io.github.epistemedeus/x402-data-gateway

Est-ce que io.github.epistemedeus/x402-data-gateway est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.epistemedeus/x402-data-gateway » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 29 outils

• agent_discoverability_audit≈ 731 tokens

  Measure one service's brand-blind rank, source-family coverage, expected-route presence, canonical-vs-alias listing identity, duplicate records, competitors, and exact-price drift across ten public machine-service discovery views. Supply `runtimeUrl` with an exact GET route to derive the comparison price from one coherent live unsigned x402 or MPP offer; otherwise `expectedPriceUsd` remains caller-supplied. Set `surfaceAudit` to check the target's public Agent Card, ERC-8004 registration document, and action catalog. Set `materializationAudit` with an exact GET or POST route to distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization. Catalog queries use no credentials or payments. Results are point-in-time provider and catalog evidence, not demand, seller trust, settlement, or future-rank proof. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/distribution/agent-discoverability-audit, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (9)

  Paramètres

  • payTo · string · optionnel
    Optional EVM payTo for alias matching
  • route · string · optionnel
    Optional expected exact path
  • intent · string · requis
    Brand-blind capability description
  • method · string · optionnel · GET | POST
    Exact route method for the optional Coinbase materialization audit. Defaults to GET; runtimeUrl is GET-only.
  • origin · string · requis
    Public HTTPS service origin
  • runtimeUrl · string · optionnel
    Optional exact same-origin HTTPS GET URL whose unpaid x402 or MPP offer supplies the runtime price reference. Requires route and an exactly matching pathname.
  • surfaceAudit · boolean · optionnel
    When true, inspect the target's public Agent Card, ERC-8004 registration document, and action catalog for the expected route through bounded same-origin fetches.
  • expectedPriceUsd · ? · optionnel
    Optional exact route price expected by the caller. A coherent runtimeUrl offer takes precedence and caller drift is reported.
  • materializationAudit · boolean · optionnel
    When true with route and method, distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization.

  Exemple d'appel

  {"name": "agent_discoverability_audit", "arguments": {"intent": "texte", "origin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• agent_surface_budget_audit≈ 2002 tokens

  Measure one public service's credential-free MCP tools/list, OpenAPI, or both declared discovery surfaces before any tool call or target payment. Use `agent_discoverability_audit` for catalog reach and rank, `seller_integrity_audit` for one exact operation's response contract, or this tool for byte budgets, heaviest definitions, missing selection contracts, and progressive-discovery fixes. Unselected surfaces are not fetched or judged. It follows no redirect, calls no target tool, sends no credential or target payment, and returns no target schema, response body, or session identifier. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/distribution/agent-surface-budget-audit, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (6)

  Paramètres

  • origin · string · requis
    Credential-free public HTTPS service origin on port 443, with no path or query.
  • mcpPath · string · optionnel
    Exact root-relative MCP streamable-HTTP path.
  • openApiPath · string · optionnel
    Exact root-relative OpenAPI JSON path.
  • surfaceMode · string · optionnel · mcp | openapi | both
    Audit MCP only, OpenAPI only, or both. Unselected surfaces are not fetched or judged.
  • mcpBudgetBytes · integer · optionnel
    Maximum preferred raw MCP tools/list response size in bytes.
  • openApiBudgetBytes · integer · optionnel
    Maximum preferred raw OpenAPI document size in bytes.

  Exemple d'appel

  {"name": "agent_surface_budget_audit", "arguments": {"origin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "mcp": "texte", "actions": [], "openapi": "texte", "product": "texte", "request": {}, "version": "texte", "boundary": {}, "decision": "within_budget", "checkedAt": "texte"}}

• careers_board≈ 481 tokens

  Read one configured public careers board and return title, location or null, posting URL, source, fetchedAt, and explicit coverage. Use `careers_board_cold` for the acquired free recipe. Partial, missing, duplicate, listed, empty, and changed stay explicit. A source failure is unavailable and is not an empty board. Price is $0.005 USDC. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/data/careers-board, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • board · string · requis
    Named board id or alias. Initial reference ids are acxiom and liveramp.
  • company · string · optionnel
    Optional alias. When board is also set, both must resolve to the same id.

