ai.surfingdog/search

Est-ce que ai.surfingdog/search est sûr ?

Au dernier audit MCP Hub, le serveur MCP « ai.surfingdog/search » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• ask_business≈ 1638 tokens

  Sends your person's question to a business's own inbox, as a message. Only for a business in this directory with its own inbox (its listing names one), and only when your person asked you to contact it. The business can answer your person by email, at the address they agreed to give it; never a phone number. This network carries the request and keeps only a record that it was delivered. The answer is the inbox's: the business's own words, and an access token to read the request's state.

  Paramètres, retour & exemple (6)

  Paramètres

  • domain · string · requis
    The business's domain, as search_businesses or get_business gave it, like bikes.example.
  • consent · boolean · requis
    true only when your person agreed to give this business their email address for its answer. Without it nothing is sent.
  • contact · object · requis
    Where the business can answer. Only an email address and a name: never a phone number.
  • message · string · requis
    What your person wants to ask, in their words.
  • subject · string · optionnel
    A few words the business sees first.
  • language · string · optionnel
    The language your person wants the answer in, as a tag like en, pt or pt-BR.

  Exemple d'appel

  {"name": "ask_business", "arguments": {"domain": "texte", "consent": true, "contact": {}, "message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"item": {}, "kept": "texte", "inbox": "texte", "times": [], "answer": "texte", "confirm": {}, "outcome": "delivered", "service": {}, "business": "texte", "replayed": true, "services": [], "timezone": "texte"}}

• check_business≈ 5183 tokens

  Checks what an AI agent can do with a business's website: message, book, order, sign up, pay, change or cancel. Waits up to 25 seconds; if the read isn't finished, returns what it found so far, and you call it again for the score. A result read in the last hour is answered as it is; after a business changes its site, set fresh to true to read it again (allowed a few minutes after the last read). A done result also carries door_history: what this network's own reads found of the site's doors, kept for good: when each was seen answering and on how many days, and for a door read every day (a member's, a claimed listing's), from 14 days checked, the share of days every check answered, as a count and a share ("answered 41 of 42 days (97%)"): a day with a failed or a refused check counts as a missed day, and a refused one is shown as refused. Use it when a person asks how agent-ready a business is, or wants to improve their own. To find businesses, use search_businesses instead. A setup link in the answer is for the owner to fill in themselves. Capability ids are defined at https://surfingdog.ai/spec/capabilities/.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    The business's website, as a URL or a bare domain like salon.example.
  • fresh · boolean · optionnel
    Read the site again rather than answer the stored result: for a business that just changed its site. Allowed a few minutes after the last read; before that, the stored result is answered with when to ask again.

  Exemple d'appel

  {"name": "check_business", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "rank": {}, "site": "texte", "badge": {}, "fixes": [], "grade": "A", "level": "listed", "owner": {}, "queue": {}, "rules": {}, "state": "not_checked", "domain": "texte"}}

• check_dns≈ 1144 tokens

  Checks whether AI agents are led from the business's website and DNS to its agent inbox, and whether the inbox answers at inbox.<domain> (or the host given): for a business's own AI. Reads the inbox's DNS record (against target, when given) and manifest, the site's robots.txt (no AI assistant kept out), and five ways the domain can point to the inbox: four on the website (/.well-known/agent-inbox.json, a line in llms.txt, <link rel="agent-inbox">, a schema.org potentialAction) and a _agent-inbox TXT record. ready needs one of the four on the website. Every item not in place comes with the exact record, line or file to add (fix_lines: the text to paste). Reads the site as a browser would, and nothing it asked crawlers not to read; what it read is kept for a minute.

  Paramètres, retour & exemple (3)

  Paramètres

  • host · string · optionnel
    Where the inbox answers, when not inbox.<domain>: the domain itself or a name under it.
  • domain · string · requis
    The business's own domain, like salon.example (a URL is read as its domain).
  • target · string · optionnel
    The CNAME target the host must point to, when known (a hosted inbox's Connect page shows it).

