io.github.gatoprd/bounty-engineer

Est-ce que io.github.gatoprd/bounty-engineer est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.gatoprd/bounty-engineer » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 20 outils

• execute_paid_product≈ 818 tokens

  Execute one selected paid API tool through native MCP x402 v2. For known product_id and bounded input, the first call only returns PaymentRequired; no paid output is released. With independently authorized budget and validated network, amount and payee, an x402 client retries with params._meta['x402/payment']; only verified paid success includes _meta['x402/payment-response']. Non-idempotent and payment-bearing; do not retry by signing a second transaction after uncertain settlement. Use a dedicated paid_* sibling when a narrower tool is available; use get_product_proof or quote_premium_delivery first if scope or input validity is uncertain.

  Paramètres, retour & exemple (2)

  Paramètres

  • input · object · optionnel
    Product-specific JSON input. Example for hash: {text:'hello'}
  • product_id · string · requis · proofwork-audit | hash | base64 | jwt-decode | json-canonicalize | instant-work | funding-loop | funding-rates
    Paid product id. Example: hash

  Exemple d'appel

  {"name": "execute_paid_product", "arguments": {"product_id": "proofwork-audit"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_commerce_radar_offer≈ 176 tokens

  Buyer-intent discovery for retailer competitor-price/stock and autonomous product-change feeds. Returns true $29.90 Starter and $99.90 Pro plans, free real-URL compatibility preflight, PayPal subscription and one-time 30-day Base USDC options. Does NOT create invoices, make transfers, contact third-party agents or claim buyers exist.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_commerce_radar_offer", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_product_proof≈ 149 tokens

  Return one product's method, exact price, schema, sample input and autonomous purchase contract without spending funds. Example: {product_id:'web-extract'}.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_id · string · requis

  Exemple d'appel

  {"name": "get_product_proof", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_purchase_instructions≈ 174 tokens

  Return the direct endpoint, price, payment network and purchase flow for one Bounty Engineer product. Does not spend funds. Example: {product_id:'x402-payment-preflight'}.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_id · string · requis
    Product id from list_products. Example: x402-payment-preflight

  Exemple d'appel

  {"name": "get_purchase_instructions", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_workflow_recipe≈ 548 tokens

  Get published sample input/output, exact credits for a batch, one-time pack options and prepaid HTTP integration. No payment or own-data execution occurs. Example: {tool:"funding-rates",calls:100}.

  Paramètres, retour & exemple (2)

  Paramètres

  • tool · string · requis · delta-policy-gate | treasury-court | independent-pr-evidence | release-sentinel-evidence | machine-reflex-evidence | purchase-rescue | seller-conformance-audit | settlement-ledger-audit
    Workflow product id. Example: funding-rates
  • calls · integer · optionnel
    Planned number of calls. Example: 100

  Exemple d'appel

  {"name": "get_workflow_recipe", "arguments": {"tool": "delta-policy-gate"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_premium_agent_packs≈ 266 tokens

  Use this free catalog only when an authorized agent needs a high-volume one-time Base USDC credit pack ($99.90–$2,499.90) or high-ticket seller-payment and portfolio x402 analysis. Includes exact prices, proof links and safe per-pack checkout URLs. Before any spend use quote_premium_workload for planned credit usage or quote_premium_delivery for a real ledger/workspace input. For small workloads use list_products or per-call x402 instead. The catalog never signs, issues invoices, subscribes, or buys.

  Paramètres, retour & exemple (1)

  Paramètres

  • max_spend_usd · number · optionnel
    Buyer's maximum authorized total spend in USD; no purchase is made.

  Exemple d'appel

  {"name": "list_premium_agent_packs", "arguments": {"max_spend_usd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_products≈ 179 tokens

  Read-only, free catalog of exact priced x402 tools: JSON/security, funding rates, extraction, seller-payment analysis and agent operations. Use list_products with {} to explore ordinary APIs; for $99.90–$2,499.90 one-time credit packs use list_premium_agent_packs, and for a known product use get_purchase_instructions. No purchase or wallet action occurs. Results are catalog entries, not proof of demand.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_products", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_agent_purchase_firewall≈ 198 tokens

  Evaluate a proposed agent purchase for hard-budget, duplicate-payment, seller/payTo drift and purchase-safety conditions before execution. Native MCP x402. Use get_product_proof for the current exact input schema.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    Purchase-firewall request matching the published product schema. Call get_product_proof with product_id agent-purchase-firewall first.