  Exemple d'appel

  {"name": "careers_board", "arguments": {"board": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "rows": [], "board": "texte", "source": {}, "charged": true, "outcome": "texte", "product": "texte", "coverage": {}, "fetchedAt": "texte", "roleFilter": "texte"}}

• careers_board_cold≈ 119 tokens

  Return the acquired cold careers-board recipe and its public tests. This tool is free: charged is false, it does not fetch a live board, and it does not accept payment. Use `careers_board` when you need one named-board observation. Direct free execution remains available.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "careers_board_cold", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• contract_qualified_search≈ 1524 tokens

  Search Agent402 and the official MPP catalog for paid machine services that both match a capability intent and guarantee buyer-required JSON response paths. Use `agent_discoverability_audit` when you are measuring one known seller's catalog reach or rank, `seller_integrity_audit` when you already know the exact seller route to inspect, or `payment_offer_preflight` when you already have one exact callable GET URL. This search excludes SameDayDesk-owned supply and unresolved routes before audit, uses no credential or wallet, sends no seller POST or target payment, reads no paid response body, and returns only a query digest. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/commerce/contract-qualified-search, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · integer · optionnel
    Maximum candidates audited and returned across Agent402 and MPP.
  • query · string · requis
    Capability intent sent to Agent402 and used locally to rank MPP catalog metadata. Do not include credentials or private values.
  • requiredPaths · array · requis
    Buyer-required dotted success-response paths that every returned seller schema must guarantee recursively.
  • maxPriceDisplayUnits · number · optionnel
    Maximum advertised per-call price in each source's display currency.

  Exemple d'appel

  {"name": "contract_qualified_search", "arguments": {"query": "texte", "requiredPaths": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "product": "texte", "request": {}, "sources": {}, "version": "texte", "boundary": {}, "decision": "qualified_candidates_found", "rejected": [], "checkedAt": "texte", "qualified": []}}

• deep_audit≈ 345 tokens

  Run one read-only AI-search-readiness audit for a public business domain: company, technology, contact, and DNS/email evidence from `enrich`, plus the live structured-data gap analysis and paste-ready JSON-LD template from `schemaforge`. Use `enrich` for company facts only or `schemaforge` for structured-data remediation only. The template contains placeholders for real data; the score is diagnostic, no site changes are made, and it does not guarantee AI citations. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/deep-audit, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (3)

  Paramètres

  • city · string · optionnel
    Optional city the business serves; used only to contextualize the generated structured-data template.
  • domain · string · requis
    Public business domain or URL. The hostname is normalized and the audit starts at its HTTPS homepage; any supplied path or query is ignored.
  • vertical · string · optionnel
    Optional structured-data template profile. med-spas is currently specialized; unsupported values fall back to it.

  Exemple d'appel

  {"name": "deep_audit", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• enrich≈ 225 tokens

  Inspect a public company domain and return structured identity, technology, social, contact, DNS, email-infrastructure, and AI-readiness evidence. Use `schemaforge` instead for a paste-ready JSON-LD template and remediation diff, or `deep_audit` when both outputs are required together. Public data only; this tool makes no site changes. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/enrich, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Public company domain or URL, for example stripe.com. Use enrich for company evidence; use wallet_enrich for an EVM address.

  Exemple d'appel

  {"name": "enrich", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• extract≈ 1045 tokens

  Fetch a public HTTP(S) page and return compact extraction signals for programmatic inspection: title, meta description, Open Graph/Twitter metadata, JSON-LD, headings, links, text excerpt, and AI-readiness flags. Use `read` instead when you need the page body as LLM-ready Markdown rather than metadata or a link inventory. Does not execute JavaScript; follows redirects and applies SSRF, timeout, and response-size guards. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/extract, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    Public HTTP(S) URL. Choose extract for metadata, JSON-LD, headings, links, and a bounded text excerpt; use read for longer bounded Markdown. Content is fetched without JavaScript rendering. Check status/sourceOk/error/capture; ok means a typed extract record, not source completeness.
  • textExcerptLimitChars · integer · optionnel
    Optional excerpt budget. Default 1200. Maximum 40000. Rejected before fetch. Does not purchase /read or change the price.

