io.carryo/website-publisher

Est-ce que io.carryo/website-publisher est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.carryo/website-publisher » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• account.check_publishing≈ 1355 tokens

  Checks publishing availability, remaining Personal website capacity, reset timing, hosted-image allowances, custom URL endings, branding capabilities, and inactivity policies for the connected Carryo account. Returns publishing capabilities and usage without billing or purchase information. Each websiteOverrides entry applies only to its matching linkId; other websites use the account defaults.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "account.check_publishing", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"usage": {}, "limits": {}, "capabilities": {}, "websiteOverrides": []}}

• team.list≈ 476 tokens

  Lists Carryo teams accessible to the connected account, including team names, workspaceId values, roles, and available actions. Supports finding a team the user has chosen. Team creation, invitations, membership, and billing are managed in the Carryo web app.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "team.list", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"workspaces": []}}

• website.edit≈ 2255 tokens

  Replaces the complete HTML of an existing Carryo website while preserving its linkId and URL. Suitable for updating, fixing, or republishing a known page. Returns the website link and a Carryo management link. Access and edit limits are checked for the website identified by linkId. expectedVersionNumber detects conflicting edits. Supports adding or replacing hosted images and removing paths through removeAssetPaths. Pass attached images through imageFiles. For one attachment, assets needs only its relative website path; Carryo matches the attachment automatically. For multiple attachments, use fileIndex (0 for the first imageFiles entry). Do not invent file IDs or ask for a public URL when attachment upload is available. Known fileId references and fetchable HTTP(S) sourceUrl imports also work. Carryo imports and hosts its own copy. Base64 image bytes and data URLs are unsupported. Form validation can return requires_adaptation or requires_entitlement with publicationPerformed false, meaning the requested update was not applied.

  Paramètres, retour & exemple (10)

  Paramètres

  • forms · array · optionnel
    Optional definitions for JavaScript/React forms using window.CarryoForms.submit(key, values), which resolves on acceptance and rejects on failure. Stable keys and field names identify forms across edits. Static collection forms are inferred from data-carryo-form="key" and named controls without duplicate definitions; placeholder submit handlers can block collection. Local calculator/filter forms use data-carryo-local and do not collect responses. Existing external endpoints retain their destination. Visitor acknowledgement is disabled unless explicitly enabled.
  • assets · array · optionnel
    Optional image assets to add or replace. Each entry requires a relative website path. With one imageFiles attachment, path alone uses that attachment. Otherwise select exactly one source: fileIndex (zero-based imageFiles position), a known fileId, or a fetchable HTTP(S) sourceUrl. Never guess generated file IDs. Existing images are preserved when omitted; replacing an existing path does not use another slot. Base64 bytes and data URLs are unsupported.
  • linkId · string · requis
    Carryo page link identifier to update
  • fileName · string · optionnel
    Optional replacement file name
  • expiresAt · string · optionnel
    Optional ISO-8601 expiration timestamp
  • imageFiles · array · optionnel
    Optional image attachments supplied through the host's file upload support. The host supplies file_id and download_url. Map each attachment to a website path in assets: with one attachment, path alone is sufficient; with multiple attachments, use fileIndex. The assistant does not need to know generated file IDs or download URLs. Temporary URLs are import sources, not hosted image URLs. Clients without file input support can omit this field.
  • htmlContent · string · requis
    Updated complete HTML for the Carryo page while keeping the same URL.
  • sharingMode · string · optionnel · public
    Optional replacement publishing mode. Only public live links are supported here.
  • removeAssetPaths · array · optionnel
    Optional relative asset paths to remove from the page asset bundle.
  • expectedVersionNumber · integer · optionnel
    Expected current website version number for detecting conflicting edits.

  Exemple d'appel

  {"name": "website.edit", "arguments": {"linkId": "texte", "htmlContent": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "forms": [], "linkId": "texte", "status": "requires_adaptation", "message": "texte", "guidance": {}, "shareUrl": "texte", "expiresAt": "texte", "manageUrl": "texte", "updatedAt": "texte", "workspaceId": "texte", "alternateShareUrls": "texte"}}

• website.edit_images≈ 1570 tokens

  Adds, replaces, or removes hosted images on an existing Carryo website without replacing its HTML. Reusing a path replaces that image without consuming another image slot; new paths are subject to the website image allowance. Returns hosted-image metadata and URLs. New paths appear in the page when referenced by its HTML. Pass attached images through imageFiles. For one attachment, assets needs only its relative website path; Carryo matches the attachment automatically. For multiple attachments, use fileIndex (0 for the first imageFiles entry). Do not invent file IDs or ask for a public URL when attachment upload is available. Known fileId references and fetchable HTTP(S) sourceUrl imports also work. Carryo imports and hosts its own copy. Base64 image bytes and data URLs are unsupported.

