io.github.AutomatonColony/automaton-colony

Est-ce que io.github.AutomatonColony/automaton-colony est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.AutomatonColony/automaton-colony » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• buy_contract_data≈ 470 tokens

  Paid over x402 in USDC on Base, from 0.0049 per call. Unlike buy_flash_audit, the answer comes back in THIS call: there is no order to poll. A first read of an address can take up to 60s: keep the connection open. If it drops before the answer arrives, send the SAME payment again within 10 minutes: the same authorization is never charged twice. Every answer carries the block it was read at and that block's hash, so it can be re-read against the chain. Call contract_data_catalog first for the list and prices. Without a payment in _meta["x402/payment"] it returns the PaymentRequired document, followed by what can be done for free without a wallet. If the payment is read but does not pass (wrong amount or recipient, insufficient balance, bad signature, expired or already-used authorization), it returns the PaymentRequired document again (isError) with the x402 errorReason in its "error" field; this call charges nothing.

  Paramètres, retour & exemple (2)

  Paramètres

  • product · string · requis · codigo-verificado | proxy-implementacion | poderes-admin | estado-cadena | concentracion-tenedores | poderes-emisor-b20 | cribado-completo
    Which fact to buy. See the catalog tool.
  • targetAddress · string · optionnel
    Contract or token address on Base mainnet (eip155:8453). Required for every product whose catalog entry says needsTargetAddress=true.

  Exemple d'appel

  {"name": "buy_contract_data", "arguments": {"product": "codigo-verificado"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• buy_flash_audit≈ 315 tokens

  Paid over x402 in USDC on Base. Without a payment in _meta["x402/payment"] it returns the PaymentRequired document (isError), followed by how a person without a wallet can buy the same report in the web store. With a valid PaymentPayload it validates, settles asynchronously and returns an orderKey to collect with collect_flash_audit. If the payment is read but does not pass (wrong amount or recipient, insufficient balance, bad signature, expired or already-used authorization), it returns the PaymentRequired document again (isError) with the x402 errorReason in its "error" field; this call charges nothing.

  Paramètres, retour & exemple (2)

  Paramètres

  • language · string · optionnel · es | en | zh | ru | pt | tr | fr | de
    Report language. Defaults to "en".
  • targetAddress · string · requis
    Contract or B20 token address on Base mainnet (eip155:8453), 0x + 40 hex.

  Exemple d'appel

  {"name": "buy_flash_audit", "arguments": {"targetAddress": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_contract_free≈ 179 tokens

  Free, no wallet. Observed on-chain facts about a Base address with no verdict and no score: verified source, proxy detection, admin selectors, holder concentration, and for B20 native tokens the issuer powers. Rate limited; a monthly quota applies.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    Contract or B20 token address on Base mainnet (eip155:8453), 0x + 40 hex.

  Exemple d'appel

  {"name": "check_contract_free", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• collect_flash_audit≈ 126 tokens

  Status of an x402 order while it settles and generates; once DELIVERED, the report JSON itself. Poll every 10-15 seconds. Free.

  Paramètres, retour & exemple (1)

  Paramètres

  • orderKey · string · requis

  Exemple d'appel

  {"name": "collect_flash_audit", "arguments": {"orderKey": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• contract_data_catalog≈ 139 tokens

  Free, no wallet. Lists the individual on-chain facts about a Base contract that can be bought one call at a time, with the price in USDC and how long each answer stays valid. Read this before paying: the bundle costs less than buying the parts.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "contract_data_catalog", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flash_audit_terms≈ 130 tokens

  Returns the x402 v2 PaymentRequired document for the paid Flash Report: amount in USDC base units, network, asset, payTo and the request schema. Free. It also says how a person without a wallet can buy the report in the web store.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "flash_audit_terms", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://colony.automatoncolony.xyz/mcp