com.fluentedi/tools

Est-ce que com.fluentedi/tools est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.fluentedi/tools » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 19 outils

• cron_next≈ 346 tokens

  Parses a standard 5-field cron expression (or 6-field with leading seconds, or a macro like @daily), validates it, describes it in plain English, and computes the next run times in a given timezone with daylight-saving handled. Use it before writing a schedule to config — cron's day-of-month/day-of-week OR-semantics and step syntax are a common source of silently wrong schedules.

  Paramètres, retour & exemple (4)

  Paramètres

  • from · string · optionnel
    Compute run times after this instant instead of now.
  • count · integer · optionnel
    How many upcoming run times to return.
  • timezone · string · optionnel
    IANA timezone the schedule runs in.
  • expression · string · requis
    Cron expression, e.g. "*/15 * * * *", "0 9 * * 1-5", "@daily".

  Exemple d'appel

  {"name": "cron_next", "arguments": {"expression": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• doc_extract≈ 621 tokens

  Converts a document to markdown or plain text: pass a public URL or the file itself as base64, and get back the content with headings, tables and lists preserved, at a fraction of the tokens that rendered pages cost. Use it when a harness has no native reader for the format — .docx, .xlsx, .odt and .numbers rarely have one — when a document is only a URL away, or when a long PDF's text matters and its layout does not. Handles PDF (.pdf), Word (.docx), Excel (.xlsx, .xlsm, .xlsb, .xls), OpenDocument (.odt, .ods), Apple Numbers, CSV, HTML, XML, and plain-text formats such as .txt and .md. The format is detected from magic bytes, not trusted from the file name, so a PDF served from a .php URL still converts. Two honest limits: a scanned PDF with no text layer has nothing to extract (this is conversion, not OCR), and legacy binary .doc and .ppt files are not readable — resave them as .docx or .pptx. Images are refused rather than described. Documents up to 10 MB.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · optionnel
    Public URL of the document to fetch and convert.
  • base64 · string · optionnel
    The file content as base64 (or a data: URI) instead of a URL, for documents not publicly reachable. Up to 10 MB decoded.
  • format · string · optionnel · markdown | text
    Output style: markdown keeps headings, tables and lists; text strips them.
  • filename · string · optionnel
    Original file name, e.g. "report.docx". Only needed when the format cannot be detected from the URL or the bytes.
  • max_chars · integer · optionnel
    Truncate the extracted content beyond this many characters.
  • timeout_ms · integer · optionnel
    Fetch timeout in milliseconds when url is used.

  Exemple d'appel

  {"name": "doc_extract", "arguments": {"url": "texte", "base64": "texte", "format": "markdown", "filename": "texte", "max_chars": 1, "timeout_ms": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• domain_lookup≈ 338 tokens

  Answers the questions WHOIS used to answer, over RDAP — the structured protocol the registries themselves now serve — with no key and no scraping: who registered a domain, when it expires, which registrar and nameservers it uses, whether transfers are locked, and whether DNSSEC is signed. Give it an IP address instead and it returns the owning network: name, CIDR range, and the responsible registry. A domain that does not resolve in RDAP is reported as likely available to register — an answer, not an error. These are live registry facts that no training corpus can supply: registrations, expiries and transfers happen daily, and an agent that guesses at them guesses wrong.

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · requis
    Domain name or IP address to look up.

  Exemple d'appel

  {"name": "domain_lookup", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• edi_build≈ 636 tokens

  Compiles structured JSON into standards-valid X12. The parts that get documents rejected are exactly the parts a language model cannot hold in its head: the 856 hierarchy needs sequential HL IDs where every level names its parent's ID, and on a multi-carton, multi-SKU shipment that bookkeeping goes wrong silently. The ISA header is fixed-width — 106 characters exactly, every element space-padded to size — and one character out crashes the receiver's translator. Segment counts in SE01, CTT01, GE01 and IEA01 must agree with what was actually emitted. All of that is computed here rather than written by hand.

