io.github.alexar76/attested-memory

Est-ce que io.github.alexar76/attested-memory est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.alexar76/attested-memory » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• air_quality_now≈ 169 tokens

  Current air quality at a place: PM2.5 and PM10 (µg/m³), US and European AQI, from Copernicus CAMS via Open-Meteo, with a signed receipt. Pass latitude and longitude, or a city. Costs $0.001 per call. The first 3 priced calls per caller are free.

  Paramètres, retour & exemple (3)

  Paramètres

  • city · string · optionnel
    A city instead of coordinates, e.g. "Tokyo"; many spellings work (Токио, 東京).
  • latitude · number · optionnel
    Latitude in degrees.
  • longitude · number · optionnel
    Longitude in degrees.

  Exemple d'appel

  {"name": "air_quality_now", "arguments": {"city": "texte", "latitude": 1, "longitude": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• fair_random≈ 152 tokens

  Verifiable random bytes for a draw, raffle or tie-break: an ECVRF output over your seed plus a proof anyone can check offline. The same seed always gives the same output, so publish the seed first to show the result was not picked. Costs $0.006 per call. The first 3 priced calls per caller are free.

  Paramètres, retour & exemple (2)

  Paramètres

  • seed · string · requis
    Seed or message the draw is bound to.
  • num_bytes · integer · optionnel
    Output length (default 32).

  Exemple d'appel

  {"name": "fair_random", "arguments": {"seed": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• market_invoke≈ 550 tokens

  Invoke a capability found via market_search. A few trial invokes are granted per caller with no wallet, key or channel, and each returns the hub's signed receipt; when the allowance is spent the hub answers 402 and this reports that rather than inventing a result, with next_steps saying how to pay. Paid access uses the prepaid balance of an API key sent as this connection's X-API-Key header, payment_channel (+ secret), or an on-chain x402 payment (x_payment + x_payment_nonce + x_payment_secret).

  Paramètres, retour & exemple (12)

  Paramètres

  • input · object · optionnel
    Input object for the capability; {} when it takes none.
  • x_payment · string · optionnel
    x402 seller-direct payment: the hash of the USDC transfer you broadcast for the 402's invoice (see next_steps).
  • product_id · string · requis
    The product_id from market_search.
  • source_hub · string · optionnel
    The source_hub from market_search, when it shows one. Required for federated capabilities — most of the catalogue; omitting it makes the hub look for the capability locally and answer 404.
  • capability_id · string · requis
    The exact capability_id from market_search.
  • max_price_usd · number · optionnel
    Atomic total-price ceiling. Copy the selected search result's max_price_usd here; the Hub returns price_limit_exceeded before work or payment if the route was repriced.
  • payment_channel · string · optionnel
  • x_payment_nonce · string · optionnel
    The invoice nonce from the 402 that x_payment pays.
  • x_payment_secret · string · optionnel
    The payment_secret from that 402. The nonce and the transaction are public once mined; the secret is what shows you are the one who paid.
  • include_full_receipt · boolean · optionnel
    Return the hub's raw response, including the full hybrid Ed25519 + ML-DSA-65 receipt signature (about 7 KB).
  • payment_authorization · object · optionnel
  • payment_channel_secret · string · optionnel

  Exemple d'appel

  {"name": "market_invoke", "arguments": {"product_id": "texte", "capability_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• market_search≈ 194 tokens

  Search this hub's catalogue of live data and computation by what you need, in plain words. Each match gives the product_id, capability_id and source_hub to pass to market_invoke, its price, `input` (the fields its input object takes) and `relevance` from 0 to 1; a `note` says when nothing matched well.

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · integer · optionnel
    Maximum results (default 10, max 50).
  • budget · number · optionnel
    Optional cap on price per call, in USD.
  • intent · string · requis
    What you want done, in plain language.
  • category · string · optionnel
    Optional category filter, e.g. 'security'.

  Exemple d'appel

  {"name": "market_search", "arguments": {"intent": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• nearby_sensors≈ 206 tokens

  The nearest live public sensors to a point, one per layer asked for (e.g. weather, air, radiation, quake), each with its reading, distance and source, and a signed receipt. Costs $0.03 per call. The first 3 priced calls per caller are free.

  Paramètres, retour & exemple (4)

  Paramètres

  • layers · array · optionnel
    Sensor layers to search, e.g. ["weather", "air"]; default weather.
  • max_km · number · optionnel
    Refuse sensors farther than this.
  • latitude · number · requis
    Latitude in degrees.
  • longitude · number · requis
    Longitude in degrees.

  Exemple d'appel

  {"name": "nearby_sensors", "arguments": {"latitude": 1, "longitude": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_invoke≈ 298 tokens

  Execute or continue the SAME prepared graph. Submit authorizations when the signed quote enables gas_sponsorship, otherwise buyer-signed transactions; none for free steps. Never submit both payment modes. Retain run_id/access_token and the exact bundle. Pending is not failure; repeat the same run or read pipeline_status. Never create a replacement purchase after a lost response.