  Exemple d'appel

  {"name": "extract", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "url": "texte", "lang": "texte", "text": "texte", "error": "texte", "links": [], "title": "texte", "jsonLd": [], "status": 1, "capture": {}, "twitter": {}, "finalUrl": "texte"}}

• extract_batch≈ 924 tokens

  Fetch one to five public HTTPS URLs and return bounded structured fields for each source in one paid attempt. Supply `urls` as a JSON array and optional unique `fields`. Use `extract` for a single URL when you do not need batch accounting. Charge is one flat introductory 0.01 USDC quote for the bounded attempt, not a guarantee that every URL succeeds. Automatic retries are disabled; unknown outcomes must not be re-paid automatically. Payment challenge and credentials are bound to POST https://agents.samedaydesk.com/extract/batch, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (3)

  Paramètres

  • urls · array · requis
    One to five public HTTPS URLs as a JSON array. Charge is one flat introductory attempt, not per-URL success.
  • fields · array · optionnel
    Optional unique bounded subset of structured extraction fields.
  • textExcerptLimitChars · integer · optionnel
    Optional per-item excerpt budget. Omitted requests keep 1200. A value that cannot fit the batch response ceiling is rejected before fetch. Does not change the price.

  Exemple d'appel

  {"name": "extract_batch", "arguments": {"urls": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "error": "texte", "jobId": "texte", "quote": {}, "charged": true, "partial": true, "product": "texte", "sources": [], "boundary": {}, "jobStatus": "running", "accounting": {}, "costInputs": {}}}

• lockfile_pin_delta≈ 715 tokens

  Inspect two caller-supplied npm package-lock.json objects and return added, removed, and changed name+version+integrity+resolved pins. Supply JSON `before` and `after` lockfile objects, not filesystem paths, URLs, or commands. An identical pin set is informational, not a failure. HTML, package.json, and unsupported lockfileVersion values are refused before payment. This is not an npm install, audit, or purchase. Ordinary wallets sign through examples/customer-x402 (inspect, explicit approve, attempt-receipt, read-only reconcile), not a precomputed signature. Initial live release accepts x402 only. Payment challenge and credentials are bound to POST https://agents.samedaydesk.com/lockfile-pin-delta, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • after · object · requis
    npm package-lock.json object (lockfileVersion 2 or 3). Not a filesystem path, URL, or command.
  • before · object · requis
    npm package-lock.json object (lockfileVersion 2 or 3). Not a filesystem path, URL, or command.

  Exemple d'appel

  {"name": "lockfile_pin_delta", "arguments": {"after": {}, "before": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "error": "texte", "quote": {}, "digest": "texte", "engine": "texte", "limits": {}, "charged": true, "product": "texte", "analysis": "actionable", "boundary": {}, "markdown": "texte", "transport": "ok"}}

• morpho_market_underwrite≈ 268 tokens

  Underwrite one Base Morpho market with independent GraphQL, REST, and direct-RPC evidence for configuration integrity, liquidity, utilization, concentration, borrower health bands, recent history, bad debt, and PreLiquidation availability. Use `morpho_position` or `morpho_protection` for one borrower's current position or protection plan, and `morpho_preliquidation_replay` for the economics of one completed historical event. Read-only evidence with explicit disagreements; no opaque risk score or transaction action. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/defi/morpho-market-underwrite, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • marketId · string · requis
    Morpho market ID on Base mainnet

  Exemple d'appel

  {"name": "morpho_market_underwrite", "arguments": {"marketId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• morpho_position≈ 297 tokens

  Inspect one Base borrower across Morpho markets and return position balances, LTV, health factor, liquidation headroom, direct-RPC verification, and caller-selected collateral-price stress scenarios. Use `morpho_protection` when you need exact repay or add-collateral amounts and unsigned transaction templates, `morpho_market_underwrite` for market-wide risk, or `morpho_preliquidation_replay` for one completed historical event. Read-only; no wallet, signing, broadcast, or custody. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/defi/morpho-position, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • shocks · array · optionnel
    Collateral price shocks in percent
  • address · string · requis
    Borrower EVM address on Base mainnet

  Exemple d'appel

  {"name": "morpho_position", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• morpho_preliquidation_replay≈ 1316 tokens

  Reconstruct one successful Base Morpho PreLiquidation transaction from its receipt and the exact block state, returning repaid and seized assets, protocol-oracle valuation, gross incentive, configured health window, and transaction gas before off-chain costs. Use `morpho_market_underwrite` for current market risk, `morpho_position` for a current borrower, or `morpho_protection` for a future protection plan. Historical read-only evidence; no transaction simulation, wallet, signing, or broadcast. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/defi/morpho-preliquidation-replay, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • transactionHash · string · requis
    Successful Base transaction containing a Morpho PreLiquidate event

