app.baozugong/landlord

Est-ce que app.baozugong/landlord est sûr ?

Au dernier audit MCP Hub, le serveur MCP « app.baozugong/landlord » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• connect_my_account≈ 805 tokens

  Account status: whether this session is connected to a 包租公 · YieldLord account, which tier it is on, how many credits are left, and for Gold whether it is a trial or paid and when it ends. Call this when the user asks "am I connected" or "how many credits do I have left", and when they ask about THEIR OWN positions, portfolio, morning brief or realized history — anonymous access cannot see those, and this explains what connecting unlocks and gives the link. Called with no arguments it returns text and a URL only. Call it again with start_authorization=true once the user has an account, to begin the OAuth flow — or, if you can't receive a browser redirect, with start_link=true (a link the user approves, then pickup=<pickup> gives you the token; nothing to copy back). A connected free account can also start its free Gold trial here (start_trial=true — always a two-step confirm with the user) or get the link to buy Gold. Call it again right after the user finishes signing in: for a connected account the reply lists every tool the connection unlocked (the tool list you fetched before sign-in only has the public ones — re-list tools after connecting).

  Paramètres, retour & exemple (6)

  Paramètres

  • pickup · string · optionnel
    The pickup from start_link. Returns pending until the user approves, then the access token (once).
  • confirm · string · optionnel
    The confirm_token from the previous start_trial call, sent only after the user said yes.
  • agent_name · string · optionnel
    With start_link: your name as the user knows you (shown on the approval page).
  • start_link · boolean · optionnel
    Easiest way to connect if you can't receive a browser redirect (you run on a server): returns a link and a code to give the user, plus a pickup for you. The user signs in and approves on that page — nothing to copy back. Then call again with pickup=<pickup> to receive the access token.
  • start_trial · boolean · optionnel
    Connected free accounts only: start the free Gold trial. Without `confirm` nothing is started — it returns a question for the user and a confirm_token. Ask the user; only after they clearly say yes, call again with start_trial=true and confirm=<confirm_token>. Never confirm on the user's behalf.
  • start_authorization · boolean · optionnel
    Begin the OAuth flow now. The call answers HTTP 401 with a WWW-Authenticate header pointing at this server's protected-resource metadata; follow it (dynamic client registration, PKCE S256, public client, no secret) and give the user the sign-in link to approve. Use it only after the user has an account — a plain link cannot open the authorize page, because that URL needs your own client_id, redirect_uri and code_challenge. If you can't receive a browser redirect (you run on a server, not on the user's computer), register this server's /api/mcp/callback page as your redirect_uri — the user copies the full URL from it back to you.

  Exemple d'appel

  {"name": "connect_my_account", "arguments": {"pickup": "texte", "confirm": "texte", "agent_name": "texte", "start_link": true, "start_trial": true, "start_authorization": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• explain_option≈ 351 tokens

  Explain ONE specific option contract the user named — ticker + put/call + strike + expiry. Unlike explain_score and compare_candidates, which can only explain contracts the engine already picked, this prices and scores the exact contract you ask about, including strikes the screener would never surface (deep in the money, far out of the money). Returns the live quote, Greeks, premium and collateral per contract, annualized yield, the chance it expires worthless (the SELLER's side), and the RENT score. If we cannot price it (no open interest, no bid, strike does not exist) it says so and why, rather than substituting a different contract. Output is analysis, not a recommendation to trade.

  Paramètres, retour & exemple (7)

  Paramètres

  • lang · string · optionnel · zh | zh_tw | en
  • risk · string · optionnel · conservative | balanced | aggressive
  • type · string · requis · put | call
  • expiry · string · requis
    YYYY-MM-DD
  • intent · string · optionnel · premium | csp | covered_call | collar
    defaults to csp for a put, covered_call for a call
  • strike · number · requis
  • ticker · string · requis

  Exemple d'appel

  {"name": "explain_option", "arguments": {"type": "put", "expiry": "texte", "strike": 1, "ticker": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_recommendations≈ 352 tokens

  Find RENT-ranked option income candidates (candidates only, not advice) for a ticker. Set defined_risk=true for CREDIT SPREADS (bull put / bear call) instead of single-leg naked selling; omit it and we default to whatever this user actually trades. Output is analysis, not a recommendation to trade.

  Paramètres, retour & exemple (7)

  Paramètres

  • risk · string · optionnel · conservative | balanced | aggressive
  • wing · string · optionnel · tight | narrow | balanced | wide
    Spread width, only meaningful with defined_risk=true: tight = least buying power, wide = more credit.
  • intent · string · optionnel · premium | csp | covered_call | collar
  • ticker · string · requis
  • direction · string · optionnel · bullish | bearish | neutral
  • timeframe · string · optionnel
    target DTE in days, e.g. 21/30/45 (default 30)
  • defined_risk · boolean · optionnel
    true = attach a protective long leg → CREDIT SPREAD (bull put / bear call). false = single-leg naked selling. Omit to use what this user actually trades (inferred from their open positions and last pick, never a silent guess — the result says which was used and why).

  Exemple d'appel

  {"name": "find_recommendations", "arguments": {"ticker": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_market_climate≈ 84 tokens

  Current rent climate (market regime + VIX/IV env + macro proximity → seller-friendliness read). Output is analysis, not a recommendation to trade.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_market_climate", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://baozugong.app/api/mcp