dev.tcgdata/tcgdata

Est-ce que dev.tcgdata/tcgdata est sûr ?

Au dernier audit MCP Hub, le serveur MCP « dev.tcgdata/tcgdata » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• batch_prices≈ 3538 tokens

  Read EUR prices for mixed-game tcg_ IDs in one request. Starter/Growth allow 100 supplied IDs, Scale 200, before deduplication. Preserve unavailable_ids separately from successful results. Never split or retry automatically. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (2)

  Paramètres

  • view · string · optionnel · compact | full
  • card_ids · array · requis

  Exemple d'appel

  {"name": "batch_prices", "arguments": {"card_ids": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_card≈ 3466 tokens

  Read stored variant metadata and pricing availability without requiring a fresh quote. Includes game fields and image paths. Use get_card_image to return the artwork as an MCP image block. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (2)

  Paramètres

  • view · string · optionnel · compact | full
  • card_id · string · requis
    Exact permanent price-variant ID returned by search_cards. Never invent IDs or use cat_/catv_ IDs here.

  Exemple d'appel

  {"name": "get_card", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_card_image≈ 1516 tokens

  Return verified WebP artwork as an MCP image block, with request metadata. Use the ID and query fields from images.small/large; catv_ source variants require their parent catalogue_card_id. Optional face selects a Magic face. Never pass an arbitrary image URL. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (4)

  Paramètres

  • face · integer · optionnel
    Zero-based Magic face index, only with tcg_ IDs; copy from the returned image path.
  • size · string · optionnel · small | large
  • card_id · string · requis
    Returned tcg_, cat_ or catv_ ID from an authenticated catalogue response.
  • catalogue_card_id · string · optionnel
    Required parent cat_ ID for a catv_ image; omit for other IDs.

  Exemple d'appel

  {"name": "get_card_image", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_card_prices≈ 3490 tokens

  Compatibility alias of get_prices. Read measured EUR prices for one exact variant, with observed_at and quote scope. Null is unknown, never zero. Product guides do not filter condition, language or edition. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (2)

  Paramètres

  • view · string · optionnel · compact | full
  • card_id · string · requis
    Exact permanent price-variant ID returned by search_cards. Never invent IDs or use cat_/catv_ IDs here.

  Exemple d'appel

  {"name": "get_card_prices", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_catalogue_card≈ 6034 tokens

  Read one Japanese source card, variants, provenance and explicit pricing references. Only use returned tcg_ price-variant IDs for price tools. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (2)

  Paramètres

  • view · string · optionnel · compact | full
  • catalogue_card_id · string · requis
    Price-independent Japanese catalogue card ID returned by search_catalogue_cards.

  Exemple d'appel

  {"name": "get_catalogue_card", "arguments": {"catalogue_card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_price_history≈ 2481 tokens

  Read daily EUR observations for an approved stored variant, independently of its current price. UTC window ends on to or today. Read coverage and preserve missing_dates; never interpolate. Use earlier to dates for older windows. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (3)

  Paramètres

  • to · string · optionnel
    Inclusive UTC end date, YYYY-MM-DD. Future dates are rejected by the API.
  • days · integer · optionnel
  • card_id · string · requis
    Exact permanent price-variant ID returned by search_cards. Never invent IDs or use cat_/catv_ IDs here.

  Exemple d'appel

  {"name": "get_price_history", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_prices≈ 3480 tokens

  Read measured EUR prices for one exact variant, with observed_at and quote scope. Null is unknown, never zero. Product guides do not filter condition, language or edition. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (2)

  Paramètres

  • view · string · optionnel · compact | full
  • card_id · string · requis
    Exact permanent price-variant ID returned by search_cards. Never invent IDs or use cat_/catv_ IDs here.

  Exemple d'appel

  {"name": "get_prices", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• get_usage≈ 3000 tokens

  Read account request usage and limits, shared across keys and games. This call counts itself and cannot bypass exhausted limits. Check request metadata on existing results first. Published-plan upgrade suggestions link to the owner's account page and activate after Stripe confirms payment. Custom access requires a separate agreement and manual activation. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_usage", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• list_catalogue_sets≈ 1513 tokens

  Search Japanese Pokémon source sets and paginate with the returned next_cursor. Returns catalogue set IDs to use with search_catalogue_cards. A set record is a catalogue membership, not proof of one physical printing. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (4)

  Paramètres

  • after · string · optionnel
    Copy next_cursor unchanged. Stop when next_cursor is null.
  • limit · integer · optionnel
  • query · string · optionnel
    Case-insensitive card name match; empty browses the catalogue.
  • release_status · string · optionnel · released | unreleased | unknown | all

  Exemple d'appel

  {"name": "list_catalogue_sets", "arguments": {"after": "texte", "limit": 1, "query": "texte", "release_status": "released"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• list_games≈ 260 tokens

  List the six supported game identifiers and catalogue languages. Static API capabilities, no API request or account usage.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_games", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"games": [], "requests_charged": 1}}

• search_cards≈ 3612 tokens

  Find variant candidates across six games, even without a current price. Returns stable tcg_ IDs, identifying fields, pricing availability and next_cursor. Use view=full to compare printed_number and finish_details. Preserve separate printings; choose an exact candidate before requesting prices. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (6)

  Paramètres

  • set · string · optionnel
    Exact set ID from a catalogue response.
  • game · string · requis · pokemon | pokemon_jp | magic | lorcana | onepiece | yugioh
  • view · string · optionnel · compact | full
  • after · string · optionnel
    Copy next_cursor unchanged. Stop when next_cursor is null.
  • limit · integer · optionnel
  • query · string · optionnel
    Case-insensitive card name match; empty browses the catalogue.

  Exemple d'appel

  {"name": "search_cards", "arguments": {"game": "pokemon"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

• search_catalogue_cards≈ 6177 tokens

  Search the price-independent Japanese Pokémon source catalogue, including cards with no price-variant match. cat_ identifies a source card; catv_ identifies a source variant. Use pricing.price_variants[].id (tcg_) for prices, never guess a bridge. One admitted API call consumes one shared account request, including admitted errors. No automatic retries.

  Paramètres, retour & exemple (6)

  Paramètres

  • set · string · optionnel
    Exact set ID from a catalogue response.
  • view · string · optionnel · compact | full
  • after · string · optionnel
    Copy next_cursor unchanged. Stop when next_cursor is null.
  • limit · integer · optionnel
  • query · string · optionnel
    Case-insensitive card name match; empty browses the catalogue.
  • release_status · string · optionnel · released | unreleased | unknown | all

  Exemple d'appel

  {"name": "search_catalogue_cards", "arguments": {"set": "texte", "view": "compact", "after": "texte", "limit": 1, "query": "texte", "release_status": "released"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api": "texte", "request": {}, "http_status": 1, "next_action": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://tcgdata.dev/mcp