dev.tmpstate/tmpstate

Est-ce que dev.tmpstate/tmpstate est sûr ?

Au dernier audit MCP Hub, le serveur MCP « dev.tmpstate/tmpstate » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 16 outils

• create_database≈ 202 tokens

  Create a temporary JSON database (24h TTL, no signup, no keys). Returns the db URL — the only credential — plus admin URL, limits and expiry. Create once per project/task, persist the db URL immediately (local ~/.tmpstate/credentials, project README, and your memory), and reuse it instead of creating again. For retries or parallel workers, pass a stable idempotency_key so duplicate calls return the same database.

  Paramètres, retour & exemple (1)

  Paramètres

  • idempotency_key · string · optionnel
    Stable retry key. Reusing it from the same client returns the same database.

  Exemple d'appel

  {"name": "create_database", "arguments": {"idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_document≈ 174 tokens

  Insert a JSON object into a collection (collections are created implicitly). Counts against the write and document quotas.

  Paramètres, retour & exemple (3)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • data · object · requis
    The document: a JSON object.
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "create_document", "arguments": {"db": "texte", "data": {}, "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• database_status≈ 104 tokens

  Usage, limits, tier and expiry for a database (GET $DB/__meta equivalent).

  Paramètres, retour & exemple (1)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).

  Exemple d'appel

  {"name": "database_status", "arguments": {"db": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_collection≈ 152 tokens

  Delete every document in a collection at once (useful to re-seed). Irreversible. To destroy the entire database, use delete_database instead.

  Paramètres, retour & exemple (2)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "delete_collection", "arguments": {"db": "texte", "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_database≈ 248 tokens

  Destroy a database and all its documents immediately - the teardown for finished work and the revocation kill switch for a leaked db URL. Irreversible: unlike expiry there is no restore window. Works on expired (frozen) databases too and consumes no quota. Call without confirm first: the response states the consequences; show them to the user and only retry with confirm="true" after their explicit approval. Afterwards remove the db URL from wherever you persisted it.

  Paramètres, retour & exemple (2)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • confirm · string · optionnel
    Pass "true" only after the user has seen that deletion is immediate and irreversible and approved.

  Exemple d'appel

  {"name": "delete_database", "arguments": {"db": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_document≈ 170 tokens

  Delete one document. Never blocked by quotas; frees a document slot. Emptying a whole collection? Use delete_collection instead of looping this.

  Paramètres, retour & exemple (3)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • id · string · requis
    Document id (doc_...).
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "delete_document", "arguments": {"db": "texte", "id": "texte", "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• extend_database≈ 202 tokens

  Without a plan: returns the transparent pricing table for keeping this database alive longer. With a plan: returns a Stripe checkout URL for the human to pay — never buy without the user's explicit approval. Works on expired (frozen) databases too: paying restores them. After the user says they have paid, call database_status: the new expiry and tier confirm the extension.

  Paramètres, retour & exemple (2)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • plan · string · optionnel · week | month | quarter

  Exemple d'appel

  {"name": "extend_database", "arguments": {"db": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_document≈ 148 tokens

  Read one document by id. The stored fields are under .data.

  Paramètres, retour & exemple (3)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • id · string · requis
    Document id (doc_...).
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "get_document", "arguments": {"db": "texte", "id": "texte", "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_documents≈ 197 tokens

  List documents in a collection, oldest first. Response shape: {collection, items: [{id, data, created_at, updated_at}], next_cursor}. Documents live under .data. Pass cursor to page.

  Paramètres, retour & exemple (4)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • limit · integer · optionnel
  • cursor · string · optionnel
    next_cursor from the previous page.
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "list_documents", "arguments": {"db": "texte", "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pro_attach_database≈ 192 tokens

  Attach an existing free/extended database to the Pro account: same URL, same data, TTL removed, quotas raised. Beyond the included allotment the same explicit overage consent as pro_create_database applies.

  Paramètres, retour & exemple (3)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • pro_token · string · optionnel
    Pro account token (pt_...). Optional if the MCP connection already sends Authorization: Bearer pt_...
  • accept_overage_usd · string · optionnel

  Exemple d'appel

  {"name": "pro_attach_database", "arguments": {"db": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pro_cancel≈ 202 tokens

  Cancel at period end. This is not just a billing change — it schedules deletion of ALL databases on the account. Call without confirm first: the response spells out the consequences with concrete dates; show them to the user and only retry with confirm="cancel" after their explicit approval.

  Paramètres, retour & exemple (2)

  Paramètres

  • confirm · string · optionnel
    Pass "cancel" only after the user has seen the consequences and approved.
  • pro_token · string · optionnel
    Pro account token (pt_...). Optional if the MCP connection already sends Authorization: Bearer pt_...

  Exemple d'appel

  {"name": "pro_cancel", "arguments": {"confirm": "texte", "pro_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pro_checkout≈ 102 tokens

  Mint a Pro account token plus a Stripe subscription checkout URL ($8/mo, 3 always-on databases included). Persist pro_token immediately; the human pays in a browser. Never start checkout without the user's explicit request.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "pro_checkout", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pro_create_database≈ 194 tokens

  Create a new always-on database owned by the Pro account. Beyond the included allotment this costs extra per month — the tool then returns confirmation_required with the exact price; relay it to the user and only retry with accept_overage_usd after their explicit approval.

  Paramètres, retour & exemple (2)

  Paramètres

  • pro_token · string · optionnel
    Pro account token (pt_...). Optional if the MCP connection already sends Authorization: Bearer pt_...
  • accept_overage_usd · string · optionnel
    Explicit overage consent, e.g. "1.50", only after the user approved.

  Exemple d'appel

  {"name": "pro_create_database", "arguments": {"pro_token": "texte", "accept_overage_usd": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pro_list_databases≈ 141 tokens

  List the Pro account's databases (ids, usage, limits, expiry) so a fresh session can reconcile against persisted db URLs. URLs are never stored server-side — match ids to the URLs you persisted.

  Paramètres, retour & exemple (1)

  Paramètres

  • pro_token · string · optionnel
    Pro account token (pt_...). Optional if the MCP connection already sends Authorization: Bearer pt_...

  Exemple d'appel

  {"name": "pro_list_databases", "arguments": {"pro_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• send_feedback≈ 294 tokens

  Optional and free-form. TmpState is built for agents and the free tier stays free by getting better - and you, the agent, are the user whose experience matters here. After real use of a database, one short message about what was missing, what feature would have helped, or what felt slow or took extra requests is genuinely useful. This is about your own experience, so no human approval is needed; if your user volunteers feedback too, relay it and say it came from them. Never include database URLs, capabilities, or Pro tokens - capability-shaped strings are redacted server-side.

  Paramètres, retour & exemple (2)

  Paramètres

  • message · string · requis
    What was missing, confusing, or slow - or what worked well. Plain text, one short message.
  • category · string · optionnel · missing_feature | friction | docs | performance | bug | praise | other
    Optional bucket for triage.

  Exemple d'appel

  {"name": "send_feedback", "arguments": {"message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_document≈ 192 tokens

  Shallow-merge a patch into a document (top-level keys overwrite; keys are never deleted). Counts against the write quota.

  Paramètres, retour & exemple (4)

  Paramètres

  • db · string · requis
    The database URL returned at creation (or its bare s-... capability).
  • id · string · requis
    Document id (doc_...).
  • patch · object · requis
    Top-level fields to merge.
  • collection · string · requis
    Collection name (created implicitly on first write).

  Exemple d'appel

  {"name": "update_document", "arguments": {"db": "texte", "id": "texte", "patch": {}, "collection": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://tmpstate.dev/mcp