io.github.Chriscorp/tracea

Est-ce que io.github.Chriscorp/tracea est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.Chriscorp/tracea » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 23 outils

• check_payment_allowed≈ 178 tokens

  Dry-run a payment BEFORE executing it: checks on-chain whether the agent's smart account would allow it (permission granted, within financial cap, destination approved if a whitelist exists). Returns { allowed, reason }.

  Paramètres, retour & exemple (3)

  Paramètres

  • amount_eth · string · requis
    Amount in ETH, e.g. '0.001'
  • destination · string · requis
    Destination address to pay
  • agent_address · string · requis
    Ethereum address of the agent (its smart account address)

  Exemple d'appel

  {"name": "check_payment_allowed", "arguments": {"amount_eth": "texte", "destination": "texte", "agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_action≈ 106 tokens

  Read a single logged agent action from the Tracea ActionLog contract by its numeric ID. Returns agent, action type, payload and timestamp.

  Paramètres, retour & exemple (1)

  Paramètres

  • action_id · integer · requis
    Numeric action ID

  Exemple d'appel

  {"name": "get_action", "arguments": {"action_id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_agent_actions≈ 83 tokens

  List all on-chain action IDs logged for a given agent on Tracea.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent

  Exemple d'appel

  {"name": "get_agent_actions", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_agent_info≈ 95 tokens

  Get the raw Tracea registry record for an agent: owner, permission scope, financial cap, active status, timestamps.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent

  Exemple d'appel

  {"name": "get_agent_info", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_my_identity≈ 155 tokens

  Get this agent's full Tracea identity (activity apiKey +, for v2 agents, its EOA private key and ERC-4337 smart account address) using a one-time activation code from the owner. The private key is returned ONLY ONCE — save it securely.

  Paramètres, retour & exemple (2)

  Paramètres

  • agent_address · string · requis
    Ethereum address of this agent
  • activation_code · string · optionnel
    One-time activation code (or use ?code= / x-activation-code)

  Exemple d'appel

  {"name": "get_my_identity", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_owner_agents≈ 85 tokens

  List all agent addresses registered on Tracea by a given owner address.

  Paramètres, retour & exemple (1)

  Paramètres

  • owner_address · string · requis
    Ethereum address of the owner

  Exemple d'appel

  {"name": "get_owner_agents", "arguments": {"owner_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_payment_whitelist≈ 117 tokens

  Get the list of owner-approved payment destination addresses for an agent (anti-injection guardrail). Non-empty list = the agent's smart account can ONLY pay these addresses. Empty = all allowed.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent

  Exemple d'appel

  {"name": "get_payment_whitelist", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_registration_file≈ 98 tokens

  Fetch the ERC-8004 compatible registration file for a Tracea-registered agent, including the KYA legal principal block.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent

  Exemple d'appel

  {"name": "get_registration_file", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_verification_card≈ 246 tokens

  Get the public URL of an agent's Tracea KYA verification card — the shareable page that presents the mandant entity, the permission scope, the financial cap and a proof hash, with a bilingual FR/EN transparency statement. Use it to hand a verifier a link. Returns the ready-to-share link plus the machine-readable JSON endpoints. Defaults to the 'standard' disclosure level, which is what the API exposes publicly.

  Paramètres, retour & exemple (3)

  Paramètres

  • lang · string · optionnel · fr | en
    Card language; the card also auto-detects the visitor's browser language
  • niveau · string · optionnel · minimum | standard | complet
    Disclosure level: minimum | standard (default) | complet
  • agent_address · string · requis
    Ethereum address of the agent (0x...)

  Exemple d'appel

  {"name": "get_verification_card", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• is_agent_revoked≈ 93 tokens

  Check whether an agent's mandate has been revoked on Tracea (immediate, scheduled or partial revocation).

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent

  Exemple d'appel

  {"name": "is_agent_revoked", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• log_action≈ 173 tokens

  Log an agent action on-chain via Tracea (immutable audit trail, court-ready). Requires TRACEA_API_KEY env var. The action is signed by the account's wallet.

