com.gitbuyer/mcp

Est-ce que com.gitbuyer/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.gitbuyer/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 16 outils

• create_payout_wallet≈ 138 tokens

  The seller needs a payout wallet and does not have one: returns wizard_url, a one-time signed-in link to gitbuyer's in-browser wallet generator (keys created in the browser, shown once, never stored, never in the chat). Call whenever a user asks to create, make or generate a wallet, or says they have none.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "create_payout_wallet", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_store≈ 274 tokens

  List a GitHub repo for sale: URL, price, payout wallet(s); USDC on Base (0x…) and/or Solana (base58); both offers the buyer the choice. Private repos need a fine-grained PAT (Contents read-only, that one repo), unless the account has the GitHub App installed on the repo, in which case no key is needed at all. The listing is live at `page` immediately.

  Paramètres, retour & exemple (6)

  Paramètres

  • price_usd · string · optionnel
    e.g. "25.00"; defaults to 20.00
  • github_pat · string · optionnel
    fine-grained PAT for private repos
  • github_url · string · requis
  • wallet_base · string · optionnel
    USDC payout wallet on Base (0x…)
  • preview_paths · array · optionnel
    globs buyers may read free before paying
  • wallet_solana · string · optionnel
    USDC payout wallet on Solana

  Exemple d'appel

  {"name": "create_store", "arguments": {"github_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_store≈ 94 tokens

  Take a store down and void its checkout so old links stop being payable.

  Paramètres, retour & exemple (2)

  Paramètres

  • repo · string · requis
  • owner · string · requis

  Exemple d'appel

  {"name": "delete_store", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_base≈ 413 tokens

  Say what you are building; get ONE repo to build from. The verdict is chosen by kind (starters first), freshness, and relevance, and comes with a plain-words why, the clone command target, and two alternatives. Adapting a proven base ships production-shaped code instead of a from-scratch demo. Needs no account.

  Paramètres, retour & exemple (1)

  Paramètres

  • building · string · requis
    what you are building, in task words, e.g. "a saas with stripe subscriptions and auth"

  Exemple d'appel

  {"name": "find_base", "arguments": {"building": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "pick": {}, "matched": "texte", "building": "texte", "alternatives": []}}

• get_github≈ 94 tokens

  The GitHub connection: installations, their repos (listed or not), and orphaned listings whose repo left the installation: the catalogue-management view.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_github", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_repo≈ 237 tokens

  Read one gitbuyer repo in depth before cloning or buying: facts (stars, forks, freshness, releases, license, repo_kind), topics, the README excerpt, and the exact next move (clone command for free repos; x402 checkout and test URL for paid listings). Needs no account.

  Paramètres, retour & exemple (2)

  Paramètres

  • repo · string · requis
  • owner · string · requis

  Exemple d'appel

  {"name": "get_repo", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "listed", "repo": "texte", "stars": 1, "license": "texte", "starter": true, "pushed_at": 1, "repo_kind": "texte"}}

• get_sales≈ 101 tokens

  One store's settled payments, newest first: count and revenue (real money only), rehearsals flagged beside.

  Paramètres, retour & exemple (2)

  Paramètres

  • repo · string · requis
  • owner · string · requis

  Exemple d'appel

  {"name": "get_sales", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_stats≈ 116 tokens

  The whole account at a glance: every store with its sales, revenue, visits, human/agent split and buy-intent file views, plus account totals. Start here for 'how am I doing?'.

  Paramètres, retour & exemple (1)

  Paramètres

  • days · integer · optionnel
    traffic window, default 30

  Exemple d'appel

  {"name": "get_stats", "arguments": {"days": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_store≈ 98 tokens

  One listing's full settings: price, payout wallets, preview paths, whether a GitHub key is on file.

  Paramètres, retour & exemple (2)

  Paramètres

  • repo · string · requis
  • owner · string · requis

  Exemple d'appel

  {"name": "get_store", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_traffic≈ 130 tokens

  One store's audience: humans vs agents by day, unique visitors, countries and cities, referrers, the files buyers tried to open before paying.

  Paramètres, retour & exemple (3)

  Paramètres

  • days · integer · optionnel
    window, default 30, max 365
  • repo · string · requis
  • owner · string · requis

  Exemple d'appel

  {"name": "get_traffic", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_stores≈ 74 tokens

  Every listed repo in this account: repo, page, price, checkout URLs.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_stores", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_repos≈ 582 tokens

  Find the best repo to BUILD ON: terms match names, descriptions, topics, categories, licenses and READMEs, ranked by relevance (name beats topics beats description beats README) plus base fitness (stars band, freshness, releases). Returns paid listings (buy at `page`, x402) and free indexed repos (clone from `github`) together, listed first, each with stars, forks, pushed_at, releases, license and a starter flag. Needs no account. Empty query browses.

  Paramètres, retour & exemple (10)

  Paramètres

  • sort · string · optionnel
    relevance (default with a query), stars (default without), or updated
  • limit · integer · optionnel
    max results, default 30
  • query · string · optionnel
    e.g. "fastapi stripe starter"
  • license · string · optionnel
    SPDX id (MIT, Apache-2.0, ...) or 'permissive' for the whole build-on-it set
  • category · string · optionnel
    exact category filter
  • language · string · optionnel
    exact primary-language filter
  • starters · boolean · optionnel
    only templates, boilerplates and starters — repos meant as a base
  • min_stars · integer · optionnel
    only repos with at least this many stars
  • repo_kind · string · optionnel
    what the repo IS: starter | app | library | tool | generator. Use 'starter' or 'app' when you want a base to ADAPT; results also carry repo_kind so you can reject mismatches before cloning.
  • updated_within_days · integer · optionnel
    only repos pushed within this many days

  Exemple d'appel

  {"name": "search_repos", "arguments": {"sort": "texte", "limit": 1, "query": "texte", "license": "texte", "category": "texte", "language": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "count": 1, "results": []}}

• seller_setup≈ 148 tokens

  The seller setup wizard. Returns wizard_url: a one-time signed-in link to the full browser wizard — it can GENERATE a payout wallet safely (keys shown once in the browser, never stored, user must confirm saving them), connect GitHub, and list the first repo. Call this when the user wants to start selling, has no wallet, or asks to finish setup; offer wizard_url.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "seller_setup", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_payout_wallets≈ 186 tokens

  Save the account's default payout wallets: USDC on Base (0x…) and/or Solana (base58). The onboarding wallet step: once saved, create_store needs only the repo URL, and a chain added here propagates to existing listings so the whole inventory offers it. An empty string clears a wallet.

  Paramètres, retour & exemple (2)

  Paramètres

  • wallet_base · string · optionnel
    USDC payout wallet on Base (0x…); empty string clears
  • wallet_solana · string · optionnel
    USDC payout wallet on Solana (base58); empty string clears

  Exemple d'appel

  {"name": "set_payout_wallets", "arguments": {"wallet_base": "texte", "wallet_solana": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_store≈ 182 tokens

  Edit a listing without re-listing it: reprice, rewallet, rekey, or change preview paths. Only the fields you send change; the old checkout is voided so stale links stop selling.

  Paramètres, retour & exemple (7)

  Paramètres

  • repo · string · requis
  • owner · string · requis
  • price_usd · string · optionnel
  • github_pat · string · optionnel
    new key; empty string clears
  • wallet_base · string · optionnel
  • preview_paths · array · optionnel
  • wallet_solana · string · optionnel

  Exemple d'appel

  {"name": "update_store", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• whoami≈ 69 tokens

  Who am I signed in as, how many listings, live or rehearsal.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://gitbuyer.com/mcp