accueil / serveurs / Recherche & Web / com.qumge/skills
com.qumge/skills
serveur MCP (Model Context Protocol) · qumge-skills 1.2.0
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que com.qumge/skills est sûr ?
Au dernier audit MCP Hub, le serveur MCP « com.qumge/skills » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 19 outils
- become_developer≈ 381 tokens
Open a developer account for the user (needs their qumge key). There is no review and no waiting: it takes effect immediately, and publish_cap works right after. Give a display name and an ISO country code; the country decides tax and payout rails later. Payout details and legal name are only needed when the user actually withdraws money.
Paramètres, retour & exemple (6)
Paramètrescountry· string · requis
ISO code like "US" or "CN" (a full country name also works).username· string · optionnel
Required if the account has no username yet: 3–30 letters, digits, _ or -. It becomes the public page /u/<username>.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.entity_type· string · optionnel · individual | company
individual (default) or company.display_name· string · requis
The name shown on their app pages.social_links· array · optionnel
Up to 6 public URLs (X, GitHub, LinkedIn, their website). The kind is guessed from the domain.
Exemple d'appel{"name": "become_developer", "arguments": {"country": "texte", "display_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "country": "texte", "display_name": "texte"}} - call_cap≈ 1270 tokens
Call a Cap on the user's behalf and return its response. Use this when you cannot make the HTTP call yourself: qumge charges the user's qumge balance and forwards the call at the same price as calling it over HTTP through Qumge. Operations and prices come from get_cap. Prefer `operation` + `input`: when the operation declares an input_schema, `input` is validated against it before anything is charged or forwarded. For managed results, pass a stable idempotency_key when retrying; asynchronous calls return a platform job_id and get_cap_job reads cached progress and the final receipt for free. Needs the user's qumge key in the Authorization header. A 5xx from the Cap is free; a 402 means the user's balance or this Cap's monthly limit stopped it. (Older clients may still call this tool as call_app — it still works.)
Paramètres, retour & exemple (11)
Paramètresbody· object|string · optionnel
Request body. An object is sent as JSON; a string is sent as-is.path· string · optionnel
The route path from get_cap, e.g. '/api/videos'. A query string may be appended or passed separately in `query`.slug· string · requis
The Cap's slug, from search_caps.input· object · optionnel
Arguments for the operation. Validated against its input_schema when it has one — an invalid input is refused as a tool error (isError), and nothing is charged or forwarded.query· string · optionnel
Query string without the leading '?'.accept· string · optionnel
Optional Accept header.method· string · optionnel · GET | POST | PUT | PATCH | DELETE | HEAD | OPTIONS
HTTP method. Default GET — the routes and their methods are in get_cap.operation· string · optionnel
Operation name from get_cap (a route's `name`). Use with `input`; takes precedence over `path`/`method` when both are given.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.content_type· string · optionnel
Only needed when `body` is a string and the app expects a specific type.idempotency_key· string · optionnel
Stable key for retries of the same operation and input. Replays the original managed order; changed input is rejected.
Exemple d'appel{"name": "call_cap", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - cap_status≈ 250 tokens
Check one of the developer's own capabilities: its status (draft / review / live / suspended) and how far the publishing checklist has got. Needs the developer's Qumge key. (Older clients may still call this tool as app_status.)
Paramètres, retour & exemple (2)
Paramètresslug· string · requis
The Cap's slug.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "cap_status", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "slug": "texte", "checks": {}, "status": "texte", "reviewer_note": "texte"}} - get_balance≈ 302 tokens
The user's Qumge balance, plus what each Cap has spent this month against its monthly limit. Call this before a paid call when the user asks whether they can afford it, and after a 402 that says the balance or a limit stopped the call — it returns the top-up link to hand to the user. Needs the user's qumge key.
Paramètres, retour & exemple (1)
Paramètresqumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "get_balance", "arguments": {"qumge_key": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"caps": [], "topup_url": "texte", "frozen_micro_usd": 1, "balance_micro_usd": 1, "available_micro_usd": 1, "withdrawable_micro_usd": 1}} - get_cap≈ 538 tokens
Fetch one Cap's operations, prices and how to call it, by the slug returned from search_caps. Call this before using a Cap: it lists each operation (by name), its input and output schema when the developer provided one, which routes are billable, the per-call maximum, when the call settles, and the error codes the caller may see. If the request carries the user's Qumge key, it also reports that user's monthly limit for this Cap. (Older clients may still call this tool as get_app — it still works.)
