dev.pages.datanest-stores/store

Est-ce que dev.pages.datanest-stores/store est sûr ?

Au dernier audit MCP Hub, le serveur MCP « dev.pages.datanest-stores/store » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 7 outils

• check_order_status≈ 194 tokens

  Poll the status of a checkout session created by create_checkout_link. Returns a coarse status (paid | open | expired | unknown) and the recommended next step, with NO buyer PII. When status is "paid", call get_purchase_access with the same session_id to obtain the download link.

  Paramètres, retour & exemple (1)

  Paramètres

  • checkout_session_id · string · requis
    The Stripe checkout session id (cs_...) returned by create_checkout_link.

  Exemple d'appel

  {"name": "check_order_status", "arguments": {"checkout_session_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• compare_products≈ 204 tokens

  Compare 2–4 products factually, using only stored metadata (price, license, versions, prerequisites, files, verification status, etc.). Never fabricates differences or suitability claims. Read-only and public.

  Paramètres, retour & exemple (2)

  Paramètres

  • use_case · string · optionnel
    Optional buyer use case (recorded, not used to invent claims).
  • product_ids · array · requis
    2 to 4 product ids or slugs.

  Exemple d'appel

  {"name": "compare_products", "arguments": {"product_ids": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_checkout_link≈ 418 tokens

  SIDE-EFFECTING: creates a short-lived Stripe Checkout session/link for ONE product (quantity fixed to 1) and returns only the hosted checkout URL, product summary, exact price, and expiry. The price and Stripe price id are resolved server-side from trusted catalogue data — client-supplied price/amount/currency/name/price-id are ignored/rejected. The buyer must explicitly authorize payment in Stripe Checkout; NO card is charged autonomously. Products that are unaudited/deprecated/not agent-sellable are rejected.

  Paramètres, retour & exemple (6)

  Paramètres

  • quantity · number · optionnel
    Must be 1 (digital product).
  • cancel_url · string · optionnel
    Optional; must be on the allowlisted host.
  • product_id · string · requis
    Product id, SKU, or unambiguous slug.
  • buyer_email · string · optionnel
    Optional prefill for the checkout.
  • success_url · string · optionnel
    Optional; must be on the allowlisted host.
  • idempotency_key · string · optionnel
    Optional idempotency key to avoid duplicate sessions.

  Exemple d'appel

  {"name": "create_checkout_link", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_product_details≈ 200 tokens

  Return the full factual detail for one product: exact title, price/currency, short + detailed description, included files, prerequisites, supported technologies/versions, install time, license, latest version, last verified date, verification status, compatibility notes, preview URL, product page URL, and stable product_id/SKU. Read-only and public.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_id · string · requis
    Product id ("store:slug"), SKU, or unambiguous slug.

  Exemple d'appel

  {"name": "get_product_details", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_product_preview≈ 180 tokens

  Return SAFE public previews only: documentation excerpts, a file-name tree, screenshot/demo links, and sample snippets intended for public display. Never returns the purchased ZIP, private storage URLs, secrets, whole paid source files, or signed download URLs. Read-only and public.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_id · string · requis
    Product id, SKU, or unambiguous slug.

  Exemple d'appel

  {"name": "get_product_preview", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_purchase_access≈ 273 tokens

  AUTHENTICATED: for a buyer who already completed a purchase, returns a short-lived (~15 min), single-purpose signed download link for THEIR order only. Ownership is proven by an unguessable credential issued at fulfilment — the Stripe session_id or the download token. Reuses the existing entitlement + signed-link service; each call consumes one of the limited downloads. Cannot list or access other purchasers' orders.

  Paramètres, retour & exemple (3)

  Paramètres

  • email · string · optionnel
    Optional purchaser email, recorded for audit.
  • session_id · string · optionnel
    Stripe checkout session id (cs_...).
  • download_token · string · optionnel
    Download token (UUID) issued at fulfilment.

  Exemple d'appel

  {"name": "get_purchase_access", "arguments": {"email": "texte", "session_id": "texte", "download_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_products≈ 462 tokens

  Search the Datanest catalogue of digital technical products. Accepts natural-language intent queries (e.g. "add authentication to my SaaS", "reduce my AWS bill", "prepare for a system design interview") — stopwords and phrasing are handled, and synonyms are expanded. Returns concise product cards ranked by relevance, with stable canonical URLs. If a query matches little, the result includes suggestions/did_you_mean/available_domains so you can refine. Read-only and public. By default only agent-purchasable products are returned; set include_unsellable=true to also surface unaudited/deprecated items (clearly flagged, not buyable).

  Paramètres, retour & exemple (9)

  Paramètres

  • page · integer · optionnel
  • tags · array · optionnel
    Require ALL of these tags.
  • query · string · optionnel
    Free-text search over title, description, tags, and store.
  • domain · string · optionnel
    Filter by domain/family id: data, ai, cloud, dev, security, career.
  • category · string · optionnel
    Filter by human category name.
  • page_size · integer · optionnel
  • max_price_usd · number · optionnel
  • verified_only · boolean · optionnel
    Only return first-party "verified" products.
  • include_unsellable · boolean · optionnel
    Also include unaudited/deprecated products (discoverability only).

  Exemple d'appel

  {"name": "search_products", "arguments": {"page": 1, "tags": [], "query": "texte", "domain": "texte", "category": "texte", "page_size": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://datanest-stores.com/mcp