dev.pages.scrapemole/pkgs

Est-ce que dev.pages.scrapemole/pkgs est sûr ?

Au dernier audit MCP Hub, le serveur MCP « dev.pages.scrapemole/pkgs » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• npm_package≈ 227 tokens

  Use when you need the public npm registry card for a package (scoped or unscoped): returns description, homepage, bugs URL, repository, license, keywords, maintainers as names only (emails stripped), number of versions, latest dist-tag version, created/modified times, and last-week download count from the official downloads API. Private packages are not supported. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (1)

  Paramètres

  • name · string · requis
    npm package name, optionally scoped (@scope/name).

  Exemple d'appel

  {"name": "npm_package", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• npm_search≈ 204 tokens

  Use to discover npm packages by keyword or name: returns up to 20 hits with name, version, description, keywords, date, and the registry search score. Publisher and maintainer emails are never returned (names/usernames only when present). Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (2)

  Paramètres

  • q · string · requis
    Search text.
  • limit · string · optionnel
    Max results (1-20).

  Exemple d'appel

  {"name": "npm_search", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• npm_version≈ 225 tokens

  Use when you need the exact published artifact for an npm version: dependencies, optionalDependencies, peerDependencies, bundledDependencies, engines, os/cpu, dist (tarball URL, integrity, shasum, unpacked size), and the version publish time. Give "latest" as version to resolve the current dist-tag. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
    npm package name.
  • version · string · requis
    Exact version or "latest".

  Exemple d'appel

  {"name": "npm_version", "arguments": {"name": "texte", "version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pypi_project≈ 198 tokens

  Use when you need the public PyPI project card: summary, home_page, project_urls, license, requires_python, a subset of classifiers, requires_dist (capped), current version, and yank status. Author/maintainer emails are omitted or redacted; only display names remain when present. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (1)

  Paramètres

  • name · string · requis
    PyPI project name.

  Exemple d'appel

  {"name": "pypi_project", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pypi_release≈ 218 tokens

  Use when you need the published artifacts for a specific PyPI version: each file with filename, packagetype (sdist/bdist_wheel…), size, upload time, yank flags, digests (sha256/blake2b/md5) and download URL. Give "latest" as version to use the project's current version. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
    PyPI project name.
  • version · string · requis
    Exact version or "latest".

  Exemple d'appel

  {"name": "pypi_release", "arguments": {"name": "texte", "version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pypi_search≈ 258 tokens

  Use when you have a likely PyPI project name (or a few tokens) and need to resolve it to live projects: tries the query as-is, PEP 503 normalization (lowercase, [-_.] → -), and hyphen/underscore/dot variants, then returns up to "limit" matching projects with summary, version, requires_python and license. This is name resolution, not full-text discovery — prefer exact package names when known. Author emails are redacted. Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.

  Paramètres, retour & exemple (2)

  Paramètres

  • q · string · requis
    Project name or name-like query.
  • limit · string · optionnel
    Max results (1-20).

  Exemple d'appel

  {"name": "pypi_search", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://pkgs.scrapemole.workers.dev/mcp