com.submitmap/directory

Est-ce que com.submitmap/directory est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.submitmap/directory » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 11 outils

• create_project≈ 4204 tokens

  Store a product on the account. Before asking the maker anything, use what you can already see: a README, package metadata, the site's own copy and title, an assets or public folder. A maker working in their product's repository should be able to say 'add my product to SubmitMap' and get a filled-in project back, with questions only about what is genuinely not there. Fill in as much as you can, leave the rest, and come back with update_project. Facts drive what it qualifies for; the pack is what you will paste into forms later. Ask about images early: most platforms want a square logo and many want a cover, and every asset in the pack is two fields, the public address (logoUrl) and the file on the maker's machine (logoFile), because a form uploads the file and only the address can be shown back to them.

  Paramètres, retour & exemple (5)

  Paramètres

  • url · string · optionnel
  • name · string · requis
  • pack · object · optionnel
  • facts · object · optionnel
    Same shape qualify_project takes: stage, pricingModel, categories, and the booleans. It is also where the two answers that decide a run order live once the maker has given them (`goal`, `budget`, and `launchAt` if they named a date), which is what stops the next session asking again. Leave domainRating out: the url is measured against Ahrefs on the way in and the measured number is what gets stored, so a guess here is overwritten anyway.
  • pitch · string · optionnel
    One paragraph in the maker's own words.

  Exemple d'appel

  {"name": "create_project", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_platform≈ 415 tokens

  Full record for one platform: eligibility, disqualifiers, step-by-step submission instructions, requirements, gotchas and expected outcome. All of that is free, and it is what decides whether this product should be submitted here at all. Pass brief: true to also get agentPrompt, the brief for that platform's form, and agentGotchas, the traps that only bite something filling it (a placeholder that contradicts its label, a second email input belonging to a newsletter, a honeypot). The brief spends one of the account's tracked platforms, so ask for it once the maker has decided to fill this form, not while you are still choosing between platforms. For a stored project, submission_playbook returns the same brief with the maker's values already in it.

  Paramètres, retour & exemple (3)

  Paramètres

  • slug · string · requis
    Platform slug, e.g. "product-hunt".
  • brief · boolean · optionnel
    Include agentPrompt and agentGotchas. This is the paid half and it spends a tracked platform, once, for good. Leave it out while you are deciding where to submit: eligibility, disqualifiers, gotchas, approval time and link type all come back either way. A platform this account has already spent a slot on is free to brief again, so re-reading one costs nothing.
  • projectId · string · optionnel
    Which project the brief is for, when brief is true. Omit it when the account has one project. A brief is one form being worked on for one product, and the project it belongs to cannot be issued another until this one has an outcome recorded.

  Exemple d'appel

  {"name": "get_platform", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_projects≈ 111 tokens

  The projects on this account, each with its facts (eligibility answers) and its pack (what a submission form asks for), plus what is still missing from the pack. Call it whenever the maker says "my product" or "my project" without naming one: it is how you find out which project they mean, and every other account tool takes the id it returns.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_projects", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_submissions≈ 147 tokens

  Where every submission for a project stands: what went out, when, what came back, and what is still waiting. This is the tool behind "check my submissions", "what did I submit", "did I ever submit to that one" and "how is my launch going", so answer those from here instead of asking the maker to remember. Start with list_projects if they have not named a project.

  Paramètres, retour & exemple (1)

  Paramètres

  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.

  Exemple d'appel

  {"name": "list_submissions", "arguments": {"projectId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• plan_submissions≈ 568 tokens

  Write the run order for a project: which platforms, in what sequence, and why each one is where it is. Anything already submitted to is dropped from the plan and named back to you in `alreadySubmitted`, because a plan is what is still ahead. Pass the platforms in the order they should be worked, with a short reason on each, plus a summary of the strategy. The plan appears on the maker's dashboard as a checklist that ticks itself off as submissions land. Anything already tracked is reordered rather than reset. Call it after qualify_project, using the `recommended` list it hands back, and if that response carried `questions`, put them to the maker before you plan: the order depends on the answers, and a plan written on an assumption is one they have to undo by hand. A plan costs nothing on any plan, so plan the whole run the product deserves rather than a short one sized to a guess about what the account can track.

  Paramètres, retour & exemple (4)

  Paramètres

  • items · array · requis
    In the order they should be submitted. First is next.
  • summary · string · optionnel
    Why this order, in a sentence or two. The maker reads this.
  • checklist · array · optionnel
    What the maker has to prepare before any of this can be submitted: the gallery, the demo video, a privacy policy page, a launch date. Write it from what the platforms in this plan actually demand and what the project is missing, not from a generic template. The maker ticks these off or throws them away on their dashboard, and anything they have already decided on keeps that decision when you plan again.
  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.