  Paramètres, retour & exemple (10)

  Paramètres

  • data · object · requis
    Document content. For 856: {shipment_id, ship_date, orders:[{po_number, packs:[{sscc, items:[{upc, quantity, unit}]}]}], parties:[{role,name,id}]}. For 850: {po_number, order_date, lines:[{quantity, unit, unit_price, upc, description}], parties:[...]}.
  • document · string · optionnel · 856 | 850
    Transaction set to build.
  • sender_id · string · optionnel
    ISA06 sender identifier.
  • timestamp · string · optionnel
    ISO instant for the envelope date/time. Defaults to now.
  • receiver_id · string · optionnel
    ISA08 receiver identifier.
  • control_number · integer · optionnel
    Interchange control number (ISA13). Also seeds GS06 and ST02.
  • test_indicator · boolean · optionnel
    Mark the interchange as test (ISA15 = T) rather than production (P).
  • include_envelope · boolean · optionnel
    Wrap the transaction set in ISA/GS ... GE/IEA.
  • sender_qualifier · string · optionnel
    ISA05 qualifier, e.g. ZZ, 01 (DUNS), 12 (phone).
  • receiver_qualifier · string · optionnel
    ISA07 qualifier.

  Exemple d'appel

  {"name": "edi_build", "arguments": {"data": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• edi_parse≈ 299 tokens

  Reads a raw ASC X12 interchange and returns it as JSON: delimiters taken from the ISA header, the ISA/GS/ST envelope decoded, every segment split into named elements, and a document-specific summary - purchase order lines for an 850, the HL shipment hierarchy and SSCCs for an 856, invoice totals for an 810. EDI is positional and delimiter-sensitive, and unreadable without a spec table; reading it by inspection produces confident nonsense, which is why this is a tool rather than a prompt.

  Paramètres, retour & exemple (2)

  Paramètres

  • input · string · requis
    Raw X12 EDI text, beginning with ISA where available.
  • include_segments · boolean · optionnel
    Include the flat segment list alongside the summary.

  Exemple d'appel

  {"name": "edi_parse", "arguments": {"input": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• edi_validate≈ 314 tokens

  Runs the structural checks a trading partner runs before rejecting a file: control numbers matching between the ISA/IEA, GS/GE and ST/SE header and trailer pairs, declared counts matching actual counts, and - for an 856 - the HL hierarchy. HL faults are the usual cause of ASN rejections and chargebacks: a parent ID naming no existing node, a duplicate HL01, an unknown level code, a missing carton level. Every finding names the segment and states what the value should have been.

  Paramètres, retour & exemple (2)

  Paramètres

  • input · string · requis
    Raw X12 EDI text.
  • require_levels · array · optionnel
    HL level codes that must be present in an 856, e.g. ["S","O","P","I"] for a pack-level ASN.

  Exemple d'appel

  {"name": "edi_validate", "arguments": {"input": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• hash≈ 326 tokens

  Computes cryptographic digests and HMAC signatures. Returns hex and base64 at once, so a webhook signature can be compared in whichever encoding the provider uses. MD5 and CRC32 are included for checksums and legacy fixtures; they are not secure for authentication.

  Paramètres, retour & exemple (4)

  Paramètres

  • input · string · requis
    Text to hash.
  • hmac_key · string · optionnel
    When set, computes HMAC-<algorithm> with this key instead of a plain digest. Not supported for md5/crc32.
  • algorithms · array · optionnel
    Any of: md5, sha1, sha256, sha384, sha512, crc32.
  • input_encoding · string · optionnel · utf8 | hex | base64
    How to read `input` into bytes.

  Exemple d'appel

  {"name": "hash", "arguments": {"input": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• http_assert≈ 612 tokens

  The difference between an agent believing it succeeded and knowing it did. http.check tells you a URL is alive; this tells you it is correct. Assert the status, response headers, values at JSONPath expressions, substrings in the body and a latency ceiling, and get back one boolean plus a per-check breakdown showing expected against actual. An agent that has just deployed, migrated or reconfigured something can prove the outcome rather than reporting the absence of an error, which is the usual way agents claim a success they have not actually achieved.

