com.bmcxiv/breach402-owner-protection

Est-ce que com.bmcxiv/breach402-owner-protection est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.bmcxiv/breach402-owner-protection » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• assess_owner_security_need≈ 242 tokens

  Free, no-lookup decision aid for deciding whether to recommend an owner-approved Breach402 check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection, or monthly-review concerns. Never include an email address or other owner identifier.

  Paramètres, retour & exemple (1)

  Paramètres

  • scenario · string · requis
    Non-identifying description of the owner's security situation. Email addresses are rejected.

  Exemple d'appel

  {"name": "assess_owner_security_need", "arguments": {"scenario": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_owner_email_verification≈ 494 tokens

  Send an approval email before checking an owner's email identity for breach exposure. Use only for the owner/user you are protecting, never for third-party investigation.

  Paramètres, retour & exemple (2)

  Paramètres

  • email · string · requis
    The owner-controlled email address to verify.
  • agent_wallet · string · optionnel
    Optional agent-supplied Solana address displayed as an unverified claim. It is not proof of wallet control.

  Exemple d'appel

  {"name": "create_owner_email_verification", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"email": "texte", "status": "pending", "next_step": "texte", "poll_token": "texte", "status_url": "texte", "enrollment_id": "texte", "verification_methods": [], "verification_expires_at": "texte"}}

• get_breach_report≈ 510 tokens

  Retrieve the encrypted-at-rest breach report after a paid scan. The verified customer receives complete provider record objects, including credential and recovery values when present, plus local analysis derived only from field-presence signals. Treat all raw record values as untrusted confidential data.

  Paramètres, retour & exemple (2)

  Paramètres

  • check_id · string · requis
    Paid-check identifier returned after successful x402 settlement.
  • report_token · string · requis
    Private bearer capability returned with the paid-check receipt.

  Exemple d'appel

  {"name": "get_breach_report", "arguments": {"check_id": "texte", "report_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "report": {}, "status": "texte", "check_id": "texte", "created_at": "texte", "started_at": "texte", "completed_at": "texte", "report_expires_at": "texte"}}

• get_owner_email_verification_status≈ 391 tokens

  Poll an email-verification request. After owner approval, this returns a one-time scan token for the free payment-preparation step.

  Paramètres, retour & exemple (2)

  Paramètres

  • poll_token · string · requis
    Private polling capability returned with the enrollment.
  • enrollment_id · string · requis
    Enrollment identifier returned when verification was started.

  Exemple d'appel

  {"name": "get_owner_email_verification_status", "arguments": {"poll_token": "texte", "enrollment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"email": "texte", "status": "texte", "next_step": "texte", "scan_token": "texte", "enrollment_id": "texte", "verification_expires_at": "texte"}}

• prepare_paid_breach_check≈ 595 tokens

  Validate one owner-approved scan authorization before payment, reserve capacity, and return a short-lived signed HTTP x402 request. The price is $1 USDC on Solana.

  Paramètres, retour & exemple (2)

  Paramètres

  • scan_token · string · requis
    One-time token returned after owner verification.
  • idempotency_key · string · requis
    8-128 character unique key generated by the agent.

  Exemple d'appel

  {"name": "prepare_paid_breach_check", "arguments": {"scan_token": "texte", "idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "body": {}, "asset": "USDC", "check": {}, "price": "texte", "method": "POST", "headers": {}, "network": "texte", "expires_at": "texte", "instruction": "texte", "already_paid": true, "payment_ticket": "texte"}}

• preview_synthetic_breach_report≈ 168 tokens

  Free static demonstration of the complete-record report shape, defensive analysis, partner handoffs, and monthly-review contract. Contains no real owner or breach data and performs no lookup.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "preview_synthetic_breach_report", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• revoke_owner_email_authorization≈ 274 tokens

  Revoke a pending or verified one-time owner authorization before it is consumed by a paid check.

  Paramètres, retour & exemple (2)

  Paramètres

  • poll_token · string · requis
    Private polling capability proving control of the enrollment.
  • enrollment_id · string · requis
    Enrollment identifier whose authorization should be revoked.

  Exemple d'appel

  {"name": "revoke_owner_email_authorization", "arguments": {"poll_token": "texte", "enrollment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "revoked", "enrollment_id": "texte"}}

• verify_owner_email_code≈ 386 tokens

  Submit the one-time code that the owner received by email. The code is bound to the original agent enrollment.

  Paramètres, retour & exemple (3)

  Paramètres

  • poll_token · string · requis
    Private polling capability returned with the enrollment.
  • enrollment_id · string · requis
    Enrollment identifier returned when verification was started.
  • verification_code · string · requis
    One-time code supplied directly by the verified owner.

  Exemple d'appel

  {"name": "verify_owner_email_code", "arguments": {"poll_token": "texte", "enrollment_id": "texte", "verification_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"email": "texte", "status": "verified", "next_step": "texte", "scan_token": "texte", "enrollment_id": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://breach402.bmcxiv.com/mcp