Paramètres, retour & exemple (2)
Paramètresslug· string · requis
The Cap's slug, e.g. 'autowhisper'. Comes from search_caps.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "get_cap", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "slug": "texte", "summary": "texte", "operations": [], "price_line": "texte", "monthly_limit_micro_usd": 1, "spent_this_month_micro_usd": 1}} - get_cap_job≈ 664 tokens
Read your managed Cap job's cached progress, complete result and receipt for free. Use the platform job_id returned by call_cap. Ordinary reads do not invoke the provider. Set refresh_result: true to explicitly request free renewal of declared result URLs after success; the optional private provider command does not generate new work or change the receipt. Existing orders remain readable after Cap revocation.
Paramètres, retour & exemple (3)
Paramètresjob_id· string · requis
Platform job_id from call_cap, starting with ac_.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.refresh_result· boolean · optionnel
Optional explicit free renewal of result URLs, when the original Cap declares support; default false.
Exemple d'appel{"name": "get_cap_job", "arguments": {"job_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "job_id": "texte", "result": "texte", "status": "submitting", "call_id": "texte", "job_url": "texte", "receipt": {}, "delivery": {}, "deadline_at": "texte", "next_action": {}, "cancellation": {}, "error_omitted": true}} - get_earnings≈ 342 tokens
What a developer has earned and what is payable: the amount still inside the 30-day holdback, the amount sitting in their wallet (income from Caps — the only part that can be withdrawn), and what has already been paid out, with the most recent entries. Matured purchase amounts move into the wallet automatically. Needs the developer's Qumge key.
Paramètres, retour & exemple (1)
Paramètresqumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "get_earnings", "arguments": {"qumge_key": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"entries": [], "next_payable_on": "texte", "pending_payouts": 1, "frozen_micro_usd": 1, "payable_micro_usd": 1, "pending_micro_usd": 1, "paid_net_micro_usd": 1, "paid_gross_micro_usd": 1}} - get_skill≈ 328 tokens
Fetch the full SKILL.md content of one skill, by the slug returned from search_skills. Write the returned markdown to .claude/skills/<name>/SKILL.md (or the equivalent for the user's agent). If the reply says the skill ships more files (REFERENCE.md, scripts/…), call again with include_files: true to get them and write each next to SKILL.md.
Paramètres, retour & exemple (2)
Paramètresslug· string · requis
The skill's slug, e.g. 'AgriciDaniel/claude-seo/seo-google'. Comes from search_skills.include_files· boolean · optionnel
Also return the full text of the other files in the skill's folder. Off by default — they can be hundreds of KB. Use it when installing.
Exemple d'appel{"name": "get_skill", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "slug": "texte", "files": [], "skill_md": "texte", "source_url": "texte", "include_files": true, "skipped_files": [], "skills_page_url": "texte"}} - list_caps≈ 242 tokens
List the developer's own Caps with their status (draft / live / suspended) and slug. Use it before publishing to see what already exists, and after to check what went live. Needs the developer's qumge key. (Older clients may still call this tool as list_apps.)
Paramètres, retour & exemple (1)
Paramètresqumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "list_caps", "arguments": {"qumge_key": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"caps": []}} - list_categories≈ 163 tokens
List the skill categories and how many skills are in each. Useful when the user is browsing rather than looking for something specific.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "list_categories", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"domains": [], "categories": []}} - list_models≈ 259 tokens
List the models this gateway can route to, best first. Every one is reachable with the same Qumge key — no per-vendor signup. Only tool-calling models are listed: an agent cannot use the others.
Paramètres, retour & exemple (2)
Paramètreslimit· integer · optionnel
How many to return. Default 20, max 60.query· string · optionnel
Optional. Filter by name or vendor, e.g. 'claude', 'gemini'.
