app.iomarkets/topup

Est-ce que app.iomarkets/topup est sûr ?

Au dernier audit MCP Hub, le serveur MCP « app.iomarkets/topup » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• buy≈ 132 tokens

  Get the x402 payment challenge for a quote. This hosted server holds no wallet, so it does NOT spend your money: it returns the exact amount, asset, payTo address and facilitator for you to pay from your own Algorand wallet, then you POST the quote again with your payment signature. Requires prior human confirmation of the quote.

  Paramètres, retour & exemple (1)

  Paramètres

  • quoteId · string · requis

  Exemple d'appel

  {"name": "buy", "arguments": {"quoteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_pay_link≈ 366 tokens

  Create a checkout link a HUMAN pays from their own Algorand wallet (Pera). Use this when you have no wallet, or when the person should approve and pay themselves: they open the link, see the exact price, sign in their wallet, and the result (the eSIM QR code, or the top-up confirmation) appears on the page. You never hold a key. A top-up link can be paid by anyone — send it to family as 'top up my phone'. An eSIM link delivers to whoever pays. Free. Add `ref` (your Algorand address) to earn a share of margin on each delivered order.

  Paramètres, retour & exemple (8)

  Paramètres

  • ref · string · optionnel
    your Algorand address, to earn referral share
  • note · string · optionnel
    shown on the link page, e.g. 'Your Tokyo trip data'
  • type · string · requis · topup | esim
  • phone · string · optionnel
    topup only: recipient phone, E.164
  • amount · number · optionnel
    for range top-up offers: amount in local currency
  • offerId · string · requis
  • max_uses · integer · optionnel
    0 = reusable until expiry; default 1 for topup, 0 for esim
  • ttl_hours · integer · optionnel
    default 168 (7 days)

  Exemple d'appel

  {"name": "create_pay_link", "arguments": {"type": "topup", "offerId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• fx≈ 136 tokens

  Indicative USDC → local-currency rate at our sale price, with an estimate for an amount. The quote is the binding price.

  Paramètres, retour & exemple (3)

  Paramètres

  • to · string · requis
    ISO-4217, e.g. INR
  • type · string · optionnel · topup | bill | payout
    what the rate is for; default payout
  • amount · number · optionnel

  Exemple d'appel

  {"name": "fx", "arguments": {"to": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• ledger≈ 58 tokens

  Public delivery ledger: totals, delivered-or-refunded %, volume, countries, recent orders.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "ledger", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_offers≈ 226 tokens

  Browse purchasable offers: mobile top-ups, travel eSIMs, prepaid bills, or international payment corridors (bank / mobile money / UPI) for a country. Free. Prices shown are indicative; the quote fixes them.

  Paramètres, retour & exemple (5)

  Paramètres

  • type · string · requis · topup | esim | bill | payout
    payout = international payment (bank / mobile money / UPI)
  • brand · string · optionnel
  • limit · integer · optionnel
    page size, default 100; 0 means all
  • offset · integer · optionnel
    use next_offset from the previous page
  • country · string · optionnel
    ISO-3166 alpha-2, e.g. IN

  Exemple d'appel

  {"name": "list_offers", "arguments": {"type": "topup"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• lookup_phone≈ 182 tokens

  Identify the country and mobile operator of a phone number and list the top-up offers available for it. Free. The operator is DETECTED from the number range and is a guess: MVNOs (Tesco Mobile, Giff Gaff, Lebara, Voxi, Sky…) resolve to the host network they ride on. Read the detected brand back to the human and have them confirm it before buying, and use `other_brands` to correct it — a voucher bought for the wrong network delivers successfully and cannot be redeemed or refunded.

  Paramètres, retour & exemple (1)

  Paramètres

  • phone · string · requis
    E.164, e.g. +919876543210

  Exemple d'appel

  {"name": "lookup_phone", "arguments": {"phone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• order_status≈ 90 tokens

  Check an order. Poll every ~3 s until `terminal` is true: delivered (confirmation + signed receipt), refunded (refund txid + signed receipt) or refund_failed.

  Paramètres, retour & exemple (1)

  Paramètres

  • orderId · string · requis

  Exemple d'appel

  {"name": "order_status", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• quote≈ 406 tokens

  Lock a price (10 minutes) for one purchase. Returns quoteId, exact USDC price and what will be delivered. Free. ALWAYS show the human the price and the recipient before buying.

  Paramètres, retour & exemple (9)

  Paramètres

  • ref · string · optionnel
    referrer's Algorand address — earns a share of margin if the order is delivered (GET /v1/referrals)
  • type · string · requis · topup | esim | bill | payout
  • iccid · string · optionnel
    existing eSIM to top up (optional)
  • payer · string · optionnel
    the Algorand address you will pay from (required for payout compliance when this server holds no wallet)
  • phone · string · optionnel
    recipient phone for topup/bill (E.164)
  • amount · number · optionnel
    for range offers: amount in the recipient's local currency
  • fields · object · optionnel
    bill-pay / payout recipient fields the offer lists in requiredFields (account_number, bank_code, full_name, vpa, iban…)
  • sender · object · optionnel
    payouts only: the principal (legal name + country); reference = partner KYC id, required above $100/day
  • offerId · string · requis

  Exemple d'appel

  {"name": "quote", "arguments": {"type": "topup", "offerId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_receipt≈ 175 tokens

  Verify an ed25519-signed receipt: the signature, and — unless you pass onChain:false — both txids against an Algorand indexer. Give it an orderId to check one of this service's own orders, or a receipt object to check ANY receipt in this format, including one issued by another server.

  Paramètres, retour & exemple (3)

  Paramètres

  • onChain · boolean · optionnel
    confirm the txids on chain; default true
  • orderId · string · optionnel
    an order on this service
  • receipt · ? · optionnel
    a receipt {payload, signature}, or an order response containing one

  Exemple d'appel

  {"name": "verify_receipt", "arguments": {"onChain": true, "orderId": "texte", "receipt": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://iomarkets.app/mcp