com.zinvyl/marketplace

Est-ce que com.zinvyl/marketplace est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.zinvyl/marketplace » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• acknowledge_purchase_offer≈ 653 tokens

  Records that an operator-controlled agent actually received and retained one exact offer and registered a durable return method. This creates no order, grants no authority, stores no callback URL, and never proves payment.

  Paramètres, retour & exemple (11)

  Paramètres

  • currency · string · optionnel
  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
  • approval_mode · string · requis · delegated | human_approval_required
  • maximum_amount · integer · optionnel
  • stable_agent_id · string · requis
    Stable agent or installation identifier. Zinvyl binds a salted one-way commitment to the continuation and never stores this value raw.
  • allowed_offer_ids · array · optionnel
  • acquisition_source · string · optionnel · direct | direct_agent | mcp_registry | a2a_registry | ai_agents_directory | toku | gohirehumans | toll_bench
  • continuation_token · string · requis
  • continuation_method · string · requis · mcp_same_session | mcp_poll | operator_webhook | email_handoff | deep_link
  • offer_received_and_stored · boolean · requis
  • operator_linked_confirmed · boolean · requis

  Exemple d'appel

  {"name": "acknowledge_purchase_offer", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1", "approval_mode": "delegated", "stable_agent_id": "texte", "continuation_token": "texte", "continuation_method": "mcp_same_session", "offer_received_and_stored": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• buy_matching_service≈ 1114 tokens

  One-call path for a buyer agent that has explicit delegated authority for a stated allowlist of exact Zinvyl offers. Zinvyl matches one sanitized outcome and creates a bounded purchase intent only when the matched offer is allowlisted and its exact fee fits the delegated ceiling. A catalog gap or authority mismatch creates no order or payment claim.

  Paramètres, retour & exemple (4)

  Paramètres

  • buyer · object · requis
  • task_summary · string · requis
    One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or production secrets.
  • purchase_authority · object · requis
  • safe_scope_confirmed · boolean · requis

  Exemple d'appel

  {"name": "buy_matching_service", "arguments": {"buyer": {}, "task_summary": "texte", "purchase_authority": {}, "safe_scope_confirmed": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• buy_service≈ 1060 tokens

  Five-field, retry-safe agent purchase path. Creates one bounded intent only when delegated authority covers the exact fee. Reusing buyer.request_id for an unchanged purchase returns the same intent. Adaptively selects Stripe-hosted checkout by default while preserving explicit delegated-card and MPP routes, and never claims payment before ledger verification.

  Paramètres, retour & exemple (5)

  Paramètres

  • buyer · object · requis
  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
  • task_summary · string · requis
    One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or production secrets.
  • purchase_authority · object · requis
  • safe_scope_confirmed · boolean · requis

  Exemple d'appel

  {"name": "buy_service", "arguments": {"buyer": {}, "offer_id": "zinvyl.venture.evidence-brief.v1", "task_summary": "texte", "purchase_authority": {}, "safe_scope_confirmed": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_purchase_intent≈ 617 tokens

  Compatibility alias for existing clients; new integrations should use buy_service. Use only after selecting one offer when the calling agent has explicit delegated authority for that exact fixed fee. Creates the governed purchase intent and quote, then returns adaptive Stripe-hosted checkout by default. It does not itself claim payment or start work.

  Paramètres, retour & exemple (7)

  Paramètres

  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Exact published offer ID returned by find_service or list_offers.
  • task_summary · string · requis
    Sanitized, bounded task summary. Never include credentials, tokens, payment data, personal data, confidential files, or production secrets.
  • terms_accepted · boolean · requis
    True only when the authorized buyer has accepted Zinvyl terms version 2026-10-13.1.
  • buyer_organization · string · requis
    Legal or operating name of the buying organization.
  • buyer_contact_email · string · requis
    Email for the authorized purchasing contact and order communications.
  • bounded_scope_confirmed · boolean · requis
    True only when the buyer controls the inputs and this sanitized request is non-production and contains no secrets.
  • delegated_purchase_authority_confirmed · boolean · requis
    True only when the agent is acting within explicit delegated authority for this exact offer and published amount.

  Exemple d'appel

  {"name": "create_purchase_intent", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1", "task_summary": "texte", "terms_accepted": true, "buyer_organization": "texte", "buyer_contact_email": "texte", "bounded_scope_confirmed": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_service≈ 802 tokens

  Optional demand-feedback route. Describe one authorized sanitized business need once. Zinvyl returns the best fixed-scope offer and next purchase action, or records an unsupported need as privacy-minimized product telemetry. For read-only matching, start with qualify_task.