  Exemple d'appel

  {"name": "morpho_preliquidation_replay", "arguments": {"transactionHash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "chain": {}, "events": [], "product": "texte", "version": "texte", "boundary": "texte", "eventCount": 1, "transaction": {}, "verification": {}}}

• morpho_protection≈ 1910 tokens

  Calculate two alternative protection plans for one Base Morpho borrower under a selected collateral-price shock and target health factor: partial repayment or added collateral. Each plan includes the bounded asset amount, expected stressed health factor, evidence basis, and unsigned ERC-20 approval plus Morpho call templates. Use `morpho_position` for diagnosis without an action plan, `morpho_market_underwrite` for market-wide risk, or `morpho_preliquidation_replay` for a completed historical event. Read-only; no wallet, signing, broadcast, or custody. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/defi/morpho-protection, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (4)

  Paramètres

  • address · string · requis
    Borrower EVM address on Base mainnet.
  • executionBufferBps · integer · optionnel
    Additional repayment or collateral amount buffer in basis points for debt accrual and integer rounding; 25 means 0.25%.
  • targetHealthFactor · number · optionnel
    Target Morpho health factor after the selected collateral-price shock; must be greater than 1 and at most 5.
  • protectAgainstShockPct · number · optionnel
    Collateral-price shock percentage to withstand, from -99 through 0; for example -10 models a 10% price decline.

  Exemple d'appel

  {"name": "morpho_protection", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "chain": {}, "inputs": {}, "quotes": [], "source": {}, "address": "texte", "product": "texte", "version": "texte", "boundary": "texte", "fetchedAt": "texte", "invariants": {}, "positionCount": 1}}

• opportunity_preflight≈ 1778 tokens

  Agent work opportunity -> deterministic attempt, verify-first, or abandon preflight using caller-supplied cost and selection assumptions plus dated platform evidence. Returns break-even probability, expected surplus, hard gates, and source-linked evidence. No claim, bid, payment, or submission. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/work/opportunity-preflight, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (13)

  Paramètres

  • hours · number · requis
    Estimated human and agent work time in hours for one complete attempt.
  • slots · integer · optionnel
    Number of independently paid winner or worker slots.
  • platform · string · optionnel
    Optional platform slug used to attach dated platform-health evidence when a matching card exists.
  • rewardUsd · number · requis
    Maximum gross reward in USD if the opportunity is selected and paid.
  • acceptance · string · optionnel · deterministic | machine_scored | timed_review | discretionary | unknown
    How completion is accepted: deterministic proof, machine score, review deadline, discretionary judgment, or unknown.
  • computeUsd · number · optionnel
    Expected model, API, hosting, and compute spend in USD for one attempt.
  • settlement · string · optionnel · direct | escrow | platform_balance | discretionary | unfunded | unknown
    How the reward is funded and paid: direct, escrow, platform balance, discretionary, unfunded, or unknown.
  • agentAccess · string · optionnel · agent_allowed | agent_only | mixed | human_only | unknown
    Whether the platform explicitly allows agent participation, is agent-only, mixes agents and humans, is human-only, or remains unknown.
  • competition · integer · optionnel
    Known number of competing submissions or workers; use 0 when unknown.
  • hourlyCostUsd · number · requis
    Internal opportunity cost per hour in USD.
  • reusableValueUsd · number · optionnel
    Conservative USD value of reusable code, research, distribution, or other assets created by the attempt.
  • mandatorySpendUsd · number · optionnel
    Non-recoverable cash spend in USD required before the opportunity can settle.
  • selectionProbabilityPct · number · optionnel
    Caller-supplied probability, from 0 to 100, of receiving the reward; omit to receive a verify-first decision.

  Exemple d'appel

  {"name": "opportunity_preflight", "arguments": {"hours": 1, "rewardUsd": 1, "hourlyCostUsd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "gates": {}, "input": {}, "product": "texte", "version": "texte", "boundary": "texte", "decision": "attempt", "economics": {}, "platformEvidence": "texte"}}

• page_change≈ 235 tokens

  Compare two already-held extract-batch JSON artifacts on caller-named fields. This tool is free: charged is false, it does not fetch, and it does not accept payment. Use extract_batch when you still need a paid observation. Do not add a second paid diff.

  Paramètres, retour & exemple (3)

  Paramètres

  • after · object · requis
    Already delivered batch JSON object. Not a URL or filesystem path.
  • before · object · requis
    Already delivered batch JSON object. Not a URL or filesystem path.
  • fields · array · requis
    Explicit field names to compare.

