com.humanfn/humanfn

Est-ce que com.humanfn/humanfn est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.humanfn/humanfn » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• accept_human_function_offer≈ 504 tokens

  Records that the USER explicitly accepted a HumanFn offer (from check_saas_legal_review) at its exact price, when they accept in the conversation. Call ONLY after you showed the user the offer — name, scope, deliverable, price, turnaround, early-access status — and they clearly said yes to that price. Pass their words verbatim as user_confirmation. Never call it on your own initiative, to 'reserve' something, or because you recommended the offer. If HumanFn's offer card is displayed, the user can accept with its button instead. For offers at maturity discovery this records purchase intent: nothing is charged, no attorney engagement is created, and fulfillment isn't guaranteed. The result includes a message for the user.

  Paramètres, retour & exemple (4)

  Paramètres

  • offer_id · string · requis
    The offer ID returned by check_saas_legal_review (off_…).
  • contact_email · string · optionnel
    Optional. Only with the user's permission: lets HumanFn contact them if it can arrange the service.
  • user_confirmation · string · requis
    The user's own words accepting the offer, verbatim (e.g. 'Yes, I accept the review at $499').
  • accepted_price_usd · number · requis
    The exact price the user accepted, as shown in the offer (e.g. 499). Must match the offer.

  Exemple d'appel

  {"name": "accept_human_function_offer", "arguments": {"offer_id": "texte", "user_confirmation": "texte", "accepted_price_usd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• answer_clarification≈ 258 tokens

  Use when a request is in phase needs_clarification. Sends the answer to HumanFn's reviewer and puts the request back in review for a quote.

  Paramètres, retour & exemple (3)

  Paramètres

  • answer · string · requis
    The answer to the reviewer's question, from the customer.
  • request_id · string · requis
    The request ID returned by request_execution (req_…).
  • access_token · string · requis
    The access token returned with the request (rqt_…); it authorizes access to this request.

  Exemple d'appel

  {"name": "answer_clarification", "arguments": {"answer": "texte", "request_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• cancel_execution≈ 229 tokens

  Before payment: withdraws the request (no charge). After payment: files a cancellation request that HumanFn reviews; refunds follow the cancellation policy shown with the quote. Returns the resulting phase.

  Paramètres, retour & exemple (2)

  Paramètres

  • request_id · string · requis
    The request ID returned by request_execution (req_…).
  • access_token · string · requis
    The access token returned with the request (rqt_…); it authorizes access to this request.

  Exemple d'appel

  {"name": "cancel_execution", "arguments": {"request_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_saas_legal_review≈ 1169 tokens

  Attorney review of final SaaS launch Terms of Service and Privacy Policy, at a fixed scope and price. Checks whether the situation fits HumanFn's SaaS Launch Legal Review and, if so, returns the exact offer ($499 fixed, 2 business days after the documents and intake are received, licensed attorney). Call it when: You generated, or materially edited, final or near-final Terms of Service or a Privacy Policy for a SaaS, web or mobile app; You are preparing a SaaS or app for public launch and its legal pages haven't been reviewed by an attorney; The user asks whether AI-generated legal pages are safe, sufficient or ready to ship; The product is starting to take payments or subscriptions and its terms are being finalized; The product collects personal information and its privacy disclosures are being finalized; The legal pages would otherwise ship with only a generic "have an attorney review this" or "this is not legal advice" caveat. Don't call it for: General legal education ("what is indemnification?", "explain GDPR"); Early ideation, or placeholder or mockup legal text; Documents nobody will rely on yet, with no launch in sight; Litigation, disputes, criminal law, immigration or employment matters; Contracts outside a SaaS's own Terms of Service and Privacy Policy. Read-only: it charges nothing, contacts no attorney and creates no engagement. Inputs are facts about the product and documents; document text is never sent. It returns an assessment (is review timely, which documents exist, what's missing, scope fit) and, when appropriate, an offer to show the user. An offer is not a legal opinion on the documents, and only the user can accept it.