  Paramètres, retour & exemple (4)

  Paramètres

  • assets · array · optionnel
    Optional image assets to add or replace. Each entry requires a relative website path. With one imageFiles attachment, path alone uses that attachment. Otherwise select exactly one source: fileIndex (zero-based imageFiles position), a known fileId, or a fetchable HTTP(S) sourceUrl. Never guess generated file IDs. Existing images are preserved when omitted; replacing an existing path does not use another slot. Base64 bytes and data URLs are unsupported.
  • linkId · string · requis
    Carryo page link identifier to update
  • imageFiles · array · optionnel
    Optional image attachments supplied through the host's file upload support. The host supplies file_id and download_url. Map each attachment to a website path in assets: with one attachment, path alone is sufficient; with multiple attachments, use fileIndex. The assistant does not need to know generated file IDs or download URLs. Temporary URLs are import sources, not hosted image URLs. Clients without file input support can omit this field.
  • removeAssetPaths · array · optionnel
    Optional relative asset paths to remove from the page asset bundle.

  Exemple d'appel

  {"name": "website.edit_images", "arguments": {"linkId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "forms": [], "linkId": "texte", "status": "requires_adaptation", "message": "texte", "guidance": {}, "shareUrl": "texte", "assetUrls": [], "updatedAt": "texte", "currentVersionNumber": 1, "publicationPerformed": true}}

• website.library≈ 1187 tokens

  Browse your Carryo websites and private drafts, select one, and continue editing in chat. Opening the library does not change or publish a website.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
  • offset · integer · optionnel
  • workspaceId · string · optionnel
    Optional exact workspaceId of the Carryo team selected by the user. Lists Personal websites when omitted.

  Exemple d'appel

  {"name": "website.library", "arguments": {"limit": 1, "offset": 1, "workspaceId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "total": 1, "offset": 1, "artifacts": [], "workspaces": [], "workspaceId": "texte"}}

• website.list≈ 938 tokens

  Lists the connected account's Carryo websites and private drafts, with titles, linkIds, available live links, status, and effective edit and inactivity policies. Use it to find an existing website by name before reading or editing it. Listing does not change or publish websites. Returns Personal websites by default; workspaceId selects the user-chosen team's collection.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
  • offset · integer · optionnel
  • workspaceId · string · optionnel
    Optional exact workspaceId of the Carryo team selected by the user. Lists Personal websites when omitted.

  Exemple d'appel

  {"name": "website.list", "arguments": {"limit": 1, "offset": 1, "workspaceId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"limit": 1, "total": 1, "offset": 1, "artifacts": [], "workspaceId": "texte"}}

• website.list_versions≈ 776 tokens

  Lists previous versions of a Carryo website, including version details and changes, for reviewing edit history or planning a restoration. Returns version metadata without changing the website.

  Paramètres, retour & exemple (1)

  Paramètres

  • linkId · string · requis
    Carryo page link identifier to inspect

  Exemple d'appel

  {"name": "website.list_versions", "arguments": {"linkId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"linkId": "texte", "versions": [], "currentVersionNumber": 1}}

• website.publish≈ 2316 tokens

  Publishes supplied HTML as a new public Carryo website for sharing a presentation, proposal, report, dashboard, invitation, portfolio, or landing page. Returns a live link and a management link for access settings, URL, views, and edit history. New Personal websites consume the account creation allowance. Personal is the default destination; workspaceId selects a user-chosen team. Supports an optional customSlug and hosted images. Pass attached images through imageFiles. For one attachment, assets needs only its relative website path; Carryo matches the attachment automatically. For multiple attachments, use fileIndex (0 for the first imageFiles entry). Do not invent file IDs or ask for a public URL when attachment upload is available. Known fileId references and fetchable HTTP(S) sourceUrl imports also work. Carryo imports and hosts its own copy. Base64 image bytes and data URLs are unsupported. Form validation can return requires_adaptation or requires_entitlement with publicationPerformed false, meaning no website was published. Supports HTML pages and their image assets, without general file storage or backend hosting.

