io.github.why-see/agent-tools-mcp

Est-ce que io.github.why-see/agent-tools-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.why-see/agent-tools-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 32 outils

• generate-avatar≈ 253 tokens

  Create an SVG placeholder profile icon. Use for synthetic avatars in demos and UI prototypes. Returns SVG markup, not a photorealistic likeness.

  Paramètres, retour & exemple (4)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for repeatable test fixtures; do not use as a secret.
  • size · integer · optionnel
    SVG width and height in pixels, from 32 to 256.
  • text · string · optionnel
    Optional initials or label used to customize the placeholder.
  • pattern · string · optionnel · initials | blocks | circles | random
    Avatar layout: initials, blocks, circles or random.

  Exemple d'appel

  {"name": "generate-avatar", "arguments": {"seed": "texte", "size": 1, "text": "texte", "pattern": "initials"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-card-number≈ 202 tokens

  Generate a synthetic payment-card fixture. Use for payment-form UI tests requiring a Luhn-valid card number. Returns {number, brand, expiry, cvc}; values are synthetic, not issued credentials.

  Paramètres, retour & exemple (2)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for reproducible fake card fixtures.
  • brand · string · optionnel · visa | mastercard | amex | discover
    Synthetic card brand: visa, mastercard, amex or discover.

  Exemple d'appel

  {"name": "generate-card-number", "arguments": {"seed": "texte", "brand": "visa"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-color≈ 310 tokens

  Generate a palette from a base color and harmony scheme. Use for design prototypes; defaults: random base, triadic scheme, five hex colors. Returns {base, scheme, colors, textOnBase}; text color is heuristic, not a WCAG contrast check.

  Paramètres, retour & exemple (5)

  Paramètres

  • base · string · optionnel
    Optional base color such as #3366ff.
  • seed · string · optionnel
    Optional deterministic seed for repeatable palette generation.
  • count · integer · optionnel
    Number of colors, from 1 to 12.
  • format · string · optionnel · hex | rgb | hsl
    Output color notation: hex, rgb or hsl.
  • scheme · string · optionnel · complementary | triadic | tetradic | analogous | monochrome | random
    Palette harmony algorithm: complementary, triadic, tetradic, analogous, monochrome or random.

  Exemple d'appel

  {"name": "generate-color", "arguments": {"base": "texte", "seed": "texte", "count": 1, "format": "hex", "scheme": "complementary"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-dataset≈ 274 tokens

  Generate synthetic rows as JSON, JSONL or CSV. Use for data import/export tests; use generate-fake-data for preset people or company fixtures. Returns at most eight records without accessing a database.

  Paramètres, retour & exemple (4)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for reproducible test rows.
  • count · integer · optionnel
    Number of records to generate, 1–8, default 3.
  • format · string · optionnel · json | jsonl | csv
    Output format: json, jsonl or csv.
  • schema · object · optionnel
    Optional map of field names to upstream synthetic field specifications; no real records.

  Exemple d'appel

  {"name": "generate-dataset", "arguments": {"seed": "texte", "count": 1, "format": "json", "schema": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-fake-data≈ 232 tokens

  Create fictional users, companies, addresses or rows. Use to seed demos with preset records; use generate-dataset for custom fields. Synthetic values are not verified identities.

  Paramètres, retour & exemple (3)

  Paramètres

  • kind · string · requis · user | company | address | rows
    Fixture category: user, company, address or rows.
  • seed · string · optionnel
    Optional deterministic seed to reproduce the same fake records.
  • count · integer · optionnel
    Requested number of synthetic records, up to eight.

  Exemple d'appel

  {"name": "generate-fake-data", "arguments": {"kind": "user"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-hash≈ 194 tokens

  Compute SHA-256 or legacy MD5 text digests. Use for non-secret content fingerprints; generate-token creates new IDs instead. Returns a hex digest; unsuitable for password storage or key derivation.

  Paramètres, retour & exemple (2)

  Paramètres

  • algo · string · optionnel · sha-256 | md5
    Digest algorithm: sha-256 (default) or legacy md5.
  • text · string · requis
    Public or synthetic text to digest; never send secrets for hashing.

  Exemple d'appel

  {"name": "generate-hash", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-lorem≈ 214 tokens

  Generate lorem ipsum placeholder copy. Use for mock layouts needing filler words, sentences or paragraphs. Returns synthetic copy, not sourced editorial content.

