com.insumermodel/insumer

Est-ce que com.insumermodel/insumer est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.insumermodel/insumer » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• insumer_attest≈ 4168 tokens

  Evaluate a list of 1 to 10 conditions against a wallet's on-chain state and return one signed attestation: a yes or no for each condition, never the balance. One call reads the chain for every condition in the list and returns a single attestation covering all of them, so conditions of different kinds and on different chains are combined in one signed result. A condition states what must be true of the wallet, such as a minimum token balance, ownership of an NFT, an attestation held or a registered agent ID; the type field on each condition lists the kinds available and the fields each one takes. Chains: EVM chains plus Solana, XRPL, Bitcoin, Tron, Stellar and Sui; Bitcoin, Tron, Stellar and Sui support token_balance only. The attestation is signed twice: ES256, with a kid identifying the key, and a post-quantum ML-DSA-65 signature (pqSig, pqKid). Each result includes evaluatedCondition, a SHA-256 conditionHash, and the block (EVM), ledger (XRPL, Stellar) or checkpoint (Sui) it was read at. An attestation expires 30 minutes after it is signed, or 5 minutes when it includes a delegation condition. Costs 1 credit (2 with proof: 'merkle'). An rpc_failure error (503) means a read did not complete and nothing was signed: retry, and never treat it as a no. Current chain and check counts: https://insumermodel.com/llms.txt On this hosted endpoint the call is paid from a shared daily allowance, so the caller is not charged; the credit cost above applies on the caller's own API key, and each result states the price on a key and by x402 pay-per-call.

  Paramètres, retour & exemple (11)

  Paramètres

  • proof · string · optionnel · merkle
    Set to 'merkle' for EIP-1186 Merkle proofs (2 credits, refunded to 1 when no proof is delivered). For token_balance or ratio_to_amount against an ERC-20, a storage proof of the balance slot (no subject field); for the same conditions with contractAddress 'native', an account proof whose balance field is the value evaluated (subject 'account_balance'); for account_code, an account proof whose codeHash is the value evaluated (subject 'account_code'); for erc7710_delegation, a storage proof of the revocation slot (subject 'delegation_revocation') on managers with an on-chain-verified layout. Supported EVM chains only (not ZKsync Era, Sei, Viction or XDC Network, and not on non-EVM chains).
  • format · string · optionnel · jwt
    Set to 'jwt' to include a Wallet Auth by InsumerAPI token (ES256-signed JWT) in the response, with its ML-DSA-65 sibling pqJwt beside it. The jwt is verifiable by any standard JWT library using JWKS at /.well-known/jwks.json.
  • wallet · string · optionnel
    EVM wallet address (0x...)
  • suiWallet · string · optionnel
    Sui wallet address (0x + 64 hex chars). For verifying SUI or other Sui coins (e.g. USDC). Use chainId 'sui' with the Sui coin type as contractAddress: '0x2::sui::SUI' for native SUI, or the full coin type address::module::Name for other coins. The string 'native' is not accepted on Sui.
  • conditions · array · requis
    The list of 1 to 10 conditions to evaluate. All of them are read in this one call and covered by the one signed attestation.
  • tronWallet · string · optionnel
    Tron wallet address (T-prefixed, base58). For verifying TRX or TRC20 tokens (USDT-TRC20). Use chainId 'tron'.
  • xrplWallet · string · optionnel
    XRPL wallet address (r-address). For verifying XRP, trust line tokens (RLUSD, USDC), or NFTs on XRP Ledger.
  • solanaWallet · string · optionnel
    Solana wallet address (base58)
  • bitcoinWallet · string · optionnel
    Bitcoin address (P2PKH, P2SH, bech32, or Taproot). For verifying native BTC balance. Use chainId 'bitcoin' with contractAddress 'native'.
  • stellarWallet · string · optionnel
    Stellar wallet address (G-prefixed). For verifying XLM or trustline assets (USDC, BENJI, etc.). Use chainId 'stellar' with the asset issuer's G-address as contractAddress and pass assetCode (e.g. 'USDC'). Soroban contract balances not visible; classic trustlines only.
  • declaredLimits · string · optionnel · omit
    Set to 'omit' to leave decoded caveat limits out of the signed results of erc7710_delegation conditions, so a forwarded attestation does not carry the principal's spending ceiling. met, delegationHash, and conditionHash are byte-identical either way.

