io.github.assetfare/assetfare-bridge

Est-ce que io.github.assetfare/assetfare-bridge est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.assetfare/assetfare-bridge » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 11 outils

• assetfare_manifest≈ 401 tokens

  Read the Ed25519-signed release manifest and safety-bundle binding before preparing an action. Example: call this once to verify the current release and contract pins; it never creates state, signs, or submits.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "assetfare_manifest", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"service": "texte", "execution": {}, "signature": {}, "safety_bundle": {}, "release_commit": "texte"}}

• assetfare_v2_capabilities≈ 23832 tokens

  Read all 100 technically available routes, live provider readiness, route-specific guidance, direct_route_summary, and continuation_v3 contracts before quoting. Forty-four routes are price-recommended only at or above their published threshold; 56 have no current price recommendation. Example: call once before requesting an exact route quote. Confirm every fresh quote. Economic guidance is advisory and never adds an execution gate. continuation_v3 separately binds execution selection, wallets, bounds, and mode. Read-only; creates no wallet login, session, or action.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "assetfare_v2_capabilities", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"chains": [], "status": "texte", "server_signing": true, "action_lifetime": {}, "asset_endpoints": [], "continuation_v3": {}, "economic_guidance": "texte", "server_submission": true, "public_api_enabled": true, "source_only_routes": [], "direct_route_summary": "texte", "execution_availability": {}}}

• assetfare_v2_prepare≈ 4063 tokens

  Return one deeply verified first unsigned bundle and caller-wallet handoff. Example: pass caller_approved=true, a one_shot approval_v3, and the quote-bound verification_context; multi-step routes reject one_shot. Economic guidance is advisory and adds no request field. Context is validated before the upstream request and never forwarded. AssetFare never signs or submits.

  Paramètres, retour & exemple (10)

  Paramètres

  • wallets · object · requis
    Map each chain needed by this route to the caller's public wallet address. Include public addresses only; never private keys or seed phrases.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum, HyperEVM, X Layer, Sei, Sonic, Monad, Avalanche, Cronos, Injective, Linea, Aptos, Unichain, and Ink are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • approval_v3 · object · requis
    Strict one-shot approval copied from the exact unexpired selected quote; its bounds may only be strengthened.
  • caller_approved · boolean · requis
    Legacy caller assertion that MUST be supplied explicitly. It is not human-proof and is never auto-inserted; approval_v3 adds server-enforced quote binding.
  • event_signer_public · ? · optionnel
    Solana CCTP only: caller-generated ephemeral public key. Keep the matching private key client-side and use it to co-sign the returned unsigned event-account transaction; never send the private key.
  • verification_context · object · requis
    Strict caller-held one-shot context copied from the selected quote, approval and public wallets. It is verified before prepare and never forwarded upstream.

  Exemple d'appel

  {"name": "assetfare_v2_prepare", "arguments": {"wallets": {}, "to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bundle": {}, "action_verification": {}, "local_execution_gate": {}, "caller_wallet_handoff": {}, "semantic_verification": true}}

• assetfare_v2_quote≈ 8810 tokens

  Get one fresh AssetFare quote with amount-specific economic_guidance, direct_route_summary, continuation_v3, and unsigned_prepare_requirements. Example: quote Solana USDC to Base USDC. price_recommended_for_amount is advisory; compare alternatives when price matters, but no economic acknowledgement field is required. The quote remains an unranked_candidate until separate explicit approval selects one mode. The adapter validates hashes, path, bounds, and TTL and never creates approval, prepares, signs, or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum, HyperEVM, X Layer, Sei, Sonic, Monad, Avalanche, Cronos, Injective, Linea, Aptos, Unichain, and Ink are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.

  Exemple d'appel

  {"name": "assetfare_v2_quote", "arguments": {"to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"eta": {}, "risk": {}, "as_of": "texte", "offer": {}, "route": {}, "intent": {}, "status": "texte", "quote_id": "texte", "execution": {}, "ttl_seconds": 1, "cost_summary": "texte", "continuation_v3": {}}}

• assetfare_v2_quote_selected_candidate≈ 2626 tokens

  Reuse the chosen exact request-time quote while valid; after expiry refresh only that candidate at the same amount and never reselect. Example: pass candidate_id and the selection receipt hash. An AssetFare result requires a caller-local proof check and fresh wallet simulation before verified_for_signing; remote verification is not signing authority. An external result is only its provider handoff and has no AssetFare transaction-verification claim. Never prepares, signs, submits, or grants transaction authority.