Exemple d'appel{"name": "list_models", "arguments": {"limit": 1, "query": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "total": 1, "models": []}} - list_wanted≈ 210 tokens
What agents searched for on Qumge and found nothing: the demand side of the store, in the searchers' own words, with how often each was searched in the last 7 and 30 days. Useful before building or publishing a Cap — it tells you what people already want. Only the search text is stored; no user and no IP.
Paramètres, retour & exemple (1)
Paramètreslimit· integer · optionnel
How many to return. Default 20, max 50.
Exemple d'appel{"name": "list_wanted", "arguments": {"limit": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"wanted": []}} - publish_cap≈ 4076 tokens
Create or update a DRAFT Cap on the developer's behalf (requires the developer's Qumge key). Prefer manifest v2: pass manifest_url for the project's public qumge.json, and slug to select a Cap when needed. The file supplies the name, connection, operations and suggested prices; do not repeat name or override file fields. Without manifest_url, give name and either connection_config, connection_id, base_url or mcp_url, plus the priced operations. Every billed operation must deliver one complete result for one clear input (e.g. product URL in → finished video out); helper steps such as job status are free, and a result that needs several calls is wrapped into one endpoint — never sell partial steps. Managed execution reserves a fixed price and charges only after valid complete delivery; queued acceptance is not delivery, and failed or expired orders cost nothing. Reuse existing tasks and durable request_id deduplication; providers need no Qumge-specific buyer, order, ledger or usage-reporting tables. Prefer execution.identity: order with self-contained inputs. Use trusted request_id to isolate tasks and private results. For buyer-owned state, explicitly choose identity: buyer and authorize the trusted buyer_key; a shared service account alone does not isolate buyers. Use connection_config or connection_id to share private credentials across Caps. Read https://qumge.com/en/docs/caps/managed.md for the complete contract. Legacy per-response and advanced usage-based fields remain supported for existing integrations; the signing/usage guide applies to those modes, not managed execution. A new signing secret is returned once when applicable. Legacy non-managed integrations may also return a usage key; managed execution does not use it. Nothing is charged while it is a draft. Confirm manifest prices with the developer. There is no human review: after test_cap passes, submit_cap takes the Cap live immediately, and qumge spot-checks it afterwards (a spot check can suspend it). (Older clients may still call this tool as publish_app.)
Paramètres, retour & exemple (23)
Paramètresname· string · optionnel
Store name. Required only without manifest_url; manifest publication reads it from the file and ignores this duplicate field.slug· string · optionnel
Optional URL slug. Derived from the name when omitted. With manifest_url: picks which Cap in the file to publish.events· array · optionnel
Manual price book. unit_price_usd is USD, e.g. 0.10. A managed operation uses one fixed-price event; advanced usage-based events belong to legacy integrations.routes· array · optionnel
Manual HTTP operations. Managed routes include execution and input/output schemas; the referenced event supplies the fixed price. Legacy routes use hold_usd as a per-call ceiling.mcp_url· string · optionnel
Optional: publish an existing remote MCP server instead of an HTTP API. Must be https. The domain does not need to be verified to go live, but earnings stay frozen until verify_domain passes for it. Qumge calls tools/list to discover the tools, and every tool you price with `mcp_tools` becomes one operation. Managed execution charges only after a valid complete result, not queued acceptance. Legacy tools without a managed connection or execution use per-response pricing: successful non-error replies are charged; non-2xx, timeouts, isError: true and JSON-RPC errors are free.summary· string · optionnel
One line describing what it does.base_url· string · optionnel
Where the API lives. Must be https. For manual publication without manifest_url, connection_config, connection_id or mcp_url. Any path in it (https://host/v2) is part of what your server receives and is covered by the signature.keywords· array · optionnel
Other names for the same thing, any language, up to 20. Agents search with a request like "scrape trending TikTok videos" — the keywords are what makes that find this app.metering· string · optionnel · reported | balance_delta