  Paramètres, retour & exemple (10)

  Paramètres

  • url · string · requis
    URL to call.
  • body · string · optionnel
    Request body for POST, PUT and PATCH.
  • method · string · optionnel · GET | HEAD | POST | PUT | PATCH | DELETE | OPTIONS
    HTTP method.
  • headers · object · optionnel
    Request headers to send.
  • timeout_ms · integer · optionnel
    Request timeout.
  • expect_json · object · optionnel
    JSONPath expressions mapped to required values, e.g. {"$.status":"ok","$.items[0].id":1}.
  • expect_status · ? · optionnel
    Required status: a number, an array of acceptable numbers, or a class such as "2xx".
  • expect_headers · object · optionnel
    Response headers that must exist and contain a substring, e.g. {"content-type":"json"}.
  • max_response_ms · integer · optionnel
    Fail if the response takes longer than this. 0 disables the check.
  • expect_body_contains · array · optionnel
    Substrings that must appear in the body.

  Exemple d'appel

  {"name": "http_assert", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• http_check≈ 383 tokens

  Resolves a URL and reports what actually happens to it — final status, the full redirect chain, content type and page title. Link rot is faster than it feels: one agent measured seven dead URLs out of 286 across fourteen days. This handles the three cases a naive checker gets wrong: an arXiv v1 to v2 redirect is a version change, not a break; a 403 is a blocked crawler, not a dead page; and a DOI can return 200 while the page behind it is now a retraction notice, which is the worst case because a simple status check passes and the reader gets something else. Response bodies are never returned — only status, headers, title and flags.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
    URL to check.
  • timeout_ms · integer · optionnel
    Per-request timeout in milliseconds.
  • max_redirects · integer · optionnel
    How many redirects to follow.

  Exemple d'appel

  {"name": "http_check", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• json_query≈ 276 tokens

  Runs a JSONPath query and returns the matching values with their concrete paths. Supports property access, array indexing (including negative indices), slices, wildcards, recursive descent (`..`) and filters (`[?(@.price > 10)]`). Pull three fields out of a large API response without carrying the whole document through context.

  Paramètres, retour & exemple (3)

  Paramètres

  • json · ? · requis
    The JSON document, as an object or a JSON string.
  • path · string · requis
    JSONPath expression, e.g. "$.items[*].id" or "$..author".
  • first_only · boolean · optionnel
    Return only the first match.

  Exemple d'appel

  {"name": "json_query", "arguments": {"json": "texte", "path": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• json_repair≈ 308 tokens

  Takes JSON that almost parses and makes it parse: markdown code fences, prose wrapped around the object, trailing commas, single or smart quotes, unquoted keys, Python True/False/None, comments, NaN, and brackets left open by a truncated response. Every change is reported, so the caller learns what its generator got wrong rather than silently depending on a fixer. When the input cannot be salvaged it returns the precise line, column and a caret pointing at the offending character — which is what makes the next attempt succeed instead of guessing.

  Paramètres, retour & exemple (2)

  Paramètres

  • input · string · requis
    The malformed JSON text.
  • close_truncated · boolean · optionnel
    Close brackets left open by a cut-off response.

  Exemple d'appel

  {"name": "json_repair", "arguments": {"input": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• math_eval≈ 275 tokens

  Evaluates arithmetic with correct operator precedence, parentheses, exponentiation, factorials, named variables and 30+ functions. Language models perform arithmetic by pattern-matching and quietly get long multiplications and compounding wrong; this computes the number instead of predicting it.

  Paramètres, retour & exemple (3)

  Paramètres

  • precision · integer · optionnel
    Decimal places to round the formatted result to.
  • variables · object · optionnel
    Named values usable in the expression, e.g. {"rate": 0.07}.
  • expression · string · requis
    Expression to evaluate, e.g. "(1+0.07)^30 * 1000".

  Exemple d'appel

  {"name": "math_eval", "arguments": {"expression": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• time_convert≈ 272 tokens

  Converts one instant into any number of timezones, handling daylight saving transitions correctly. Naive inputs (no Z or offset) are read as wall-clock time in `from`; inputs carrying an offset are absolute.

  Paramètres, retour & exemple (3)

  Paramètres

  • to · array · requis
    Target timezones.
  • from · string · optionnel
    Timezone the input is expressed in (used only when it carries no offset).
  • time · string · optionnel
    The instant to convert: ISO 8601, a naive wall-clock time, a unix timestamp, or "now".

