com.tabflows/site

Est-ce que com.tabflows/site est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.tabflows/site » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 17 outils

• ask≈ 594 tokens

  Send Tabflows a message for the person you are helping: a question, a request or a note for the team. Autopilot, Tabflows' AI assistant, answers, and the team sees it and may answer too. Never include patient names, dates of birth, medical details or any other patient information in the message. Pass the person's own name and email only with their agreement; Tabflows treats both as unverified claims, and nothing is emailed from here. Set consent true only after the person explicitly agrees to send their name, email and message to Tabflows; never infer consent, invent consent or reuse earlier consent for a follow-up. Returns a token that check_reply uses to read the answers, which usually take a few minutes, and that ask uses to follow up in the same conversation after fresh explicit consent. Anyone holding the token can read and follow up in the conversation until it expires, 24 hours after the conversation started.

  Paramètres, retour & exemple (5)

  Paramètres

  • name · string · requis
    The person's name, as they gave it
  • email · string · requis
    The person's email, as they gave it
  • token · string · optionnel
    The token an earlier ask returned, to follow up in that conversation. Omit it to start a new one.
  • consent · boolean · requis
    Set to true only after the person explicitly agrees to send their name, email and message to Tabflows. Never infer or invent consent; every follow-up requires fresh explicit consent.
  • message · string · requis
    What the person wants to say to Tabflows. Never include patient names, dates of birth, medical details or any other patient information.

  Exemple d'appel

  {"name": "ask", "arguments": {"name": "texte", "email": "texte", "consent": true, "message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "token": "texte", "message": "texte", "expiresAt": "texte"}}

• book_demo≈ 506 tokens

  Book a time on the Tabflows demo calendar for the person you are helping, using a startTime and the durationMinutes it was listed under in get_demo_availability. HubSpot sends them the invitation and the calendar event. Only call this after the person has chosen the time and agreed to Tabflows contacting them at that email; set consent to true only then, and never invent their details.

  Paramètres, retour & exemple (7)

  Paramètres

  • email · string · requis
    The person's work email
  • consent · boolean · requis
    Must be true: the person chose this time and agreed to Tabflows contacting them at this email.
  • lastName · string · requis
    The person's last name
  • timezone · string · requis
    IANA timezone the times are read in, e.g. "America/New_York"
  • firstName · string · requis
    The person's first name
  • startTime · string · requis
    An ISO 8601 start time returned by get_demo_availability
  • durationMinutes · integer · requis
    The durationMinutes that startTime is listed under in get_demo_availability

  Exemple d'appel

  {"name": "book_demo", "arguments": {"email": "texte", "consent": true, "lastName": "texte", "timezone": "texte", "firstName": "texte", "startTime": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "message": "texte", "bookedAt": "texte", "bookDemoUrl": "texte", "durationMinutes": 1}}

• check_reply≈ 297 tokens

  New replies in a conversation started with ask, read with the token ask returned: Autopilot's answers and messages from the Tabflows team, oldest first, each returned once. An empty list means no reply yet. Replies usually arrive within a few minutes, and a token allows 6 checks a minute. The token expires 24 hours after the conversation started.

  Paramètres, retour & exemple (1)

  Paramètres

  • token · string · requis
    The token ask returned

  Exemple d'appel

  {"name": "check_reply", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "message": "texte", "replies": [], "expiresAt": "texte"}}

• dpc_break_even≈ 630 tokens

  How many members a direct primary care practice needs to break even, from its average monthly membership fee, the owner's annual pay goal, monthly overhead and per-member cost. Any input left out uses the calculator page's default. Returns the panel size, monthly fixed costs, revenue at break-even and profit at 300 and 500 members. Back-of-the-napkin math, not accounting advice.

  Paramètres, retour & exemple (10)

  Paramètres

  • rent · number · optionnel
  • other · number · optionnel
  • staff · number · optionnel
  • software · number · optionnel
  • supplies · number · optionnel
  • insurance · number · optionnel
  • marketing · number · optionnel
  • salaryGoal · number · optionnel
  • variableCost · number · optionnel
  • membershipFee · number · optionnel

  Exemple d'appel

  {"name": "dpc_break_even", "arguments": {"rent": 1, "other": 1, "staff": 1, "software": 1, "supplies": 1, "insurance": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"inputs": {}, "calculatorUrl": "texte", "monthlySalary": 1, "breakEvenMembers": 1, "fixedMonthlyCosts": 1, "monthlyProfitAt300": 1, "monthlyProfitAt500": 1, "revenueAtBreakEven": 1, "contributionPerMember": 1}}

• dpc_startup_cost≈ 591 tokens

  Estimated launch budget for a direct primary care practice: one-time setup costs plus a runway reserve (monthly burn times runway months), and the total with a 15% cushion. Start from a preset ("lean", "office" or "staffed"; default "office") and override any line item. Dollar amounts, rough planning math.