  Exemple d'appel

  {"name": "check_dns", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"host": "texte", "next": "texte", "ways": 1, "items": [], "ready": true, "state": "ready", "domain": "texte", "manifest": "texte", "platform": "wordpress", "site_ways": 1, "checked_at": "texte"}}

• get_business≈ 6982 tokens

  One business's full listing, by its domain: its address (a town and country for one this network found), the week's opening hours and closures, its doors and what each takes, its services, its standing in words, a member's track record (promises kept, broken and still open, and when, once enough have closed; self_reported when it rests on the business's own word, with no score and no count of customers), and how many of its promises closed with each outcome; for one that is not a member, every fact with its source and date; and its doors' history from this network's own reads: when each was first and last seen answering, and on how many days, and for a door read every day (a member's, a claimed listing's), from 14 days checked, the share of days every check answered, as a count and a share ("answered 41 of 42 days (97%)"): a day with a failed or a refused check counts as a missed day, and a refused one is shown as refused. This server takes no orders or payments; the listing names the business's own doors, and request_booking can ask its inbox for a time. Its agentic score, if checked, is at https://surfingdog.ai/b/<domain>. Capability ids are defined at https://surfingdog.ai/spec/capabilities/.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    The business's domain, like ana-salon.example, as search_businesses gave it.

  Exemple d'appel

  {"name": "get_business", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"why": "texte", "city": "texte", "name": "texte", "tags": [], "doors": [], "facts": [], "found": {}, "hours": {}, "inbox": {}, "level": "listed", "place": {}, "proof": "domain"}}

• get_census≈ 1336 tokens

  Monthly counts of what AI agents can do at the websites this network checked: how many an agent can message, book, order from or pay, through which doors, by country, kind of business (group), website platform, where the sites came from (source) or city. Counts only; no business is named. Without edition, the latest published one; without scope, the whole; with a scope and no key, each key's headline counts; with a key, all of its counts. Open data under CC BY 4.0: credit "Surfing Dog census, surfingdog.ai, CC BY 4.0", and "© Overture Maps Foundation" with city counts. Capability ids are defined at https://surfingdog.ai/spec/capabilities/.

  Paramètres, retour & exemple (3)

  Paramètres

  • key · string · optionnel
    One key of the scope: a country code (GB), a group slug, a platform slug, a source, or a city slug (madrid). Without it, every key of the scope with its headline counts.
  • scope · string · optionnel
    all (the default), country, group (kind of business), platform, source (where the sites came from) or city.
  • edition · string · optionnel
    The month, YYYY-MM. Without it, the latest published edition.

  Exemple d'appel

  {"name": "get_census", "arguments": {"key": "texte", "scope": "texte", "edition": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"csv": "texte", "key": "texte", "url": "texte", "json": "texte", "note": "texte", "rows": [], "as_of": "texte", "scope": "texte", "title": "texte", "method": "texte", "status": "published", "edition": "texte"}}

• list_attributes≈ 546 tokens

  The attributes a search may ask for (delivery, walk_ins, wifi…), each with its labels, and the payments accepts takes. Pass keys as attributes to search_businesses, and payments as accepts.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_attributes", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"keys": [], "version": 1, "payments": {}}}

• list_categories≈ 502 tokens

  The categories list: every slug with its English and Portuguese labels and its kind (local_and_retail, or software_and_ai for software, API and AI companies, kept apart). Pass a slug as category to search_businesses.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_categories", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"version": 1, "taxonomy": {}, "categories": [], "place_categories": []}}

• register_business≈ 7000 tokens

  For a business's own AI: put the business in this directory with its doors (MCP, A2A, OpenAPI, an API, UCP, ACP, a platform's door) and its facts: name, what it is (a category of list_categories or a place category, and one line), where (a storefront, a service area, or online with the countries it ships to), its languages, and agree. One call when its proof is already in place; otherwise the answer gives a challenge to put on its domain (a well-known file, its inbox manifest, a DNS record), a key's signature, or a code sent to an address at its domain, and the next call proves it. The answer names every part not taken and why, its readiness level, and what the next level takes. Doors count once this network's crawler has checked them; a door on another host counts only when the site leads to it or its own document names the business's domain. Mail, phone, messaging, forms and web pages are never doors. Every kind of business is listed except adult services, gambling, weapons, tobacco, cannabis and vaping, payday loans and bail bonds. agree accepts the listing terms (/bot#terms). Being listed is free, and nothing about the order can be bought.