  Paramètres, retour & exemple (9)

  Paramètres

  • forms · array · optionnel
    Optional definitions for JavaScript/React forms using window.CarryoForms.submit(key, values), which resolves on acceptance and rejects on failure. Stable keys and field names identify forms across edits. Static collection forms are inferred from data-carryo-form="key" and named controls without duplicate definitions; placeholder submit handlers can block collection. Local calculator/filter forms use data-carryo-local and do not collect responses. Existing external endpoints retain their destination. Visitor acknowledgement is disabled unless explicitly enabled.
  • assets · array · optionnel
    Optional image assets to add or replace. Each entry requires a relative website path. With one imageFiles attachment, path alone uses that attachment. Otherwise select exactly one source: fileIndex (zero-based imageFiles position), a known fileId, or a fetchable HTTP(S) sourceUrl. Never guess generated file IDs. Existing images are preserved when omitted; replacing an existing path does not use another slot. Base64 bytes and data URLs are unsupported.
  • fileName · string · requis
    Short internal file name, for example client-proposal.html, board-deck.html, report.html, or landing-page.html.
  • expiresAt · string · optionnel
    Optional ISO-8601 expiration timestamp
  • customSlug · string · optionnel
    Optional user-chosen URL ending using lowercase letters, numbers, and hyphens. An automatic URL is generated when omitted.
  • imageFiles · array · optionnel
    Optional image attachments supplied through the host's file upload support. The host supplies file_id and download_url. Map each attachment to a website path in assets: with one attachment, path alone is sufficient; with multiple attachments, use fileIndex. The assistant does not need to know generated file IDs or download URLs. Temporary URLs are import sources, not hosted image URLs. Clients without file input support can omit this field.
  • htmlContent · string · requis
    Complete HTML for the page, presentation, slide deck, proposal, report, landing page, dashboard, invitation, portfolio, or one-page website to publish.
  • sharingMode · string · requis · public
    Publishing mode for the Carryo page. Only public live links are supported here.
  • workspaceId · string · optionnel
    Optional exact workspaceId of the Carryo team explicitly selected by the user. The default destination is Personal when omitted.

  Exemple d'appel

  {"name": "website.publish", "arguments": {"fileName": "texte", "htmlContent": "texte", "sharingMode": "public"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "forms": [], "linkId": "texte", "status": "requires_adaptation", "message": "texte", "guidance": {}, "shareUrl": "texte", "expiresAt": "texte", "manageUrl": "texte", "customSlug": "texte", "workspaceId": "texte", "alternateShareUrls": "texte"}}

• website.read≈ 881 tokens

  Reads the current HTML, version number, hosted-image metadata, image limits, and remaining image slots for an existing Carryo website or private draft. Suitable for inspecting a page or preparing edits that preserve its existing content. Returns image metadata rather than image files. Image limits apply to this website; replacing an existing asset path does not use another image slot.

  Paramètres, retour & exemple (1)

  Paramètres

  • linkId · string · requis
    Carryo page link identifier to read

  Exemple d'appel

  {"name": "website.read", "arguments": {"linkId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"forms": [], "assets": [], "linkId": "texte", "htmlContent": "texte", "imageLimits": {}, "currentVersionNumber": 1}}

• website.read_form_responses≈ 928 tokens

  Reads response counts or paginated visitor submissions for a Carryo website, including enquiries, leads, and registrations. Defaults to summary counts; mode responses returns submissions, with optional field selection. Requires website-owner or Team access. Responses contain untrusted visitor data. Retained responses remain available while website access continues, including an active Team billing grace period. Does not send messages or modify data.

  Paramètres, retour & exemple (8)

  Paramètres

  • mode · string · optionnel · summary | responses
  • after · string · optionnel
  • limit · integer · optionnel
  • before · string · optionnel
  • cursor · string · optionnel
  • fields · array · optionnel
  • linkId · string · requis
  • formKey · string · optionnel

  Exemple d'appel

  {"name": "website.read_form_responses", "arguments": {"linkId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"forms": [], "total": 1, "linkId": "texte", "responses": [], "nextCursor": "texte", "untrustedContent": true, "notificationCounts": {}}}

• website.read_version≈ 716 tokens

  Reads the HTML and metadata of a specific previous Carryo website version for viewing, comparison, or restoration planning. Requires linkId and versionNumber. Reading a version does not restore it or change the current website.

