com.crosscheckapi/crosscheck

Est-ce que com.crosscheckapi/crosscheck est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.crosscheckapi/crosscheck » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• accept≈ 371 tokens

  Checks work another agent handed back against the task it was given, before you pay, release escrow, or pass it on. Returns accept, reject, or verify_externally with every requirement judged; counts, required JSON fields, and sums are checked in code. Optional payment_tx is verified on chain. $0.03 base. Paid per call in USDC over x402 (Base, or free test USDC on Base Sepolia). An x402-aware MCP client pays automatically: the first call returns the price as an x402 PaymentRequired error, and the retry carries the payment in _meta["x402/payment"]. Without one, use the npm client `npx -y crosscheckapi`, which pays from a wallet you set.

  Paramètres, retour & exemple (6)

  Paramètres

  • ref · string · optionnel
    Optional: the hash of a crosscheck receipt that brought you here. Its wallet earns check credits from your first 90 days of spend.
  • task · string · requis
    The task as given to the other agent
  • reference · string · optionnel
    Optional reference material the task points to
  • payment_tx · string · optionnel
    Optional transaction hash of the payment for this work
  • deliverable · string · requis
    What came back
  • payment_network · string · optionnel
    Network of payment_tx, for example eip155:8453

  Exemple d'appel

  {"name": "accept", "arguments": {"task": "texte", "deliverable": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check≈ 688 tokens

  Independent review of a draft (email, report, summary, PR description) before its human sees it. Returns pass or specific issues with fixes; arithmetic is recomputed in code. With request (what the human asked), it also checks the draft answers that. With sources, each claim is checked against them and quotes are verified; with source_urls or fetch_cited, crosscheck fetches up to 3 web pages itself and checks against those (+$0.01 a page, and a dead link the draft gives fails it). $0.02. Paid per call in USDC over x402 (Base, or free test USDC on Base Sepolia). An x402-aware MCP client pays automatically: the first call returns the price as an x402 PaymentRequired error, and the retry carries the payment in _meta["x402/payment"]. Without one, use the npm client `npx -y crosscheckapi`, which pays from a wallet you set.

  Paramètres, retour & exemple (8)

  Paramètres

  • ref · string · optionnel
    Optional: the hash of a crosscheck receipt that brought you here. Its wallet earns check credits from your first 90 days of spend.
  • draft · string · requis
    The draft text to review
  • request · string · optionnel
    Optional: what the human asked for, word for word if you have it. The reviewer then also checks that the draft answers it (a missed question, a changed scope, a wrong period)
  • sources · array · optionnel
    Optional texts the draft relies on; turns on grounding
  • fetch_cited · boolean · optionnel
    Optional: also fetch the links the draft itself cites (up to 3 pages in all, +$0.01 each); a link that is gone fails the draft
  • open_review · boolean · optionnel
    Optional: let a qualified outside reviewer take the job (not routed yet; crosscheck's reviewer does it and the receipt says so)
  • source_urls · array · optionnel
    Optional: up to 3 web pages crosscheck fetches after payment and checks the draft against, as sources. +$0.01 each
  • moltbook_identity · string · optionnel
    Optional: a Moltbook identity token for the free tier, when it is on (a verified Moltbook agent gets free checks with no payment). Not stored. Without a free check left, the price comes back as usual

  Exemple d'appel

  {"name": "check", "arguments": {"draft": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• result≈ 112 tokens

  Free. Status, verdict, and signed receipt of an earlier paid call that was still running, using the job_id and result_token it returned.

  Paramètres, retour & exemple (2)

  Paramètres

  • job_id · string · requis
    job_id from the paid call
  • result_token · string · requis
    result_token from the paid call

  Exemple d'appel

  {"name": "result", "arguments": {"job_id": "texte", "result_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skillcheck≈ 352 tokens

  Security review of a skill or MCP server's files before you install or connect it: read, never run. Free when these exact files were scanned before (looked up by bundle hash); otherwise paid, $0.03 base. Never says safe. Paid per call in USDC over x402 (Base, or free test USDC on Base Sepolia). An x402-aware MCP client pays automatically: the first call returns the price as an x402 PaymentRequired error, and the retry carries the payment in _meta["x402/payment"]. Without one, use the npm client `npx -y crosscheckapi`, which pays from a wallet you set.

  Paramètres, retour & exemple (3)

  Paramètres

  • ref · string · optionnel
    Optional: the hash of a crosscheck receipt that brought you here. Its wallet earns check credits from your first 90 days of spend.
  • files · array · requis
    Every text file of the skill or server, docs included; code rules read all of them
  • fresh · boolean · optionnel
    Scan again even when a past scan of these exact files exists

  Exemple d'appel

  {"name": "skillcheck", "arguments": {"files": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• skillcheck_lookup≈ 97 tokens

  Free. The latest skillcheck of an exact bundle, by its bundle_sha256 (SHA-256 of the canonical JSON of the files sorted by path, each as {path, sha256}).

  Paramètres, retour & exemple (1)

  Paramètres

  • bundle_sha256 · string · requis

  Exemple d'appel

  {"name": "skillcheck_lookup", "arguments": {"bundle_sha256": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_receipt≈ 418 tokens

  Free. Before trusting work that arrives with a crosscheck receipt, check in code that crosscheck issued it, its signature is valid, what the outcome was, and that it covers exactly the text you were handed. Pass receipt_hash (or the receipt object) plus that text: draft, request, and sources for check, task and deliverable for accept, files for skillcheck, and the verdict if one came with it.

  Paramètres, retour & exemple (9)

  Paramètres

  • task · string · optionnel
    accept: the task the receipt should cover
  • draft · string · optionnel
    check: the draft the receipt should cover
  • files · array · optionnel
    skillcheck: the skill's files
  • receipt · object · optionnel
    Or the whole receipt object {body, hash, sig}
  • request · string · optionnel
    check: the human's request, if the check had one
  • sources · array · optionnel
    check: the sources, if the check had any, in the same order (strings or {text})
  • verdict · object · optionnel
    The verdict that came with the receipt, to confirm nobody edited it
  • deliverable · string · optionnel
    accept: the deliverable the receipt should cover
  • receipt_hash · string · optionnel
    The receipt's hash (the last part of its /r/ proof link)

  Exemple d'appel

  {"name": "verify_receipt", "arguments": {"task": "texte", "draft": "texte", "files": [], "receipt": {}, "request": "texte", "sources": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://crosscheckapi.com/mcp