  Paramètres, retour & exemple (18)

  Paramètres

  • pay · array · optionnel
    Payment tokens of list_attributes.
  • name · string · requis
    As the business writes it.
  • agree · boolean · requis
    The business agrees to be listed by the network's published rules (GET /v1/ranking) and listing terms.
  • doors · array · optionnel
  • hours · object · optionnel
    As a profile's hours: {"timezone": "Europe/Paris", "weekly": {"tue": [["09:00", "19:00"]]}}.
  • proof · object · optionnel
  • where · object · requis
    A storefront needs an address or geo, a service area its radius or countries, online its ships_to.
  • domain · string · requis
    The business's own website domain. A business without a website is not supported yet.
  • locale · string · optionnel
    The language to answer in.
  • category · object · requis
    What the business is: one category, and at most two more.
  • languages · array · requis
    Language tags, like pt or fr-CA.
  • attributes · object · optionnel
    Keys of list_attributes.
  • currencies · array · optionnel
    ISO 4217.
  • price_band · integer · optionnel
    1 (cheapest) to 4.
  • want_inbox · boolean · optionnel
  • claim_token · string · optionnel
    Given by a successful register_business: proof again for 90 days, for this listing only.
  • description · string · requis
    One line on what it does; the first line is at most 160.
  • alternate_names · array · optionnel
    Other names the business goes by; a name longer than the network keeps is dropped (the reference network keeps 60 characters and 4 words at most).

  Exemple d'appel

  {"name": "register_business", "arguments": {"name": "texte", "agree": true, "where": {}, "domain": "texte", "category": {}, "languages": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"card": {}, "level": "listed", "notes": [], "proof": "domain", "detail": "texte", "domain": "texte", "listed": true, "status": "listed", "claimed": true, "dropped": [], "challenge": {}, "next_level": {}}}

• report_door≈ 1041 tokens

  Records how a business's door went (its inbox, MCP, A2A or API) when you used one: it answered (ok), refused (slot_taken, out_of_stock…), the request was your own fault (invalid), it failed (could not connect, a server or tool error), or it needs a person (info); up to 100 uses in one call. A report is private to the business and may make this network check a door that agents say is down (at most twice a day per door, for the doors it reads itself); it changes nothing public by itself, and carries no person and nothing that was said. Reports signed with your own key or your platform's, about businesses your own signed searches here returned, earn a larger reading allowance (this network's /report.md).

  Paramètres, retour & exemple (2)

  Paramètres

  • v · number · requis
  • reports · array · requis

  Exemple d'appel

  {"name": "report_door", "arguments": {"v": 1, "reports": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"next": "texte", "ignored": [], "accepted": []}}

• request_booking≈ 1954 tokens

  Without start: the business's free times for one of its services, read from its own inbox; nothing is sent. With start: asks the business's own inbox to book that time for your person. A priced service first answers with its terms (confirm): show them to your person, and send terms_sha only after their yes. Only for a business in this directory with its own inbox (its listing names one), and only when your person asked you to contact it. The business can answer your person by email, at the address they agreed to give it; never a phone number. This network carries the request and keeps only a record that it was delivered.

  Paramètres, retour & exemple (10)

  Paramètres

  • from · string · optionnel
    Without start: the first day to show free times for (today when left out).
  • notes · string · optionnel
    Anything the business should know.
  • start · string · optionnel
    When your person wants it to start, from this tool's free times. Leave it out to see them first.
  • domain · string · requis
    The business's domain, as search_businesses or get_business gave it, like bikes.example.
  • consent · boolean · optionnel
    Needed with start: true only when your person agreed to give this business their email address.
  • contact · object · optionnel
    Needed with start: where the business can answer.
  • service · string · requis
    The service's name, as get_business lists it, or its id from this tool's answer.
  • language · string · optionnel
    The language your person wants the answer in, as a tag like en, pt or pt-BR.
  • terms_sha · string · optionnel
    The confirm.terms_sha of the last answer, sent only after your person said yes to its summary.
  • party_size · integer · optionnel
    How many people it is for, when that matters.