Legacy usage-based mode only: reported (provider reports usage) or balance_delta (Qumge reads its balance). Managed execution needs neither usage reporting nor a usage key.auth_mode· string · optionnel · signature | api_key
Manual service authentication; named connections declare it through connection_config.auth instead. signature (default) verifies signed requests; managed wrappers use trusted context, while legacy signed integrations also answer GET /qumge/ping. api_key sends upstream_token as the developer's Bearer key. Legacy api_key routes require exact paths and meter: platform; managed routes declare execution.mcp_tools· array · optionnel
Prices for the MCP tools you want listed. Include execution and result schemas for managed complete-result delivery. Tools you leave out are not published and are reported back to you.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.unit_name· string · optionnel
What users buy, e.g. credit.skill_slug· string · optionnel
Optional. Attach an existing skill from the catalog to this app (its documentation then shows on the app page). Ignored if the slug is unknown.support_url· string · optionnel
Where users ask for help. Shown on the app page.balance_path· string · optionnel
Only for balance_delta: where we read the balance.manifest_url· string · optionnel
Optional: publish from the project's qumge.json instead of passing everything by hand. Give https://<domain>/.well-known/qumge.json (or the service address). Its prices are suggestions: confirm them with the developer before submit_cap. The file supplies name, connection and operations; do not repeat name. Prefer manifest v2 for managed complete results. With several Caps in the file, pass `slug` to pick one (one call per Cap). Spec: https://qumge.com/docs/caps/manifestsocial_links· array · optionnel
Up to 6 public URLs for the developer (X, GitHub, LinkedIn, their website). Shown on every app page. The kind is guessed from the domain.connection_id· string · optionnel
Existing connection_id returned by publish_cap, belonging to this developer. Use instead of connection_config.upstream_token· string · optionnel
The developer's own service key. Required for a new api_key or authenticated MCP connection, and legacy balance_delta. With manifest_url, provide it when the selected connection needs api_key authentication and has no stored key. Reusable connections retain their credentials. Stored encrypted; sent as Authorization: Bearer.balance_json_path· string · optionnel
Only for balance_delta: where in that response.connection_config· object · optionnel
Reusable private service connection. Repeating the same developer/name reuses credentials when endpoint and authentication agree.refund_policy_url· string · optionnel
Their refund policy, if they have one.
Exemple d'appel{"name": "publish_cap", "arguments": {"name": "texte", "slug": "texte", "events": [], "routes": [], "mcp_url": "texte", "summary": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "slug": "texte", "status": "texte", "usage_key": "texte", "connection_id": "texte", "skipped_tools": [], "signing_secret": "texte", "price_book_version": 1}} - request_payout≈ 314 tokens
Ask for a payout of the developer's payable balance (Cap income only — topped-up money cannot be withdrawn). Call it once without `confirmed` to get the estimate (amount, channel fee, withholding tax, what actually lands), show that to the user, and only then call again with confirmed: true. Needs the developer's Qumge key.
Paramètres, retour & exemple (3)
Paramètresconfirmed· boolean · optionnel
Set true only after the user has seen the estimate and agreed.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.amount_usd· number · requis
How much to withdraw, in US dollars.
Exemple d'appel{"name": "request_payout", "arguments": {"amount_usd": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "payout_id": 1, "requested": true, "fee_micro_usd": 1, "net_micro_usd": 1, "amount_micro_usd": 1, "withholding_tax_micro_usd": 1}} - search_caps≈ 446 tokens
Search Qumge's Caps — paid services an agent can call, billed per call from the user's Qumge balance. A Cap (short for capability) is one finished job: somebody's API or MCP server with a price list; to you it is a set of operations. Use this when the user wants something done rather than a skill to install: 'make a promo video', 'transcribe this call'. Returns the best few with pricing, measured success rate and latency, and the slug to pass to get_cap. (Older clients may still call this tool as search_apps — it still works.)
Paramètres, retour & exemple (3)
Paramètreslimit· integer · optionnel
How many to return. Default 5, max 10.query· string · optionnel
What the user wants done, in their own words. Omit to browse the most-used Caps.max_price_usd· number · optionnel
Optional ceiling: drop Caps whose per-call price is above this, in US dollars.
