eu.pauhu/data

Est-ce que eu.pauhu/data est sûr ?

Au dernier audit MCP Hub, le serveur MCP « eu.pauhu/data » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 21 outils

• code_diff≈ 542 tokens

  Compares two exact identities of the same public GitHub repository (base and head refs, both resolved to commit shas) or npm package (base and head versions, both tarballs checked against the registry's sha512). Without path: the added, removed and changed files, decided by git blob id. With path: a unified diff of that file (Myers; minimal:false marks a large change answered as one replace hunk); identical blobs answer no hunks, a file that is not UTF-8 text answers binary:true with both blob ids and no hunks ("Binary files differ"), and a change region of more than 100000 lines is refused (diff_too_large). Pages with offset/limit (at most 1000 items and about 1 MB per page; truncated:true when the byte bound ended a page). A hunk larger than a page is split at line boundaries into consecutive hunks that apply in order; a single line larger than a page is refused (response_too_large) with both blob ids. Every answer, an error included, carries a pauhu-library-receipt/2 in structuredContent.receipt and as a trailing "receipt: {...}" text line; library_verify checks a receipt.

  Paramètres, retour & exemple (7)

  Paramètres

  • base · string · requis
    Base ref (repo) or version (package)
  • head · string · requis
    Head ref (repo) or version (package)
  • path · string · optionnel
    One file: answer its unified diff
  • repo · string · optionnel
    GitHub repository as owner/name, e.g. nodejs/node. Give this or package.
  • limit · integer · optionnel
    Files (summary) or hunks (path) per page (default 200, at most 1000)
  • offset · integer · optionnel
  • package · string · optionnel
    npm package name, e.g. source-map-js or @scope/name. Give this or repo.

  Exemple d'appel

  {"name": "code_diff", "arguments": {"base": "texte", "head": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• code_grep≈ 572 tokens

  Finds a literal string (no regular expressions) in the text files of a public GitHub repository at a commit sha or an npm package version, and returns the matches with path, line number, line text and the file's git blob id. A hit is a proven match in the exact bytes named. Counts of files scanned, binary files (a NUL byte or invalid UTF-8; never searched as text) and files over the per-file memory bound are reported, so nothing is silently left out. Pages with offset/limit: at most 1000 matches and about 1 MB per page (truncated:true when the byte bound ended a page); next_offset names the next page. Every answer, an error included, carries a pauhu-library-receipt/2 in structuredContent.receipt and as a trailing "receipt: {...}" text line; library_verify checks a receipt.

  Paramètres, retour & exemple (10)

  Paramètres

  • ref · string · optionnel
    Branch, tag or 40-hex commit sha (default HEAD). It is resolved to a commit sha first; the read is at that sha.
  • path · string · optionnel
    Only files under this directory prefix
  • repo · string · optionnel
    GitHub repository as owner/name, e.g. nodejs/node. Give this or package.
  • limit · integer · optionnel
    Matches per page (default 200, at most 1000)
  • query · string · requis
    Literal text to find
  • offset · integer · optionnel
  • package · string · optionnel
    npm package name, e.g. source-map-js or @scope/name. Give this or repo.
  • version · string · optionnel
    npm version or dist-tag (default latest); the tarball is checked against the registry's sha512 integrity.
  • extensions · array · optionnel
    Only files ending in one of these, e.g. [".ts", ".js"]
  • ignore_case · boolean · optionnel

  Exemple d'appel

  {"name": "code_grep", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• code_list≈ 434 tokens

  Lists the files under a path of a public GitHub repository (at a commit sha) or npm package (at a version whose tarball matched the registry's sha512), with type, size and git blob id per file. Pages with offset/limit (at most 1000 entries and about 1 MB per page; truncated:true when the byte bound ended a page); total names the full count and next_offset the next page. Every answer, an error included, carries a pauhu-library-receipt/2 in structuredContent.receipt and as a trailing "receipt: {...}" text line; library_verify checks a receipt.

