com.attachpage/attachpage

Est-ce que com.attachpage/attachpage est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.attachpage/attachpage » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 11 outils

• get_feedback≈ 233 tokens

  Read recipient comments, page paths, pointed-at elements (selector and visible text), and approval or change-request decisions. The status filter selects open, resolved, or all feedback.

  Paramètres, retour & exemple (2)

  Paramètres

  • siteId · string · requis
    Page id (siteId) returned by a publish tool or list_pages.
  • status · string · optionnel · open | resolved | all
    Which feedback to return (default all).

  Exemple d'appel

  {"name": "get_feedback", "arguments": {"siteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"items": [], "decisions": []}}

• get_page≈ 332 tokens

  Details for one page: address, visibility, recipients and who opened it. Optional filePaths reads exact uploaded source files from that version, up to 20 files and 256 KB total, with text or base64 encoding. An empty filePaths array returns a bounded manifest without file contents.

  Paramètres, retour & exemple (2)

  Paramètres

  • siteId · string · requis
    Page id (siteId) returned by a publish tool or list_pages.
  • filePaths · array · optionnel
    Source files to read from the current version; [] returns only the file list.

  Exemple d'appel

  {"name": "get_page", "arguments": {"siteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "url": "texte", "name": "texte", "shares": [], "visibility": "texte", "deployments": []}}

• get_profile≈ 126 tokens

  Identify the AttachPage account connected to this agent.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_profile", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "name": "texte", "email": "texte"}}

• list_pages≈ 115 tokens

  List the user's pages with recipient and open counts.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_pages", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"pages": []}}

• notify_recipients≈ 208 tokens

  Email existing active recipients that a page has been updated, with an optional note. Each recipient receives a fresh personal link. Sends email immediately; sent email cannot be recalled.

  Paramètres, retour & exemple (2)

  Paramètres

  • note · string · optionnel
    Optional note about what changed, up to 1,000 characters.
  • siteId · string · requis
    Page id (siteId) returned by a publish tool or list_pages.

  Exemple d'appel

  {"name": "notify_recipients", "arguments": {"siteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"notified": 1}}

• publish_anonymous_page≈ 445 tokens

  Publish a public web page without an account or API key. It expires in 48 hours. Returns the page URL and a personal claimUrl; opening that link while signed in makes the page permanent.

  Paramètres, retour & exemple (3)

  Paramètres

  • slug · string · optionnel
    Optional address label, 3-40 lowercase letters, digits or hyphens. Random when omitted.
  • files · array · requis
    Files of the page. The complete resulting page includes index.html at the top level.
  • siteName · string · optionnel
    Name shown to the user and recipients, e.g. "Q3 report".

  Exemple d'appel

  {"name": "publish_anonymous_page", "arguments": {"files": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "siteId": "texte", "claimUrl": "texte", "expiresAt": 1, "fileCount": 1}}

• publish_document≈ 394 tokens

  Publish a PDF, Word (.docx), PowerPoint (.pptx), Excel (.xlsx/.xls), or CSV file as a browser-viewable page, private by default. Accepts filename and base64 content, up to 4 MB decoded. Documents become readable PDFs, slides have presentation controls, and spreadsheets have searchable sheet tabs. Preserves the original for download. A siteId replaces the page at the same address. Does not send invitations.

  Paramètres, retour & exemple (6)

  Paramètres

  • slug · string · optionnel
    Optional address label, 3-40 lowercase letters, digits or hyphens. Random when omitted.
  • siteId · string · optionnel
    Replace this existing page at the same address.
  • content · string · requis
    Base64 file bytes, not a local path or URL.
  • filename · string · requis
    Original file name with extension, e.g. proposal.docx.
  • siteName · string · optionnel
    Name shown to the user and recipients, e.g. "Q3 report".
  • visibility · string · optionnel · private | public
    private (invitation-only, default) or public (anyone with the link).

  Exemple d'appel

  {"name": "publish_document", "arguments": {"content": "texte", "filename": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "siteId": "texte"}}

• publish_page≈ 603 tokens

  Publish a web page as the connected user. A siteId replaces an existing page at the same address. preserveFiles retains omitted assets and requires the baseDeploymentId of that version; stale edits are refused. Visibility is private (invitation-only, default) or public. Requires an authenticated AttachPage connection.

  Paramètres, retour & exemple (7)

  Paramètres

  • slug · string · optionnel
    Optional address label, 3-40 lowercase letters, digits or hyphens. Random when omitted.
  • files · array · requis
    Files of the page. The complete resulting page includes index.html at the top level.
  • siteId · string · optionnel
    Replace this existing page at the same address.
  • siteName · string · optionnel
    Name shown to the user and recipients, e.g. "Q3 report".
  • visibility · string · optionnel · private | public
    private (invitation-only, default) or public (anyone with the link).
  • preserveFiles · boolean · optionnel
    Retain files not included in this edit. Requires siteId and baseDeploymentId.
  • baseDeploymentId · string · optionnel
    Expected current version. A changed page is refused rather than overwritten.

  Exemple d'appel

  {"name": "publish_page", "arguments": {"files": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "slug": "texte", "siteId": "texte", "fileCount": 1, "visibility": "texte", "deploymentId": "texte"}}

• resolve_feedback≈ 181 tokens

  Mark recipient feedback as resolved, or reopen it with resolved: false. The recipient sees the updated resolution status.

  Paramètres, retour & exemple (2)

  Paramètres

  • resolved · boolean · optionnel
    true (default) marks it resolved; false reopens it.
  • feedbackId · string · requis
    Feedback id from get_feedback.

  Exemple d'appel

  {"name": "resolve_feedback", "arguments": {"feedbackId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true}}

• send_page≈ 305 tokens

  Email personal invitations for a page to the specified recipient addresses, with an optional message and access expiry. Sends email immediately; sent email cannot be recalled.

  Paramètres, retour & exemple (4)

  Paramètres

  • siteId · string · requis
    Page id (siteId) returned by a publish tool or list_pages.
  • message · string · optionnel
    Optional note included in the invitation email.
  • recipients · array · requis
    Email addresses; each person gets their own personal link.
  • expiresInDays · integer · optionnel
    Days the links work (default 7). 0 means they never expire.

  Exemple d'appel

  {"name": "send_page", "arguments": {"siteId": "texte", "recipients": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"siteId": "texte", "shareId": "texte", "expiresAt": 1}}

• update_page≈ 319 tokens

  Rename a page, change its address label (slug), or switch private/public.

  Paramètres, retour & exemple (4)

  Paramètres

  • name · string · optionnel
    New page name.
  • slug · string · optionnel
    New address label, 3-40 lowercase letters, digits or hyphens.
  • siteId · string · requis
    Page id (siteId) returned by a publish tool or list_pages.
  • visibility · string · optionnel · private | public
    private (invitation-only, default) or public (anyone with the link).

  Exemple d'appel

  {"name": "update_page", "arguments": {"siteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "url": "texte", "name": "texte", "shares": [], "visibility": "texte", "deployments": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://attachpage.com/mcp