com.agentwebmap/agentwebmap

Est-ce que com.agentwebmap/agentwebmap est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.agentwebmap/agentwebmap » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 21 outils

• begin_ownership_claim≈ 522 tokens

  Start optional ownership management or recovery for a domain you control. Returns an expiring fresh public proof token and a private claim_secret shown once. Keep the secret private; publish only the verification snippet, then call verify_domain with claim_id and claim_secret. Existing keys remain valid until fresh proof succeeds. No backlink is required: DNS, meta tag and well-known file methods are supported.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "begin_ownership_claim", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_llms_txt≈ 648 tokens

  Validate a site's llms.txt: reachability, HTML-instead-of-text, redirects to other domains, H1 title, summary, sections, links, link health, llms-full.txt and charset. Returns each check with what to fix and the file preview. Ownership management is optional and does not affect validation.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "check_llms_txt", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• directory_stats≈ 282 tokens

  Directory-wide counts for Agent Web Map: domains tracked, valid llms.txt files, listed, verified, pending.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "directory_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_llms_txt≈ 339 tokens

  Draft an llms.txt for a site from its own homepage, sitemap and page titles. Takes 10-30 seconds. The owner reviews it and publishes it at /llms.txt. Ownership management is optional and uses a separate fresh challenge.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "generate_llms_txt", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_categories≈ 652 tokens

  List the topic taxonomy and counts of featured/listed sites by inferred category, unclassified sites and publisher-declared MCP endpoints. Categories describe topics; capabilities are separate explicit publisher declarations. Counts can overlap. Use category or capability filters with resolve, search_llms_registry or list_domains. An MCP declaration does not prove availability.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_categories", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_domains≈ 2252 tokens

  Ranked listing of the directory (verified first, then authority). Use verified_only to get only owner-verified sites.

  Paramètres, retour & exemple (7)

  Paramètres

  • page · integer · optionnel
  • detail · string · optionnel · compact | full
    Compact consumer fields by default; full adds owner profile, claims and listing metadata.
  • category · string · optionnel · ai-ml | developer-tools | infrastructure | data-analytics | cybersecurity | finance-payments | ecommerce | productivity
    Filter by inferred topic ID from list_categories. Topics describe publisher metadata, not capabilities or correctness.
  • per_page · integer · optionnel
  • capability · string · optionnel · mcp
    Filter to sites explicitly publishing an MCP endpoint link. Publisher declaration alone does not prove availability.
  • verified_only · boolean · optionnel
    Only domains whose owner has verified them.
  • include_unlisted · boolean · optionnel
    Also return low-authority (unlisted) entries.

  Exemple d'appel

  {"name": "list_domains", "arguments": {"page": 1, "detail": "compact", "category": "ai-ml", "per_page": 1, "capability": "mcp", "verified_only": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• lookup_domain≈ 1846 tokens

  Look up a domain: source URLs, summary, authority, ownership verification, last check and owner-stated terms. Compact by default; detail=full adds profile, country, nested files, badge and ownership claim instructions.

  Paramètres, retour & exemple (2)

  Paramètres

  • detail · string · optionnel · compact | full
    Compact consumer fields by default; full adds owner profile, claims and listing metadata.
  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "lookup_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• read_llms_txt≈ 351 tokens

  Return our validated copy of a listed site's llms.txt as text, with its source URL, check date and content hash. No second fetch needed, and it works when the publisher blocks automated clients. A site not cached yet is fetched once on demand.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "read_llms_txt", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• recrawl_site≈ 1830 tokens

  Owner only. Re-validate and update the directory listing now (once per 10 minutes). This crawl can change listing and ownership verification state and deliver configured change notifications.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • api_key · string · requis
    The owner API key issued by verify_domain (awm_key_...).

  Exemple d'appel

  {"name": "recrawl_site", "arguments": {"domain": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_domain≈ 634 tokens

  Submit a domain that publishes an llms.txt so it gets crawled and indexed. Returns the verification instructions so you can continue without another call. Verified owners get: Manage your listing in the browser; ownership confirmation is optional for discovery; Breakage alerts by webhook, or email when configured, when the llms.txt stops validating; Your terms for agents (automated access, rate limit, attribution, pricing) published where agents read them; Editable profile: description, tags, nested llms.txt files, contact; Measured web, REST and MCP request counts, documentation selections, publisher clicks and score history; no unique-agent claims; Domain ownership confirmation shown separately from content quality or endorsement; Instant re-crawl on demand.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "register_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resolve≈ 3597 tokens

  Start here to find documentation for a domain or development task. Returns specific page URLs with publisher excerpts, matching evidence, owner-stated terms, freshness and alternatives. Task relevance ranks ahead of ownership verification. Weak matches are fallback candidates: refine the query or search elsewhere. Use max_age to mark stale data, refresh to validate the source live, and detail=full for owner metadata. Reads need no key.

  Paramètres, retour & exemple (7)

  Paramètres

  • limit · integer · optionnel
    Maximum number of documentation sources.
  • query · string · requis
    A domain or development task, e.g. "modelcontextprotocol authorization".
  • detail · string · optionnel · compact | full
    Compact consumer fields by default; full adds owner profile, claims and listing metadata.
  • max_age · integer · optionnel
    Maximum acceptable age of source health in seconds; stale data is marked, not hidden.
  • refresh · boolean · optionnel
    Validate the selected source live (bounded and rate limited); does not change the directory listing.
  • category · string · optionnel · ai-ml | developer-tools | infrastructure | data-analytics | cybersecurity | finance-payments | ecommerce | productivity
    Filter by inferred topic ID from list_categories. Topics describe publisher metadata, not capabilities or correctness.
  • capability · string · optionnel · mcp
    Filter to sites explicitly publishing an MCP endpoint link. Publisher declaration alone does not prove availability.

