com.modernmustardseed/own-it

Est-ce que com.modernmustardseed/own-it est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.modernmustardseed/own-it » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 3 outils

• audit_ownership≈ 539 tokens

  Map who controls each layer of a business’s web presence and how hard each would be to leave, from public data only: domain registration over RDAP (registrar, registrant when public, EPP status and transfer locks, expiry, DNSSEC), DNS host from the nameservers, website platform from public fingerprints (Wix, Squarespace, Shopify, WordPress, Webflow, GoDaddy Website Builder, Duda, HighLevel, Framer, agency and franchise builders and others), email provider from MX and SPF, analytics and ad tag IDs present in the page (GA4, Tag Manager, Google Ads, Meta Pixel and others), call tracking, embedded booking, CRM, chat and email signup tools, and profile links including a Google Business Profile when supplied. Returns an ownership map with, per layer, who controls it, a portability rating, a plain-words reason, evidence, sources and the first step to take control, plus a 0 to 100 portability score. It cannot see inside any account, so ownership of a Google Business Profile or tag account is reported as a check to make, never guessed. Results are cached for 24 hours.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    The business domain or website address, such as example.com or https://www.example.com/. Public names only.
  • profile_urls · array · optionnel
    Links to the business’s profiles, such as its Google Business Profile or Maps link, Facebook page, Instagram or Yelp page. They are classified, not fetched.
  • business_name · string · optionnel
    The business’s legal or trading name. When given, it is compared with the registrant shown in the public domain record.

  Exemple d'appel

  {"name": "audit_ownership", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_domain_control≈ 313 tokens

  Check who controls a domain, its DNS and its email, without reading the website: registrar and IANA id, registrant when the public record shows one, EPP status codes and transfer locks, registration and expiry dates, DNSSEC, nameservers and DNS host, and mail provider from MX and SPF. Returns a 0 to 100 control score, each layer with a reason and the first step to take control, and the raw registration facts. Shares the 24 hour cache with audit_ownership.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    The business domain or website address, such as example.com or https://www.example.com/. Public names only.
  • business_name · string · optionnel
    The business’s legal or trading name. When given, it is compared with the registrant shown in the public domain record.

  Exemple d'appel

  {"name": "check_domain_control", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_fingerprints≈ 236 tokens

  List the rules Own It uses to name vendors: website platforms, hosts, agency builders and reseller registrars, DNS hosts, email providers, tag ID formats, call tracking, booking and CRM widgets, and profile sites, each with its public marker, portability rating and source. Without kind it returns counts per kind. Static reference, no network access.

  Paramètres, retour & exemple (1)

  Paramètres

  • kind · string · optionnel · website | hosting | agency | dns | email | tags | call_tracking | widgets
    One kind of rule to list: website, hosting, agency, dns, email, tags, call_tracking, widgets or profiles.

  Exemple d'appel

  {"name": "list_fingerprints", "arguments": {"kind": "website"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.modernmustardseed.com/own-it