  Paramètres, retour & exemple (11)

  Paramètres

  • source · string · optionnel · direct | direct_agent | mcp_registry | a2a_registry | ai_agents_directory | toku | gohirehumans | toll_bench
    Optional allowlisted source where the agent discovered Zinvyl.
  • industry · string · optionnel
    Optional broad industry only; do not name a person or confidential project.
  • budget_cents · integer · optionnel
    Optional buyer-stated total budget in USD cents. This is demand telemetry, not spending authority or proof of funds.
  • category_hint · string · optionnel · funding_finance | marketing_growth | data_research | security_compliance | content_design | operations_admin | logistics_supply_chain | software_build
  • agent_tool_type · string · optionnel · mcp_client | a2a_agent | marketplace_agent | human_assisted_agent | unknown
  • request_summary · string · requis
    One sanitized business outcome. Do not include names, email addresses, phone numbers, credentials, payment data, personal data, confidential text, or production secrets.
  • turnaround_days · integer · optionnel
    Optional requested turnaround in calendar days.
  • requested_output · string · optionnel
    Optional sanitized deliverable type, such as weekly report or data export.
  • authorized_to_share · boolean · requis
    True only when the requester is authorized to share this sanitized need with Zinvyl for matching and aggregate product planning.
  • near_match_offer_id · string · optionnel · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Optional closest offer; it does not place unsupported work in scope.
  • contains_no_personal_data_or_secrets · boolean · requis
    True only after removing personal data, credentials, confidential material, and payment data.

  Exemple d'appel

  {"name": "find_service", "arguments": {"request_summary": "texte", "authorized_to_share": true, "contains_no_personal_data_or_secrets": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_acceptance_tests≈ 288 tokens

  Use after qualify_task or list_offers identifies an offer and detailed scope review is useful. Returns the exact delivery acceptance tests, exclusions, and evidence boundaries that limit what Zinvyl may claim for that offer.

  Paramètres, retour & exemple (1)

  Paramètres

  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Exact published offer ID returned by qualify_task or list_offers, including zinvyl.freight.workflow-audit.v1, zinvyl.freight.full-workflow-audit.v1, zinvyl.api.failure-triage.v1, and zinvyl.api.workflow-failure-rescue.v1.

  Exemple d'appel

  {"name": "get_acceptance_tests", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_purchase_requirements≈ 250 tokens

  Use after selecting an offer. Returns the exact price, five-field buy_service contract, delegated-authority requirements, machine-payment route, capacity limits, and authoritative funding rule without creating an intent.

  Paramètres, retour & exemple (1)

  Paramètres

  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Exact published offer ID returned by list_offers or qualify_task.

  Exemple d'appel

  {"name": "get_purchase_requirements", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_offers≈ 142 tokens

  Use when comparing Zinvyl's full eight-offer catalog. For a single sanitized need, start with read-only qualify_task. Returns price, delivery window, required inputs, exclusions, and direct intake URL; use get_acceptance_tests only after selecting an offer.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_offers", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• match_or_capture_demand≈ 821 tokens

  Compatibility alias for existing clients; new integrations should use qualify_task first and find_service only after consent. Returns an existing fixed offer when one matches. Otherwise records privacy-minimized product-demand telemetry for owner review; it creates no order, quote, outreach, funding claim, or delivery commitment.

  Paramètres, retour & exemple (11)

  Paramètres

  • source · string · optionnel · direct | direct_agent | mcp_registry | a2a_registry | ai_agents_directory | toku | gohirehumans | toll_bench
    Optional allowlisted source where the agent discovered Zinvyl.
  • industry · string · optionnel
    Optional broad industry only; do not name a person or confidential project.
  • budget_cents · integer · optionnel
    Optional buyer-stated total budget in USD cents. This is demand telemetry, not spending authority or proof of funds.
  • category_hint · string · optionnel · funding_finance | marketing_growth | data_research | security_compliance | content_design | operations_admin | logistics_supply_chain | software_build
  • agent_tool_type · string · optionnel · mcp_client | a2a_agent | marketplace_agent | human_assisted_agent | unknown
  • request_summary · string · requis
    One sanitized business outcome. Do not include names, email addresses, phone numbers, credentials, payment data, personal data, confidential text, or production secrets.
  • turnaround_days · integer · optionnel
    Optional requested turnaround in calendar days.
  • requested_output · string · optionnel
    Optional sanitized deliverable type, such as weekly report or data export.
  • authorized_to_share · boolean · requis
    True only when the requester is authorized to share this sanitized need with Zinvyl for matching and aggregate product planning.
  • near_match_offer_id · string · optionnel · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Optional closest offer; it does not place unsupported work in scope.
  • contains_no_personal_data_or_secrets · boolean · requis
    True only after removing personal data, credentials, confidential material, and payment data.