  Exemple d'appel

  {"name": "page_change", "arguments": {"after": {}, "before": {}, "fields": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payment_offer_preflight≈ 2041 tokens

  Compare x402 and MPP payment challenges, terms, and seller-declared JSON success-response readiness for one exact public HTTPS GET route before buyer authorization, including URL and realm binding, expiry, cross-protocol economic parity, and exact-route OpenAPI evidence. Use `agent_discoverability_audit` instead when you need to know whether catalogs rank or expose a service. This tool uses no target credential, signature, or target payment, follows no redirect, never reads the paid target body, and reads only the same-origin public OpenAPI document under a strict size cap. A seller declaration is advisory and does not establish runtime validity, seller trust, utility, or settlement reliability. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/commerce/payment-offer-preflight, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    Exact public HTTPS GET route whose unpaid x402 and MPP challenge headers and same-origin OpenAPI success-response declaration should be inspected before buyer authorization. Credential-like query keys, fragments, unresolved parameters, local hosts, redirects, and non-public IPs are rejected.
  • catalog · object · optionnel
    Optional caller-supplied catalog candidate. When present, the tool compares it with every live unsigned offer across request, protocol, amount, network, asset, recipient, and expiry.

  Exemple d'appel

  {"name": "payment_offer_preflight", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "offers": [], "parity": {}, "target": {}, "product": "texte", "version": "texte", "boundary": {}, "decision": "parseable_offer", "findings": [], "checkedAt": "texte", "protocols": [], "offerCount": 1}}

• read≈ 704 tokens

  Fetch a public HTTP(S) page and return its readable body as cleaned Markdown for LLM context, preserving headings, links, and lists while dropping navigation, ads, scripts, headers, footers, asides, and forms. Use `extract` instead when you need metadata, JSON-LD, Open Graph/Twitter tags, or a link inventory. Markdown is capped at 40,000 characters and no JavaScript is executed. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/read, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    Public HTTP(S) URL whose readable body is needed as Markdown. Content is fetched without JavaScript rendering and may be truncated at 40,000 characters. Check status/sourceOk/error/truncated/capture; missing discussion text is not proof of absence.

  Exemple d'appel

  {"name": "read", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "url": "texte", "error": "texte", "title": "texte", "status": 1, "capture": {}, "finalUrl": "texte", "markdown": "texte", "sourceOk": true, "fetchedAt": "texte", "truncated": true, "wordCount": 1}}

• recover_paid_result≈ 110 tokens

  Read the stored outcome of an earlier native paid call using its original input and credential. This call cannot execute or pay.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
  • arguments · object · requis

  Exemple d'appel

  {"name": "recover_paid_result", "arguments": {"name": "texte", "arguments": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_caller_result≈ 293 tokens

  Optionally state whether the current paid morpho_position result was useful or not_useful. This tool is free: charged is false, it does not repay, and it does not change the delivered purchase. Read the capability only from the paid result meta samedaydesk/mcp-caller-result. Schema success is not a statement. Absence is not useful or not_useful. Do not follow a link, do not send the capability to another origin, and do not pay again to report.

  Paramètres, retour & exemple (3)

  Paramètres

  • token · string · requis
    Capability copied from the paid result meta. Not a payer, price, or event id.
  • disposition · string · requis · useful | not_useful
    Explicit statement after you inspect the result.
  • reasonCategory · string · optionnel · matched_task | saved_a_step | wrong_output | missing_field | not_actionable
    Optional reason. Omit it to leave the reason empty.

  Exemple d'appel

  {"name": "report_caller_result", "arguments": {"token": "texte", "disposition": "useful"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• scan≈ 389 tokens

  Static supply-chain security scan of a public GitHub repo before an agent installs/runs it. Flags exfil sinks, obfuscation, credential reads, install-time curl|bash. risk=clean|suspicious|dangerous. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/scan, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • repo · string · requis
    Public GitHub repo: owner/name or URL

  Exemple d'appel

  {"name": "scan", "arguments": {"repo": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "repo": "texte", "risk": "clean", "branch": "texte", "summary": "texte", "findings": [], "scannedAt": "texte", "disclaimer": "texte", "filesScanned": 1}}

• schemaforge≈ 328 tokens

  Analyze a public business site and return a deterministic, paste-ready JSON-LD template plus the live structured-data gap diff and ranked fixes. Use `deep_audit` instead when the same call must also return company, technology, contact, and DNS/email evidence. Generated markup contains placeholders that must be replaced with real business values; this tool makes no site changes and does not guarantee AI citations. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/schemaforge, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (3)

  Paramètres

  • city · string · optionnel
    Optional city the business serves; used to contextualize the generated structured-data template.
  • site · string · requis
    Public business homepage or representative landing-page URL. Live HTML must be directly fetchable; JavaScript is not executed.
  • vertical · string · optionnel
    Optional structured-data template profile. med-spas is currently the specialized profile; unsupported values fall back to it.