  Paramètres, retour & exemple (4)

  Paramètres

  • run_id · string · requis
  • access_token · string · requis
  • transactions · ? · optionnel
  • authorizations · ? · optionnel

  Exemple d'appel

  {"name": "pipeline_invoke", "arguments": {"run_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_prepare≈ 478 tokens

  Validate a graph and return a signed quote and payment offers. No work or payment. Free steps require no wallet; paid steps require buyer wallet address. Use gas_mode=required to demand gas sponsorship or auto to prefer it. Inspect ready/blockers and gas_sponsorship. Sign offers LOCALLY, never provide a private key. Then call pipeline_invoke.

  Paramètres, retour & exemple (4)

  Paramètres

  • nodes · array · requis
  • wallet · string · optionnel
  • gas_mode · string · optionnel · buyer | auto | required
  • max_budget_usd · ? · optionnel

  Exemple d'appel

  {"name": "pipeline_prepare", "arguments": {"nodes": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_refund≈ 230 tokens

  Submit the original seller's refund authorization or resume the SAME refund. The recipient is the original buyer, amount is the paid step price, and the sponsor pays gas. Preserve the exact authorization after a lost response. Returns a separately signed credit note; the original bill is unchanged.

  Paramètres, retour & exemple (4)

  Paramètres

  • run_id · string · requis
  • step_id · string · requis
  • access_token · string · requis
  • authorization · ? · optionnel

  Exemple d'appel

  {"name": "pipeline_refund", "arguments": {"run_id": "texte", "step_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_refund_prepare≈ 184 tokens

  Prepare a cash refund for a verified paid step of a finished pipeline. This moves no money. The original seller must approve the exact EIP-3009 authorization locally; never send a private key. Refunds require seller cooperation and a configured gas sponsor.

  Paramètres, retour & exemple (3)

  Paramètres

  • run_id · string · requis
  • step_id · string · requis
  • access_token · string · requis

  Exemple d'appel

  {"name": "pipeline_refund_prepare", "arguments": {"run_id": "texte", "step_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_refund_status≈ 169 tokens

  Read the saved cash-refund status and signed credit note without broadcasting a transaction. No private key or RPC is required. Pending means resume the same refund, never send a replacement transfer.

  Paramètres, retour & exemple (3)

  Paramètres

  • run_id · string · requis
  • step_id · string · requis
  • access_token · string · requis

  Exemple d'appel

  {"name": "pipeline_refund_status", "arguments": {"run_id": "texte", "step_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pipeline_status≈ 126 tokens

  Read an existing pipeline, including cached signed result, without broadcasting payments or invoking providers. No wallet signer or blockchain RPC required. Inspect recovery.action for unresolved work.

  Paramètres, retour & exemple (2)

  Paramètres

  • run_id · string · requis
  • access_token · string · requis

  Exemple d'appel

  {"name": "pipeline_status", "arguments": {"run_id": "texte", "access_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• weather_now≈ 175 tokens

  Current weather at a place: temperature (°C), humidity (%), pressure (hPa) and wind (m/s) from the nearest live Open-Meteo relay within 75 km, with a signed receipt. Pass latitude and longitude, or a city. Costs $0.001 per call. The first 3 priced calls per caller are free.

  Paramètres, retour & exemple (3)

  Paramètres

  • city · string · optionnel
    A city instead of coordinates, e.g. "Tokyo"; many spellings work (Токио, 東京).
  • latitude · number · optionnel
    Latitude in degrees.
  • longitude · number · optionnel
    Longitude in degrees.

  Exemple d'appel

  {"name": "weather_now", "arguments": {"city": "texte", "latitude": 1, "longitude": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• x402_check≈ 267 tokens

  Check a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's (payTo, amount, asset, network), and when the signature fails names the domain it was really made for (e.g. Base Sepolia's 'USDC' used on Base, where USDC is 'USD Coin'). Costs $0.003 per call. The first 3 priced calls per caller are free.

  Paramètres, retour & exemple (6)

  Paramètres

  • now · integer · optionnel
    Unix seconds, to check the validity window.
  • network · string · optionnel
    With authorization: base, base-sepolia, … or eip155:<id>.
  • signature · string · optionnel
    With authorization: the 65-byte hex signature.
  • x_payment · string · optionnel
    The X-PAYMENT header (base64).
  • requirements · object · optionnel
    The 402's accepts entry: payTo, amount, asset, network.
  • authorization · object · optionnel
    Instead of x_payment: from, to, value, validAfter, validBefore, nonce.

  Exemple d'appel

  {"name": "x402_check", "arguments": {"now": 1, "network": "texte", "signature": "texte", "x_payment": "texte", "requirements": {}, "authorization": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://hub.attestedmemory.net/mcp