  Exemple d'appel

  {"name": "resolve", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• rotate_owner_key≈ 314 tokens

  Owner only. Replace the API key and invalidate all existing browser owner sessions. Keep the new key; it is shown once. Does not require changing the existing ownership proof.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • api_key · string · requis
    The owner API key issued by verify_domain (awm_key_...).

  Exemple d'appel

  {"name": "rotate_owner_key", "arguments": {"domain": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_llms_registry≈ 2322 tokens

  Search domains and indexed documentation links by development task. Text relevance ranks before authority and ownership verification. Compact results omit owner claims by default; use detail=full for profile metadata.

  Paramètres, retour & exemple (8)

  Paramètres

  • page · integer · optionnel
  • query · string · requis
    Search terms, e.g. "payments api docs".
  • detail · string · optionnel · compact | full
    Compact consumer fields by default; full adds owner profile, claims and listing metadata.
  • category · string · optionnel · ai-ml | developer-tools | infrastructure | data-analytics | cybersecurity | finance-payments | ecommerce | productivity
    Filter by inferred topic ID from list_categories. Topics describe publisher metadata, not capabilities or correctness.
  • per_page · integer · optionnel
  • capability · string · optionnel · mcp
    Filter to sites explicitly publishing an MCP endpoint link. Publisher declaration alone does not prove availability.
  • verified_only · boolean · optionnel
    Only domains whose owner has verified them.
  • include_unlisted · boolean · optionnel
    Also return low-authority (unlisted) entries.

  Exemple d'appel

  {"name": "search_llms_registry", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• site_stats≈ 1200 tokens

  Owner only. Lookup count (how often agents and visitors looked the domain up), score breakdown, recent notifications, the badge embed, and the last 30 score snapshots.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • api_key · string · requis
    The owner API key issued by verify_domain (awm_key_...).

  Exemple d'appel

  {"name": "site_stats", "arguments": {"domain": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• test_notification≈ 365 tokens

  Owner only. Send a test event to the configured webhook and/or email to confirm the wiring (once per 10 minutes).

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • api_key · string · requis
    The owner API key issued by verify_domain (awm_key_...).

  Exemple d'appel

  {"name": "test_notification", "arguments": {"domain": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• test_watch≈ 307 tokens

  Send a test event to a watch's webhook (once per 10 minutes).

  Paramètres, retour & exemple (2)

  Paramètres

  • secret · string · requis
  • watch_id · integer · requis

  Exemple d'appel

  {"name": "test_watch", "arguments": {"secret": "texte", "watch_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• unwatch_domain≈ 238 tokens

  Cancel a watch with its id and secret.

  Paramètres, retour & exemple (2)

  Paramètres

  • secret · string · requis
  • watch_id · integer · requis

  Exemple d'appel

  {"name": "unwatch_domain", "arguments": {"secret": "texte", "watch_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_site≈ 2362 tokens

  Owner only. Edit the listing profile (description, tags, nested llms.txt paths, contact), the terms for agents (agent_terms: automated_access = one of welcome | limited | ask | not_allowed: may agents use the site automatically?; rate_limit = short text, e.g. "60 requests/minute"; attribution = one of required | appreciated | none; attribution_text = how to credit the site (≤200 chars); pricing = one of free | freemium | paid; pricing_url = where prices are published; terms_url = the full terms for automated use; notes = anything else an agent should know (≤500 chars)) and notification channels (webhook_url gets a signing secret in the answer; notify_email needs the server to have email configured). Omit a field to leave it unchanged; pass null to clear it.

  Paramètres, retour & exemple (9)

  Paramètres

  • tags · array · optionnel
    Lowercase slugs, e.g. ["developer-tools", "docs"].
  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • api_key · string · requis
    The owner API key issued by verify_domain (awm_key_...).
  • contact · string|null · optionnel
  • agent_terms · object|null · optionnel
    Terms for automated use, shown to every agent that looks the site up.
  • description · string|null · optionnel
  • webhook_url · string|null · optionnel
    Public https URL to POST breakage events to.
  • notify_email · string|null · optionnel
  • nested_llms_txt · array · optionnel
    Same-site paths of additional llms.txt files, e.g. ["/docs/llms.txt"].

  Exemple d'appel

  {"name": "update_site", "arguments": {"domain": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verification_instructions≈ 395 tokens

  Describe optional ownership management and its four proof methods. Call begin_ownership_claim to obtain a fresh expiring proof and a private claim secret. No ownership claim is needed for discovery.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).

  Exemple d'appel

  {"name": "verification_instructions", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_domain≈ 728 tokens

  Complete the fresh challenge from begin_ownership_claim using its private claim credentials. Checks the published proof and consumes the challenge once, returning the owner API key shown once. Public or legacy proof tokens alone cannot issue keys. Recovery replaces previous credentials and sessions. Rate limited: 10 attempts per domain per hour.

  Paramètres, retour & exemple (3)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • claim_id · string · requis
  • claim_secret · string · requis

  Exemple d'appel

  {"name": "verify_domain", "arguments": {"domain": "texte", "claim_id": "texte", "claim_secret": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• watch_domain≈ 429 tokens

  Subscribe to a domain: a signed JSON POST goes to your webhook when its llms.txt changes, breaks, is restored, loses its llms-full.txt, changes tier, or its verification changes. Returns a watch id and a secret (shown once) for the signature and for unsubscribing. 20 new watches per hour per client, 5 active per domain per client.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    A domain name such as example.com (no scheme, no path).
  • webhook_url · string · requis
    Public http(s) URL that accepts a JSON POST.

  Exemple d'appel

  {"name": "watch_domain", "arguments": {"domain": "texte", "webhook_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agentwebmap.com/mcp