com.curlship/directory

Est-ce que com.curlship/directory est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.curlship/directory » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 15 outils

• bid_featured≈ 130 tokens

  Take the Featured spot. It sits above every listing. The minimum right now is $51. Always dofollow. One-time payment, no refund when someone outbids you. The product must already be listed. Omit amount_usd to bid $51.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    URL of a listing that is already on the directory.
  • amount_usd · number · optionnel
    Bid in USD. Omit to bid the minimum (51).

  Exemple d'appel

  {"name": "bid_featured", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• change_listing_url≈ 95 tokens

  Point an existing listing at a new URL. One listing per root domain, so this is how a second page replaces the first.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
  • proof · string · requis · email | domain
  • listing_id · integer · requis

  Exemple d'appel

  {"name": "change_listing_url", "arguments": {"url": "texte", "proof": "email", "listing_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• confirm_edit≈ 101 tokens

  Apply an edit request. A refresh needs a second call with the apply digest from the preview.

  Paramètres, retour & exemple (3)

  Paramètres

  • apply · string · optionnel
    Digest from the refresh preview. Omit for a URL change or a removal.
  • token · string · requis
  • request_id · integer · requis

  Exemple d'appel

  {"name": "confirm_edit", "arguments": {"token": "texte", "request_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_daily_stats≈ 110 tokens

  Active listings added per UTC day — the zero-filled series behind the public /stats page. One entry per calendar day from the first listing to today, each with added and the cumulative running total.

  Paramètres, retour & exemple (1)

  Paramètres

  • range · string|integer · optionnel
    "all" (default) for the whole series, or a day count 1-3650 for the last N days.

  Exemple d'appel

  {"name": "get_daily_stats", "arguments": {"range": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dr_history≈ 84 tokens

  The site's Ahrefs Domain Rating over time — the series behind /stats#dr. Every recorded reading, one per UTC day, plus the current value, the last step (change vs the most recent different reading) and the growth since the first reading.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_dr_history", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_stats≈ 34 tokens

  Listing counts and the Ahrefs Domain Rating.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_listings≈ 208 tokens

  Active listings as JSON. No query returns every listing, in the same order as before. Optional query parameters: limit, offset, q, and since. q matches the title, description, or URL. since is an ISO timestamp; listings created at or after it are kept. Each listing includes created_at. There is no category or tag field.

  Paramètres, retour & exemple (4)

  Paramètres

  • q · string · optionnel
    Substring of the title, description, or URL.
  • limit · integer · optionnel
    Max listings. 50 with offset, 100 with q, when omitted.
  • since · string · optionnel
    ISO timestamp. Keep listings created at or after this moment.
  • offset · integer · optionnel
    How many matching listings to skip.

  Exemple d'appel

  {"name": "list_listings", "arguments": {"q": "texte", "limit": 1, "since": "texte", "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• read_featured≈ 38 tokens

  Who holds the Featured spot, and the current minimum bid.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "read_featured", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• refresh_listing≈ 93 tokens

  Re-read title, description, and image from the listed page. Send listing_id and proof only. The first confirm previews; send apply back to save.

  Paramètres, retour & exemple (2)

  Paramètres

  • proof · string · requis · email | domain
  • listing_id · integer · requis

  Exemple d'appel

  {"name": "refresh_listing", "arguments": {"proof": "email", "listing_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• remove_free_listing≈ 103 tokens

  Take a free listing off the directory. Send remove true and no url or email. A paid listing or the Featured holder is refused.

  Paramètres, retour & exemple (3)

  Paramètres

  • proof · string · requis · email | domain
  • remove · boolean · requis
  • listing_id · integer · requis

  Exemple d'appel

  {"name": "remove_free_listing", "arguments": {"proof": "email", "remove": true, "listing_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_listing≈ 127 tokens

  List a product. It goes live immediately. One listing per root domain. https://yourapp.com is the documentation placeholder and is refused.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
  • tier · string · optionnel · bronze | bronze_lifetime | silver | gold | platinum
    Omit for the free tier. For the spot above every tier use bid_featured.
  • email · string · requis

  Exemple d'appel

  {"name": "submit_listing", "arguments": {"url": "texte", "email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• upgrade_listing≈ 87 tokens

  Checkout URL for a paid tier on a listing that already exists. Featured is bid_featured, not this.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
  • tier · string · requis · bronze | bronze_lifetime | silver | gold | platinum

  Exemple d'appel

  {"name": "upgrade_listing", "arguments": {"url": "texte", "tier": "bronze"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_badge≈ 60 tokens

  Re-check the listed site for a link to curlship.com. A free listing with the badge becomes dofollow.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis

  Exemple d'appel

  {"name": "verify_badge", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• x402_bid_featured≈ 232 tokens

  Bid on the Featured spot in USDC over x402 — the same auction as bid_featured (minimum $51 right now), but settled on-chain with no checkout and no human in the loop. Call without payment_signature for the 402 quote, sign accepts[0] as an EIP-3009 authorization, call again with payment_signature echoing it as `accepted`. The product must already be listed. Omit amount_usd to bid $51.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
    URL of a listing that is already on the directory.
  • amount_usd · number · optionnel
    Bid in USD. Omit to bid the minimum (51).
  • payment_signature · string · optionnel
    The PAYMENT-SIGNATURE header value: base64 JSON x402 v2 PaymentPayload — accepts[0] from the quote, signed and echoed back as `accepted`. Omit to get the quote back as a 402.

  Exemple d'appel

  {"name": "x402_bid_featured", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• x402_submit_listing≈ 250 tokens

  Buy bronze_lifetime ($30 USDC once, forever) or platinum ($49 USDC per prepaid year) with USDC over x402 — settled on-chain, no checkout page, no human in the loop. Call without payment_signature and the reply is a 402 whose body (also the PAYMENT-REQUIRED header, base64) is the quote; sign accepts[0] as an EIP-3009 authorization and call again with payment_signature — the tier is granted in that same call. Same URL and listing rules as submit_listing.

  Paramètres, retour & exemple (4)

  Paramètres

  • url · string · requis
  • tier · string · requis · bronze_lifetime | platinum
    The only tiers x402 sells.
  • email · string · requis
  • payment_signature · string · optionnel
    The PAYMENT-SIGNATURE header value: base64 JSON x402 v2 PaymentPayload — accepts[0] from the quote, signed and echoed back as `accepted`. Omit to get the quote back as a 402.

  Exemple d'appel

  {"name": "x402_submit_listing", "arguments": {"url": "texte", "tier": "bronze_lifetime", "email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://curlship.com/mcp