com.routavo/routavo

Est-ce que com.routavo/routavo est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.routavo/routavo » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• call≈ 1334 tokens

  Route a call to the Routavo network, meter it, and return the result. Give either a provider id from discover(), or a capability and let Routavo pick using its published routing rule. Optional max_price and max_latency_ms constrain the choice. Failed calls are recorded but cost nothing.

  Paramètres, retour & exemple (19)

  Paramètres

  • plan · array · optionnel
    Instead of one call, a sequence of up to 8 steps: [{ id, capability | provider, arguments, max_price?, max_latency_ms? }]. A later step may take a value from an earlier one with { "$ref": "<step id>.output.<path>" }, e.g. { "$ref": "geo.output.results[0].lat" }. The whole plan is quoted before anything runs; with dry_run it is only quoted. Steps run in order and stop at the first failure. Each step returns its own receipt and the response carries one total.
  • batch · array · optionnel
    Instead of one arguments object, up to 50 of them for the same capability or provider. Run in parallel, each with its own receipt, one total. Failed items cost nothing and do not stop the others.
  • budget · object · optionnel
    A task budget: { id, max }. Spend under this id is tracked across any number of calls, plans and batches, and a call that would take it past max is refused with code "budget". { id, statement: true } returns what the budget has spent and the receipts behind it.
  • fields · array · optionnel
    Return only these output paths, e.g. ["results.name", "results.lat", "results.lng"]. Saves tokens; the receipt still hashes the full answer.
  • quorum · integer · optionnel
    Ask 2 or 3 providers the same question and get an agreement score with every answer. Each provider is charged. Refused if fewer providers clear your constraints, so quote it first with dry_run.
  • recipe · string · optionnel
    A named, published plan, e.g. "weather_for_place". Give its arguments and it runs the steps for you, quoted first, with the last step's output on top. discover() lists recipes with their inputs and estimated price.
  • wallet · string · optionnel
    Your wallet address, asserted. Attributes metering and a daily cap on the free tier; it proves nothing. To pay from a balance, prove the wallet once at /api/wallet and send the key it returns as wallet_key or as Authorization: Bearer rw_...
  • country · string · optionnel
    Two letter code for where this request is, e.g. "FR". A routing hint, not an argument to the API: it lets a provider that covers only that country be chosen, and keeps one that does not out of the running. Unnecessary when the arguments already carry coordinates.
  • dry_run · boolean · optionnel
    Quote only: which provider would be chosen, at what price, with what latency, and why. Nothing is called, charged or counted.
  • payment · object · optionnel
    Pay this one call with x402: { rail: "x402", payload: <PaymentPayload> }, an EIP-3009 authorization to the pay-to address for at least the price, signed by your wallet. The requirements to sign are in discover() and in any payment_required error. A facilitator verifies and settles it; the receipt carries the transaction.
  • failover · boolean · optionnel
    Default true when routing by capability: if the chosen provider fails, the next eligible one is tried and only the one that answered is charged. Set false to fail fast.
  • provider · string · optionnel
    Provider id, e.g. "open-meteo.geocode". Omit to route by capability.
  • arguments · object · optionnel
    Arguments in the capability contract shape from discover(). Learn geocode once; every provider behind it takes the same input and returns the same output.
  • max_price · string · optionnel
    Do not route above this price per call, e.g. "0.0030"
  • max_total · string · optionnel
    For a plan: do not run if the quoted total exceeds this, e.g. "0.0100".
  • capability · string · optionnel
    Capability to route on, e.g. "geocode". Ignored when provider is given.
  • wallet_key · string · optionnel
    A wallet key (rw_...) from /api/wallet. Proves the wallet, and calls are paid from its deposited USDC balance. Prefer sending it as the Authorization: Bearer header.
  • max_latency_ms · integer · optionnel
    Do not route to a provider slower than this p50
  • idempotency_key · string · optionnel
    Your own id for this call, up to 64 characters. A retry with the same key within 24 hours returns the same result and receipt and is never charged again. The output is kept for those 24 hours only because you asked for replay.

  Exemple d'appel

  {"name": "call", "arguments": {"plan": [], "batch": [], "budget": {}, "fields": [], "quorum": 1, "recipe": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• discover≈ 266 tokens

  Find APIs on the Routavo network that can perform a capability. Returns each provider with its published price, measured latency, terms, and the exact argument schema for calling it, plus the rule Routavo uses to pick between them. Call this before call() when you do not already know a provider id.

  Paramètres, retour & exemple (2)

  Paramètres

  • query · string · optionnel
    Free text when you do not know the capability name, e.g. "turn an address into coordinates" or "will it rain tomorrow". Matched against names, aliases, tags and descriptions; results come back ranked with a score.
  • capability · string · optionnel
    What you need done, e.g. "geocode" or "forecast". Omit to list everything.

  Exemple d'appel

  {"name": "discover", "arguments": {"query": "texte", "capability": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "routing": {}, "providers": []}}

• dispute≈ 174 tokens

  Flag a metered call for the provider to review. Takes the receipt and a short reason. The receipt must verify and must have charged something. The dispute lands in that provider's queue and is visible to Routavo. One dispute per receipt.

  Paramètres, retour & exemple (2)

  Paramètres

  • reason · string · requis
    What was wrong, in plain words. Up to 500 characters. Do not paste the response body.
  • receipt · object · requis
    The receipt object from the call() result you are disputing.

  Exemple d'appel

  {"name": "dispute", "arguments": {"reason": "texte", "receipt": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify≈ 130 tokens

  Check a receipt returned by call(). Confirms the signature, so the provider, price, fee, and the hashes of what went in and came out are exactly what Routavo recorded. Works for anyone holding the receipt. Reveals nothing else.

  Paramètres, retour & exemple (1)

  Paramètres

  • receipt · object · requis
    The receipt object from a call() result.

  Exemple d'appel

  {"name": "verify", "arguments": {"receipt": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://routavo.com/api/mcp