  Exemple d'appel

  {"name": "insumer_attest", "arguments": {"conditions": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_batch_wallet_trust≈ 1287 tokens

  Generate wallet trust fact profiles for up to 10 wallets in a single request. Faster than sequential calls. Each wallet gets an independently signed profile with its own TRST-XXXXX ID: 155 base checks across 27 chains in 10 dimensions (stablecoins, governance, nfts, staking, institutional_stablecoins, tokenized_treasuries, stablecoin_deposits, wrapped_bitcoin, names, account), up to 176 checks across 29 chains in 14 dimensions with the optional Solana, XRPL, Bitcoin and Tron wallets; the signed conditionSetVersion (currently 2026-10-08) names the check list. Dimensions arrive in a fixed order, identical for every wallet in the batch: the base dimensions as listed, then any of solana, xrpl, bitcoin and tron that were switched on, in that order. Supports partial success: failed wallets get error entries while successful ones return full profiles. Costs 3 credits per successful wallet (6 with proof: 'merkle'); credits are charged only for successful profiles, while a pay-per-call (x402) payment covers every wallet in the request. A wallet whose reads did not complete gets an error entry and no signed profile: retry that wallet, and never treat the entry as a no. Each profile lists every check, so the response is large; by default the text is a summary per wallet (profile ID, held / not held / not evaluated counts, and the checks held in each dimension, in the fixed dimension order; the account dimension's checks are present rather than held), and the complete signed profiles are returned unchanged as structuredContent. Set detail to 'full' on the call to get the complete signed profiles as text too. Profiles cannot be fetched again, so a later call signs fresh profiles and is charged again. On this hosted endpoint the call is paid from a shared daily allowance, so the caller is not charged; the credit cost above applies on the caller's own API key, and each result states the price on a key and by x402 pay-per-call.

  Paramètres, retour & exemple (3)

  Paramètres

  • proof · string · optionnel · merkle
    Set to 'merkle' for EIP-1186 Merkle storage proofs on all wallets (6 credits/wallet).
  • detail · string · optionnel · summary | full
    'summary' (default): the text is a short summary per wallet and the complete signed profiles are in structuredContent. 'full': the complete signed profiles as text too, tens of thousands of characters per wallet (more with optional wallets or merkle proofs). Choose it on the call that needs it: profiles cannot be fetched again, so a second call signs fresh profiles and is charged again. Not sent to the API; it does not change the price of the call.
  • wallets · array · requis
    1-10 wallet entries to profile

  Exemple d'appel

  {"name": "insumer_batch_wallet_trust", "arguments": {"wallets": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_check_discount≈ 543 tokens

  Calculate discount for a wallet at a merchant. Checks on-chain balances and returns tier and discount percentage per token, never raw balance amounts. Free: does not consume credits. Takes an EVM, Solana or XRPL wallet. An rpc_failure error (503) means a read did not complete: retry, and never treat it as not eligible. The check carries no proof of wallet control, so totalDiscount is what an unproven wallet gets; walletTerms gives the store's terms, and discountIfProven (when present) is what signing would get.

  Paramètres, retour & exemple (4)

  Paramètres

  • wallet · string · optionnel
    EVM wallet address (0x...)
  • merchant · string · requis
    Merchant ID
  • xrplWallet · string · optionnel
    XRPL wallet address (r-address)
  • solanaWallet · string · optionnel
    Solana wallet address (base58)

  Exemple d'appel

  {"name": "insumer_check_discount", "arguments": {"merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_compliance_templates≈ 370 tokens

  List the compliance templates available for EAS attestation conditions. Each template carries pre-configured schema IDs, attester addresses, and decoder contracts for a KYC or identity provider (Coinbase Verifications on Base, Gitcoin Passport on Optimism), so a condition can name the template instead of raw EAS parameters. No authentication or credits required.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "insumer_compliance_templates", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_get_merchant≈ 380 tokens

  Get full public merchant profile including token tiers, NFT collections, discount mode, verification status, and walletTerms: what the store gives a wallet with and without proof of control, so you can decide whether to sign before creating a code.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    Merchant ID

  Exemple d'appel

  {"name": "insumer_get_merchant", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_jwks≈ 372 tokens

  Get InsumerAPI's public signing keys as a JWKS (JSON Web Key Set): an ECDSA P-256 key under its kids, followed by the ML-DSA-65 post-quantum key as RFC 9964 AKP entries. Signatures on attestation and trust responses verify against these keys. Match an entry by the kid (or pqKid) on the response, never by position; an unknown kid is unverifiable, not refuted. No authentication required.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "insumer_jwks", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_list_merchants≈ 445 tokens

  Browse merchants in the public directory. Filter by accepted token, verification status. Returns company name, website, tokens accepted, discount info, and walletTerms (the store's terms with and without proof of wallet control).

