accueil / serveurs / Dev & Code / com.mcpcensus/census
com.mcpcensus/census
serveur MCP (Model Context Protocol) · mcp-census 1.4.0
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que com.mcpcensus/census est sûr ?
Au dernier audit MCP Hub, le serveur MCP « com.mcpcensus/census » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 15 outils
- census_audit_config≈ 412 tokens
Audit a whole MCP client config in one call (.mcp.json, claude_desktop_config.json, .cursor/mcp.json, .vscode/mcp.json, Codex config.toml text). Resolves every entry without guessing (url → remote_url, npx → npm package, uvx → PyPI package) and returns one PASS / REVIEW / BLOCK / UNKNOWN verdict per entry under a built-in policy, plus CENSUS-AUDIT/1 text, valid_until_epoch and exit_code (1 on any BLOCK). UNKNOWN is never upgraded to PASS. Cost 1 credit per config per UTC day; keyless callers get one config of ≤25 entries per IP per day. Not a malware scan; PASS is not a sandbox. Strip env/headers before sending.
Paramètres, retour & exemple (5)
Paramètresconfig· ? · requis
The config document: an object with mcpServers | servers | mcp_servers, a list under entries[], or raw text (JSON or Codex config.toml)format· string · optionnel · json | tomlstrict· boolean · optionnel
exit_code 2 when any entry is REVIEW or UNKNOWNpolicy_id· string · optionnel · builtin:baseline | builtin:first-party | builtin:strictprevious_tools_digests· object · optionnel
alias → tools_digest from your last audit; sets tools_drift per entry
Exemple d'appel{"name": "census_audit_config", "arguments": {"config": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_changes≈ 312 tokens
The Census change feed (CENSUS-CHANGES/1): observed transitions across every server — server_new, remote_down, remote_up, tools_changed, health_change, verified_change, security, endpoint_moved, registry_status, spec_era_change. Cursor-paginated: pass next_cursor back as since. Filter by events, server_names or namespace_domain. Only real transitions, never 'still fine'. Unmetered in v1; poll hourly. Not a malware scan.
Paramètres, retour & exemple (5)
Paramètreslimit· integer · optionnelsince· string · optionnel
next_cursor from the previous page, or an RFC 3339 time for the first callevents· array · optionnel
Event names to include (default all)server_names· array · optionnel
Exact canonical names to include (≤50)namespace_domain· string · optionnel
Registrable domain of a DNS-verified namespace, e.g. notion.com
Exemple d'appel{"name": "census_changes", "arguments": {"limit": 1, "since": "texte", "events": [], "server_names": [], "namespace_domain": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_coverage≈ 81 tokens
Public transparency report (same payload as GET /v1/coverage). Unmetered. Live D1 census/identity/remote/protocol/adoption/pipeline counts plus method notes — never invents completeness percentages or a brand_audit punch list.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "census_coverage", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_credits≈ 66 tokens
Show remaining Census credits for this API key (wallet after the UTC-month grant). Unmetered. Without a key, returns anonymous unique-per-day remaining — not a wallet.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "census_credits", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_lookalikes≈ 104 tokens
Contested identity for one exact server_name: official_for, name_collision_count, and up to 10 other census server_name values sharing the same namespace brand or tail. Never invents lookalikes. Cost 1.
Paramètres, retour & exemple (1)
Paramètresserver_name· string · requis
Exact canonical Census server name
Exemple d'appel{"name": "census_lookalikes", "arguments": {"server_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_lookup≈ 112 tokens
Get the live health verdict for one MCP server by its exact registry name (e.g. 'io.github.owner/name'). Returns stars, last-push recency, gone/archived/deprecated flags, name-collision count, and a fact-based health verdict (healthy | issues | unknown).
Paramètres, retour & exemple (1)
Paramètresname· string · requis
Exact MCP registry server name
Exemple d'appel{"name": "census_lookup", "arguments": {"name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_policy_list≈ 239 tokens
List the exact immutable Preflight v1 built-in policy objects, canonical ruleset, and policy digests. Unmetered.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "census_policy_list", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": "texte", "ruleset": {}, "policies": [], "audit_signed": "texte", "policy_digests": {}}} - census_preflight≈ 631 tokens
Evaluate one exact MCP server under a documented built-in install policy. Returns PASS, REVIEW, or BLOCK with evidence reasons, freshness, digests, and explicit limits. This is a first gate, not a security audit. refresh=if_stale requires x-api-key.