  Exemple d'appel

  {"name": "match_or_capture_demand", "arguments": {"request_summary": "texte", "authorized_to_share": true, "contains_no_personal_data_or_secrets": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• preflight_agent_purchase≈ 1068 tokens

  Read-only transaction check. Verifies product match, credential, signed mandate when supplied or required, exact offer allowlist, price ceiling, current terms, sanitized scope, capacity, and payment-route readiness. It creates no intent, checkout, charge, order, or telemetry event.

  Paramètres, retour & exemple (4)

  Paramètres

  • buyer · object · requis
  • task_summary · string · requis
    One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or production secrets.
  • purchase_authority · object · requis
  • safe_scope_confirmed · boolean · requis

  Exemple d'appel

  {"name": "preflight_agent_purchase", "arguments": {"buyer": {}, "task_summary": "texte", "purchase_authority": {}, "safe_scope_confirmed": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• prepare_purchase_route≈ 386 tokens

  Compatibility inspection alias for existing clients; new integrations should use get_purchase_requirements and buy_service. Use only after selecting an offer and confirming explicit purchasing authority. Returns the purchase-intent schema and payment-route API endpoint; it does not create, fund, verify, or start an order.

  Paramètres, retour & exemple (2)

  Paramètres

  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
    Exact published offer ID returned by qualify_task or list_offers, including zinvyl.freight.workflow-audit.v1, zinvyl.freight.full-workflow-audit.v1, zinvyl.api.failure-triage.v1, and zinvyl.api.workflow-failure-rescue.v1.
  • human_authorized_to_fund · boolean · requis
    True only when an authorized representative approved the request or an authorized purchasing agent is acting within explicit delegated authority for this offer, amount, and material limits.

  Exemple d'appel

  {"name": "prepare_purchase_route", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1", "human_authorized_to_fund": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• qualify_task≈ 181 tokens

  Use when a buyer's sanitized problem is not yet mapped to an offer. Returns one fixed offer ID, a broader-service route, or a scope-reduction decision; it performs no diagnosis and creates no order.

  Paramètres, retour & exemple (1)

  Paramètres

  • summary · string · requis
    Sanitized expected-versus-actual outcome. Do not include credentials, tokens, personal data, or production secrets.

  Exemple d'appel

  {"name": "qualify_task", "arguments": {"summary": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• recover_abandoned_purchase≈ 1074 tokens

  Recovers the original transaction for the same authenticated buyer, signed mandate, request ID, offer, sanitized scope, amount, currency, and current terms. Before funding it resumes an expired reservation; after verified funding it safely reissues scoped order access without charging again.

  Paramètres, retour & exemple (6)

  Paramètres

  • buyer · object · requis
  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
  • task_summary · string · requis
    One sanitized bounded outcome. Never include credentials, tokens, payment data, personal data, confidential files, or production secrets.
  • previous_intent_id · string · requis
  • purchase_authority · object · requis
  • safe_scope_confirmed · boolean · requis

  Exemple d'appel

  {"name": "recover_abandoned_purchase", "arguments": {"buyer": {}, "offer_id": "zinvyl.venture.evidence-brief.v1", "task_summary": "texte", "previous_intent_id": "texte", "purchase_authority": {}, "safe_scope_confirmed": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resume_agent_purchase≈ 324 tokens

  Read-only durable continuation. Returns the exact observed stop and next executable action for a previously returned opaque continuation token. It creates no purchase, checkout, charge, or order.

  Paramètres, retour & exemple (3)

  Paramètres

  • offer_id · string · requis · zinvyl.venture.evidence-brief.v1 | zinvyl.venture.prototype-scope.v1 | zinvyl.freight.workflow-audit.v1 | zinvyl.api.workflow-failure-rescue.v1 | zinvyl.api.failure-triage.v1 | zinvyl.api.workflow-reliability-care.v1 | zinvyl.freight.full-workflow-audit.v1 | zinvyl.content.ai-marketing-pilot.v1
  • acquisition_source · string · optionnel · direct | direct_agent | mcp_registry | a2a_registry | ai_agents_directory | toku | gohirehumans | toll_bench
  • continuation_token · string · requis

  Exemple d'appel

  {"name": "resume_agent_purchase", "arguments": {"offer_id": "zinvyl.venture.evidence-brief.v1", "continuation_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://zinvyl.com/marketplace/agent-mcp