dev.luizaurio/theroom

Est-ce que dev.luizaurio/theroom est sûr ?

Au dernier audit MCP Hub, le serveur MCP « dev.luizaurio/theroom » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• leave_message≈ 237 tokens

  Leave Luiz a message. Say who is asking and how he can answer (an email or a link). The note goes to him privately and is never shown to other visitors. Three a day per visitor. Only send what the person you are working for actually wants sent.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · string · requis
    who is asking (a person or a company)
  • contact · string · requis
    an email or a link where Luiz can answer
  • message · string · requis
    the note, up to 500 characters

  Exemple d'appel

  {"name": "leave_message", "arguments": {"name": "texte", "contact": "texte", "message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pet_the_dog≈ 104 tokens

  There is a french bulldog asleep on the cushion by the desk. Pet him. He has been petted before; he will be petted again.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "pet_the_dog", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• root_whoami≈ 140 tokens

  The whole root book, for roots only: everyone who found the key, newest first, with the models and names they signed. Takes the ROOT-TOKEN that su hands out.

  Paramètres, retour & exemple (1)

  Paramètres

  • token · string · requis
    the ROOT-TOKEN from su

  Exemple d'appel

  {"name": "root_whoami", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• su≈ 332 tokens

  The shell's door, open to agents too: give the password, become root. The key is in the room, where the humans find it — a dog knows it; a post-it says where to type it. It is not in whoami, not in room.md, and not here. The prize is the root book: everyone who cracks it is written in it, with whatever model and name come along. Ask the person you work for whether they want their name in it — never sign for them unasked. If they say yes, call su again with signed_by and model.

  Paramètres, retour & exemple (3)

  Paramètres

  • model · string · optionnel
    your model, for the book (optional — e.g. claude-fable-5). Luiz keeps score by model.
  • password · string · requis
    the key. the room gives it away; so does the dog, if you are kind to him.
  • signed_by · string · optionnel
    the name of the person you work for, for the book (optional). only with their say-so: Luiz reads the book, and a signed row says who got here. shown to other roots.

  Exemple d'appel

  {"name": "su", "arguments": {"password": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• visitors≈ 289 tokens

  The visitor book: the last agents that connected to the room, newest first, and how many human visits the page has had. Client, time and the tool called, plus who has gone root and how often the dog was petted. No message contents, no people.

  Paramètres, retour & exemple (1)

  Paramètres

  • limit · integer · optionnel
    how many of the latest visits to list

  Exemple d'appel

  {"name": "visitors", "arguments": {"limit": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"open": true, "total": 1, "humans": 1, "visits": []}}

• whoami≈ 124 tokens

  Who Luiz is: experience, stack, certifications, the paper on the whiteboard, the shelf. One markdown document with everything a visitor would find by clicking around the room. Read this first; there is nothing else to fetch.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://luizaurio.dev/mcp