io.github.Christebob/meta-stamp-pockets

Est-ce que io.github.Christebob/meta-stamp-pockets est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.Christebob/meta-stamp-pockets » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 3 outils

• list_pockets≈ 392 tokens

  List all available content pockets in the Meta-Stamp Pockets catalog, optionally filtered by creator. Use this tool when an AI agent needs to browse the full catalog or see everything available from a specific creator. Prefer search_pockets when looking for specific topics. Does NOT retrieve content — use pull_content with the returned pocket_id to access actual content. Works without authentication; anonymous results omit content_url and creator_id, which are returned only with a valid Bearer token (pkt_ API key). The optional creator_id parameter filters results to a single creator's pockets and requires an API key (anonymous calls using it are refused with an api_key_required error and a registration_url). Returns a paginated list of pockets with IDs, titles, descriptions, creators, content types, and pricing tiers. Each row also carries catalog_id, access ('open' or 'closed') and delivery ('file' or 'listing'); closed-catalog and listing rows never include content_url. Unlisted pockets are never listed; they stay reachable by pocket_id (pull_content) or by an exact isrc in search_pockets.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Maximum number of results to return per page. Defaults to 50, maximum 200 for catalog browsing.
  • creator_id · string · optionnel
    Optional filter to show only pockets from a specific creator. Use the creator's unique identifier. Requires an API key; refused for anonymous callers.

  Exemple d'appel

  {"name": "list_pockets", "arguments": {"limit": 1, "creator_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• pull_content≈ 618 tokens

  Pull licensed creator content from a specific pocket by ID. Use this tool when an AI agent needs to retrieve verified, provenance-tracked content for generation, RAG, and inference use. Training use requires a separate training license — see training_use in the agreement terms. Do NOT use for browsing or discovery — use search_pockets or list_pockets instead. Requires a valid Bearer token for authentication; unauthenticated requests return HTTP 402. Successful pulls trigger a metered charge at the pocket's own price (quoted as owner_price on the receipt; $0.0025 platform default only when a pocket sets none) and the transaction is logged for creator royalty distribution. The pocket_id parameter is a 24-character hex string identifying the specific content pocket to pull from. Returns the full content payload with provenance metadata including creator attribution and license terms. Every call returns a receipt of the same shape (receipt_id, outcome, reason, amount_paid, terms, content_hash) with a public verify_url: on success under 'receipt' in the result (outcome 'delivered'), on an HTTP 402 refusal under 'receipt' in the error body (outcome 'refused', reason 'registration_required' when no valid API key is presented, 'payment_required' when the wallet balance is too low or the card charge fails). A pocket whose rights holder has closed its catalog is refused for every caller, with or without a key, as a normal result (not a 402) with reason 'catalog_closed', owner_price 'not_for_sale' and the receipt under 'receipt'; nothing is delivered or charged. A listing-only pocket (delivery 'listing' in search results) has no file: its pull is charged the owner's per-pull price like any other and returns delivery 'listing' with 'content' set to the listing object {title, isrc, owner, terms, link} and no download URL. content_hash is the sha256 hex of the delivered 'content' field only: a string is hashed as its UTF-8 bytes, an object as UTF-8 JSON with sorted keys and no whitespace.

  Paramètres, retour & exemple (2)

  Paramètres

  • query · string · optionnel
    Optional natural language focus query used to narrow or contextualize the returned content within the selected pocket.
  • pocket_id · string · requis
    The 24-character hex identifier of the content pocket to pull from. Obtain this from search_pockets or list_pockets results.

  Exemple d'appel

  {"name": "pull_content", "arguments": {"pocket_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_pockets≈ 659 tokens

  Search the Meta-Stamp Pockets catalog by keyword, creator email, or content category. Use this tool when an AI agent needs to discover available licensed content before pulling it. Ideal for finding relevant pockets when the agent knows what topic or creator it needs but not the specific pocket ID. Does NOT retrieve content — use pull_content with the returned pocket_id to access actual content. Works without authentication for query, isrc and content_type; anonymous results omit content_url and creator_id, which are returned only with a valid Bearer token (pkt_ API key). The query parameter is matched as a literal keyword and accepts natural language search terms or category keywords; the creator_email parameter restricts results to a single creator by their email address and requires an API key (anonymous calls using it are refused with an api_key_required error and a registration_url). The isrc parameter is an exact full-ISRC lookup. Provide at least one of query, creator_email or isrc. Returns matching pockets with their IDs, titles, descriptions, creators, content types, and pricing tiers. Each row also carries catalog_id, access ('open' or 'closed') and delivery ('file' or 'listing'). Closed-catalog rows cannot be pulled and never include content_url; listing rows show title, isrc and owner and never include content_url. Unlisted pockets are excluded from results unless found by an exact isrc match. Use the limit parameter to control page size.

  Paramètres, retour & exemple (5)

  Paramètres

  • isrc · string · optionnel
    Optional exact ISRC lookup: the full 12-character code, dashes allowed (e.g. 'USRC17607839' or 'US-RC1-76-07839'). Matches case- and dash-insensitively; a partial ISRC is rejected. This is the only search that also returns unlisted pockets.
  • limit · integer · optionnel
    Maximum number of results to return per page. Defaults to 10, maximum 50 for search results.
  • query · string · optionnel
    Natural language search terms or category keywords to find matching content pockets. Optional when creator_email or isrc is provided.
  • content_type · string · optionnel
    Optional filter to show only pockets in a specific content category or source type, such as 'youtube', 'webpage', 'video', 'text', 'image', or 'audio'.
  • creator_email · string · optionnel
    Optional filter to show only pockets created by the creator with this email address. Case-insensitive exact match on the email. Requires an API key; refused for anonymous callers.

  Exemple d'appel

  {"name": "search_pockets", "arguments": {"isrc": "texte", "limit": 1, "query": "texte", "content_type": "texte", "creator_email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://metastampv3-production.up.railway.app/mcp