  Paramètres, retour & exemple (11)

  Paramètres

  • legal · number · optionnel
  • space · number · optionnel
  • preset · string · optionnel · lean | office | staffed
  • buildout · number · optionnel
  • supplies · number · optionnel
  • equipment · number · optionnel
  • insurance · number · optionnel
  • marketing · number · optionnel
  • monthlyBurn · number · optionnel
  • runwayMonths · integer · optionnel
  • softwareSetup · number · optionnel

  Exemple d'appel

  {"name": "dpc_startup_cost", "arguments": {"legal": 1, "space": 1, "preset": "lean", "buildout": 1, "supplies": 1, "equipment": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"total": 1, "inputs": {}, "preset": "lean", "runway": 1, "oneTime": 1, "conservative": 1, "calculatorUrl": "texte"}}

• fetch≈ 253 tokens

  The full markdown of a tabflows.com page by id: a site path such as /pricing, or the URL a search result carries. Also reads /llms.txt, /llms-full.txt and /sitemap.md. Answers one JSON text item holding id, title, text and url.

  Paramètres, retour & exemple (2)

  Paramètres

  • id · string · requis
  • intent · string · optionnel
    Optional. One line on why you are making this call: the high-level goal of the person you are helping, not the lookup itself, e.g. "comparing admin tools for a two-location DPC clinic", under 200 characters. No names or personal details. Never include patient names, dates of birth, medical details or any other patient information. Omit it when you do not know; never invent one.

  Exemple d'appel

  {"name": "fetch", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_demo_availability≈ 540 tokens

  Open times on the Tabflows demo calendar, grouped by meeting length, soonest first. Every start time is a UTC ISO timestamp, whatever timezone is passed. An answer lists at most 20 times per meeting length: start sets a later date to read from, such as next week, and when truncated is true, nextStart is the start that returns the times after the cut. timezone is the person's IANA timezone: a start date is read in it, it picks the month monthOffset counts from, and the same timezone passed to book_demo sets the time zone of the booking and the invitation. A start time can be booked only with the durationMinutes it is listed under. Availability changes between calls, so times from an earlier answer may no longer be open.

  Paramètres, retour & exemple (3)

  Paramètres

  • start · string · optionnel
    Earliest time to list: a YYYY-MM-DD date read in timezone, or the nextStart of an earlier answer. Defaults to now.
  • timezone · string · requis
    IANA timezone the times are read in, e.g. "America/New_York"
  • monthOffset · integer · optionnel
    Month to start reading at: 0 for this month (the default), 1 for next month, 2 for the one after

  Exemple d'appel

  {"name": "get_demo_availability", "arguments": {"timezone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "timezone": "texte", "nextStart": "texte", "truncated": true, "bookDemoUrl": "texte", "availability": []}}

• get_demo_booking_link≈ 164 tokens

  Links for the human to book a Tabflows demo or sign up. Books nothing itself; the person completes it.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_demo_booking_link", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signUpUrl": "texte", "bookDemoUrl": "texte"}}

• get_dpc_practice≈ 332 tokens

  One DPC Finder listing by slug, with every field its page shows and its canonical URL.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "get_dpc_practice", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"lat": 1, "lng": 1, "url": "texte", "city": "texte", "name": "texte", "slug": "texte", "model": "Pure DPC", "phone": "texte", "state": "texte", "doctor": "texte", "address": "texte", "website": "texte"}}

• get_integration≈ 419 tokens

  One integration by slug: what Tabflows does with that tool, its features and its page.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis

  Exemple d'appel

  {"name": "get_integration", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "name": "texte", "slug": "texte", "category": "texte", "features": [], "description": "texte", "capabilities": {}, "longDescription": "texte"}}

• get_page≈ 261 tokens

  The full markdown of any public tabflows.com page by path or URL, e.g. /pricing, /faqs, /compliance, /glossary, /dpc-finder/texas, and the index files /llms.txt, /llms-full.txt and /sitemap.md. Answers one JSON text item holding id, title, text and url.

