com.hiddenswap/swap

Est-ce que com.hiddenswap/swap est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.hiddenswap/swap » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• get_order_status≈ 455 tokens

  Check the stage of a HiddenSwap order by its order ID, for example awaiting deposit, confirming, swapping, sending, complete, needs support, refunded or expired. The order ID is private: anyone who has it can open the order page, which shows the addresses and amounts unless the owner hid the order. Only use an order ID the person gave you, and never repeat it anywhere else. Returns the stage, a short label, whether it is final, when it last changed, and links to the order page and support. It never returns addresses, amounts or transaction hashes. For a hidden order, it says only that the order is hidden. Read-only. No account, no email and no ID needed to swap.

  Paramètres, retour & exemple (1)

  Paramètres

  • orderId · string · requis
    The order ID the person saved when they started the swap. Private: only use one the person gave you.

  Exemple d'appel

  {"name": "get_order_status", "arguments": {"orderId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"final": true, "label": "texte", "notes": [], "stage": "awaiting", "orderId": "texte", "orderUrl": "texte", "updatedAt": "texte", "supportUrl": "texte"}}

• get_pair_info≈ 782 tokens

  Check whether two coins can be swapped on HiddenSwap, a no-KYC crypto exchange, without asking for a live quote. Returns both coins with their networks, whether the pair can be swapped, fixed-rate support, the recorded limits and estimate when there are any, memo notes, the pair page and a prefilled swap link the person opens to finish on hiddenswap.com. Read-only. No account, no email and no ID needed to swap.

  Paramètres, retour & exemple (3)

  Paramètres

  • to · string · requis
    The coin received. Coin id from search_coins, for example btc, xmr or usdttrc20 (USDT on Tron).
  • from · string · requis
    The coin sent. Coin id from search_coins, for example btc, xmr or usdttrc20 (USDT on Tron).
  • amount · string · optionnel
    Optional. Amount of the coin sent, as a decimal string with a dot, for example "0.05".

  Exemple d'appel

  {"name": "get_pair_info", "arguments": {"to": "texte", "from": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"to": {}, "from": {}, "notes": [], "canSwap": true, "swapUrl": "texte", "recorded": {}, "fixedRate": "available", "pairPageUrl": "texte"}}

• get_quote≈ 842 tokens

  Estimate a crypto-to-crypto swap on HiddenSwap, a no-KYC crypto exchange. Returns the amount the person would receive after all fees, the rate, the minimum and maximum, the payout fee, the usual duration and a prefilled swap link. Uses a quote recorded in the last two hours when one matches the exact amount (floating rate only, labelled with its time), otherwise a live quote. Read-only: it creates no order and moves no funds. Coin ids come from search_coins (for example btc, xmr, usdttrc20). No account, no email and no ID needed to swap.

  Paramètres, retour & exemple (4)

  Paramètres

  • to · string · requis
    The coin received. Coin id from search_coins, for example btc, xmr or usdttrc20 (USDT on Tron).
  • from · string · requis
    The coin sent. Coin id from search_coins, for example btc, xmr or usdttrc20 (USDT on Tron).
  • amount · string · requis
    Amount of the coin sent, as a decimal string with a dot, for example "0.05".
  • rateType · string · optionnel · float | fixed
    float (default): the rate is set when the deposit is confirmed. fixed: a rate held once the swap is started on the site, when the pair offers one.

  Exemple d'appel

  {"name": "get_quote", "arguments": {"to": "texte", "from": "texte", "amount": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"to": {}, "max": "texte", "min": "texte", "from": {}, "rate": "texte", "notes": [], "source": "live", "swapUrl": "texte", "amountTo": "texte", "quotedAt": "texte", "rateType": "float", "payoutFee": "texte"}}

• search_coins≈ 483 tokens

  Find the coin ids HiddenSwap uses, by ticker, name or network, for example "usdt tron", "monero" or "eth base". Each result gives the id to pass to the other tools, the network, whether the coin can be sent or received in a swap, whether a memo is usually needed, and the coin page when there is one. HiddenSwap is a no-KYC crypto exchange for crypto-to-crypto swaps. Read-only. No account, no email and no ID needed to swap.

  Paramètres, retour & exemple (3)

  Paramètres

  • side · string · optionnel · send | receive
    Only coins that can be sent (send) or received (receive) in a swap.
  • limit · integer · optionnel
    Most results to return (1 to 25).
  • query · string · requis
    Ticker, name or network words, for example "usdt tron" or "monero".

  Exemple d'appel

  {"name": "search_coins", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"side": "send", "coins": [], "notes": [], "query": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://hiddenswap.com/mcp