  Exemple d'appel

  {"name": "schemaforge", "arguments": {"site": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• seller_integrity_audit≈ 568 tokens

  Use this after a buyer integration fails, a seller changes a paid route, or before the next paid retry or release. Audit one exact paid GET or POST seller route against buyer-required JSON success paths. GET verifies constructible non-secret input, exact request binding, live x402 and MPP economics, and optional Bazaar eligibility; POST performs static-safe OpenAPI contract analysis and sends no target request. Use `payment_offer_preflight` instead when you already have one exact callable GET URL and only need its current unpaid offer before buyer authorization, or `agent_discoverability_audit` for catalog rank and identity. Uses no target credential, signature, or target payment and retains no seller schema, body, or query values. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/commerce/seller-integrity-audit, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (6)

  Paramètres

  • route · string · requis
    Exact paid GET or POST path declared by the seller, without query or template parameters.
  • method · string · optionnel · GET | POST
    POST receives static OpenAPI response-contract analysis without sending a target request.
  • origin · string · requis
    Credential-free public HTTPS seller origin on port 443.
  • referral · string · optionnel
    Optional x402 receipt-derived acquisition label. It cannot change payment or delivery.
  • requireBazaar · boolean · optionnel
    When true, missing Bazaar discovery metadata becomes a repair finding for live-probed GET routes.
  • requiredPaths · array · optionnel
    Buyer-required dotted success-response paths that the seller schema must guarantee recursively.

  Exemple d'appel

  {"name": "seller_integrity_audit", "arguments": {"route": "texte", "origin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• settlement_proof≈ 1138 tokens

  Verify one claimed canonical Base USDC settlement after execution by matching a successful transaction receipt to the exact recipient, atomic amount, and optional payer. Use `payment_offer_preflight` before authorization when you need to inspect an unpaid x402 or MPP offer instead. This tool reads only public Base receipt and log data; it reads no merchant ledger and performs no wallet, signing, broadcast, custody, or execution action. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/commerce/settlement-proof, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (4)

  Paramètres

  • payer · string · optionnel
    Optional expected canonical Base USDC payer.
  • recipient · string · requis
    Expected canonical Base USDC recipient.
  • amountAtomic · string · requis
    Expected positive USDC amount in six-decimal atomic units.
  • transactionHash · string · requis
    Base mainnet transaction hash containing the claimed canonical USDC transfer.

  Exemple d'appel

  {"name": "settlement_proof", "arguments": {"recipient": "texte", "amountAtomic": "texte", "transactionHash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "asset": {}, "chain": {}, "product": "texte", "request": {}, "version": "texte", "boundary": {}, "decision": "verified", "findings": [], "checkedAt": "texte", "settlement": {}, "transaction": {}}}

• solana_transaction_receipt≈ 414 tokens

  Inspect one finalized Solana mainnet transaction signature and return normalized success or failure status, slot, block time, fee, SPL-token owner deltas, and canonical USDC deltas. Supply recipient, amount, and optional payer when an exact settlement claim must be verified; use `transaction_receipt` for Base or Ethereum. Raw instructions and logs are excluded, and this tool performs no wallet, signing, broadcast, custody, or execution action. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/chain/solana-transaction-receipt, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (5)

  Paramètres

  • mint · string · optionnel
    Optional SPL-token mint; defaults to canonical Solana USDC.
  • payer · string · optionnel
    Optional expected token payer owner; requires recipient and amountAtomic.
  • recipient · string · optionnel
    Optional expected token recipient owner.
  • signature · string · requis
    Finalized Solana mainnet transaction signature.
  • amountAtomic · string · optionnel
    Optional expected positive token amount in atomic units; requires recipient.