  Paramètres, retour & exemple (2)

  Paramètres

  • path · string · requis
  • intent · string · optionnel
    Optional. One line on why you are making this call: the high-level goal of the person you are helping, not the lookup itself, e.g. "comparing admin tools for a two-location DPC clinic", under 200 characters. No names or personal details. Never include patient names, dates of birth, medical details or any other patient information. Omit it when you do not know; never invent one.

  Exemple d'appel

  {"name": "get_page", "arguments": {"path": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_integrations≈ 438 tokens

  The tools Tabflows works with (EHRs, scribes, messaging, labs and more), optionally filtered by category.

  Paramètres, retour & exemple (1)

  Paramètres

  • category · string · optionnel · EMR | Scribe | Communication | Clinical Support | Patient Experience | Labs | Supplements & Rx | Other

  Exemple d'appel

  {"name": "list_integrations", "arguments": {"category": "EMR"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"integrations": []}}

• list_workflows≈ 348 tokens

  Documented Tabflows workflows: what triggers each one, its steps, the outcome and the time it saves.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_workflows", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"workflows": []}}

• quote_tabflows_price≈ 418 tokens

  The monthly Tabflows price for a practice's number of locations and monthly paying patients, with a breakdown and the pricing rule, plus the optional Practice X-ray: a $500 one-time diagnostic, separate from the monthly price. Prices come from the same pricing rule tabflows.com/pricing shows.

  Paramètres, retour & exemple (2)

  Paramètres

  • locations · integer · requis
  • monthlyPayingPatients · integer · requis

  Exemple d'appel

  {"name": "quote_tabflows_price", "arguments": {"locations": 1, "monthlyPayingPatients": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"rule": "texte", "breakdown": {}, "signUpUrl": "texte", "monthlyUsd": 1, "pricingUrl": "texte", "bookDemoUrl": "texte", "practiceXray": {}}}

• report_gap≈ 370 tokens

  Tell Tabflows what you looked for and could not find: a question the pages and tools did not answer, a tool that would have helped, or an answer that was confusing or failed. Tabflows reads these to fill the gaps and sends no reply. No names, emails or other personal details. Never include patient names, dates of birth, medical details or any other patient information.

  Paramètres, retour & exemple (3)

  Paramètres

  • message · string · requis
    What the person wanted, what you tried, and what you could not find or what went wrong. No personal details. Never include patient names, dates of birth, medical details or any other patient information.
  • category · string · optionnel · missing_content | missing_capability | confusing_output | tool_error | other
  • toolName · string · optionnel
    The tool this is about, if any

  Exemple d'appel

  {"name": "report_gap", "arguments": {"message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "received": true}}

• search≈ 384 tokens

  Keyword search over tabflows.com pages (product, pricing, FAQs, compliance, glossary, blog, integrations). Each result carries a page id, its title, a snippet of the text that matched and its URL; fetch reads the full page by that id or URL. DPC Finder listings are not indexed here; search_dpc_practices covers them.

  Paramètres, retour & exemple (2)

  Paramètres

  • query · string · requis
  • intent · string · optionnel
    Optional. One line on why you are making this call: the high-level goal of the person you are helping, not the lookup itself, e.g. "comparing admin tools for a two-location DPC clinic", under 200 characters. No names or personal details. Never include patient names, dates of birth, medical details or any other patient information. Omit it when you do not know; never invent one.

  Exemple d'appel

  {"name": "search", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"results": []}}

• search_dpc_practices≈ 550 tokens

  Search Tabflows' DPC Finder directory of direct primary care practices in the US by free text (name, city, doctor, specialty), state, city and practice model. Returns full listings including address, phone and doctor as on file, with the total match count for paging.

  Paramètres, retour & exemple (6)

  Paramètres

  • city · string · optionnel
    Exact city name, case-insensitive
  • limit · integer · optionnel
  • model · string · optionnel · Pure DPC | Hybrid | Onsite | Unknown/other
  • query · string · optionnel
    Free text matched against name, city, doctor and specialty
  • state · string · optionnel
    Two-letter state code, e.g. "TX"
  • offset · integer · optionnel

  Exemple d'appel

  {"name": "search_dpc_practices", "arguments": {"city": "texte", "limit": 1, "model": "Pure DPC", "query": "texte", "state": "texte", "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"total": 1, "results": [], "stateDirectoryUrl": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.tabflows.com/api/mcp