  Exemple d'appel

  {"name": "request_booking", "arguments": {"domain": "texte", "service": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"item": {}, "kept": "texte", "inbox": "texte", "times": [], "answer": "texte", "confirm": {}, "outcome": "delivered", "service": {}, "business": "texte", "replayed": true, "services": [], "timezone": "texte"}}

• request_quote≈ 1778 tokens

  Asks a business for a price, in its own inbox, for something your person describes. Only for a business in this directory with its own inbox (its listing names one), and only when your person asked you to contact it. The business can answer your person by email, at the address they agreed to give it; never a phone number. This network carries the request and keeps only a record that it was delivered. The answer is the inbox's: the business's own words, and an access token to read the request and its quote.

  Paramètres, retour & exemple (8)

  Paramètres

  • what · string · requis
    What the quote is for, in a few words: Wheel rebuild, Kitchen tiling.
  • domain · string · requis
    The business's domain, as search_businesses or get_business gave it, like bikes.example.
  • consent · boolean · requis
    true only when your person agreed to give this business their email address for its answer. Without it nothing is sent.
  • contact · object · requis
    Where the business can answer. Only an email address and a name: never a phone number.
  • details · string · requis
    What the business needs to know to give a price.
  • language · string · optionnel
    The language your person wants the answer in, as a tag like en, pt or pt-BR.
  • quantity · integer · optionnel
    How many, when it is a number of things.
  • needed_by · string · optionnel
    The date your person needs it by, as YYYY-MM-DD.

  Exemple d'appel

  {"name": "request_quote", "arguments": {"what": "texte", "domain": "texte", "consent": true, "contact": {}, "details": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"item": {}, "kept": "texte", "inbox": "texte", "times": [], "answer": "texte", "confirm": {}, "outcome": "delivered", "service": {}, "business": "texte", "replayed": true, "services": [], "timezone": "texte"}}

• search_businesses≈ 6033 tokens

  Find businesses in the directory by what they do (query, category: a group or a place category), where (near, country), the language they speak, whether they are open now, their attributes (list_attributes), price band, what their doors take and how they are paid (accepts: kinds, and ways to pay such as card, apple_pay, paypal or x402; each result's accepts.pay_with says whether the business declared each or it was only seen, on its site or in its shop platform's standard profile, and where), whether a door answers asks or quotes (requestable), the type of door, their readiness level, whether they have an inbox, and whether they are members, registered or found. Results come in the directory's published order, which nobody can pay to change; every filter only leaves businesses out. This server takes no orders or payments and books nothing itself: request_booking asks a business's own inbox for a time, and the business confirms it there. Each result lists the business's own doors. A business this network found on its own website is marked as found, with the date it was checked; a local one is listed once its site is matched to its entry on public maps or in a business register, or its owner proves the site is theirs. Software, API and AI companies (category software-ai) are kept apart: they come only when category names that group or one of its categories, query names their kind, or every word of query is in one's name. Pages of up to 20; pass next_cursor as cursor for more.

  Paramètres, retour & exemple (18)