  Paramètres, retour & exemple (3)

  Paramètres

  • data · string · optionnel
    Optional human-readable payload (JSON string recommended)
  • action_type · string · requis
    Short action type, e.g. 'email_sent', 'payment_initiated'
  • agent_address · string · requis
    Ethereum address of the acting agent

  Exemple d'appel

  {"name": "log_action", "arguments": {"action_type": "texte", "agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payment_incoming≈ 178 tokens

  Verify a x402 payment ON-CHAIN (the USDC transfer to your address, exact amount) and mark the session fulfilled. The blockchain is the ONLY source of truth — the payment_sessions table is never trusted alone. Returns { status: 'fulfilled', resource } if verified, or an error if not yet paid/expired.

  Paramètres, retour & exemple (2)

  Paramètres

  • tx_hash · string · requis
    The on-chain transaction hash of the USDC transfer / payX402 call
  • payment_id · string · requis
    The paymentId returned by payment_required (pay_...)

  Exemple d'appel

  {"name": "payment_incoming", "arguments": {"tx_hash": "texte", "payment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payment_required≈ 276 tokens

  Create a x402 payment request (HTTP 402) for a resource you sell to another agent. Returns a paymentId, the USDC amount in units, the destination address and the TraceaPayments contract to call. The paying agent must then call TraceaPayments.payX402(destination, amount, paymentId) on-chain — the contract enforces financial cap + whitelist on-chain. Deliver the resource only after payment_incoming confirms fulfilment.

  Paramètres, retour & exemple (5)

  Paramètres

  • agent · string · optionnel
    Address of the paying agent, if known
  • resource · string · optionnel
    Identifier/URL of the resource to unlock after payment
  • amount_usdc · string · requis
    Amount in USDC, e.g. '0.50' or '2'
  • destination · string · requis
    Address that receives the USDC payment (yours)
  • ttl_seconds · number · optionnel
    Validity of the payment session (30-3600s, default 300)

  Exemple d'appel

  {"name": "payment_required", "arguments": {"amount_usdc": "texte", "destination": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• payment_status≈ 119 tokens

  Get the status of a x402 payment session (pending | paid | fulfilled | expired), with destination, amount and tx hash. Useful to poll while waiting for the paying agent's on-chain transaction.

  Paramètres, retour & exemple (1)

  Paramètres

  • payment_id · string · requis
    The paymentId returned by payment_required (pay_...)

  Exemple d'appel

  {"name": "payment_status", "arguments": {"payment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_activity≈ 341 tokens

  Report an action the agent just performed to its owner's Tracea activity feed (off-chain, free, instant). Call this AFTER every significant action (email sent, message posted, file modified, payment, purchase, booking...). Auth via the Tracea MCP URL (?key=...) from the agent's identity page, OR self-activate with a one-time activation code (?code=... or x-activation-code header) — the tool then receives its apiKey automatically.

  Paramètres, retour & exemple (6)

  Paramètres

  • details · string · optionnel
    Optional JSON string with extra context
  • summary · string · requis
    Short human-readable summary of what was done
  • category · string · requis · email | payment | document | message | purchase | social | data_access | rdv
    Action category
  • agent_address · string · requis
    Ethereum address of this agent
  • in_permission · boolean · optionnel
    false if this action is OUTSIDE the granted permissions (flagged red)
  • permission_label · string · optionnel
    Which owner-granted permission this action falls under

  Exemple d'appel

  {"name": "report_activity", "arguments": {"summary": "texte", "category": "email", "agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_anchor_demarche≈ 224 tokens

  Seal a validated file as an immutable on-chain proof (Tracea Online, Base). Call this ONLY after tracea_check_demarche returned ok:true — it re-checks everything before anchoring. Requires the caller to be an authorized harness. Returns the proof fingerprint and the record hash.

  Paramètres, retour & exemple (3)

  Paramètres

  • id · integer · requis
    Procedure id (e.g. 15776)
  • agent · string · requis
    Ethereum address (0x...) of the agent smart account that judged the file compliant
  • donnees · object · requis
    Same data object that passed tracea_check_demarche

  Exemple d'appel

  {"name": "tracea_anchor_demarche", "arguments": {"id": 1, "agent": "texte", "donnees": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_check_demarche≈ 226 tokens

  THE anti-rejection check. Submit the data you collected; it validates every field against the official procedure schema AND cross-checks critical values against official French registries (e.g. SIRET against INSEE Sirene). Returns { ok: true, recordHash } or { ok: false, errors: [{ field, message }] }. ALWAYS call this BEFORE telling the user the file is ready, and fix the exact fields reported.