  Paramètres, retour & exemple (3)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for reproducible placeholder text.
  • count · integer · optionnel
    Number of units, from 1 to 8; default 3.
  • units · string · optionnel · words | sentences | paragraphs
    Output unit: words, sentences or paragraphs.

  Exemple d'appel

  {"name": "generate-lorem", "arguments": {"seed": "texte", "count": 1, "units": "words"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-password≈ 218 tokens

  Generate random or seeded test passwords. Use for demo login fields; use generate-token for identifiers. Seeded values are predictable and visible to MCP clients; not a secure credential vault.

  Paramètres, retour & exemple (3)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for testing only; seeded output is predictable.
  • length · integer · optionnel
    Desired password length, 8–256 characters.
  • symbols · boolean · optionnel
    Whether punctuation/symbol characters are included.

  Exemple d'appel

  {"name": "generate-password", "arguments": {"seed": "texte", "length": 1, "symbols": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-phone-number≈ 284 tokens

  Generate fictional US-format phone numbers. Use for US demo phone fields; when supplied, city selects a local area-code pool and must match state. Returns an array of fictional (AAA) 555-01XX numbers; no subscriber lookup.

  Paramètres, retour & exemple (4)

  Paramètres

  • city · string · optionnel · Los Angeles | San Francisco | New York | Houston | Miami
    Optional city: Los Angeles, San Francisco, New York, Houston or Miami; must match state if given.
  • seed · string · optionnel
    Optional deterministic seed for repeatable test numbers.
  • count · integer · optionnel
    Number of fabricated numbers, up to eight.
  • state · string · optionnel · CA | NY | TX | FL
    Optional US state abbreviation: CA, NY, TX or FL.

  Exemple d'appel

  {"name": "generate-phone-number", "arguments": {"city": "Los Angeles", "seed": "texte", "count": 1, "state": "CA"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-prompt≈ 305 tokens

  Fill a prompt template with supplied variables. Use {name} placeholders with matching vars.name; missing variables become empty text. Returns a prompt string without invoking a model; code/image modes can add framing.

  Paramètres, retour & exemple (4)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for the {{RAND_INT:min,max}} helper, not ordinary placeholders.
  • type · string · optionnel · text | code | image
    Prompt template category: text, code or image; default text.
  • vars · object · optionnel
    Object mapping placeholder names to values, e.g. {"name":"Ada"} for {name}.
  • template · string · requis
    Template text, e.g. Hello {name}; omitted variables are replaced with empty text.

  Exemple d'appel

  {"name": "generate-prompt", "arguments": {"template": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-slug≈ 186 tokens

  Convert a title into a Unicode-aware URL slug. Use when forming new path segments from headings. Inspect output before publishing permanent URLs.

  Paramètres, retour & exemple (2)

  Paramètres

  • text · string · requis
    Source title to normalize, such as Café startups!.
  • maxLength · integer · optionnel
    Maximum slug length, 1–160 characters; omit for the upstream default.

  Exemple d'appel

  {"name": "generate-slug", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-ssn≈ 262 tokens

  Generate fictional US SSN-style test identifiers. Use for SSN test fields; use generate-fake-data for mixed-record fixtures. Returns a string for count=1, otherwise an array; structural validity does not confirm issuance.

  Paramètres, retour & exemple (4)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed for repeatable fake identifiers.
  • count · integer · optionnel
    Number of synthetic SSN-style fixtures, 1–8.
  • valid · boolean · optionnel
    Whether fixtures should pass the generator's structural validity rules, not actual issuance checks.
  • formatted · boolean · optionnel
    Whether to add standard dashes to the generated identifier.

  Exemple d'appel

  {"name": "generate-ssn", "arguments": {"seed": "texte", "count": 1, "valid": true, "formatted": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate-token≈ 236 tokens

  Generate token strings or UUIDs. Use for test identifiers; use generate-password for password fixtures. Seeded output is predictable and unsuitable for authentication credentials.

  Paramètres, retour & exemple (3)

  Paramètres

  • seed · string · optionnel
    Optional deterministic seed, intended for reproducible test output only.
  • type · string · requis · uuid | hex | base64 | numeric
    Token format: uuid, hex, base64 or numeric.
  • length · integer · optionnel
    Output length parameter, 1–256, where applicable to the selected token type.