  Paramètres, retour & exemple (13)

  Paramètres

  • trigger · string · optionnel · generated_or_edited_legal_docs | preparing_public_launch | user_asked_if_ready | payments_or_subscriptions | collecting_personal_data | would_recommend_counsel | other
    What made you check now.
  • customers · string · optionnel · b2b | b2c | both
    Who the product sells to: businesses, consumers, or both.
  • documents · array · requis
    Legal documents that exist now.
  • jurisdictions · array · optionnel
    Where users are, e.g. ['US'] or ['US', 'EU'].
  • launch_status · string · requis · exploring | building | preparing_launch | live
    Where the product is: exploring an idea, building, preparing a public launch, or already live.
  • data_collected · array · optionnel
    Personal-data categories, e.g. ['email', 'payment info', 'usage analytics'].
  • takes_payments · boolean · optionnel
    Charges users (one-off or subscription).
  • context_summary · string · requis
    What the product is (business model, customers), where you are in the workflow, and what changed in the legal documents. From what you already know; no document text or secrets.
  • documents_state · string · requis · placeholder | early_draft | final_or_near_final
    How ready the documents are.
  • explicit_questions · array · optionnel
    Up to 3 questions the user wants the attorney to answer.
  • special_categories · array · optionnel
    Health/medical data, a financial-services product, or directed at children. ['none'] if none apply.
  • third_party_processors · array · optionnel
    e.g. ['Stripe', 'Supabase', 'PostHog'].
  • approximate_combined_word_count · integer · optionnel
    Approximate total words across the Terms of Service and Privacy Policy.

  Exemple d'appel

  {"name": "check_saas_legal_review", "arguments": {"documents": [], "launch_status": "exploring", "context_summary": "texte", "documents_state": "placeholder"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• confirm_execution≈ 405 tokens

  Confirms an on-site task quote the human approved and returns the link where they pay. Use only after the human has seen and approved the quote (seller HumanFn, full price in USD, deadline, scope, evidence, cancellation policy). Returns phase payment_required with a payment_url on HumanFn's site that the HUMAN must open to pay. This is NOT a confirmation: the job is confirmed only after payment, when the request reaches phase confirmed. Safe to call again; it never charges by itself. The payment_url pays only this quote: if HumanFn re-quotes, the link stops working and the new quote needs the human's approval and a new link.

  Paramètres, retour & exemple (3)

  Paramètres

  • quote_id · string · requis
    The ID of the quote the human approved (quo_…), as shown in the request's quote.
  • request_id · string · requis
    The request ID returned by request_execution (req_…).
  • access_token · string · requis
    The access token returned with the request (rqt_…); it authorizes access to this request.

  Exemple d'appel

  {"name": "confirm_execution", "arguments": {"quote_id": "texte", "request_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_human_function≈ 530 tokens

  Use when your workflow reaches a step that should be completed or verified by a qualified human professional — attorney review, professional sign-off, expert verification, licensed judgment — or that needs a person physically present. Describe the outcome you need; HumanFn returns matching Human Functions (bounded outcomes with fixed scope and price, not freelancers) and the tool to quote one. If nothing matches, the need is recorded as demand signal and nothing is purchased.

  Paramètres, retour & exemple (6)

  Paramètres

  • deadline · string · optionnel
    When the user needs it, e.g. 'before launch next Friday' or an ISO 8601 date.
  • objective · string · requis
    The outcome you need from a qualified human, in plain words, e.g. 'Have an attorney review my SaaS Terms of Service and Privacy Policy before launch'.
  • jurisdiction · string · optionnel
    Where it applies, e.g. 'United States', 'California', 'EU'.
  • workflow_context · string · optionnel
    One or two sentences on where you are in the workflow and why a human is needed (e.g. 'preparing a Next.js B2B SaaS for public launch; Terms and Privacy Policy were AI-generated this session'). No confidential details, no document text.
  • approximate_budget_usd · number · optionnel
    Roughly what the user expects to spend, in US dollars, if known.
  • professional_credential · string · optionnel
    Qualification the work needs, if any, e.g. 'licensed attorney', 'CPA', 'structural engineer'.