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · integer · optionnel
    Results per page (default 50, max 200)
  • token · string · optionnel
    Filter by accepted token symbol, e.g. 'UNI'
  • offset · integer · optionnel
    Pagination offset (default 0)
  • verified · string · optionnel · true | false
    Filter by domain verification status

  Exemple d'appel

  {"name": "insumer_list_merchants", "arguments": {"limit": 1, "token": "texte", "offset": 1, "verified": "true"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_list_tokens≈ 474 tokens

  List the tokens and NFT collections listed in the Insumer registry. Filter by chain, symbol, or asset type. The registry is a directory, not the list of what can be checked: an attestation can check any token on a supported chain, and NFTs on EVM chains, Solana and XRPL, whether listed or not. An empty result means nothing is listed under that filter, not that the token is unsupported.

  Paramètres, retour & exemple (3)

  Paramètres

  • type · string · optionnel · token | nft
    Filter by asset type
  • chain · ? · optionnel
    Filter by chain ID
  • symbol · string · optionnel
    Filter by token symbol

  Exemple d'appel

  {"name": "insumer_list_tokens", "arguments": {"type": "token", "chain": "texte", "symbol": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_validate_code≈ 408 tokens

  Validate an INSR-XXXXX discount code. For merchant backends during ACP/UCP checkout to confirm code validity, discount percent, and expiry. Returns valid/invalid status with reason, and walletProven (whether the code went to a caller that proved control of the wallet). No authentication required, no credits consumed. Does not expose wallet or token data.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    Discount code in INSR-XXXXX format

  Exemple d'appel

  {"name": "insumer_validate_code", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

• insumer_wallet_trust≈ 1191 tokens

  Generate a signed wallet trust fact profile for an EVM wallet: a curated set of presence checks organized into dimensions (stablecoins, governance, nfts, staking, institutional_stablecoins, tokenized_treasuries, stablecoin_deposits, wrapped_bitcoin, names, account): 155 base checks across 27 chains in 10 dimensions. Optional Solana, XRPL, Bitcoin and Tron wallets add their own dimensions, up to 176 checks across 29 chains in 14 dimensions; optional Stellar and Sui wallets let rows inside existing dimensions evaluate. Dimensions arrive in a fixed order: the base dimensions as listed, then any of solana, xrpl, bitcoin and tron that were switched on, in that order. The account dimension holds two rows per chain on Ethereum, Base, Arbitrum, Optimism and Polygon: contract code at the wallet address, and an EIP-7702 delegation there; a plain key reads false on both, and which contract is never named. Rows on a chain whose wallet is not supplied stay in the signed profile with evaluated: false. Every check is held or not held (present or not present in the account dimension), never a balance. The signed conditionSetVersion (currently 2026-10-08) names the check list that was run; log it, never reject on it. Returns per-dimension pass/fail counts and an overall summary: no score, no opinion. Designed for AI agent-to-agent trust decisions. Costs 3 credits (6 with proof: 'merkle'). An rpc_failure error (503) means a read did not complete and nothing was signed: retry, and never treat it as a no. Current chain and check counts: https://insumermodel.com/llms.txt On this hosted endpoint the call is paid from a shared daily allowance, so the caller is not charged; the credit cost above applies on the caller's own API key, and each result states the price on a key and by x402 pay-per-call.

  Paramètres, retour & exemple (8)

  Paramètres

  • proof · string · optionnel · merkle
    Set to 'merkle' for EIP-1186 Merkle storage proofs on EVM token checks (6 credits). Rows whose balance is computed rather than stored (Aave aTokens, BUIDL), NFT/non-EVM rows and the account rows are declined with a reason (an account proof is available from the attest tool's account_code condition); the premium is refunded whenever no proof is delivered.
  • wallet · string · requis
    EVM wallet address (0x...) to profile
  • suiWallet · string · optionnel
    Sui wallet address (0x + 64 hex). If provided, lets the rows on Sui evaluate. Adds no dimension.
  • tronWallet · string · optionnel
    Tron wallet address (T-prefixed). If provided, adds the Tron dimension.
  • xrplWallet · string · optionnel
    XRPL wallet address (r-address). If provided, adds the XRPL dimension and lets the institutional row on XRPL evaluate.
  • solanaWallet · string · optionnel
    Solana wallet address (base58). If provided, adds the Solana dimension and lets the institutional rows on Solana evaluate.
  • bitcoinWallet · string · optionnel
    Bitcoin address. If provided, adds the Bitcoin dimension (native BTC presence).
  • stellarWallet · string · optionnel
    Stellar wallet address (G-prefixed). If provided, lets the institutional rows on Stellar evaluate (classic trustlines). Adds no dimension.

  Exemple d'appel

  {"name": "insumer_wallet_trust", "arguments": {"wallet": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "data": "texte", "keys": [], "meta": "texte", "error": "texte", "items": [], "message": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.insumermodel.com/mcp