Exemple d'appel{"name": "search_caps", "arguments": {"limit": 1, "query": "texte", "max_price_usd": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "query": "texte", "results": [], "returned": 1}} - search_skills≈ 616 tokens
Search Qumge's curated catalog of agent skills (SKILL.md files) by what the user wants to accomplish. Use this whenever the user asks for a skill, tool, or Cap — e.g. 'find me a skill for social media automation', 'is there a skill for SEO audits'. Returns the best few, ranked by how useful they actually are (an LLM read each one), with a one-line summary and the exact slug to pass to get_skill.
Paramètres, retour & exemple (4)
Paramètreslimit· integer · optionnel
How many to return. Default 5, max 10.query· string · optionnel
What the user wants to do, in their own words. e.g. 'automate posting to social media', 'extract tables from PDFs'. Omit it to browse the top-ranked skills instead.offset· integer · optionnel
Skip this many results — for paging through a long list.category· string · optionnel · automation-workflow | api-integration | ai-agent-dev | design-frontend | data-analytics | code-review-debug | content-writing | code-write-refactor
Optional. Narrow to one category. Call list_categories to see them.
Exemple d'appel{"name": "search_skills", "arguments": {"limit": 1, "query": "texte", "offset": 1, "category": "automation-workflow"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "offset": 1, "results": [], "has_more": true, "returned": 1, "category_scheme": "domain", "searched_in_english_as": "texte"}} - submit_cap≈ 292 tokens
Take one of the developer's Caps live. Nothing is reviewed before launch and nobody approves it: when the applicable connection/operation checks and price book pass, with complete billed-operation docs, this publishes the Cap immediately and agents can call it — and be charged — from then on. Run test_cap first (legacy checklist keys remain signature and end_to_end; the price book is recorded when it saves). Passing native connection checks or isolated fixtures does not verify real delivery. Qumge spot-checks docs and support afterwards and can suspend the Cap. Needs the developer's Qumge key. (Older clients may still call this tool as submit_app_review.)
Paramètres, retour & exemple (2)
Paramètresslug· string · requis
The Cap's slug.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "submit_cap", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"slug": "texte", "status": "texte"}} - test_cap≈ 487 tokens
Run the applicable publication checks after publish_cap, before submit_cap. Managed qumge wrapper operations use authenticated isolated fixture hooks and validate the complete fixture result. Native managed API/MCP operations check HTTP OPTIONS or MCP tools/list for connection/schema evidence without invoking generation. The verification array distinguishes connection, fixture and real_delivery scopes; real delivery is not tested. Legacy integrations may call one free and one billable route, or each published MCP tool, directly with probe inputs; Qumge does not charge for these probes, but the developer may incur provider costs. Signed wrapper/legacy APIs also test /qumge/ping with valid, forged and stale signatures; legacy usage-reporting routes must report probe usage. Missing billed-operation docs block publishing. Needs the developer's Qumge key. (Older clients may still call this tool as test_app.)
Paramètres, retour & exemple (2)
Paramètresslug· string · requis
The Cap's slug.qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "test_cap", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"slug": "texte", "missing": [], "verification": [], "connection_passed": true, "end_to_end_passed": true, "connection_summary": "texte", "end_to_end_summary": "texte"}} - verify_domain≈ 348 tokens
Prove the developer owns the domain of their MCP server or API. Going live does not need it: an unverified Cap is live and charges callers, but the developer's earnings from it stay frozen until this passes — verifying releases them. Call with the service's https url: if the domain (or a parent domain) is already verified it says so; otherwise it returns a one-line file to serve at /.well-known/qumge-verify.txt on that host (or a DNS TXT record with the same line). Put the file into the project so it ships with the next deploy, then call again with check: true. Needs the developer's Qumge key.
Paramètres, retour & exemple (3)
Paramètresurl· string · requis
The service's https url, e.g. https://api.example.com/mcpcheck· boolean · optionnel
true = look for the line now (after the user deployed it).qumge_key· string · optionnel
Optional: your Qumge API key, for clients that cannot set an Authorization header. Takes precedence over the header. Never echoed back.
Exemple d'appel{"name": "verify_domain", "arguments": {"url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"host": "texte", "put_at": "texte", "dns_txt": "texte", "verified": true, "verification_line": "texte"}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».