  Exemple d'appel

  {"name": "solana_transaction_receipt", "arguments": {"signature": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• stateful_wallet_policy_conformance≈ 1566 tokens

  Evaluate safe standardized observations from wallet policies that track prior or concurrent requests. Use `wallet_policy_conformance` instead for one-request action shape, method, chain, token, recipient, amount, and function controls. This tool separately tests sequential cumulative limits, signed-but-unbroadcast accounting, ABI extraction, concurrent oversubscription, counter-reference failure, and application serialization. It accepts no credentials, counter values, wallet or resource IDs, signatures, transactions, or raw provider responses and does not run the provider tests itself. Payment challenge and credentials are bound to POST https://agents.samedaydesk.com/security/stateful-wallet-policy-conformance, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (5)

  Paramètres

  • network · string · requis
    Network identifier used by the tested stateful profile.
  • protocol · string · requis
    Payment or execution protocol bound by the tested stateful profile.
  • provider · string · requis
    Wallet or delegated-signer provider name.
  • profileId · string · requis
    Caller-defined stateful policy profile identifier with no credential, wallet, or counter secret.
  • observations · array · requis
    Unique standardized stateful observations. Raw provider responses, signatures, transactions, counter values, credentials, wallet IDs, and resource IDs are rejected.

  Exemple d'appel

  {"name": "stateful_wallet_policy_conformance", "arguments": {"network": "texte", "protocol": "texte", "provider": "texte", "profileId": "texte", "observations": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"product": "texte", "profile": {}, "results": [], "boundary": {}, "complete": true, "decision": "conformant", "evaluatedAt": "texte", "unsafeCases": [], "schemaVersion": "texte", "inconclusiveCases": [], "strictBudgetPassed": true, "applicationVerified": []}}

• transaction_receipt≈ 292 tokens

  Inspect one Base or Ethereum transaction hash and return normalized success or revert status, block time, gas and fee fields, decoded ERC-20 Transfer events, and canonical USDC transfers. Use `settlement_proof` instead when you must verify an exact canonical Base USDC recipient, amount, and optional payer claim. Raw logs are excluded; this tool performs no wallet, signing, broadcast, custody, or execution action. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/chain/transaction-receipt, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • network · string · optionnel · base | ethereum
    Receipt network. Defaults to Base mainnet.
  • transactionHash · string · requis
    Mined Base or Ethereum transaction hash whose normalized receipt should be returned.

  Exemple d'appel

  {"name": "transaction_receipt", "arguments": {"transactionHash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• wallet_enrich≈ 237 tokens

  Inspect a public Base or EVM address and return an agent-ready on-chain profile: EOA or contract type, native and curated token holdings, token/NFT metadata, proxy evidence, activity, and a derived profile label. Use `enrich` for a company domain; the two tools accept different identifiers and return different evidence. Read-only public chain data; no wallet action or custody. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/wallet-enrich, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    Public Base or EVM 0x address. Use wallet_enrich for on-chain evidence; use enrich for a company domain.

  Exemple d'appel

  {"name": "wallet_enrich", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• wallet_policy_conformance≈ 1550 tokens

  Evaluate safe standardized allow, deny, and error observations from an agent wallet or delegated signer. Use this after running a bounded provider policy test matrix to distinguish explicit provider-policy enforcement from validation or generic provider failures and to test exact execution shape separately from operation allowlisting. Accepts no credentials, wallet IDs, signatures, transactions, or raw provider responses; it evaluates caller-supplied observations and does not run the provider tests itself. Payment challenge and credentials are bound to POST https://agents.samedaydesk.com/security/wallet-policy-conformance, not mcp://. Retry the identical authorized arguments and credential.

  Paramètres, retour & exemple (5)

  Paramètres

  • network · string · requis
    Network identifier used by the tested profile.
  • protocol · string · requis
    Payment or execution protocol bound by the tested profile.
  • provider · string · requis
    Wallet or delegated-signer provider name.
  • profileId · string · requis
    Caller-defined policy profile identifier with no credential or wallet secret.
  • observations · array · requis
    Unique standardized observations. Raw provider responses, signatures, transactions, credentials, and wallet IDs are rejected.

  Exemple d'appel

  {"name": "wallet_policy_conformance", "arguments": {"network": "texte", "protocol": "texte", "provider": "texte", "profileId": "texte", "observations": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"product": "texte", "profile": {}, "results": [], "boundary": {}, "complete": true, "decision": "conformant", "evaluatedAt": "texte", "unsafeCases": [], "schemaVersion": "texte", "exactShapePassed": true, "inconclusiveCases": [], "missingRequiredCases": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agents.samedaydesk.com/mcp