com.esimker/esim

Est-ce que com.esimker/esim est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.esimker/esim » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• create_checkout≈ 406 tokens

  Create an order for a person to pay. Returns token, checkout_url (the gateway's page: hand it to the person) and order_url (the order page in `lang`, with the QR code once paid: show it to the buyer only, the token is a secret). Confirm the plan and the price first: every call creates a new unpaid order, so do not retry while a checkout is open. `email` (optional) also gets the eSIM by mail. `period_num` (1–365) only for daily_unlimited plans. `topup_iccid` with a plan_id from list_topups tops up an existing eSIM. A 403 means the caller's jurisdiction is embargoed. To pay from a wallet use purchase_esim.

  Paramètres, retour & exemple (6)

  Paramètres

  • lang · string · optionnel
  • email · ? · optionnel
  • plan_id · integer · requis
  • period_num · ? · optionnel
  • topup_iccid · ? · optionnel
  • payment_method · string · optionnel · crypto | card

  Exemple d'appel

  {"name": "create_checkout", "arguments": {"plan_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_deposit≈ 371 tokens

  Open a top-up of the wallet and get what is needed to pay it. Floors: $10 for a wallet's first deposit, $1 after that; cap $1000 per deposit. Crypto deposits earn a bonus (+2% from $25, +3% from $50, +5% from $100, capped at $25); every purchase returns 3% cashback. With payment_method "crypto" pass a currency from: BTC, ETH, TRX, USDTTRC, USDTETH, USDTBSC — the answer then carries `pay`: the address, the exact amount in the coin (network fee included) and expires_at (about 15 minutes; after that open a new deposit). Send exactly `pay.amount` to `pay.address` on `pay.network`, then poll get_deposit(token) until status is paid. checkout_url is the hosted pay page for a person; card deposits have only that. Needs the wallet code.

  Paramètres, retour & exemple (4)

  Paramètres

  • lang · string · optionnel
  • currency · ? · optionnel
  • amount_usd · ? · requis
  • payment_method · string · optionnel · crypto | card

  Exemple d'appel

  {"name": "create_deposit", "arguments": {"amount_usd": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_wallet≈ 255 tokens

  Mint a prepaid wallet with no account behind it and get its secret ONCE: `code` (32 hex characters) and the same secret as a 12-word `phrase`. Save the code before doing anything else and send it as `Authorization: Bearer <code>` on every wallet call; there is no recovery and no identity to prove. The balance is spent on eSIMs (retail price, cashback on every purchase) and never paid back out. accept_terms must be true (https://esimker.com/terms). Then create_deposit to fund it. Rate-limited and geo-blocked like checkout.

  Paramètres, retour & exemple (1)

  Paramètres

  • accept_terms · boolean · requis

  Exemple d'appel

  {"name": "create_wallet", "arguments": {"accept_terms": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_deposit≈ 213 tokens

  One deposit of the wallet by its token: status pending → paid (credited, bonus included) | underpaid (nothing credited yet, the rest can still arrive) | payment_held (the payment processor's compliance check stopped the payment and holds it: nothing is credited, do not pay again, the person should write to support) | expired. Poll every ~30 s after sending; crypto needs the network's confirmations. Needs the wallet code.

  Paramètres, retour & exemple (1)

  Paramètres

  • token · string · requis

  Exemple d'appel

  {"name": "get_deposit", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_order≈ 236 tokens

  An order by its token. status goes pending (unpaid) → paid → provisioning → ready; also expired, underpaid, failed_provisioning, gift_waiting, and payment_held — the payment processor's compliance check stopped the payment and holds the money: nothing is issued, the person must not pay again and should write to support. When ready, esim.activation_code is the LPA string (render it as a QR code), with iccid, smdp and matching_id. After payment poll every ~10 s; delivery usually takes under a minute.

  Paramètres, retour & exemple (1)

  Paramètres

  • token · string · requis

  Exemple d'appel

  {"name": "get_order", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_payment_methods≈ 166 tokens

  Checkout methods open right now: "crypto" (a hosted invoice: BTC, ETH, TRX, USDT), "card", and "wallet" (a prepaid balance, see create_wallet). `gateways` names the providers behind each method; a checkout that does not ask for one by name goes to the first, which is what these tools do.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_payment_methods", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_plans≈ 173 tokens

  The plans of one destination (slug from search_destinations). Each plan: id (the plan_id for an order), name, gb, days, retail (USD; per day when daily_unlimited is true), daily_unlimited, location_codes (the countries it covers), networks, speed, supports_topup. Also the published rating.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "get_plans", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_usage≈ 106 tokens

  Remaining data and status of an eSIM we issued.

  Paramètres, retour & exemple (1)

  Paramètres

  • iccid · string · requis

  Exemple d'appel

  {"name": "get_usage", "arguments": {"iccid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_wallet≈ 166 tokens

  The wallet behind the code: ref (a public handle for support), balance_usd, cashback_percent, the deposit rules that apply to it now (min_usd, max_usd, first, bonus tiers), the last 50 transactions, orders (with their tokens — the wallet is where a buyer's order links are kept) and deposits. Needs the wallet code.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_wallet", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_topups≈ 180 tokens

  Top-up plans that fit an eSIM we issued: plan_id, name, gb, days, retail. Order one with create_checkout(plan_id, topup_iccid=iccid) or, from a wallet, purchase_esim(plan_id, client_ref, topup_iccid=iccid).

  Paramètres, retour & exemple (1)

  Paramètres

  • iccid · string · requis

  Exemple d'appel

  {"name": "list_topups", "arguments": {"iccid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}

• purchase_esim≈ 413 tokens

  Charge the wallet and issue an eSIM, no checkout. `client_ref` (1–64 chars) is your own reference for this purchase and makes the call idempotent: a retry with the same value returns the existing order without a second charge, so reuse it after a timeout and never invent a new one for the same purchase. `period_num` (1–365, default 7) only for daily_unlimited plans; the charge is price × days. `topup_iccid` with a plan_id from list_topups tops up an eSIM. Returns the order (status paid) with order_url; poll get_order(token) for ready and the activation code. A 402 is a short balance: create_deposit first. A wallet pays for at most 50 orders in 24 hours (429 beyond that; a retry answered from client_ref does not count). Needs the wallet code.

  Paramètres, retour & exemple (6)

  Paramètres

  • lang · string · optionnel
  • email · ? · optionnel
  • plan_id · integer · requis
  • client_ref · string · requis
  • period_num · ? · optionnel
  • topup_iccid · ? · optionnel

  Exemple d'appel

  {"name": "purchase_esim", "arguments": {"plan_id": 1, "client_ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_destinations≈ 211 tokens

  Destinations on sale. `query` matches the name in any of 18 languages, the slug or the ISO code; empty lists everything. Each item: dest_code, slug, name, min_retail (USD, the cheapest fixed plan), unlimited_from (USD per day of a Daily Unlimited pass, or null), plan_count. Continue with get_plans(slug).

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · optionnel

  Exemple d'appel

  {"name": "search_destinations", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://esimker.com/api/mcp