com.402rates/compass

Est-ce que com.402rates/compass est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.402rates/compass » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• check_payment_terms≈ 277 tokens

  Free inspection of supplied x402 v1/v2 payment terms against the SDK schema and optional network, asset, recipient and atomic budget constraints. Exact EVM profile checks only. No wallet connection, external fetch, signature verification or settlement. Other profiles are explicitly untested.

  Paramètres, retour & exemple (2)

  Paramètres

  • expected · object · optionnel
    Optional exact terms. An atomic budget requires network and asset.
  • challenge · object · optionnel
    Decoded PaymentRequired object from HTTP or MCP structuredContent. No signed payment or credentials.

  Exemple d'appel

  {"name": "check_payment_terms", "arguments": {"expected": {}, "challenge": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• compare_payment_terms≈ 564 tokens

  Free comparison of two supplied unsigned payment challenges for the same resource and method. Exact EVM v1/v2 only. Shows changed amounts, recipients, assets and supported terms, with stable digests. Captures are caller declarations; no origin authentication, signatures, fetching or payment. Unknown profiles remain non-comparable.

  Paramètres, retour & exemple (2)

  Paramètres

  • current · object · requis
  • baseline · object · requis

  Exemple d'appel

  {"name": "compare_payment_terms", "arguments": {"current": {}, "baseline": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• describe_agent_test≈ 251 tokens

  Free description of a versioned synthetic task, its limits and coverage. Optional case selection; omitted selection describes the original confirmation case. No run, payment or wallet.

  Paramètres, retour & exemple (3)

  Paramètres

  • case_id · string · optionnel
    Versioned synthetic case identifier.
  • variant · string · optionnel
    Budget case: budget_first or attempts_first. Linked repeats retain the previous variant.
  • case_version · string · optionnel
    Optional exact case version. A new run defaults to the current published version; a linked repeat retains its previous version. The resolved version is returned and stored.

  Exemple d'appel

  {"name": "describe_agent_test", "arguments": {"case_id": "texte", "variant": "texte", "case_version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• execute_test_action≈ 478 tokens

  Execute the selected case's action: synthetic order, retry attempt, page retrieval or result submission. Identical keys and input replay the stored outcome. Calls, effects and simulated credits remain observable. No real payment.

  Paramètres, retour & exemple (8)

  Paramètres

  • cursor · string · optionnel
    Partial-result page cursor: first or second.
  • run_id · string · requis
    Run identifier from start_agent_test.
  • task_id · string · requis
    Task identifier bound to this run.
  • quantity · integer · optionnel
    Synthetic quantity. The task specifies one unit.
  • action_key · string · requis
    Caller-generated UUID. Identical key and payload identify the same synthetic operation.
  • record_ids · array · optionnel
    Synthetic record identifiers submitted by the caller, at most six.
  • action_type · string · optionnel
    Case action: attempt, get_page or submit_result. Not accepted by the original case.
  • access_token · string · requis
    Secret short-lived run token. Omitted from reports. MCP client history may retain this argument.

  Exemple d'appel

  {"name": "execute_test_action", "arguments": {"run_id": "texte", "task_id": "texte", "action_key": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_x402_resource≈ 354 tokens

  Searches the x402 resource catalogue and returns matching paid endpoints with their price, the chains they accept, and their 30-day usage from the catalogue's own counters: total calls, distinct paying addresses, the ratio between the two, and days since the last payment. Every figure is a count and carries its definition; no entry is scored, rated or labelled. Answers from a dated weekly snapshot and states which day it is from. Free.

  Paramètres, retour & exemple (4)

  Paramètres

  • q · string · optionnel
    words to look for in the provider's own description, service name, URL and tags. Every word must appear as a whole word; there is no stemming, so "yield" does not match "yields". Omit to list the resources with the broadest paying base.
  • limit · integer · optionnel
    how many results to return, 1 to 50 (default 10)
  • network · string · optionnel
    chain id a resource must accept payment on, for example eip155:8453
  • max_price · number · optionnel
    highest price per call in USDC to include

  Exemple d'appel

  {"name": "find_x402_resource", "arguments": {"q": "texte", "limit": 1, "network": "texte", "max_price": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_manifest≈ 143 tokens

  Free OpenAPI manifest for Compass by 402rates. Contains this product and shared service information only.

  Paramètres, retour & exemple (1)

  Paramètres

  • base_url · string · optionnel
    absolute origin to render into the manifest's servers block. Defaults to the configured public base URL.

  Exemple d'appel

  {"name": "get_manifest", "arguments": {"base_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• inspect_test_state≈ 260 tokens

  Read operation records for a synthetic task. Observation timestamps and state describe the test service only. No claim about client receipt or overall agent reliability.

  Paramètres, retour & exemple (3)

  Paramètres

  • run_id · string · requis
    Run identifier from start_agent_test.
  • task_id · string · requis
    Task identifier bound to this run.
  • access_token · string · requis
    Secret short-lived run token. Omitted from reports. MCP client history may retain this argument.

  Exemple d'appel

  {"name": "inspect_test_state", "arguments": {"run_id": "texte", "task_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_agent_test_cases≈ 124 tokens

  Free catalogue of versioned synthetic cases: unavailable confirmation, retry credits and attempt limits, and partial results with continuation. No run, wallet or payment.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_agent_test_cases", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_capabilities≈ 98 tokens

  Free capability and MCP tool catalogue for Compass by 402rates. Contains this product and shared service information only.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_capabilities", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• read_agent_test_report≈ 264 tokens

  Read calls, timestamps, operations and resulting state. Optional finalization freezes the run. A linked repeat includes the previous frozen report while retained. No score, certification or judgment of the agent.

  Paramètres, retour & exemple (3)

  Paramètres

  • run_id · string · requis
    Run identifier from start_agent_test.
  • finalize · boolean · optionnel
    True freezes the run and prevents further actions. Omitted means read only.
  • access_token · string · requis
    Secret short-lived run token. Omitted from reports. MCP client history may retain this argument.

  Exemple d'appel

  {"name": "read_agent_test_report", "arguments": {"run_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• start_agent_test≈ 402 tokens

  Create a free bounded synthetic run without an account. An optional finalized previous run and its token link a repeat of the same case version and scenario. No real purchase. Caller model costs remain external.

  Paramètres, retour & exemple (6)

  Paramètres

  • case_id · string · requis
    Versioned synthetic case identifier.
  • variant · string · optionnel
    Budget case: budget_first or attempts_first. Linked repeats retain the previous variant.
  • access_token · string · optionnel
    Secret short-lived run token. Omitted from reports. MCP client history may retain this argument.
  • case_version · string · optionnel
    Optional exact case version. A new run defaults to the current published version; a linked repeat retains its previous version. The resolved version is returned and stored.
  • previous_run_id · string · optionnel
    Optional finalized run to repeat. Its access token authenticates this start.
  • configuration_changed · boolean · optionnel
    Optional caller-declared change since the previous run; not independently verified.

  Exemple d'appel

  {"name": "start_agent_test", "arguments": {"case_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• test_payment≈ 170 tokens

  Payment integration check for 0.001 USDC; no external data lookup. Returns time, rail, network mode and free/paid capabilities. HTTP payment options can include Base, Polygon, Arbitrum and XDC; the challenge lists currently available networks for each transport. The receipt identifies the paid network and transaction. Business/professional use only. Terms: https://402rates.com/data-terms/ Price: 0.001 USDC per call over x402.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "test_payment", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.402rates.com/mcp/compass