ai.popdot/popdot-mcp

Est-ce que ai.popdot/popdot-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « ai.popdot/popdot-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 7 outils

• answer_trial_canary≈ 610 tokens

  Answer the short safety questions for a trial opened by try_domain, then go live. Pass the trialHandle and your answers; on a clean pass this provisions a live 24-hour subdomain and returns a one-time claim token you can redeem for your own agent identity.

  Paramètres, retour & exemple (3)

  Paramètres

  • answers · array · requis
    Your answers to the safety questions, one { question_id, response } per question.
  • publicKey · string · optionnel
    Optional, on the call that goes live. Your Ed25519 public key (standard padded base64 of the raw 32 bytes) to claim your agent identity in the same call. Requires headers X-Popdot-Timestamp (Unix seconds) and X-Popdot-Signature: an Ed25519 signature by this key over {timestamp}\nPOST\n/api/mcp\n{sha256 hex of the raw request body}. Omit it to receive a claim token for upgrade_trial instead.
  • trialHandle · string · requis
    The trialHandle returned by try_domain.

  Exemple d'appel

  {"name": "answer_trial_canary", "arguments": {"answers": [], "trialHandle": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "sigil": {}, "reason": "texte", "status": "texte", "sigilId": "texte", "trialId": "texte", "upgrade": {}, "expiresAt": "texte", "retryable": true, "claimError": {}, "claimToken": "texte", "candidateId": "texte"}}

• check_availability≈ 282 tokens

  Check whether a specific subdomain is available on a given domain. Returns true if the subdomain can be rented. Tip: the subdomain and domain read as one phrase, so pick a single lowercase label that is funny or fits the domain's theme (for example iamyour.slopmommy.com or analien.lostmyluggage.com). A delightful combination is the point of a Popdot AI address.

  Paramètres, retour & exemple (2)

  Paramètres

  • domainId · string · requis
    The parent domain: its id from search_domains, or its name (for example addedtocart.shop)
  • subdomain · string · requis
    The subdomain label to check (e.g., 'myproject' for myproject.example.com)

  Exemple d'appel

  {"name": "check_availability", "arguments": {"domainId": "texte", "subdomain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"reason": "texte", "fullUrl": "texte", "domainId": "texte", "available": true, "subdomain": "texte", "fullDomain": "texte"}}

• get_price_quote≈ 388 tokens

  Get a price quote for renting a specific domain for a given duration. Returns the computed rental cost, tier info, and pricing breakdown.

  Paramètres, retour & exemple (2)

  Paramètres

  • domainId · string · requis
    The domain to price: its id from search_domains, or its name (for example addedtocart.shop)
  • duration · string · requis · PT1H | PT4H | P1D | P7D | P30D
    ISO 8601 duration: PT1H (1 hour), PT4H (4 hours), P1D (1 day), P7D (1 week), P30D (30 days)

  Exemple d'appel

  {"name": "get_price_quote", "arguments": {"domainId": "texte", "duration": "PT1H"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"tier": "texte", "hours": 1, "feeNote": "texte", "currency": "texte", "domainId": "texte", "duration": "texte", "available": true, "tierScore": 1, "totalCost": 1, "fullDomain": "texte", "serviceFee": 1, "ownerPayout": 1}}

• rent_domain≈ 1121 tokens

  Rent a subdomain, paying per-transaction with USDC on Base (x402). No funded account or stored balance: each rental is a single on-chain payment. Requires agent authentication. Two phases: call once with intentMandateId, domainId, subdomain, duration, and the payerAddress + payerProof for the wallet you will pay from, to get the exact x402 payment challenge; pay it on Base; then call again with paymentId, txHash, and fromAddress to settle and receive the live rental plus a Web Identity Credential. Request an x402 payment challenge to rent a subdomain. Durations PT1H, PT4H, P1D, P7D, P30D. Returns the exact USDC amount and recipient on Base.

  Paramètres, retour & exemple (10)

  Paramètres

  • txHash · string · optionnel
    (phase 2) The on-chain transaction hash of your USDC payment on Base.
  • domainId · string · requis
    The unique ID of the domain to rent on
  • duration · string · requis · PT1H | PT4H | P1D | P7D | P30D
    ISO 8601 duration: PT1H (1 hour), PT4H (4 hours), P1D (1 day), P7D (1 week), P30D (30 days)
  • paymentId · string · optionnel
    (phase 2) The paymentId returned by the phase-1 challenge.
  • subdomain · string · requis
    The subdomain label to rent (e.g., 'myproject' for myproject.example.com)
  • payerProof · string · optionnel
    (phase 1) EIP-191 personal_sign signature proving control of payerAddress. Always required with payerAddress.
  • fromAddress · string · optionnel
    (phase 2) The wallet you paid from (must match the challenge's bound payer).
  • payerAddress · string · optionnel
    (phase 1) The 0x wallet you will pay from. Required on every challenge; a wallet registered on your Sigil does not substitute for it.
  • intentMandateId · string · requis
    The ID of the active Intent Mandate authorizing this purchase
  • payerProofIssuedAt · string · optionnel
    (phase 1, optional) ISO 8601 timestamp of the payerProof, within 5 minutes of the request.

  Exemple d'appel

  {"name": "rent_domain", "arguments": {"domainId": "texte", "duration": "PT1H", "subdomain": "texte", "intentMandateId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"next": "texte", "reason": "texte", "rental": {}, "status": "texte", "payment": {}, "rentalId": "texte", "settleUrl": "texte", "credential": "texte", "provisioning": {}, "tierProgression": {}, "sigilEligibility": {}, "identityConfidence": {}}}

• search_domains≈ 459 tokens

  Search domains available for rent on Popdot AI. Use this when an agent needs a web address: a verifiable web identity, a temporary deployment address, or a persistent web presence. Returns domains with pricing, tier, and availability. No auth required.

