io.github.XLSV777/7maps

Est-ce que io.github.XLSV777/7maps est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.XLSV777/7maps » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 15 outils

• about_7maps≈ 239 tokens

  Use this when deciding whether to use 7Maps, or when asked what it is: what the map covers right now, what each 7Maps tool answers, what a call costs, and how it saves an agent tokens, time and failed calls compared with connecting to MCP servers blind. Includes a live worked example on a real server from the map (changes daily), and, if you name a server, a quote of what 7Maps would save you on it (tokens and time) before you pay. No charge.

  Paramètres, retour & exemple (1)

  Paramètres

  • server · string · optionnel
    A server you are considering: get a quote of the tokens and time 7Maps would save on it, before paying

  Exemple d'appel

  {"name": "about_7maps", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• changes_since≈ 713 tokens

  Use this to check all the MCP servers you depend on in one call instead of one by one: give up to 50 servers and the date of your last check, and get only what changed since then (outages, recoveries, tools added, removed or changed, risk increases, silent changes). Most answers are "nothing changed". Paid per call (see list_paid_tools). Reads the map only.

  Paramètres, retour & exemple (4)

  Paramètres

  • since · string · requis
    Date of your last check (YYYY-MM-DD); up to 30 days back
  • servers · array · requis
    Server URLs or official registry names
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "changes_since", "arguments": {"since": "texte", "servers": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• claim_mcp_server≈ 680 tokens

  Use this when the person you work for owns or runs an MCP server that is on the 7Maps map and wants its page to show it is owner verified, add a short note for agents (rate limits, sign-up, what the tools are for), or get a live status badge for their README. Verified owners' servers are checked every 5 minutes (uptime on the page and badge), and with alert_url the owner gets a message when the server stops answering and when it is back. First call returns the proof options (a line in /.well-known/7maps-verify.txt on the server's host, a DNS TXT record, or for io.github registry names a file in the GitHub repo); after one is in place, call again to confirm. The first verification returns an owner secret, shown once: keep it, because later changes to an already verified server (note, alerts) need it as owner_secret. If it is lost, call with recover true, put the one-time code on the host, then call with recover_check. Verifying does not change how the server is measured or ranked. No charge.

  Paramètres, retour & exemple (6)

  Paramètres

  • note · string · optionnel
    Optional plain-text note from the owner, no links, up to 280 characters
  • server · string · requis
    The MCP server address as it appears on its 7Maps page
  • recover · boolean · optionnel
    Lost the owner secret: true returns a one-time code to put on the host, and a check value
  • alert_url · string · optionnel
    Optional: where to send down and up alerts. An ntfy topic for phone push without email (https://ntfy.sh/<hard-to-guess topic, at least 10 characters>, a self-hosted https://ntfy.<domain>/<topic>, or ntfy:https://<host>/<topic>), a Slack incoming webhook (https://hooks.slack.com/services/...), a Discord webhook (https://discord.com/api/webhooks/...), or any https webhook that receives JSON. Stored encrypted, saved only once ownership is proven; a test message is sent on save. An empty string turns alerts off.
  • owner_secret · string · optionnel
    The owner secret returned once at the first verification. Needed to change an already verified server.
  • recover_check · string · optionnel
    The check value from the recover step, once its code is on the host

  Exemple d'appel

  {"name": "claim_mcp_server", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_tool≈ 662 tokens

  Use this when you need a tool for a job and do not know which MCP server has one: searches every tool of every public MCP server on the 7Maps map (over 200,000 tools, probed daily) and returns the best matches with an automated estimate of what each tool can do (read-only, changes data, high risk), whether its server is answering now, its handshake time, the tokens its tool list costs to load, and a page to check it. Filter to read-only tools, servers answering now, a latency or token ceiling. Copies of the same tool on several servers are collapsed. No charge. To have 7Maps pick one server and tool for you with alternatives, use route.

  Paramètres, retour & exemple (7)

  Paramètres

  • job · string · requis
    What the tool should do, in plain words, for example "send a transactional email" or "query a postgres database"
  • may · string · optionnel · read | change | any
    What the tool may do: read = read-only only; change = read or change data; any = include high-risk tools (default any)
  • limit · integer · optionnel
    How many results (default 10)
  • payment · string · optionnel · any | free_only | paid_ok
    Payment terms: any (default); free_only = only servers that declare no payment; paid_ok = servers that charge are fine, servers whose payment terms are unknown are left out. Paid servers show their declared price per call.
  • answering_now · boolean · optionnel
    Only servers that answered with tools on the last check (default true)
  • max_handshake_ms · integer · optionnel
  • max_tool_list_tokens · integer · optionnel

