grant a role x scope assignment to a tenant member.

Paramètres, retour & exemple (4)

Paramètres

sub · string · requis
body · object · optionnel
tenant_id · string · optionnel
authorization · string · requis

Exemple d'appel

{"name": "grant_assignment", "arguments": {"sub": "texte", "authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "role": "texte", "subject": "texte", "scope_id": "texte", "expires_at": "texte", "granted_at": "texte", "granted_by": "texte", "scope_type": "texte", "subject_type": "texte"}}

list_consents≈ 383 tokens
Return the caller's own recorded consents plus the tenant-scope consents of every tenant where the caller is at least a viewer. Call this to check which legal documents have already been accepted before asking again. Pass `tenant_id` to list one tenant's consents only (a caller of several tenants must).
Paramètres, retour & exemple (2)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "list_consents", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```
list_invitations≈ 406 tokens
List all invitations for the caller's tenant, most recent first. Call this to show a tenant admin which invitations are pending, accepted, or revoked; the raw token is never included.
Paramètres, retour & exemple (2)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "list_invitations", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```
list_members≈ 419 tokens
List tenant members with their effective role x scope assignments.
Paramètres, retour & exemple (2)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "list_members", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"members": [], "tenant_id": "texte"}}
```
list_tenant_services≈ 205 tokens
Return the caller's tenant's active service subscriptions. Call this before offering to add a service, to check what is already subscribed.
Paramètres, retour & exemple (2)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "list_tenant_services", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}
```
record_consent≈ 340 tokens
Record acceptance of a legal document version and return the entry; call this only after showing the user the document URL and version and receiving an explicit affirmative answer.
Paramètres, retour & exemple (4)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
- document_code · string · requis
- document_version · string · requis
Exemple d'appel
```
{"name": "record_consent", "arguments": {"authorization": "texte", "document_code": "texte", "document_version": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "source": "texte", "tenant_id": "texte", "granted_at": "texte", "subject_sub": "texte", "document_code": "texte", "document_version": "texte"}}
```
revoke_assignment≈ 135 tokens
Revoke a role x scope assignment from a tenant member.
Paramètres, retour & exemple (4)
Paramètres
- id · string · requis
- sub · string · requis
- tenant_id · string · optionnel
- authorization · string · requis
Exemple d'appel
```
{"name": "revoke_assignment", "arguments": {"id": "texte", "sub": "texte", "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}]}
```
revoke_invitation≈ 169 tokens
Revoke a pending invitation so its token can no longer be accepted. Call this when a tenant admin wants to withdraw an invite sent by mistake or no longer needed; accepted invitations cannot be revoked.
Paramètres, retour & exemple (3)
Paramètres
- tenant_id · string · optionnel
- authorization · string · requis
- invitation_id · string · requis
Exemple d'appel
```
{"name": "revoke_invitation", "arguments": {"authorization": "texte", "invitation_id": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}]}
```
start_account_registration≈ 387 tokens
Start registering a 4chems account with a business email address (`email`, `name`, optional `company`). Anonymous. Emails a 6-digit code to the address; no account exists yet. Ask the user for the code, then call verify_account_registration with the returned challenge_id and code. Free-mail addresses (gmail.com, ...) are refused: use the company address, or call start_inquiry. The answer is the same whether or not the address already has an account.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
  Request body for POST /v1/onboarding/registrations/account (UC-088).
- authorization · string · optionnel
Exemple d'appel
```
{"name": "start_account_registration", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"next_step": "texte", "challenge_id": "texte", "expires_in_seconds": 1}}
```
start_device_login≈ 398 tokens
Sign in to an existing account by device login (UC-091, RFC 8628). Anonymous, empty body; the account must exist (start_account_registration, then set the password through the emailed link). Show `verification_uri` (or `verification_uri_complete`) and `user_code` to the human, who signs in there, then call `verify_device_login` with `challenge_id`, waiting `interval` seconds between calls. The response never contains the Keycloak device_code or the agent client secret.
Paramètres, retour & exemple (1)
Paramètres
- authorization · string · optionnel
Exemple d'appel
```
{"name": "start_device_login", "arguments": {"authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"interval": 1, "user_code": "texte", "expires_in": 1, "challenge_id": "texte", "verification_uri": "texte", "verification_uri_complete": "texte"}}
```
start_inquiry≈ 360 tokens
Store an anonymous inquiry draft and email a 6-digit verification code. Ask the user for the code, then call verify_inquiry with the returned challenge_id and code — the inquiry reaches 4chems only after that verification succeeds.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
- authorization · string · optionnel
Exemple d'appel
```
{"name": "start_inquiry", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"next_step": "texte", "challenge_id": "texte", "expires_in_seconds": 1}}
```

start_registration≈ 320 tokens

DEPRECATED: use start_device_login. Deprecated — use start_device_login (same behaviour).

Paramètres, retour & exemple (1)

Paramètres

authorization · string · optionnel

Exemple d'appel

{"name": "start_registration", "arguments": {"authorization": "texte"}}

Exemple de retour

{"content": [{"type": "text", "text": "…"}], "structuredContent": {"interval": 1, "user_code": "texte", "expires_in": 1, "challenge_id": "texte", "verification_uri": "texte", "verification_uri_complete": "texte"}}

verify_account_registration≈ 274 tokens
Verify the emailed 6-digit code (`challenge_id`, `code`) and create the 4chems account. Never guess or retry codes, and never ask the user for a password.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
  Request body for POST /v1/onboarding/registrations/account/verify (UC-089).
- authorization · string · optionnel
Exemple d'appel
```
{"name": "verify_account_registration", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"account": "texte", "next_step": "texte"}}
```
verify_device_login≈ 270 tokens
Poll a device login to token issuance (UC-091, RFC 8628). Anonymous. While the human has not signed in yet it answers `{"status": "pending", "retry_after": <seconds>}`: wait `retry_after` seconds and call again with the same `challenge_id`. On approval it returns Keycloak's token set (`access_token`, `refresh_token`, `expires_in`, ...) exactly once; pass the `access_token` as `authorization` ('Bearer <token>') to every other tool.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
  Request body for POST /v1/onboarding/registrations/device/verify (UC-075).
- authorization · string · optionnel
Exemple d'appel
```
{"name": "verify_device_login", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}]}
```
verify_inquiry≈ 236 tokens
Verify the 6-digit code and deliver the inquiry to the helpdesk inbox.
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
- authorization · string · optionnel
Exemple d'appel
```
{"name": "verify_inquiry", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "reference": "texte", "inquiry_id": "texte"}}
```
verify_registration≈ 201 tokens
DEPRECATED: use verify_device_login. Deprecated — use verify_device_login (same behaviour).
Paramètres, retour & exemple (2)
Paramètres
- body · object · optionnel
  Request body for POST /v1/onboarding/registrations/device/verify (UC-075).
- authorization · string · optionnel
Exemple d'appel
```
{"name": "verify_registration", "arguments": {"body": {}, "authorization": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}]}
```
withdraw_access_request≈ 314 tokens
Withdraw the caller's own pending access request; no notification is sent. Any other caller gets 404 `access_request.not_found`, the same as for an unknown id. 409 `access_request.not_pending` unless pending.
Paramètres, retour & exemple (2)
Paramètres
- authorization · string · requis
- access_request_id · string · requis
Exemple d'appel
```
{"name": "withdraw_access_request", "arguments": {"authorization": "texte", "access_request_id": "texte"}}
```
Exemple de retour
```
{"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "status": "texte", "tenant_id": "texte", "created_at": "texte", "updated_at": "texte"}}
```

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.4chems.com/mcp