  Paramètres, retour & exemple (7)

  Paramètres

  • ref · string · optionnel
    Branch, tag or 40-hex commit sha (default HEAD). It is resolved to a commit sha first; the read is at that sha.
  • path · string · optionnel
    Directory prefix (default: the root)
  • repo · string · optionnel
    GitHub repository as owner/name, e.g. nodejs/node. Give this or package.
  • limit · integer · optionnel
    Entries per page (default 500, at most 1000)
  • offset · integer · optionnel
  • package · string · optionnel
    npm package name, e.g. source-map-js or @scope/name. Give this or repo.
  • version · string · optionnel
    npm version or dist-tag (default latest); the tarball is checked against the registry's sha512 integrity.

  Exemple d'appel

  {"name": "code_list", "arguments": {"ref": "texte", "path": "texte", "repo": "texte", "limit": 1, "offset": 1, "package": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• code_read≈ 536 tokens

  Reads one file of a public GitHub repository or npm package straight from the origin, at an exact identity: a branch or tag is resolved to its commit sha first, and an npm tarball must match the registry's sha512. Returns the requested lines with the commit (or version and integrity), the path, the git blob id of the whole file and a source URL, so the lines can be re-read and checked. Pages by line: give start_line/end_line; next_start_line names the next page. A file that is not UTF-8 text (a NUL byte in its first 8000 bytes, or invalid UTF-8) is never shown as text: the answer is binary:true with its reason, size and blob id. Read-only; nothing is indexed or stored. Every answer, an error included, carries a pauhu-library-receipt/2 in structuredContent.receipt and as a trailing "receipt: {...}" text line; library_verify checks a receipt.

  Paramètres, retour & exemple (7)

  Paramètres

  • ref · string · optionnel
    Branch, tag or 40-hex commit sha (default HEAD). It is resolved to a commit sha first; the read is at that sha.
  • path · string · requis
    File path inside the repository or package, e.g. lib/index.js
  • repo · string · optionnel
    GitHub repository as owner/name, e.g. nodejs/node. Give this or package.
  • package · string · optionnel
    npm package name, e.g. source-map-js or @scope/name. Give this or repo.
  • version · string · optionnel
    npm version or dist-tag (default latest); the tarball is checked against the registry's sha512 integrity.
  • end_line · integer · optionnel
    Last line, inclusive (default start_line + 1999)
  • start_line · integer · optionnel
    First line, 1-based (default 1)

  Exemple d'appel

  {"name": "code_read", "arguments": {"path": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• concept_crosswalk≈ 270 tokens

  Cross-reference one concept across EU and global authority id-spaces as aligned facets. Resolves the term to its concept anchor and emits a uniform list of facets: identifier CURIEs and language-tagged rendering literals ("label"@lang), each keyed by the shared concept, carrying one align verdict: exact (cited at its authority origin), frontier (no attested edge), or unresolved (transient outage, not 'no edge'). An exact identifier facet carries an IRI where its authority publishes one.

  Paramètres, retour & exemple (2)

  Paramètres

  • lang · string · optionnel
    Source language code e.g. 'en', 'fi', 'de' (optional)
  • term · string · requis
    Concept to cross-reference (any EU language), e.g. 'personal data', 'henkilötieto'

  Exemple d'appel

  {"name": "concept_crosswalk", "arguments": {"term": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• library_catalogue≈ 140 tokens

  Lists what the code tools answer: for each, its id@version, the tool to call and the input it takes. Every code_* answer carries a receipt (format pauhu-library-receipt/2); pass it to library_verify to learn whether this service issued it and it is unchanged. Read-only; takes no input.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "library_catalogue", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• library_verify≈ 261 tokens

  Pass the receipt from any code_* answer and learn whether this service issued it and it is unchanged. Answers {verified, reason, id}: verified true or false; reason null, or one of bad_shape (not a receipt, or malformed), unknown_block (an id@version these tools do not answer), not_ours (not issued by this service), altered (changed after it was issued), unavailable (cannot be checked right now; retry later) or self_check_failed; id is the receipt id. With no input, runs the code tools' self-check and answers verified true or false. Read-only.

  Paramètres, retour & exemple (1)

  Paramètres

  • receipt · ? · optionnel
    The receipt from a code_* answer (its structuredContent.receipt, or the JSON after "receipt: "); an object with a receipt key is unwrapped once. Omit it to run the self-check.

  Exemple d'appel

  {"name": "library_verify", "arguments": {"receipt": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_delete_connector≈ 125 tokens

  Delete a registered connector by id (tenant-scoped, you can only delete your own).