  Exemple d'appel

  {"name": "plan_submissions", "arguments": {"items": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• qualify_project≈ 1033 tokens

  Given a product, work out which platforms it qualifies for right now, which it could qualify for after supplying something (with the exact list of what is missing), and which are structurally out of reach. It also hands back `recommended`: the run in the order it should be worked, so the plan comes out of the directory rather than out of what you remember of the web. That order is decided by `goal` and `budget`, and when they have not been answered the response says what it assumed and carries the questions to put to the maker: ask them, call again with the answers, and store them with update_project so nobody asks twice. Needs no account: describe the product inline. Every field is optional and an unanswered field becomes a gap to fill rather than a rejection.

  Paramètres, retour & exemple (21)

  Paramètres

  • url · string · optionnel
  • docs · boolean · optionnel
  • goal · string · optionnel · already-live | launching-later
    What this run is for, which decides the order of it. `already-live` means the product is out and wants listings, links and traffic now, so the run leads on fast approvals, dofollow links and strong domains. `launching-later` means there is a launch date ahead, so it leads on the platforms with months of queue. Ask the maker rather than guessing: absent, it is inferred from `stage` and the response says so.
  • name · string · optionnel
  • stage · string · optionnel · idea | prelaunch | live | revenue
  • budget · string · optionnel · free-only | will-pay
    Whether platforms that charge to list may appear in the run. Absent means `free-only`, which is the assumption that cannot cost anybody anything. `freemium` platforms are in the run either way: their submission is free, and paying to skip their queue is a separate question at the form.
  • launchAt · string · optionnel
    ISO 8601 date the maker is launching on, when they have named one.
  • demoVideo · boolean · optionnel
  • categories · array · optionnel
    Every audience and form factor this product belongs to, not just the main one. A product is often several at once, and one missing tag is one directory it never hears about: a repository holding a browser extension and a web app is `extension` and `web`, and an open-source AI dev tool is `open-source`, `ai` and `dev`. Look at what the product actually ships before you answer: a manifest.json means `extension`, an ios or android target means `mobile`, a public repository means `open-source`, an mcp server is `mcp`, a workspace with several of those means all of them. Then answer what it is commercially, which is a separate question and the one most runs lose platforms on: most launch boards say what they take by who ships it, not by what it runs on, so a subscription mobile app is `mobile` and `saas`, anything a solo maker or small team shipped is `indie`, and something sold to companies is `b2b`. Leaving those off does not make the run safer, it makes it shorter. Tags: agent-skill, ai, b2b, christian, community, content, design, dev, directory, extension, free, hardware, indie, local, marketing, marketplace, mcp, mobile, no-code, open-source, prelaunch, productivity, saas, turkish-founders, web.
  • coverImage · boolean · optionnel
  • logoSquare · boolean · optionnel
  • openSignup · boolean · optionnel
  • publicRepo · boolean · optionnel
  • pricingPage · boolean · optionnel
  • domainRating · number · optionnel
  • pricingModel · string · optionnel · free | freemium | paid | lifetime
  • livePublicUrl · boolean · optionnel
  • privacyPolicy · boolean · optionnel
  • monthlyTraffic · number · optionnel
  • acceptsBacklink · boolean · optionnel
  • payingCustomers · boolean · optionnel

  Exemple d'appel

  {"name": "qualify_project", "arguments": {"url": "texte", "docs": true, "goal": "already-live", "name": "texte", "stage": "idea", "budget": "free-only"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• record_submission≈ 689 tokens

  Log what happened to the dashboard: the listing URL, when it was sent, when it goes live. Call it as soon as a submission lands, before you ask for the next brief, including when it is only queued for review, and including when you are not sure it landed: that is what `attempted` is for. The next brief on this project is refused until this call is made. A platform that needs the maker (a captcha, a login, a payment, a file, an address to confirm) is recorded as `planned` with a note saying what you need from them: that hands it back without claiming an outcome, and frees the run to carry on. If the live platform did not match what the brief said, put the difference in `differsFromRecord`. This costs nothing on any plan and no status costs more than another, so record what actually happened: the brief was what spent the tracked platform, and leaving the row wrong now only makes the run harder to follow.

  Paramètres, retour & exemple (8)

  Paramètres

  • note · string · optionnel
    Required with `planned`: what you need from the maker, in one line they can act on.
  • status · string · requis · planned | attempted | submitted | live | rejected | needs_changes
    Use `attempted` when the form was sent and you cannot prove it arrived: the tab died, the connection dropped, the page never came back. It is not a lesser `submitted`, it is the honest one, and it carries the verification the platform record describes so somebody can settle it later. Never re-send a form to find out; every platform has a way to check without submitting twice. Use `planned`, with a note, to hand a platform back to the maker when it is waiting on them. A first record is `submitted`, `attempted` or `planned`: `live`, `rejected` and `needs_changes` come after one of those.
  • launchAt · string · optionnel
    ISO 8601, if it is scheduled.
  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.
  • listingUrl · string · optionnel
    The product's URL on that platform.
  • submittedAt · string · optionnel
    ISO 8601.
  • platformSlug · string · requis
  • differsFromRecord · string · optionnel
    Only when the live platform did not match the brief or the platform record: say what differed, in one line, as fact. A price where the record said free, a sign-in or phone check it did not mention, a field it did not list, a submit page that moved, an audience it does not accept. We read these and fix the record, so the next maker is not sent into the same wall. Leave it out when everything matched.

