io.github.michu5696/paycrow

Est-ce que io.github.michu5696/paycrow est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.michu5696/paycrow » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• escrow_create≈ 249 tokens

  Create a USDC escrow with built-in dispute resolution. Funds are locked on-chain until delivery is confirmed (release) or a problem is flagged (dispute). If disputed, an arbiter reviews and rules — the only escrow service with real dispute resolution on Base.

  Paramètres, retour & exemple (4)

  Paramètres

  • seller · string · requis
    Ethereum address of the seller/service provider
  • amount_usdc · number · requis
    Amount in USDC (e.g., 5.00 for $5)
  • service_url · string · requis
    URL or identifier of the service being purchased (used for tracking)
  • timelock_minutes · number · optionnel
    Minutes until escrow expires and auto-refunds (default: 30)

  Exemple d'appel

  {"name": "escrow_create", "arguments": {"seller": "texte", "amount_usdc": 1, "service_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• escrow_dispute≈ 170 tokens

  Flag a problem with delivery — PayCrow's key differentiator. Locks escrowed funds and triggers arbiter review. Unlike other escrow services that say 'no disputes, no chargebacks', PayCrow has real on-chain dispute resolution. Use when service was not delivered or quality was unacceptable.

  Paramètres, retour & exemple (2)

  Paramètres

  • reason · string · requis
    Brief description of the problem for the arbiter
  • escrow_id · string · requis
    The escrow ID to dispute

  Exemple d'appel

  {"name": "escrow_dispute", "arguments": {"reason": "texte", "escrow_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• escrow_release≈ 106 tokens

  Confirm delivery and release escrowed USDC to the seller. Only call this when you've verified the service/product was delivered correctly.

  Paramètres, retour & exemple (1)

  Paramètres

  • escrow_id · string · requis
    The escrow ID to release

  Exemple d'appel

  {"name": "escrow_release", "arguments": {"escrow_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• escrow_status≈ 90 tokens

  Check the current state of an escrow (funded, released, disputed, expired, etc.)

  Paramètres, retour & exemple (1)

  Paramètres

  • escrow_id · string · requis
    The escrow ID to check

  Exemple d'appel

  {"name": "escrow_status", "arguments": {"escrow_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• rate_service≈ 197 tokens

  Rate a completed escrow. After escrow_release, rate the seller's service quality (1-5 stars). This builds the reputation data that makes PayCrow's trust scores meaningful over time. Both sides can rate: buyer rates seller's service quality, seller rates buyer's conduct. Ratings are on-chain and permanent — they feed directly into trust scoring.

  Paramètres, retour & exemple (2)

  Paramètres

  • stars · integer · requis
    Rating 1-5 stars (1=terrible, 5=excellent)
  • escrow_id · string · requis
    The escrow ID to rate (must be in Released state)

  Exemple d'appel

  {"name": "rate_service", "arguments": {"stars": 1, "escrow_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• safe_pay≈ 361 tokens

  The smart way to pay an agent. Checks their trust score first, then auto-configures escrow protection based on risk. Flow: Check trust → Set protection level → Create escrow → Call API → Verify → Auto-release or auto-dispute. Protection levels (automatic): - High trust agent → 15min timelock, proceed normally - Moderate trust → 60min timelock, payment capped at $25 - Low trust → 4hr timelock, payment capped at $5 - Unknown/caution → BLOCKED — will not send funds This is the recommended tool for paying any agent. If you need manual control, use x402_protected_call instead.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · requis
    The API endpoint URL to call
  • body · string · optionnel
    Request body (for POST/PUT)
  • method · string · optionnel · GET | POST | PUT | DELETE
    HTTP method (default: GET)
  • headers · object · optionnel
    HTTP headers to include
  • amount_usdc · number · requis
    Amount to pay in USDC
  • seller_address · string · requis
    Ethereum address of the agent you're paying

  Exemple d'appel

  {"name": "safe_pay", "arguments": {"url": "texte", "amount_usdc": 1, "seller_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• trust_gate≈ 226 tokens

  Should you pay this agent? Check before sending money. Returns a go/no-go decision with recommended escrow protection parameters. Unlike other trust services, PayCrow ties trust directly to escrow protection: - High trust → shorter timelock, proceed with confidence - Low trust → longer timelock, smaller amounts recommended - Caution → don't proceed, or use maximum protection This is the tool to call BEFORE escrow_create or safe_pay.

  Paramètres, retour & exemple (2)

  Paramètres

  • address · string · requis
    Ethereum address of the agent you're about to pay
  • intended_amount_usdc · number · optionnel
    How much you plan to pay (helps calibrate the recommendation)

  Exemple d'appel

  {"name": "trust_gate", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• trust_onchain_quick≈ 114 tokens

  Quick on-chain reputation check using only the PayCrow Reputation contract. Free, no API keys needed. Use trust_score_query for the full composite score.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    Ethereum address of the agent to look up

  Exemple d'appel

  {"name": "trust_onchain_quick", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• trust_score_query≈ 144 tokens

  Full trust score breakdown for an agent address. Aggregates 4 on-chain sources: PayCrow escrow history, ERC-8004 agent identity, Moltbook social karma, and Base chain activity. Returns 0-100 score with per-source details. For a quick go/no-go decision, use trust_gate instead.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    Ethereum address of the agent to look up

  Exemple d'appel

  {"name": "trust_score_query", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• x402_protected_call≈ 458 tokens

  Make an HTTP API call with manual escrow protection. Full control over verification and timelock parameters. For most payments, use safe_pay instead — it auto-configures protection based on seller trust. Use x402_protected_call when you need: - Custom JSON Schema verification (not just "valid JSON + 2xx") - Hash-lock verification (exact response match) - Specific timelock durations - To override safe_pay's trust-based amount limits

  Paramètres, retour & exemple (9)

  Paramètres

  • url · string · requis
    The API endpoint URL to call
  • body · string · optionnel
    Request body (for POST/PUT)
  • method · string · optionnel · GET | POST | PUT | DELETE
    HTTP method
  • headers · object · optionnel
    HTTP headers to include
  • amount_usdc · number · requis
    Amount to pay in USDC
  • seller_address · string · requis
    Ethereum address of the API provider (seller) who will receive payment
  • timelock_minutes · number · optionnel
    Minutes until escrow expires
  • verification_data · string · requis
    Verification data: JSON Schema string (for schema strategy) or expected hash (for hash-lock)
  • verification_strategy · string · optionnel · schema | hash-lock
    How to verify the response: 'schema' (JSON Schema) or 'hash-lock' (exact hash match)

  Exemple d'appel

  {"name": "x402_protected_call", "arguments": {"url": "texte", "amount_usdc": 1, "seller_address": "texte", "verification_data": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://paycrow-app.fly.dev/mcp