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis

  Exemple d'appel

  {"name": "monitor_delete_connector", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_delete_template≈ 121 tokens

  Delete a registered interest template by id (tenant-scoped).

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis

  Exemple d'appel

  {"name": "monitor_delete_template", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_list_connectors≈ 82 tokens

  List the connectors registered under your account.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "monitor_list_connectors", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_list_templates≈ 83 tokens

  List the interest templates registered under your account.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "monitor_list_templates", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_register_connector≈ 516 tokens

  Register one of your APIs or MCP servers as a connector, so your sourced monitors can watch it. Inputs: id (unique within your account), kind ('mcp' for an MCP server, 'https_json' for an HTTPS endpoint answering JSON with url plus text, paragraph_text or title, 'pauhu_sources' for the Pauhu sources your plan covers), endpoint_url, label, auth_kind ('bearer' with the name of your stored token, or 'none' for a public endpoint), and optionally mcp_tool_name (default 'search') and poll_fallback_secs. Returns the registered connector. Monitor runs over your connectors carry no per-run token charge.

  Paramètres, retour & exemple (8)

  Paramètres

  • id · string · requis
    Unique connector id within your account
  • kind · string · requis · mcp | https_json | pauhu_sources
    Connector kind: 'mcp', 'https_json' or 'pauhu_sources'
  • label · string · requis
    Human-readable label shown in your connector list
  • auth_kind · string · optionnel · bearer | none
    'bearer' (with the name of your stored token) or 'none' for a public endpoint
  • token_ref · string · optionnel
    Name of the bearer token you stored with Pauhu (for auth_kind=bearer)
  • endpoint_url · string · requis
    Your endpoint URL (HTTPS JSON endpoint or MCP server URL)
  • mcp_tool_name · string · optionnel
    MCP tool to invoke (for kind=mcp; defaults to 'search')
  • poll_fallback_secs · integer · optionnel
    Optional poll cadence (seconds) for sources without push semantics

  Exemple d'appel

  {"name": "monitor_register_connector", "arguments": {"id": "texte", "kind": "mcp", "label": "texte", "endpoint_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• monitor_register_template≈ 434 tokens

  Register a sourced monitor and get back the registered template. Each match is delivered to you as a cited result: the source URL, the paragraph text and a verification status. Inputs: id, connector_ids (your registered connectors to watch), query, optional jurisdiction and language filters, when to push (every_match, new_since_last, or delta_at_least with a count) and where to push (a webhook URL with an optional secret reference, or sse for an open MCP session).

  Paramètres, retour & exemple (10)

  Paramètres

  • id · string · requis
  • query · string · requis
    The query / saved-search this monitor stands for
  • language · string · optionnel
    ISO 639-1
  • push_kind · string · optionnel · webhook | sse
  • threshold_n · integer · optionnel
    For delta_at_least
  • webhook_url · string · optionnel
  • jurisdiction · string · optionnel
    ISO 3166-1 alpha-2 or 'eu'
  • connector_ids · array · requis
    Connectors to watch (your registered ids)
  • threshold_kind · string · optionnel · every_match | new_since_last | delta_at_least
  • webhook_secret_ref · string · optionnel

  Exemple d'appel

  {"name": "monitor_register_template", "arguments": {"id": "texte", "query": "texte", "connector_ids": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pauhu_products≈ 353 tokens

  List all 14 Pauhu sectoral products with their launch state, coverage state, and the current access flag (`entitled`: true|false per row); access does not mean a product is sellable. IMPORTANT: `live_row_count` is a fast estimate of the shared source data, NOT the product's own filtered slice -- read `row_count_basis`/`row_count_note` beside it, and use `corpus_state` and `launch_state` as the coverage signals. A product may be entitled and still not be served yet. Data from this service is sold as the pauhu.eu bulk annual plan; nothing is sold per call here, and cited answers are at https://pauhu.ai. Search is never billed. Customer's AI client calls this once at session start to learn product and access state. Pass product_id for one product's full served row: what one delivered unit is per source (unit_definition), where its rows come from (provenance), its sectoral data space (sectoral_ds), licence, cadence, limitations.

  Paramètres, retour & exemple (1)

  Paramètres

  • product_id · string · optionnel
    Product id from the list, e.g. pauhu-energy-eu; omit for the list of all products

  Exemple d'appel

  {"name": "pauhu_products", "arguments": {"product_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pauhu_search≈ 156 tokens

  Search Pauhu's curated, sourced corpus. Returns sourced passages and per-match snippets, and every answer either traces to a source or says plainly when nothing matches.