  Exemple d'appel

  {"name": "generate-token", "arguments": {"type": "uuid"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-card-safe≈ 170 tokens

  Check payment-card brand, length and Luhn checksum. Use with synthetic card numbers in payment-form tests. Returns {ok, normalized?, brand?, last4?, issues}; not a payment authorization or fraud check.

  Paramètres, retour & exemple (1)

  Paramètres

  • number · string · requis
    Synthetic payment-card number string to examine; do not provide real card details.

  Exemple d'appel

  {"name": "is-card-safe", "arguments": {"number": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-email-safe≈ 165 tokens

  Check conservative ASCII email address syntax. Use to reject malformed addresses in forms and test fixtures. Returns true or false; does not check mailbox existence or deliverability.

  Paramètres, retour & exemple (1)

  Paramètres

  • email · string · requis
    Email address string to check, such as founder@example.com; ASCII format only.

  Exemple d'appel

  {"name": "is-email-safe", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-iban-safe≈ 174 tokens

  Check IBAN country rules, length and checksum against a bundled registry. Use to screen public or synthetic IBANs in test data. Returns {ok, normalized?, issues}; does not verify account ownership or transferability.

  Paramètres, retour & exemple (1)

  Paramètres

  • iban · string · requis
    IBAN string, optionally with spaces; do not submit real private bank account details.

  Exemple d'appel

  {"name": "is-iban-safe", "arguments": {"iban": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-ip-safe≈ 158 tokens

  Check IPv4 or IPv6 literal-address syntax. Use to screen candidate IP strings, not test reachability or geolocation. Returns {ok, version, issues}; version is 4, 6 or null.

  Paramètres, retour & exemple (1)

  Paramètres

  • ip · string · requis
    IPv4 or IPv6 literal address such as 192.0.2.1 or 2001:db8::1.

  Exemple d'appel

  {"name": "is-ip-safe", "arguments": {"ip": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-iso-date-safe≈ 158 tokens

  Check Gregorian YYYY-MM-DD calendar dates, including leap days. Use for date-only form fields, not timestamps or timezone offsets. Returns true for a valid date, otherwise false.

  Paramètres, retour & exemple (1)

  Paramètres

  • date · string · requis
    Candidate date formatted YYYY-MM-DD, such as 2024-02-29.

  Exemple d'appel

  {"name": "is-iso-date-safe", "arguments": {"date": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-json-safe≈ 178 tokens

  Parse JSON with bounded depth, key counts and input size. Use to screen JSON without execution; use optimize-dataset for JSONL or CSV cleanup. Returns {ok, issues, bytes, depth, keys, value?}; parsed value is included only when valid.

  Paramètres, retour & exemple (1)

  Paramètres

  • json · string · requis
    JSON document as a string, up to 4096 characters; depth and key counts are limited.

  Exemple d'appel

  {"name": "is-json-safe", "arguments": {"json": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-password-safe≈ 173 tokens

  Evaluate password strength using local heuristics. Use only with dummy passwords when testing password policies. Returns {ok, score, entropyBits, length, sets, reasons, suggestions}; no breach-database lookup.

  Paramètres, retour & exemple (1)

  Paramètres

  • password · string · requis
    Fictitious test password; never supply an actual password or secret.

  Exemple d'appel

  {"name": "is-password-safe", "arguments": {"password": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-phone-e164≈ 178 tokens

  Check phone number syntax against E.164 after local normalization. Use to test international number formats, including spaces or 00 prefixes. Returns true or false, not the normalized number; no subscriber or reachability check.

  Paramètres, retour & exemple (1)

  Paramètres

  • phone · string · requis
    Candidate internationally formatted telephone number, for example +66812345678.

  Exemple d'appel

  {"name": "is-phone-e164", "arguments": {"phone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-url-safe≈ 158 tokens

  Check absolute HTTP or HTTPS URL syntax. Use to screen links before display or storage. Returns true or false; does not visit or assess the site's safety.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    Absolute HTTP(S) URL string; other schemes such as javascript: are not supported.

  Exemple d'appel

  {"name": "is-url-safe", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-us-tin-safe≈ 168 tokens

  Check synthetic US EIN, SSN or ITIN number formats. Use with tax-ID input fixtures, never real personal identifiers. Returns {ok, normalized?, type, issues}; does not verify IRS issuance or identity.