  Exemple d'appel

  {"name": "paid_agent_purchase_firewall", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_funding_loop≈ 168 tokens

  Screen fresh external funded tasks for payout rail, escrow, deadline and zero-deposit conditions. Native x402 payment, no API key. Example: {input:{limit:20,rail:'base'}}.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    Funding-loop request. Example: {limit:20,rail:'base'}

  Exemple d'appel

  {"name": "paid_funding_loop", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_funding_rates≈ 180 tokens

  Fetch normalized live perpetual-futures funding rates with venue fallback and market context. Native x402 payment, no API key. Example: {input:{symbol:'BTCUSDT',providers:['binance','bybit']}}.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    Funding-rate request. Example: {symbol:'BTCUSDT',providers:['binance','bybit']}

  Exemple d'appel

  {"name": "paid_funding_rates", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_json_contract_check≈ 204 tokens

  Validate structured JSON against the supported deterministic JSON Schema subset and return exact error pointers. Native x402 payment. Example: {input:{value:{price:25},schema:{type:'object',required:['price'],properties:{price:{type:'number'}}}}}.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    JSON value/text plus schema. Example: {value:{price:25},schema:{type:'object',required:['price'],properties:{price:{type:'number'}}}}

  Exemple d'appel

  {"name": "paid_json_contract_check", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_web_extract≈ 172 tokens

  Extract one public HTML page into clean Markdown, text, links, metadata and source hashes. Native x402 payment, no API key. Example: {input:{url:'https://example.com'}}.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    Web extraction input. Required field: url. Example: {url:'https://example.com'}

  Exemple d'appel

  {"name": "paid_web_extract", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• paid_x402_payment_preflight≈ 198 tokens

  Preflight an x402 seller/payment contract before an autonomous buyer commits funds; checks payment-path risks without authorizing a purchase. Native MCP x402. Use get_product_proof for the current exact input schema.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · optionnel
    x402 preflight request matching the published product schema. Call get_product_proof with product_id x402-payment-preflight first.

  Exemple d'appel

  {"name": "paid_x402_payment_preflight", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• qualify_premium_buyer≈ 414 tokens

  Use when you have a real buyer-authorized budget and a concrete agent workflow. Matches one-workspace ledger reconciliation to the $149.90 Command Center, cross-workspace settlement controls to the $999.90 Tower ONLY with confirmed multiple workspaces, or high-volume prepaid credits ONLY with lower total declared cash cost. Always use the free input quote first. No contact to other buyers, signature, invoice, automatic purchase or payment. Example: {goal:'reconcile agent seller payment ledger receipts',max_spend_usd:250,workspaces:1}.

  Paramètres, retour & exemple (5)

  Paramètres

  • goal · string · requis
    The buyer's real operational goal, not marketing text
  • tool · string · optionnel
    For prepaid workloads, a current supported tool id
  • calls · integer · optionnel
    For prepaid workloads, expected genuine tool call count
  • workspaces · integer · optionnel
    Actual number of buyer-owned workspaces when relevant
  • max_spend_usd · number · requis
    Hard buyer-authorized USD ceiling; the agent must have buyer permission

  Exemple d'appel

  {"name": "qualify_premium_buyer", "arguments": {"goal": "texte", "max_spend_usd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote_autonomous_purchase≈ 315 tokens

  Given an agent goal and hard USD budget, return a buyer-controlled value ladder: cheapest relevant proof, recommended value, optional higher-outcome upgrade, and executable purchase plan. This tool itself is free and never spends funds. Example: {goal:'extract a public webpage',max_price_usd:0.01,preferred_rail:'x402'}.