  Paramètres, retour & exemple (2)

  Paramètres

  • q · string · requis
    Search query
  • limit · integer · optionnel
    Max matches

  Exemple d'appel

  {"name": "pauhu_search", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pauhu_tm≈ 292 tokens

  Look up a text segment in Pauhu TM: aligned human-translated paragraphs from primary EU law sources. Returns the best exact or fuzzy match (gamma score 0.0-1.0) + EU terminology for the segment. Each match traces to a real paragraph URL in the original source document. Designed for CAT tool integration: pass a segment, receive the TM match + terms as a sourced CAT assist.

  Paramètres, retour & exemple (4)

  Paramètres

  • text · string · requis
    Text segment to look up in the TM
  • domain · string · optionnel
    Optional domain hint for terminology disambiguation (e.g. 'data protection', 'financial', 'environmental')
  • source_lang · string · optionnel
    Source language code (e.g. 'en', 'fi', 'de', 'sv', 'fr')
  • target_lang · string · optionnel
    Target language code

  Exemple d'appel

  {"name": "pauhu_tm", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pauhu_translate≈ 336 tokens

  Look up EU-canonical terms across 24 official EU languages in the EU's authoritative terminology record. Returns the authoritative EU term, domain, reliability rating, and equivalents in your target language. Accepts single terms or multi-word phrases. Used for professional translation and interpretation, using domain terminology sourced from the EU's own authoritative record.

  Paramètres, retour & exemple (3)

  Paramètres

  • lang · string · optionnel · bg | cs | da | de | el | en | es | et
    Source language of the term
  • term · string · requis
    Term or phrase to look up (in any of the 24 EU languages)
  • target_lang · string · optionnel · bg | cs | da | de | el | en | es | et
    Target language for the returned equivalent term

  Exemple d'appel

  {"name": "pauhu_translate", "arguments": {"term": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• source_fetch_fragment≈ 325 tokens

  Get one cited result from source_search. Input: the q and limit you passed to source_search and a result id. Returns source_url, text_fragment_url (a link that opens the quoted text), caller_verifies (a verification status: when true, open the link before relying on the text) and bearing, a proof token to pass unchanged to source_verify_bearing, or null. If the results have changed since your search, the call says so; run source_search again. A citation shows where the text is quoted from, not that the source's claim is true; a general web publisher is one account, not established fact.

  Paramètres, retour & exemple (3)

  Paramètres

  • q · string · requis
    The exact query string used in source_search
  • id · string · requis
    The result id from source_search's results[] (a plain non-negative integer string)
  • limit · integer · requis
    The exact limit value used in the originating source_search call

  Exemple d'appel

  {"name": "source_fetch_fragment", "arguments": {"q": "texte", "id": "texte", "limit": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• source_search≈ 244 tokens

  Search Pauhu's sourced index and get cited results as JSON. Input: q (query) and limit. Returns answer, results (id, title, url) and caller_verifies, a verification status: when true, open the cited text before relying on it. For one result's citation link, call source_fetch_fragment with the same q and limit and the result id. A citation shows where the text is quoted from, not that the source's claim is true or current; a general web publisher is one account, not established fact.

  Paramètres, retour & exemple (2)

  Paramètres

  • q · string · requis
    Natural-language query
  • limit · integer · optionnel
    Max candidates

  Exemple d'appel

  {"name": "source_search", "arguments": {"q": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• source_status≈ 92 tokens

  Lightweight liveness check for this resource. Returns { ok, status } with status ok, degraded or unavailable.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "source_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• source_verify_bearing≈ 198 tokens

  Checks the bearing returned by source_fetch_fragment. Input: bearing, exactly as source_fetch_fragment returned it, and optionally the result id. Returns verified (true or false) and the id.

  Paramètres, retour & exemple (2)

  Paramètres

  • id · string · optionnel
    The result id from source_fetch_fragment (echoed back)
  • bearing · ? · requis
    The bearing value from source_fetch_fragment, unchanged

  Exemple d'appel

  {"name": "source_verify_bearing", "arguments": {"bearing": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.pauhu.eu/mcp