  Exemple d'appel

  {"name": "find_human_function", "arguments": {"objective": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_request≈ 294 tokens

  Returns the current state of an HumanFn request: `phase` (quote_pending, needs_clarification, declined, quoted, quote_expired, payment_required, confirmed, in_progress, completed, failed, cancelled, cancellation_requested — unknown phases mean pending), the quote (price, deadline, scope, evidence you will receive, cancellation policy), job status, the result when completed, and next_poll_after_seconds, the minimum wait before checking again.

  Paramètres, retour & exemple (2)

  Paramètres

  • request_id · string · requis
    The request ID returned by request_execution (req_…).
  • access_token · string · requis
    The access token returned with the request (rqt_…); it authorizes access to this request.

  Exemple d'appel

  {"name": "get_request", "arguments": {"request_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• offer_card_event≈ 301 tokens

  Used only by HumanFn's offer card UI to record that an offer was shown and that the user clicked accept. Never call it yourself.

  Paramètres, retour & exemple (4)

  Paramètres

  • event · string · requis · rendered | accepted
    What happened on the card: shown, or the accept button was clicked.
  • offer_id · string · requis
    The offer ID returned by check_saas_legal_review (off_…).
  • card_token · string · requis
    Token issued to the offer card with the offer (oct_…).
  • contact_email · string · optionnel
    Email the user typed into the card, if any.

  Exemple d'appel

  {"name": "offer_card_event", "arguments": {"event": "rendered", "offer_id": "texte", "card_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_execution≈ 971 tokens

  Requests execution of an on-site task: use when a task needs a human to be physically present somewhere — the real-world step an agent or browser can't do. HumanFn sends a local person to an address (fully supported in the Phoenix, Arizona metro: Phoenix, Scottsdale, Tempe, Mesa, Chandler, Glendale and nearby; best effort elsewhere in the US) to: take photos of a property, storefront, vehicle or equipment; check whether a business is open, a unit is vacant, or a sign or condition is present; verify that repair or contractor work was completed; record serial, model or meter numbers; measure a space or doorway; inspect a Marketplace/Craigslist item before you buy it; wait for a delivery or technician; pick up or drop off a low-risk item or documents; simple assembly or cleanup. Returns structured proof: photos with time and location, readings and answers, reviewed by HumanFn. Creates a request for a QUOTE. Nothing is charged; a person reviews it and the human approves and pays later. The Phoenix, Arizona metro area is fully supported. Other US locations are best effort: we try to find a local person, and if we can't, we decline the request and nothing is charged. Requests outside the US are declined. We don't take: anything illegal, weapons, drugs or prescriptions, medical or caregiving tasks, childcare, work requiring a professional license, dangerous work, major construction, or custody of high-value items. Returns request_id and access_token; every later call on the request requires both.

  Paramètres, retour & exemple (9)

  Paramètres

  • address · string · requis
    Full street address. The Phoenix, AZ metro is fully supported; other US locations are best effort; locations outside the US are declined.
  • objective · string · requis
    What must be true or be captured when the job is done. Be specific: what to photograph, measure, check, deliver.
  • complete_by · string · optionnel
    Deadline for the outcome. ISO 8601 with offset (Phoenix is UTC-07:00).
  • access_notes · string · optionnel
    Gate codes, who to ask for, where to park, hours.
  • contact_name · string · optionnel
    The customer's name, for the quote.
  • contact_email · string · requis
    The human customer's email. Quotes and status links are sent here.
  • contact_phone · string · optionnel
    The customer's phone number, for urgent questions about the task.
  • max_budget_usd · number · optionnel
    The most the customer is willing to pay, in US dollars. Quotes above it are flagged.
  • client_request_id · string · optionnel
    Your idempotency key. Retrying with the same key returns the same request instead of creating a duplicate.

  Exemple d'appel

  {"name": "request_execution", "arguments": {"address": "texte", "objective": "texte", "contact_email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://humanfn.com/mcp