  Exemple d'appel

  {"name": "time_convert", "arguments": {"to": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• time_diff≈ 267 tokens

  Computes the elapsed time between two instants: exact totals in each unit, a calendar breakdown (years/months/days rather than 'thirteen and a half months'), the count of weekdays in between, and a human phrase. Negative when `to` precedes `from`.

  Paramètres, retour & exemple (3)

  Paramètres

  • to · string · optionnel
    End instant: ISO 8601, unix timestamp, or "now".
  • from · string · optionnel
    Start instant: ISO 8601, unix timestamp, or "now".
  • timezone · string · optionnel
    IANA timezone identifier, e.g. "UTC", "America/New_York", "Asia/Kolkata", "Europe/London".

  Exemple d'appel

  {"name": "time_diff", "arguments": {"to": "texte", "from": "texte", "timezone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• time_now≈ 254 tokens

  Returns the authoritative current time in one or more timezones, with UTC offset, ISO week number, day of year, weekend flag, and daylight-saving state. Use this instead of guessing the date: a language model has no clock, and its training cutoff is not today.

  Paramètres, retour & exemple (2)

  Paramètres

  • also · array · optionnel
    Additional timezones to report alongside the primary one.
  • timezone · string · optionnel
    IANA timezone identifier, e.g. "UTC", "America/New_York", "Asia/Kolkata", "Europe/London".

  Exemple d'appel

  {"name": "time_now", "arguments": {"also": [], "timezone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• time_window≈ 450 tokens

  Answers the questions a deadline actually poses: is this instant inside the window, how long until it opens or closes, and if it is outside, by how much. Optionally compares two windows for overlap. A window comparison that silently succeeds against the wrong bounds is a failure mode that does not raise an error anywhere — the ship window is missed, or the ASN is late, and the only symptom is a chargeback later. This computes the boundary instead of assuming it.

  Paramètres, retour & exemple (7)

  Paramètres

  • end · string · optionnel
    Window closes at this instant. Omit if using `duration_hours`.
  • start · string · requis
    Window opens at this instant: ISO 8601, unix timestamp, or "now".
  • instant · string · optionnel
    The instant to test against the window.
  • timezone · string · optionnel
    IANA timezone used to read naive inputs and render output.
  • compare_end · string · optionnel
    End of the second window.
  • compare_start · string · optionnel
    Start of a second window, to test for overlap with the first.
  • duration_hours · number · optionnel
    Window length in hours, used when `end` is omitted.

  Exemple d'appel

  {"name": "time_window", "arguments": {"start": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tool_call≈ 242 tokens

  Dispatches to any tool in the catalogue. Most clients cap how many tools they will hold at once — Cursor drops everything past roughly forty across all servers combined — so only a core set is listed by default. Everything else is reachable here. Find a name with tool.search, check its shape with tool.describe, then call it through this.

  Paramètres, retour & exemple (2)

  Paramètres

  • args · object · optionnel
    Arguments for that tool.
  • tool · string · requis
    Name of the tool to invoke.

  Exemple d'appel

  {"name": "tool_call", "arguments": {"tool": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tool_describe≈ 224 tokens

  Returns everything needed to call a tool correctly: its complete JSON Schema, every parameter with type and default, and examples known to work. Pair it with tool.search — search to find the name, describe to learn the shape, then call. This exists so the catalogue does not have to be loaded into context up front.

  Paramètres, retour & exemple (1)

  Paramètres

  • name · string · requis
    Tool name, e.g. "time.window". Underscores and slashes are accepted too.

  Exemple d'appel

  {"name": "tool_describe", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tool_search≈ 310 tokens

  Searches every tool by name, summary, description and keywords, and returns the closest matches with their endpoints and parameters. Use this instead of loading the whole catalogue: describe the job ("check whether a shipment is late", "fix broken JSON", "validate a barcode check digit") and call what comes back. Each result says why it matched, so a wrong match is obvious rather than plausible.

  Paramètres, retour & exemple (3)

  Paramètres

  • q · string · requis
    What you are trying to do, in plain language.
  • limit · integer · optionnel
    Maximum matches to return.
  • detail · boolean · optionnel
    Include full parameter schemas and worked examples for each match.

  Exemple d'appel

  {"name": "tool_search", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://fluentedi.com/mcp