Paramètres, retour & exemple (3)
Paramètresrefresh· string · optionnel · never | if_stalepolicy_id· string · optionnel · builtin:baseline | builtin:first-party | builtin:strictserver_name· string · requis
Exact canonical Census server name
Exemple d'appel{"name": "census_preflight", "arguments": {"server_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": "texte", "facts": {}, "policy": {}, "meaning": "texte", "reasons": [], "audit_id": "texte", "decision": "PASS", "limitations": [], "server_name": "texte", "valid_until": "texte", "audit_signed": "texte", "evaluated_at": "texte"}} - census_recent≈ 94 tokens
Newest MCP servers by real first_seen_at (same payload as GET /v1/recent). Unmetered. Only rows with a known first-seen date — never invents or guesses discovery times. Optional limit 1–50 (default 20).
Paramètres, retour & exemple (1)
Paramètreslimit· number · optionnel
Max results 1–50 (default 20)
Exemple d'appel{"name": "census_recent", "arguments": {"limit": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_search≈ 218 tokens
Search MCP servers by keyword or partial name (e.g. 'github', 'postgres'). Returns ranked matches with health/trust. Also returns: resolved_query (auto typo fix), disambiguate (when unsure), known_brand (we recognize a strong product but it has no official MCP — e.g. CodeRabbit), research (watchlist/confirmed_absent), query_intent (brand_lookup|category|package|install_gate|junk — does not change ranking), intent_cta (preflight when they asked an install-gate question). Prefer official_match=true rows. Never invent servers.
Paramètres, retour & exemple (2)
Paramètreslimit· number · optionnel
Max results 1–50 (default 20)query· string · requis
Keyword or partial server name (>= 2 chars). Typos and space variants are resolved when confident.
Exemple d'appel{"name": "census_search", "arguments": {"query": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_stamp≈ 206 tokens
Census stamp for one exact MCP server under a built-in policy. Same input as census_preflight. Returns the preflight body plus compact CENSUS-STAMP/1 text and stamp_json. Cost matches preflight. Never connect without a stamp. PASS is not a malware scan or permission review.
Paramètres, retour & exemple (3)
Paramètresrefresh· string · optionnel · never | if_stalepolicy_id· string · optionnel · builtin:baseline | builtin:first-party | builtin:strictserver_name· string · requis
Exact canonical Census server name
Exemple d'appel{"name": "census_stamp", "arguments": {"server_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_stats≈ 85 tokens
Ecosystem headline numbers from the live census (same payload as GET /v1/stats). Unmetered. Returns total servers, healthy/issues counts, popular (gh_stars>=1000), remote-capable count, github-linked count, and captured_at. No invented metrics.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "census_stats", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_watch_list≈ 42 tokens
List active per-server watches for this API key. Requires x-api-key.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "census_watch_list", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_watch_subscribe≈ 261 tokens
Subscribe this agent (or a human email) to alerts for ONE specific MCP server. Fires only on real observed changes: remote_down, remote_up, health_change, verified_change, security. Requires x-api-key. Prefer webhook_url (https) so your agent can receive POST callbacks; email optional. Returns a watch id + HMAC secret (X-Census-Signature: sha256=…). Free tier: 5 watches; pro: 50.
Paramètres, retour & exemple (5)
Paramètresemail· string · optionnel
Optional human email for the same alertslabel· string · optionnel
Optional agent-chosen labelevents· array · optionnel
Subset of remote_down,remote_up,health_change,verified_change,security,tools_changed (default: all)server_name· string · requis
Exact registry name to watchwebhook_url· string · optionnel
https URL that will receive signed POST event payloads
Exemple d'appel{"name": "census_watch_subscribe", "arguments": {"server_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - census_watch_unsubscribe≈ 68 tokens
Deactivate a watch by id. Requires x-api-key that owns the watch.
Paramètres, retour & exemple (1)
Paramètresid· string · requis
Watch id from census_watch_subscribe
Exemple d'appel{"name": "census_watch_unsubscribe", "arguments": {"id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».