eu.vokko/vokko

Est-ce que eu.vokko/vokko est sûr ?

Au dernier audit MCP Hub, le serveur MCP « eu.vokko/vokko » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• endpoint_health≈ 150 tokens

  Is this paid API up, and what does it charge right now? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    Absolute https URL, max 2048 characters. Port must be omitted or 443. Userinfo is rejected. Private, loopback, and literal IP hosts are refused.
  • method · string · optionnel · GET | POST
    HTTP method to probe. Omit or send empty to default to GET. Must be GET or POST.

  Exemple d'appel

  {"name": "endpoint_health", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_payable≈ 97 tokens

  Alphabetical hosts whose index row includes x402. Evidence only. Not a rank and not a payable proof.

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · optionnel
    Optional case-insensitive substring filter on the host domain. Omitted or empty matches every indexed x402 host. The result list is capped at 20.

  Exemple d'appel

  {"name": "find_payable", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_provider≈ 284 tokens

  Cheapest live x402 providers for a task. Placement is never sold. Unpaid calls return HTTP 402 at $0.005 USDC. Same resource URL as the REST route.

  Paramètres, retour & exemple (5)

  Paramètres

  • type · string · optionnel · http | mcp | any
    Provider transport filter. Omit or send empty to default to any. Must be http, mcp, or any.
  • limit · integer · optionnel
    Optional maximum number of results. Integer from 1 to 20. Omit to default to 10.
  • query · string · requis
    Search string. After trim: 1 to 200 characters. Whitespace is collapsed.
  • network · string · optionnel · eip155:8453
    CAIP-2 of the live settlement network. Omit or send empty to use the configured default. A non-empty value must equal the schema enum exactly.
  • maxPriceUsd · number · optionnel
    Optional numeric upper bound on a matched provider's advertised priceUsd. Must be finite and at least 0.

  Exemple d'appel

  {"name": "find_provider", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_changes≈ 194 tokens

  Newest-first drift. Anonymous: last 5 summaries. Subscriber for that origin: full history.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Optional result cap. Anonymous callers always get the last 5 summaries. A subscriber for that origin: default 20, minimum 1, maximum 50. Only a number is forwarded; other types are ignored.
  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.

  Exemple d'appel

  {"name": "list_changes", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• lookup_host≈ 163 tokens

  Cached host report. Free. Does not 402. Body includes cache.presenceStale, cache.callabilityStale, and refresh (payable live re-probe: priceUsd, network, rest.url, mcp.tool refresh_host). Does not re-probe.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.

  Exemple d'appel

  {"name": "lookup_host", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• participation_check≈ 129 tokens

  Cached participation status and evidence. Not a legal finding.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.

  Exemple d'appel

  {"name": "participation_check", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pay_preflight≈ 193 tokens

  Can an agent pay at this host? Rails, endpoint, price, freshness. Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.
  • intent · string · optionnel · checkout | api | any
    Payment intent filter. Omit or send empty to default to any. Must be checkout, api, or any.

  Exemple d'appel

  {"name": "pay_preflight", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payto_check≈ 230 tokens

  Does this payTo address belong to the domain? Evidence, not a guarantee. Unpaid calls return HTTP 402 at $0.002 USDC. Same resource URL as the REST route.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.
  • address · string · requis
    0x-prefixed 40-hex-character EVM address.
  • network · string · optionnel · eip155:8453
    CAIP-2 of the live settlement network. Omit or send empty to use the configured default. A non-empty value must equal the schema enum exactly.

  Exemple d'appel

  {"name": "payto_check", "arguments": {"domain": "texte", "address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• refresh_host≈ 163 tokens

  Paid live re-probe named by lookup_host refresh.rest. Unpaid calls return HTTP 402 with x402Version and accepts. Price matches refresh.priceUsd ($0.02 USDC on Base by default). Vokko never pays the target.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.

  Exemple d'appel

  {"name": "refresh_host", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• refresh_host_protocol≈ 208 tokens

  Paid live probe of one protocol. Args domain, protocol (ucp, mcp, a2a, x402, and the other detector ids). Unpaid calls return HTTP 402 at $0.005 USDC on Base. Full-host refresh_host stays $0.02.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Public hostname without a scheme. A scheme, port, path, and leading www. are stripped if present. After normalize: two or more DNS labels, each [a-z0-9] with optional interior hyphens (max 63 chars), total length at most 253. Empty input, literal IPs, and bare labels are rejected.
  • protocol · string · requis
    Detector id, trimmed and lowercased. Must be one of ucp, acp, ap2, tap, mcp, a2a, x402, mpp, llms, ai-plugin, openapi.

  Exemple d'appel

  {"name": "refresh_host_protocol", "arguments": {"domain": "texte", "protocol": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• refresh_hosts_batch≈ 224 tokens

  Paid live re-probe of up to 10 hosts. Args domains (string array) and mode "full". Unpaid calls return one HTTP 402. Price is $0.01 + $0.002 × N USDC on Base.

  Paramètres, retour & exemple (2)

  Paramètres

  • mode · string · requis
    Must be the literal "full".
  • domains · array · requis
    Hostnames to re-probe. Length 1 to 10. Each item is normalized like domain; duplicates collapse after normalize. Empty after normalize is rejected.

  Exemple d'appel

  {"name": "refresh_hosts_batch", "arguments": {"mode": "texte", "domains": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_receipt≈ 340 tokens

  Did this USDC transfer settle to the expected address and amount? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.

  Paramètres, retour & exemple (7)

  Paramètres

  • tx · string · optionnel
    Alias of txHash. Same 0x-prefixed 64-hex format. If both are sent they must match case-insensitively.
  • asset · string · optionnel
    USDC (case-insensitive) or the USDC contract address for the selected network. Omit to default to USDC.
  • payTo · string · requis
    Expected recipient. 0x-prefixed 40-hex-character EVM address.
  • amount · string · optionnel
    Atomic USDC amount: 1 to 30 digits, no leading zeros. Exactly one of amount or amountUsd is required.
  • txHash · string · optionnel
    0x-prefixed 64-hex-character transaction hash. Required by the validator (tx is an accepted alias).
  • network · string · optionnel · eip155:8453
    CAIP-2 of the live settlement network. Omit or send empty to use the configured default. A non-empty value must equal the schema enum exactly.
  • amountUsd · string · optionnel
    Decimal USDC amount: up to 12 digits before the point and up to 6 after. Exactly one of amount or amountUsd is required.

  Exemple d'appel

  {"name": "verify_receipt", "arguments": {"payTo": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.vokko.eu/api/v1/mcp