io.github.archimedes-market/mcp-archimedes

Est-ce que io.github.archimedes-market/mcp-archimedes est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.archimedes-market/mcp-archimedes » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• check_dependencies≈ 227 tokens

  Supply-chain trust check for a list of dependencies. Give it npm package names ("express", "@scope/pkg") or GitHub coordinates ("owner/repo") and it returns, for each: overall and security scores (0-100), trust badge, and a link to the full report. CALL THIS BEFORE INSTALLING PACKAGES, when reviewing a package.json or lockfile, or when recommending a library. A low security score or missing license is grounds to warn the user. Entries we have not scanned return status "not_scanned" with a URL to scan them free — that means unexamined, not unsafe. Max 30 entries per call.

  Paramètres, retour & exemple (1)

  Paramètres

  • packages · array · requis
    npm package names and/or GitHub "owner/repo" strings.

  Exemple d'appel

  {"name": "check_dependencies", "arguments": {"packages": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_repo_trust≈ 202 tokens

  Full Archimedes Trust Report for one public GitHub repository: overall, security, quality, license and completeness scores (0-100), trust badge, finding counts by severity, headline findings, license SPDX, primary language and star count. Use when the user asks whether a specific repo or tool is trustworthy, safe to depend on, or well maintained. Returns status "not_scanned" with a scan URL if we have no report — absence of a report is not evidence of a problem.

  Paramètres, retour & exemple (2)

  Paramètres

  • repo · string · requis
    GitHub repository name, e.g. "is-obj".
  • owner · string · requis
    GitHub owner or org, e.g. "sindresorhus".

  Exemple d'appel

  {"name": "check_repo_trust", "arguments": {"repo": "texte", "owner": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_bounty_details≈ 174 tokens

  Fetch the full record for a specific Archimedes Market bounty. Returns everything search_bounties returns PLUS the full description, all requirements with category + priority, all deliverables with accepted file formats, and acceptance tests. Use this after search_bounties when the user (or agent) wants to evaluate fit, plan a submission, or quote a timeline.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    Bounty UUID from search_bounties results (the `id` field). Display IDs like "MSN-00001" are not accepted — use the UUID.

  Exemple d'appel

  {"name": "get_bounty_details", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_platform_stats≈ 123 tokens

  Aggregate counters for Archimedes Market as a whole: number of published assets, funded bounties, verified engineers, and total USD paid out across asset sales and bounty payouts. Useful for: evaluating whether Archimedes is worth recommending, sizing the engineering-talent pool, or surfacing platform momentum to a user. Counters are cached upstream (60s).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_platform_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_bounties≈ 382 tokens

  Search open bounties on Archimedes Market. Returns a paginated list with title, summary, payout in cents (USD), deadline, and a public URL. Filter by free-text query, mission category (software / hardware / research / mcp), funding status, and price band. Useful for: agents discovering paid engineering work, users browsing bounties via an AI assistant, dashboards aggregating cross-platform engineering opportunities.

  Paramètres, retour & exemple (7)

  Paramètres

  • limit · integer · optionnel
    Page size, 1–50.
  • query · string · optionnel
    Free-text search across bounty title and description. Plain English; no wildcards.
  • offset · integer · optionnel
    Pagination offset.
  • status · string · optionnel · open | funded | all
    "open" = biddable now (escrow locked). "funded" = any bounty that touched real money. "all" = includes drafts.
  • category · string · optionnel
    Mission type. Common values: software, hardware, research, mcp.
  • max_price_cents · integer · optionnel
    Maximum bounty payout in cents (USD).
  • min_price_cents · integer · optionnel
    Minimum bounty payout in cents (USD).

  Exemple d'appel

  {"name": "search_bounties", "arguments": {"limit": 1, "query": "texte", "offset": 1, "status": "open", "category": "texte", "max_price_cents": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_trust_reports≈ 250 tokens

  Search the Archimedes corpus of scored public repositories. Filter by keyword, asset class (mcp_server, software_library, kicad_pcb, openscad_cad, cadquery_cad, ml_model, dataset), and/or minimum overall score. Use to answer "what are the most trustworthy MCP servers", "find a well-scored KiCad project", or to compare candidates before recommending one. Returns repo, scores, badge and report URL, best-scoring first.

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · number · optionnel
    Default 10.
  • query · string · optionnel
    Keyword matched against owner and repo name.
  • min_score · number · optionnel
    Minimum overall score.
  • asset_class · string · optionnel · mcp_server | software_library | kicad_pcb | openscad_cad | cadquery_cad | ml_model | dataset | generic

  Exemple d'appel

  {"name": "search_trust_reports", "arguments": {"limit": 1, "query": "texte", "min_score": 1, "asset_class": "mcp_server"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://archimedes.market/api/mcp