  Paramètres, retour & exemple (2)

  Paramètres

  • id · integer · requis
    Procedure id (e.g. 15776)
  • donnees · object · requis
    Collected data as a flat object, field names exactly as in tracea_demarche_schema

  Exemple d'appel

  {"name": "tracea_check_demarche", "arguments": {"id": 1, "donnees": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_demarche_document≈ 262 tokens

  Prepare le document officiel d'une demarche (CERFA ou demarche libre) et le rend signable. Appelle le generateur du backend Tracea, enregistre le dossier pour l'agent du visiteur et renvoie la reference + le chemin du PDF. A appeler APRES tracea_check_demarche (ok:true) et AVANT tracea_signature. Si des champs manquent, renvoie ok:false + champsManquants : ne fabrique jamais un document partiel.

  Paramètres, retour & exemple (3)

  Paramètres

  • id · integer · requis
    Procedure id (ex: 26002)
  • agent · string · requis
    Adresse Ethereum (0x...) de l'agent du visiteur, celle de l'identite de la conversation. Ne jamais l'inventer.
  • donnees · object · requis
    Donnees validees, memes champs que tracea_demarche_schema

  Exemple d'appel

  {"name": "tracea_demarche_document", "arguments": {"id": 1, "agent": "texte", "donnees": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_demarche_preuve≈ 131 tokens

  Verify an existing proof: was this file really anchored, when, by which operator, and under which rule version? Use the recordHash returned by tracea_check_demarche / tracea_anchor_demarche. Read-only and free.

  Paramètres, retour & exemple (1)

  Paramètres

  • hash · string · requis
    recordHash (0x... 32 bytes) returned by tracea_check_demarche or tracea_anchor_demarche

  Exemple d'appel

  {"name": "tracea_demarche_preuve", "arguments": {"hash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_demarche_schema≈ 149 tokens

  Return exactly which fields a given administrative procedure requires (name, type, required, format/pattern, bounds, example). Call this after tracea_list_demarches so you ask the user ONLY for the real fields, in the right format. Prevents hallucinated fields.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · integer · requis
    Procedure id returned by tracea_list_demarches (e.g. 15776)

  Exemple d'appel

  {"name": "tracea_demarche_schema", "arguments": {"id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_list_demarches≈ 93 tokens

  List the administrative procedures Tracea supports. ALWAYS call this first: it returns the exact procedure IDs so the AI never has to guess which form (CERFA) applies. `schemaPret: true` means guided mode (anti-rejection check available) is ready for that procedure.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "tracea_list_demarches", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• tracea_signature≈ 282 tokens

  DEPOSE REELLEMENT le document prepare dans Tracea Sign : cree les signataires, place la zone de signature, produit un lien de signature par personne et envoie les invitations. Exige pdfPath et signataires. Sans eux, aucun lien n'est renvoye.

  Paramètres, retour & exemple (7)

  Paramètres

  • id · integer · optionnel
    Procedure id (informatif)
  • box · string · optionnel
    Zone de signature 'x,y,w,h' (defaut: detection sur le PDF)
  • titre · string · optionnel
    Titre du document vu par le signataire
  • niveau · string · optionnel · demo | prod
    Environnement — demo par defaut
  • envoyer · boolean · optionnel
    Envoyer les invitations (defaut: true)
  • pdfPath · string · optionnel
    Chemin du PDF prepare, ex: /root/workspaces/<id>/attestation.pdf
  • signataires · array · optionnel
    Adresses e-mail des signataires

  Exemple d'appel

  {"name": "tracea_signature", "arguments": {"id": 1, "box": "texte", "titre": "texte", "niveau": "demo", "envoyer": true, "pdfPath": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_agent≈ 132 tokens

  Verify an AI agent's on-chain legal identity on Tracea (Base Sepolia). Returns registration status, financial cap, permission scope, revocation status, and KYA legal identity (mandant) when available. Use this BEFORE trusting or delegating work to an agent.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_address · string · requis
    Ethereum address of the agent (0x...)

  Exemple d'appel

  {"name": "verify_agent", "arguments": {"agent_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.tracea.online/mcp