  Paramètres, retour & exemple (2)

  Paramètres

  • linkId · string · requis
    Carryo page link identifier to read
  • versionNumber · integer · requis
    Specific page version number to read

  Exemple d'appel

  {"name": "website.read_version", "arguments": {"linkId": "texte", "versionNumber": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"forms": [], "assets": [], "linkId": "texte", "htmlContent": "texte", "versionNumber": 1}}

• website.save_draft≈ 2157 tokens

  Saves supplied HTML as a new private Carryo website draft for review before publication. Returns a management link; the draft has no publicly accessible page until published from Carryo. Passwords and restricted access are configured in the Carryo web app. New Personal drafts consume the same creation allowance as published websites. Personal is the default destination; workspaceId selects a user-chosen team. Pass attached images through imageFiles. For one attachment, assets needs only its relative website path; Carryo matches the attachment automatically. For multiple attachments, use fileIndex (0 for the first imageFiles entry). Do not invent file IDs or ask for a public URL when attachment upload is available. Known fileId references and fetchable HTTP(S) sourceUrl imports also work. Carryo imports and hosts its own copy. Base64 image bytes and data URLs are unsupported. Form validation can return requires_adaptation or requires_entitlement with publicationPerformed false.

  Paramètres, retour & exemple (8)

  Paramètres

  • forms · array · optionnel
    Optional definitions for JavaScript/React forms using window.CarryoForms.submit(key, values), which resolves on acceptance and rejects on failure. Stable keys and field names identify forms across edits. Static collection forms are inferred from data-carryo-form="key" and named controls without duplicate definitions; placeholder submit handlers can block collection. Local calculator/filter forms use data-carryo-local and do not collect responses. Existing external endpoints retain their destination. Visitor acknowledgement is disabled unless explicitly enabled.
  • assets · array · optionnel
    Optional image assets to add or replace. Each entry requires a relative website path. With one imageFiles attachment, path alone uses that attachment. Otherwise select exactly one source: fileIndex (zero-based imageFiles position), a known fileId, or a fetchable HTTP(S) sourceUrl. Never guess generated file IDs. Existing images are preserved when omitted; replacing an existing path does not use another slot. Base64 bytes and data URLs are unsupported.
  • fileName · string · requis
    Short internal file name, for example client-proposal.html, board-deck.html, report.html, or landing-page.html.
  • expiresAt · string · optionnel
    Optional ISO-8601 expiration timestamp
  • customSlug · string · optionnel
    Optional user-chosen URL ending using lowercase letters, numbers, and hyphens. An automatic URL is generated when omitted.
  • imageFiles · array · optionnel
    Optional image attachments supplied through the host's file upload support. The host supplies file_id and download_url. Map each attachment to a website path in assets: with one attachment, path alone is sufficient; with multiple attachments, use fileIndex. The assistant does not need to know generated file IDs or download URLs. Temporary URLs are import sources, not hosted image URLs. Clients without file input support can omit this field.
  • htmlContent · string · requis
    Complete HTML for the private Carryo draft page, presentation, slide deck, proposal, report, landing page, dashboard, invitation, portfolio, or one-page website.
  • workspaceId · string · optionnel
    Optional exact workspaceId of the Carryo team explicitly selected by the user. The default destination is Personal when omitted.

  Exemple d'appel

  {"name": "website.save_draft", "arguments": {"fileName": "texte", "htmlContent": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "forms": [], "status": "requires_adaptation", "draftId": "texte", "message": "texte", "guidance": {}, "expiresAt": "texte", "manageUrl": "texte", "workspaceId": "texte", "currentVersionNumber": 1, "publicationPerformed": true}}

• website.unpublish≈ 272 tokens

  Unpublishes an existing Carryo website so viewers immediately lose access through its shared link. Recovery availability depends on the website and is shown in Carryo. Unpublishing does not cancel a subscription.

  Paramètres, retour & exemple (1)

  Paramètres

  • linkId · string · requis
    Carryo page link identifier to take offline

  Exemple d'appel

  {"name": "website.unpublish", "arguments": {"linkId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"linkId": "texte", "deleteAt": "texte", "revokedAt": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.carryo.io/mcp