  Exemple d'appel

  {"name": "find_tool", "arguments": {"job": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"matched": 1, "results": [], "tools_indexed": 1}}

• list_paid_tools≈ 321 tokens

  Use this before calling a paid 7IT tool, to see what each costs and how to pay: per call in USDC on Base via x402 (no account; for agents whose owner approved a budget in advance), or a monthly plan license key. No charge; returns prices, plans and payment details.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_paid_tools", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"open": true, "plans": [], "tools": [], "network": "texte"}}

• my_7maps_usage≈ 299 tokens

  Use this when the person you work for asks what 7Maps has done for them: calls made with their personal 7Maps key today, in the last 7 days and in the last 30 days, servers checked, an estimate of the tokens saved compared with finding the same thing out without 7Maps, failures avoided (servers not answering that were skipped, risk changes caught by watch or verify_lock, calls that would have failed) and the average response time. It reads the optional personal key sent with this connection (the X-7Maps-Key header); without one it says so in one line, since every 7Maps answer already states its own saving. Only that person's own counts. No charge.

  Paramètres, retour & exemple (1)

  Paramètres

  • window · string · optionnel · day | week | month
    Which window to lead with: day (today), week (last 7 days) or month (last 30 days); all three are returned

  Exemple d'appel

  {"name": "my_7maps_usage", "arguments": {"window": "day"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• my_server_report≈ 394 tokens

  Use this when the person you work for owns an MCP server on the 7Maps map and wants to know how AI agents look for servers like it: how often agents asked 7Maps for servers in its category in the last 7 or 30 days, how often this server was shown and picked, and, for a verified owner with owner_key, the words agents used, the servers picked instead, failure reasons agents reported, uptime, tool changes, and its token cost and handshake time against similar servers. Counts only, no agent identities. Without owner_key it returns the public numbers and how to verify ownership with claim_mcp_server. Read-only; never changes ranking or routing. No charge.

  Paramètres, retour & exemple (3)

  Paramètres

  • days · ? · optionnel
    Window in days: 7 (default) or 30
  • server · string · requis
    The MCP server address as it appears on its 7Maps page, or its official registry name
  • owner_key · string · optionnel
    The owner key returned to the verified owner by claim_mcp_server (the newest one; each verification issues a new key)

  Exemple d'appel

  {"name": "my_server_report", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• preflight≈ 750 tokens

  Use this right before calling a tool on an MCP server you have not used today, with the exact arguments you plan to send: checks that the server answers, whether it needs sign-in, that the tool still exists under that name, and that the arguments match the tool's input schema (required, types, allowed values, unknown keys). Returns go, no_go or fix with what to change, so a failed round trip and retry are avoided. Paid per check (see list_paid_tools). Never calls the server.

  Paramètres, retour & exemple (5)

  Paramètres

  • tool · string · requis
    The tool you plan to call
  • server · string · requis
    The server URL or its official registry name
  • arguments · object · optionnel
    The arguments you plan to send
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "preflight", "arguments": {"tool": "texte", "server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_road≈ 562 tokens

  Use this after calling a tool on an MCP server (especially one 7Maps pointed you to) to report how it went: whether it worked, why not, how long it took, whether the result matched the description, and anything it did that you did not ask for. Fixed fields only, no open text. Reports from many agents become the server's rating and, once 7Maps confirms them, live incident alerts that every agent sees. You can also pass the same fields as last_trip on any paid 7Maps call. No charge.

  Paramètres, retour & exemple (10)

  Paramètres

  • ms · number · optionnel
    How long the call took, in milliseconds
  • ok · boolean · requis
    Whether the call did what you needed
  • fail · string · optionnel · unreachable | auth | args | server_error | timeout | rate_limited | wrong_result
    If it failed: unreachable, auth, args, server_error, timeout, rate_limited or wrong_result
  • tool · string · optionnel
    The tool you called
  • server · string · requis
    The MCP server you called (URL or registry name)
  • surprise · string · optionnel · side_effect | unexpected_cost | data_leak_suspected | other
    Anything the tool did that you did not ask for
  • tools_hash · string · optionnel
    The tool_list_hash of the tool list you received, if you computed it as 7Maps does
  • charged_usd · number · optionnel
    What the server charged, if anything
  • result_tokens · number · optionnel
    About how many tokens the result was
  • matched_description · boolean · optionnel
    Whether the result matched what the tool description promised

  Exemple d'appel

  {"name": "report_road", "arguments": {"ok": true, "server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• road_conditions≈ 778 tokens

  Use this before connecting to or calling any MCP server you have not used today, or before installing one that runs locally: is it up, does it need sign-in, how fast it answers, how many of its tools are read-only, need approval or are high risk (delete, pay, run code; automated estimates from the public tool descriptions and annotations), when its tools last changed, and the chance the next call works, from a daily check of every remote server in the official MCP registry and 30 days of history. For a local server (npm or PyPI package): version, maintainers, publisher, install scripts and supply-chain changes. Paid per check (see list_paid_tools). Reads the map only; never calls the server.