  Exemple d'appel

  {"name": "record_submission", "arguments": {"status": "planned", "platformSlug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_platforms≈ 592 tokens

  Search the SubmitMap directory of startup launch platforms and directories. Filter by free-text query, category, pricing, link type, backlink requirement, approval speed or domain rating, and with a token leave out the ones this project has already been sent to. This is the tool behind "find me a small directory I can submit to right now": it is the whole directory, so answer from it rather than from what you remember of the web. Returns summaries; call get_platform for the full record including the submission steps.

  Paramètres, retour & exemple (12)

  Paramètres

  • sort · string · optionnel · approvalDays | domainRating
    Fastest approval first (the default), or strongest domain first. Either way, a platform that publishes no approval time comes last rather than reading as instant.
  • limit · number · optionnel
    Return at most this many. The count is unaffected.
  • query · string · optionnel
    Free text matched against name, tagline, domain, slug and categories. A bare domain works: "startupfa.me" finds Startup Fame.
  • pricing · string · optionnel · free | freemium | paid
  • category · string · optionnel
    e.g. "AI tools", "Dev tools", "Web apps".
  • dofollow · boolean · optionnel
    Only platforms giving a dofollow backlink.
  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.
  • excludeTracked · boolean · optionnel
    Leave out every platform this project has already been submitted to or planned for. Needs a token, and is what makes "one I have not done yet" answerable.
  • maxApprovalDays · number · optionnel
    Only platforms approving within this many days. Leaves out every platform that publishes no approval time, the same way a rating bound leaves out the unrated.
  • maxDomainRating · number · optionnel
    Only platforms up to this domain rating. The small, quick, unglamorous end of the directory, which is where a first submission usually belongs.
  • minDomainRating · number · optionnel
    Only platforms with at least this domain rating.
  • requiresBacklink · boolean · optionnel
    Filter on whether they demand a badge/link back.

  Exemple d'appel

  {"name": "search_platforms", "arguments": {"sort": "approvalDays", "limit": 1, "query": "texte", "pricing": "free", "category": "texte", "dofollow": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submission_playbook≈ 453 tokens

  Everything needed to submit a stored project to one platform, yourself, in the maker's browser: a preflight of what is still missing, the sign-in plan (on the first submission it carries a question for the maker: hand every login back to them, or use the Google address they write out, which you then pass back as signInAs), the pack values mapped onto the fields the form asks for, the steps, the gotchas, the agentGotchas (traps in the form itself), and the call to make afterwards. Read the preflight before opening a tab. One brief is out at a time per project: ask for the next platform only after record_submission has answered this one, because until then this tool refuses the next brief and names the one still open. Do not fetch briefs ahead or in parallel. This is the tool the free plan meters: it covers the same submissions the dashboard tracks, plus any platform the account has already sent to, and past that it says so and points at the upgrade rather than answering.

  Paramètres, retour & exemple (3)

  Paramètres

  • signInAs · string · optionnel
    The Google address the maker wrote out when they agreed you could sign in, or sign up, for them on this project, whether they said it when asked or before you started. Pass it on every call after they say it, so the answer travels with the work instead of living in your head. It belongs to one project: on a different one, ask again rather than sending the address you were given for the last. Leave it out if they have not written one: sign-in then goes back to them, which is the safe end.
  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.
  • platformSlug · string · requis

  Exemple d'appel

  {"name": "submission_playbook", "arguments": {"platformSlug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_project≈ 3487 tokens

  Fill in or correct a stored project. Facts and pack are merged into what is there, so you can add one field at a time as the maker answers.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · optionnel
  • name · string · optionnel
  • pack · object · optionnel
  • facts · object · optionnel
  • pitch · string · optionnel
  • projectId · string · optionnel
    Omit it when the account has one project, which is the free tier.

  Exemple d'appel

  {"name": "update_project", "arguments": {"url": "texte", "name": "texte", "pack": {}, "facts": {}, "pitch": "texte", "projectId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• whoami≈ 132 tokens

  Which SubmitMap account this token belongs to, named by its email address, which plan it is on, and what it already holds. Call it first if you are unsure whether the maker is connected, and tell them the address it reports: it is the only way either of you can tell one of their accounts from another. It does not hand you the plan's limits and you do not need them to work: plan the whole run, and a limit says so at the write it stops.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://submitmap.com/api/mcp