  Paramètres, retour & exemple (3)

  Paramètres

  • goal · string · requis
    Plain-language goal. Example: extract a public webpage
  • max_price_usd · number · optionnel
    Hard total USD price ceiling; never exceeded. Example: 0.01
  • preferred_rail · string · optionnel · x402 | direct_base_usdc | direct_solana_usdc | direct_solana_sol | direct_bitcoin | paypal_prepaid
    Preferred payment rail. Base USDC is the preferred direct wallet fallback.

  Exemple d'appel

  {"name": "quote_autonomous_purchase", "arguments": {"goal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote_batch_web_intelligence≈ 306 tokens

  Quote the fixed cost and validate up to 10 public URLs without fetching them, spending USDC or creating an invoice. The paid batch returns provenance-linked snippets, content hashes, titles and optional client-supplied baseline comparisons. Use HTTP POST /v1/batch-web-intelligence after independently confirming the x402 payment challenge; the free quote is never a purchase.

  Paramètres, retour & exemple (2)

  Paramètres

  • urls · array · requis
    One to ten buyer-selected public HTTP(S) pages. Example: ["https://example.com"]
  • previous_hashes · object · optionnel
    Optional prior 64-character SHA-256 hashes keyed by URL; omit for first-time research

  Exemple d'appel

  {"name": "quote_batch_web_intelligence", "arguments": {"urls": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote_instant_work≈ 201 tokens

  Zero-cost deterministic computation of the actual buyer-submitted reconciliation or quality task. Returns output SHA-256 and readiness; never returns the paid full result or spends USDC. Example: {input:{task:'quality',required:['id'],records:[{id:'A'}]}}.

  Paramètres, retour & exemple (1)

  Paramètres

  • input · object · requis
    Instant-work JSON input. Example: {task:'quality',required:['id'],records:[{id:'A'}]}

  Exemple d'appel

  {"name": "quote_instant_work", "arguments": {"input": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote_premium_delivery≈ 320 tokens

  Validate actual caller-supplied Command Center or Control Tower input before authorizing an expensive analysis. Returns input hash, counts, deliverable list, posted price and a cheaper standalone alternative when one workspace suffices. Does not return the paid analysis, verify receipts on chain, sign or transfer funds.

  Paramètres, retour & exemple (3)

  Paramètres

  • tool · string · requis · agent-commerce-command-center | enterprise-commerce-control-tower
    Exact premium tool id; Command Center is for one workspace, Tower for genuine cross-workspace needs
  • input · object · requis
    Real buyer-owned analysis inputs; never send wallet secrets, private keys or credentials
  • max_spend_usd · number · requis
    Maximum buyer-approved USD budget; preview never charges

  Exemple d'appel

  {"name": "quote_premium_delivery", "arguments": {"tool": "agent-commerce-command-center", "input": {}, "max_spend_usd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote_premium_workload≈ 356 tokens

  Free quote for up to 20 tool/call rows under a hard total budget. Compares one shared-key package against pay-per-call pricing and recommends a prepaid package only when it covers all tools and costs less. Includes smaller and funding-only alternatives; does not buy or create invoices.

  Paramètres, retour & exemple (2)

  Paramètres

  • workload · array · requis
    Buyer-declared recurring workload. Example: [{"tool":"funding-rates","calls":10000}]
  • max_spend_usd · number · requis
    Hard buyer-approved total budget in USD. The free quote does not authorize a charge

  Exemple d'appel

  {"name": "quote_premium_workload", "arguments": {"workload": [], "max_spend_usd": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• recommend_paid_tool≈ 270 tokens

  Free single-tool product recommendation by plain-language goal. Use for one specific agent task, not to assume budget approval or execute a payment. For multi-workspace settlement, reused receipts and shared agent budgets consider enterprise-commerce-control-tower; for one workspace seller ledger reconciliation consider agent-commerce-command-center. Before authorizing expensive analysis use quote_premium_delivery; for volume discounts use quote_premium_workload. A no-match result means DO_NOT_BUY. Example: {goal:'verify an x402 seller before paying'}.

  Paramètres, retour & exemple (1)

  Paramètres

  • goal · string · requis
    Plain-language buyer goal. Example: verify an x402 seller before paying

  Exemple d'appel

  {"name": "recommend_paid_tool", "arguments": {"goal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://bounty-engineer-x402-prod.onrender.com/mcp