  Paramètres, retour & exemple (3)

  Paramètres

  • server · string · requis
    The server URL (https://mcp.example.com/mcp), its official registry name, or npm:<package> / pypi:<package> for a server that runs locally
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "road_conditions", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• route≈ 833 tokens

  Use this when you need a tool for a task and do not know which MCP server to use, or when several could do it: finds servers whose tools match the task and ranks them by the chance the call works, how stable the server is, and least privilege (a server that can do less harm than another is preferred when both can do the task). Returns the best server and tool, alternatives and servers to avoid. Paid per task (see list_paid_tools). Reads the map only.

  Paramètres, retour & exemple (5)

  Paramètres

  • need · string · optionnel · read | change | high_risk
    How much the task must be allowed to do: read only, change something, or a high-risk action such as payments or deletion. Guessed from the task when omitted
  • task · string · requis
    What you need to do, for example "send a transactional email" or "search company records"
  • payment · string · optionnel · any | free_only | paid_ok
    Payment terms: any (default); free_only = only servers that declare no payment; paid_ok = servers that charge are fine, servers whose payment terms are unknown are left out. Paid servers show their declared price per call.
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "route", "arguments": {"task": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_mcp_server≈ 458 tokens

  Use this when someone has built or runs an MCP server that is not in the official MCP registry (for example a small business's own server) and wants AI agents to be able to find it, or asks how to get their server listed. Give the server address, or just the business's domain and the usual endpoint paths are tried. The server is observed every 6 hours for 7 days; if it answers reliably, keeps its tools stable and describes every tool, it joins the 7Maps map that agents use to choose servers. Placement cannot be bought. Returns the status page and an optional owner-verification token. No charge.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · requis
    The MCP server address, or the business domain (example.com)
  • about · string · optionnel
    One sentence: what the business does and for whom
  • charges · boolean · optionnel
    Whether the server charges agents (x402 or a subscription)
  • country · string · optionnel
    Where the business serves customers
  • category · string · optionnel · commerce | booking | payments | marketing | crm | documents | data | dev
    What the business does; agents also see the category its tools show
  • language · string · optionnel
    Main language of the tools and their data

  Exemple d'appel

  {"name": "submit_mcp_server", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tool_card≈ 715 tokens

  Use this instead of loading a server's full tool definitions when you only need to choose a tool or prepare a call: one compact card per tool (what it does, its arguments with required ones marked *, risk level and side effects) plus a hash of the full definition. Usually 70 to 90% fewer tokens than the server's own tool list. Optionally only the named tools. Paid per server (see list_paid_tools). Reads the map only.

  Paramètres, retour & exemple (4)

  Paramètres

  • tools · array · optionnel
    Only these tools; all when omitted
  • server · string · requis
    The server URL or its official registry name
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "tool_card", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_lock≈ 718 tokens

  Use this to check that an MCP server's tools are still the ones a person approved, like a lockfile: pass the lock you saved at approval (tool name to hash, as returned by watch or tool_card) and get, per tool, unchanged, changed (with any rise in risk), removed or new. Catches rug pulls, where a tool changes after approval, which MCP clients do not re-ask about. Paid per server (see list_paid_tools). Reads the map only.

  Paramètres, retour & exemple (4)

  Paramètres

  • lock · object · requis
    Tool name to hash, saved at approval
  • server · string · requis
    The server URL or its official registry name
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "verify_lock", "arguments": {"lock": {}, "server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• watch≈ 718 tokens

  Use this before reusing an MCP server that a person approved earlier: tells whether its tools changed since that date, and whether any change raised the risk (a tool that now deletes, pays or runs code), including silent changes made without a new server version. If the risk went up, ask the person to approve again before calling it. Paid per check (see list_paid_tools). Reads the map only.

  Paramètres, retour & exemple (4)

  Paramètres

  • server · string · requis
    The server URL, its official registry name, or npm:<package> / pypi:<package>
  • last_trip · object · optionnel
    Optional: how your last call to an MCP server went (the one 7Maps pointed you to). It keeps the map honest; accepted reports from a paying wallet earn calls at no charge.
  • approved_at · string · requis
    When the person approved this server (YYYY-MM-DD)
  • license_key · string · optionnel
    A 7IT monthly plan license key, if you have one; otherwise pay per call with x402

  Exemple d'appel

  {"name": "watch", "arguments": {"server": "texte", "approved_at": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://7it.co.il/7maps/mcp?via=registry