  Paramètres, retour & exemple (9)

  Paramètres

  • profile · string · optionnel · fast | balanced | economy
    Time policy: fast (30s), balanced (60s default), or explicit economy (60s). Every recommendation profile has an absolute 60-second ceiling.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum, HyperEVM, X Layer, Sei, Sonic, Monad, Avalanche, Cronos, Injective, Linea, Aptos, Unichain, and Ink are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • candidate_id · string · requis
    Exact candidate_id returned by assetfare_v2_route_selection; it is never chosen automatically.
  • max_eta_seconds · integer · optionnel
    Optional stricter maximum ETA in seconds; it cannot exceed 60 or the selected profile limit.
  • selection_receipt_sha256 · string · requis
    Exact selection_receipt.sha256 returned with the fresh shortlist.

  Exemple d'appel

  {"name": "assetfare_v2_quote_selected_candidate", "arguments": {"to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL", "candidate_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "fresh_assetfare_quote", "version": "texte", "choice_binding": {}, "server_signing": true, "execution_handoff": {}, "server_submission": true, "selected_candidate": {}, "selection_quote_source": "request_time_exact_quote"}}

• assetfare_v2_route_selection≈ 4582 tokens

  Quote the recent top two plus the best AssetFare graph at the exact amount; return up to two all-in choices labeled assetfare_verified_unsigned or external_provider_handoff. AssetFare cost, ETA and rank are always present; a recent winning range needs two supporting higher buckets and disappears on conflict. Example: compare Solana USDC to Base USDC at USD 347.25 with balanced (60s). Fast is 30s; balanced and explicit economy are 60s. The 60-second ceiling is absolute for recommendations; slower routes are reference-only. Never approves, prepares, signs, or submits.

  Paramètres, retour & exemple (7)

  Paramètres

  • profile · string · optionnel · fast | balanced | economy
    Time policy: fast (30s), balanced (60s default), or explicit economy (60s). Every recommendation profile has an absolute 60-second ceiling.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum, HyperEVM, X Layer, Sei, Sonic, Monad, Avalanche, Cronos, Injective, Linea, Aptos, Unichain, and Ink are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • max_eta_seconds · integer · optionnel
    Optional stricter maximum ETA in seconds; it cannot exceed 60 or the selected profile limit.

  Exemple d'appel

  {"name": "assetfare_v2_route_selection", "arguments": {"to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"as_of": "texte", "intent": {}, "safety": {}, "status": "recommendations_available", "coverage": {}, "shadow_only": true, "reference_only": [], "schema_version": "texte", "recommendations": [], "selection_policy": {}, "selection_receipt": {}, "public_api_changed": true}}

• assetfare_v2_session_create≈ 4425 tokens

  Create one receipt-driven workflow. Example: pass caller_approved=true, a session approval_v3, its idempotency_key, a caller-local session token, and the quote-bound verification_context. Economic guidance is advisory and adds no request field. The adapter validates approval and context before the upstream request. Every returned action is deeply verified and receives a caller-wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (12)

  Paramètres

  • wallets · object · requis
    Map each chain needed by this route to the caller's public wallet address. Include public addresses only; never private keys or seed phrases.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum, HyperEVM, X Layer, Sei, Sonic, Monad, Avalanche, Cronos, Injective, Linea, Aptos, Unichain, and Ink are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • approval_v3 · object · requis
    Strict Core 2.4.1 session quote-bound selection from the exact unexpired quote. Required for every remote session flow.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • caller_approved · boolean · requis
    Legacy caller assertion that MUST be supplied explicitly. It is not human-proof and is never auto-inserted; approval_v3 adds server-enforced quote binding.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • event_signer_public · ? · optionnel
    Solana CCTP only: caller-generated ephemeral public key. Keep the matching private key client-side and use it to co-sign the returned unsigned event-account transaction; never send the private key.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_create", "arguments": {"wallets": {}, "to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_get≈ 3922 tokens

  Read an existing v2 workflow without advancing it. Example: pass session_id, session_token, and the original verification_context after restart. The adapter deeply verifies any current_action and emits a self-verifying wallet handoff, or fails closed. Read-only; never signs or submits.

  Paramètres, retour & exemple (3)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_get", "arguments": {"session_id": "texte", "session_token": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_observe_output≈ 4066 tokens

  Record an already-produced bridge or destination output, then advance the workflow. Example: pass the output hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • transaction_hash · string · optionnel
    Optional bridge or destination transaction hash already produced outside AssetFare. Omit only when the provider output can be observed without a hash.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_observe_output", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_observe_source≈ 4088 tokens

  Record source hashes the caller already signed and submitted, then advance the workflow. Example: pass one finalized source hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • transaction_hashes · array · requis
    One to eight hashes for source transactions the caller already signed and submitted. Do not provide unsigned payloads or destination hashes.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_observe_source", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "transaction_hashes": [], "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_refresh_action≈ 4008 tokens

  Refresh an expired action only while it remains unsubmitted. Example: pass the existing session, a new idempotency key, and the original verification_context. The refreshed action is deeply verified and receives a wallet handoff. Never refresh a submitted step; AssetFare never signs or submits.

  Paramètres, retour & exemple (4)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_refresh_action", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.assetfare.dev/mcp/bridge