  Paramètres

  • near · object · optionnel
    Only businesses within radius_km of this point, each with its distance.
  • level · string · optionnel · listed | readable | askable | bookable | orderable | payable
    At this readiness level or above: askable (an AI can ask), bookable (a door takes bookings), orderable (a door takes orders), payable. bookable and orderable are one rung, and each asks for what the doors take. Nothing below askable is listed yet. This only leaves businesses out.
  • limit · integer · optionnel
    How many to return: 10 when left out.
  • order · string · optionnel · rank | nearest
    rank: the published order (the default); nearest: by distance, and it needs near.
  • query · string · optionnel
    A few words about what the business does or where, like "florist" or "coffee singapore". Every word must match its name, town, description, categories, tags or services, ignoring capitals and accents. Words like "open" or "near me" belong in open_now and near instead.
  • cursor · string · optionnel
    next_cursor from the previous answer, for the next page of the same search.
  • source · array · optionnel
    member (through its inbox), registered (by the business), found (by this network on the business's own website); any of them. This only leaves businesses out.
  • accepts · array · optionnel
    What its live doors take and what it accepts as payment, all of them: ask, quote, book, order, pay, or a payment from list_attributes like card or pix. This only leaves businesses out.
  • country · string · optionnel
    A country code like PT or BR: a business located there, serving it or shipping there. This only leaves businesses out.
  • category · string · optionnel
    A slug from list_categories, like hair-beauty, or a place category id like hair_salon, with every category below it. Its label or a synonym works too. Under rules before version 7 any other word matches the tags businesses gave themselves; from version 7 it is an error that names up to 5 categories to try.
  • language · string · optionnel
    Only businesses that speak this language, as a tag like pt or en; pt also finds pt-br.
  • open_now · boolean · optionnel
    true: only businesses open right now by the hours they published. One that published no hours is left out.
  • door_type · array · optionnel
    A live door of any of these types: inbox, mcp, a2a, openapi, api, ucp, acp, nlweb, other, "platform" for any platform, or platform:<name>. This only leaves businesses out.
  • has_inbox · boolean · optionnel
    true: with an inbox door; false: without one. This only leaves businesses out.
  • item_type · string · optionnel · booking | order | quote_request | message
    Only businesses whose inbox takes this.
  • attributes · array · optionnel
    Keys from list_attributes, like "delivery" or "walk_ins", or key=value for one with values; every one must hold. This only leaves businesses out.
  • price_band · string · optionnel
    1 (cheapest) to 4, as "2" or a range "1-2". This only leaves businesses out.
  • requestable · string · optionnel · ask | quote
    A live door that declared it answers this kind. This only leaves businesses out.

  Exemple d'appel

  {"name": "search_businesses", "arguments": {"near": {}, "level": "listed", "limit": 1, "order": "rank", "query": "texte", "cursor": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"rules": {}, "report": {}, "businesses": [], "next_cursor": "texte"}}

• start_inbox≈ 654 tokens

  For a business's own AI: the link where the business's owner sets up their own agent inbox, hosted by Surfing Dog, at inbox.<domain>. Give the owner the link; they check the details and type their own email there. This tool never signs anyone up and takes no email. It says so when the business already runs an inbox, or when one cannot be hosted for the domain (an address at a hosting platform, where no DNS record can be added). The open-source inbox, to run on the business's own servers instead, is always named. After the owner adds the DNS record, check_dns says whether agents can reach the inbox.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    The business's own domain, like salon.example (a URL is read as its domain).

  Exemple d'appel

  {"name": "start_inbox", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"why": "ours", "host": "texte", "detail": "texte", "domain": "texte", "status": "available", "platform": "texte", "self_host": "texte", "start_url": "texte"}}

• update_business≈ 7285 tokens

  For a business's own AI: correct its listing (set any field register_business takes), add or remove doors, turn the listing off or on, or hide its agentic score result (score_page), with its claim_token or a proof as register_business asks. opt_out stops this network listing the site (list), reading it (crawl), or both (all). With no proof it removes only a listing nobody claimed; a claimed or registered listing is taken out only with its claim_token or a proof as strong as its claim.

  Paramètres, retour & exemple (8)

  Paramètres

  • set · object · optionnel
    Any field register_business takes, but domain.
  • doors · object · optionnel
  • proof · object · optionnel
  • domain · string · requis
  • listing · string · optionnel · on | off
    off hides it from search and keeps it in the index.
  • opt_out · object · optionnel
    Stops the listing (list), the crawl (crawl) or both (all). Without a claim token or a proof it removes an entry the network found that nobody claimed, and never a claimed or registered listing, which needs its claim_token or a proof as strong as its claim. A business that opted out comes back with a domain or key proof.
  • score_page · string · optionnel · hidden | shown
    hidden takes the business's agentic score result page out of view, its ranks and leaderboards included; shown brings it back. It needs the claim token or a proof, as set does.
  • claim_token · string · optionnel
    Given by a successful register_business: proof again for 90 days, for this listing only.

  Exemple d'appel

  {"name": "update_business", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"card": {}, "level": "listed", "notes": [], "proof": "domain", "detail": "texte", "domain": "texte", "listed": true, "status": "listed", "claimed": true, "dropped": [], "challenge": {}, "next_level": {}}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://surfingdog.ai/mcp