  Paramètres, retour & exemple (5)

  Paramètres

  • limit · number · optionnel
    Maximum number of results to return (default: 20, max: 50)
  • query · string · optionnel
    Search query to match against domain names, tags, and categories
  • emotion · string · optionnel · comedy | absurd | playful | edgy | wholesome | professional | trustworthy
    Filter by the reaction the domain is built to elicit: comedy, absurd, playful, edgy, wholesome, professional, trustworthy. Unknown values are ignored.
  • maxPrice · number · optionnel
    Maximum daily price in USD
  • minPrice · number · optionnel
    Minimum daily price in USD

  Exemple d'appel

  {"name": "search_domains", "arguments": {"limit": 1, "query": "texte", "emotion": "comedy", "maxPrice": 1, "minPrice": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"domains": [], "pagination": {}}}

• try_domain≈ 1249 tokens

  Launch a memorable public URL for something you built. Free for 24 hours, no signup and no wallet required. Tell it your goal and an https target to point the address at; it opens a trial, asks a short safety question or two, and on a clean pass returns a live subdomain plus a one-time claim token you can redeem for your own agent identity. Use it to demo a deployment with a real address before a paid rental. One trial per agent. Expires in 24 hours.

  Paramètres, retour & exemple (10)

  Paramètres

  • goal · string · requis
    What you built and want to put online, in a sentence (used to name and describe the address).
  • email · string · optionnel
    Optional email to associate with the trial. Never returned.
  • target · string · optionnel
    An https URL to point the address at. Content hosting is not yet available, so a live external target is required.
  • publicKey · string · optionnel
    Optional, on the call that goes live. Your Ed25519 public key (standard padded base64 of the raw 32 bytes) to claim your agent identity in the same call. Requires headers X-Popdot-Timestamp (Unix seconds) and X-Popdot-Signature: an Ed25519 signature by this key over {timestamp}\nPOST\n/api/mcp\n{sha256 hex of the raw request body}. Omit it to receive a claim token for upgrade_trial instead.
  • autoSelect · boolean · optionnel
    Let Popdot AI pick an available subdomain from your goal when you do not provide preferredSubdomain.
  • trialHandle · string · optionnel
    (retry only) The trialHandle returned by the first call. Echo it back with your answers.
  • desiredEmotion · string · optionnel · comedy | absurd | playful | edgy | wholesome | professional | trustworthy
    Preferred vibe of the parent domain: comedy, absurd, playful, edgy, wholesome, professional, trustworthy. Unknown values are ignored.
  • inputResponses · array · optionnel
    (retry only) Your answers to the safety questions, one { id, response } per requested input.
  • analyticsConsent · boolean · optionnel
    Record operator consent to trial analytics for this address.
  • preferredSubdomain · string · optionnel
    The subdomain label you want (e.g. 'mydemo'). Omit and set autoSelect:true to have one picked for you.

  Exemple d'appel

  {"name": "try_domain", "arguments": {"goal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "next": "texte", "sigil": {}, "domain": "texte", "sigilId": "texte", "trialId": "texte", "upgrade": {}, "expiresAt": "texte", "questions": [], "subdomain": "texte", "claimError": {}, "claimToken": "texte"}}

• upgrade_trial≈ 1088 tokens

  Turn a free trial into your own paid, persistent address in one call, no human required. Claim the agent identity your trial created (a Nascent Sigil, its sigilId came back when the trial went live) by proving you hold your Ed25519 key: send the one-time claimToken, the sigilId, your publicKey, a Unix timestamp and a signature by your key over popdot-claim/1\n{timestamp}\n{sigilId}\n{sha256 hex of claimToken}\n{publicKey}. The claim token works until 30 days after the trial ends. If you supply a wallet, this also returns the exact USDC-on-Base (x402) challenge to keep the trial's exact URL live on a paid rental. No wallet yet? You still get your identity; fund a USDC wallet on Base later and pay it yourself.

  Paramètres, retour & exemple (9)

  Paramètres

  • sigilId · string · requis
    The sigilId returned with the claim token. It must match the identity the token belongs to.
  • duration · string · optionnel
    Optional rental length: an ISO 8601 duration (PT1H, PT4H, P1D, P7D, P30D) or hourly/daily/weekly/monthly. Defaults to PT1H (1 hour).
  • publicKey · string · requis
    Your Ed25519 public key as standard padded base64 of the raw 32 bytes (44 characters). You keep the private key.
  • signature · string · requis
    Standard padded base64 of the 64-byte Ed25519 signature over the popdot-claim/1 message.
  • timestamp · string · requis
    Integer Unix seconds, no leading zeros, within 300 seconds of now. Part of the signed message.
  • claimToken · string · requis
    The one-time claim token returned by try_domain / answer_trial_canary.
  • payerProof · string · optionnel
    Optional EIP-191 personal_sign signature proving control of payerAddress.
  • payerAddress · string · optionnel
    Optional 0x wallet you will pay from. Provide it (with payerProof) to receive a self-pay x402 challenge.
  • payerProofIssuedAt · string · optionnel
    Optional ISO 8601 timestamp of the payerProof, within 5 minutes.

  Exemple d'appel

  {"name": "upgrade_trial", "arguments": {"sigilId": "texte", "publicKey": "texte", "signature": "texte", "timestamp": "texte", "claimToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"sigil": {}, "upgrade": {}, "walletGuidance": "texte", "tierProgression": {}, "sigilEligibility": {}, "identityConfidence": {}}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://popdot.ai/api/mcp