  Paramètres, retour & exemple (1)

  Paramètres

  • tin · string · requis
    Synthetic US taxpayer identifier string; do not submit actual personal identifiers.

  Exemple d'appel

  {"name": "is-us-tin-safe", "arguments": {"tin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-uuid-safe≈ 197 tokens

  Check canonical UUID syntax and optional RFC variant/version. Use to validate UUIDs; use generate-token to create them. Returns true or false; does not check uniqueness or resource existence.

  Paramètres, retour & exemple (2)

  Paramètres

  • uuid · string · requis
    UUID string in canonical hyphenated format.
  • version · integer · optionnel
    Optional UUID version number from 1 to 8; omit to accept any supported version.

  Exemple d'appel

  {"name": "is-uuid-safe", "arguments": {"uuid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is-vat-safe≈ 159 tokens

  Check country-specific VAT number patterns. Use to screen VAT fixtures before form submission. Returns {ok, country?, normalized?, issues}; no VIES lookup or active-registration check.

  Paramètres, retour & exemple (1)

  Paramètres

  • vat · string · requis
    Country-prefixed VAT number string such as DE123456789.

  Exemple d'appel

  {"name": "is-vat-safe", "arguments": {"vat": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• minify-css≈ 147 tokens

  Reduce whitespace in CSS snippets. Use for basic stylesheet cleanup rather than production minification. Not a full CSS parser; visually test the result.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    CSS source code string, limited to 4096 characters.

  Exemple d'appel

  {"name": "minify-css", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• minify-html≈ 170 tokens

  Remove comments and compact whitespace in HTML fragments. Use for small, controlled HTML snippets, not full document compilation. Returns an HTML string; preserves pre, textarea, script and style contents. Regression-test rendered output.

  Paramètres, retour & exemple (1)

  Paramètres

  • html · string · requis
    Original HTML source as text, up to 4096 characters.

  Exemple d'appel

  {"name": "minify-html", "arguments": {"html": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• minify-js≈ 161 tokens

  Compact small JavaScript snippets. Use for basic source cleanup, not AST-aware production minification. Returns JavaScript text, sometimes unchanged for complex syntax; regression-test its behavior.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    JavaScript source code string, limited to 4096 characters.

  Exemple d'appel

  {"name": "minify-js", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• minify-prompt≈ 168 tokens

  Normalize prompt whitespace and line breaks. Use to compact formatting before calling a model; filler phrases are not removed. Returns trimmed text with normalized spacing; review prompts where whitespace carries meaning.

  Paramètres, retour & exemple (1)

  Paramètres

  • text · string · requis
    Prompt text to compact, up to 4096 characters.

  Exemple d'appel

  {"name": "minify-prompt", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• optimize-dataset≈ 210 tokens

  Clean and compact JSON, JSONL or CSV rows. Use for small datasets; use is-json-safe to check JSON syntax without changes. Returns text in the selected format; trims strings, deduplicates rows and may drop mostly empty columns.

  Paramètres, retour & exemple (2)

  Paramètres

  • input · string · requis
    Source dataset text (maximum 4096 characters).
  • format · string · optionnel · auto | json | jsonl | csv
    Parsing format: auto detects, or explicitly select json, jsonl or csv.

  Exemple d'appel

  {"name": "optimize-dataset", "arguments": {"input": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• optimize-google-tag≈ 184 tokens

  Rebuild GA4 gtag.js markup from a G- measurement ID. Use on existing GA4 snippets, not GTM containers or consent setup. Returns replacement HTML with async loading and a config call, or original input if no G- ID exists. Review lost settings and consent.

  Paramètres, retour & exemple (1)

  Paramètres

  • html · string · requis
    Existing HTML snippet containing the Google Analytics tag to optimize.

  Exemple d'appel

  {"name": "optimize-google-tag", "arguments": {"html": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• strip-ansi≈ 155 tokens

  Strip terminal ANSI escape codes from text. Use to make colorized logs readable for indexing or display. Returns plain text without interpreting log entries.

  Paramètres, retour & exemple (1)

  Paramètres

  • text · string · requis
    Terminal output string containing optional ANSI escape sequences.

  Exemple d'appel

  {"name": "strip-ansi", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agent-tools-mcp.yvan11.workers.dev/mcp