com.marutap/marutap

Est-ce que com.marutap/marutap est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.marutap/marutap » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 7 outils

• cancel_subscription≈ 124 tokens

  Cancel a subscription mandate. Safe — canceling never spends money, and the merchant can never charge again afterwards.

  Paramètres, retour & exemple (1)

  Paramètres

  • mandate_id · string · requis

  Exemple d'appel

  {"name": "cancel_subscription", "arguments": {"mandate_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_payment_result≈ 289 tokens

  Poll for the outcome of a payment request. Long-polls up to wait_seconds. Returns status one of: pending, approved, settled, declined, expired, not_found, claim_pending. When approved, includes a single-use `card` (number, cvc, exp) locked to this purchase — use it to complete checkout at the merchant. If still "pending"/"claim_pending", call again. For a claim (charge_id = the "clm_…" poll_id from request_payment): pass the agent_secret you received. The first approved result also contains `connect_token` — persist it and send it as the Authorization bearer on all future calls.

  Paramètres, retour & exemple (3)

  Paramètres

  • charge_id · string · requis
  • agent_secret · string · optionnel
  • wait_seconds · integer · optionnel

  Exemple d'appel

  {"name": "get_payment_result", "arguments": {"charge_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_payment_requests≈ 281 tokens

  List this agent's payment requests and whether each has been approved yet. Use this to see the state of every request you've made — not just poll one saved charge_id. Each item includes its `status` (pending, approved, settled, declined, expired) so you can tell which are still waiting and which the user has acted on. For a pending request it also returns the `approval_url` (re-surface it to the user); once a request is approved, call get_payment_result(charge_id) to fetch the card. Args: status: which to return — "open" (default, still-pending only) or "all". limit: max requests to return (default 20, capped at 100), newest first.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
  • status · string · optionnel

  Exemple d'appel

  {"name": "list_payment_requests", "arguments": {"limit": 1, "status": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_subscriptions≈ 85 tokens

  List the user's subscription mandates and their status.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_subscriptions", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• record_order≈ 158 tokens

  Report the merchant's order reference back after checkout, so the user can later reverse (refund) the purchase. `order_ref` is the merchant's payment id (e.g. a Stripe PaymentIntent).

  Paramètres, retour & exemple (2)

  Paramètres

  • charge_id · string · requis
  • order_ref · string · requis

  Exemple d'appel

  {"name": "record_order", "arguments": {"charge_id": "texte", "order_ref": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_payment≈ 355 tokens

  Request the user's approval to pay for a purchase. Usually returns `{auto_approved: false, approval_url}` — show the approval_url to the user so they can review the total and approve with one tap, then call get_payment_result. If the user's spending policy auto-approves this purchase (e.g. under their cap at an allowlisted merchant), it returns `{auto_approved: true, status: "approved", card}` immediately — no approval needed, just use the card. Args: amount: Total to charge, in major units (e.g. 18.50 dollars). merchant: Human-readable merchant / store name shown on the approval screen. line_items: Optional list of {"name": str, "quantity": int, "amount_cents": int}. currency: ISO currency code, default "usd".

  Paramètres, retour & exemple (4)

  Paramètres

  • amount · number · requis
  • currency · string · optionnel
  • merchant · string · requis
  • line_items · ? · optionnel

  Exemple d'appel

  {"name": "request_payment", "arguments": {"amount": 1, "merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_subscription≈ 264 tokens

  Set up a recurring subscription mandate (e.g. Netflix at up to $16/month). Requires the user's explicit one-time approval — returns an approval_url. The mandate is merchant-locked and capped: the merchant can never charge more than `cap` per period, and the user can cancel anytime (after which the merchant can never charge again). Args: merchant: merchant to authorize (e.g. "Netflix"). cap: max amount per period in major units (e.g. 16.00). interval: "weekly" | "monthly" | "yearly".

  Paramètres, retour & exemple (3)

  Paramètres

  • cap · number · requis
  • interval · string · optionnel
  • merchant · string · requis

  Exemple d'appel

  {"name": "request_subscription", "arguments": {"cap": 1, "merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.marutap.com/mcp