io.github.decidefyi/policy-notaries

Est-ce que io.github.decidefyi/policy-notaries est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.decidefyi/policy-notaries » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• cancellation_penalty≈ 1355 tokens

  Check US subscription cancellation terms without executing cancellation. Known vendors include review-only and retired scopes: their presence is not automation support. Adobe requires manual contract review. Typeform requires Basic, direct/self-serve platform scope and returns CANCEL_AT_PERIOD_END, not an immediate cancellation or refund. Missing scope, retired sources or unavailable current evidence return UNKNOWN.

  Paramètres, retour & exemple (8)

  Paramètres

  • plan · string · requis · individual | basic
    Use 'basic' for Typeform; 'individual' for other supported vendors.
  • region · string · requis · US
    Region code. Currently only 'US' is supported.
  • vendor · string · requis · 1password | adobe | amazon_music_unlimited | amazon_prime | amc_plus | apple_app_store | apple_arcade | apple_music
    Vendor identifier (lowercase, underscore-separated).
  • product · string · optionnel · platform_subscription
    Required for Typeform. Excludes payments collected from form respondents.
  • contract_type · string · optionnel · self_serve
    Required for Typeform. Custom and enterprise contracts are not covered.
  • billing_cadence · string · optionnel · monthly | annual
    Required when the vendor applies different cancellation terms to monthly and annual plans.
  • purchase_channel · string · optionnel · direct
    Required for Typeform. Third-party purchases are not covered.
  • requested_action · string · optionnel · cancel_at_period_end
    Required for Typeform. Checks ending renewal at the paid term end; does not execute it.

  Exemple d'appel

  {"name": "cancellation_penalty", "arguments": {"plan": "individual", "region": "US", "vendor": "1password"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "policy": "texte", "refund": "not_evaluated", "vendor": "texte", "message": "texte", "penalty": "texte", "verdict": "FREE_CANCEL", "notice_days": 1, "source_hash": "texte", "evaluated_at": "texte", "rules_version": "texte", "policy_version": "texte"}}

• refund_eligibility≈ 1096 tokens

  Evaluate a US consumer subscription refund against versioned source-backed rules. Returns UNKNOWN when required conditions are absent or the vendor requires approval or manual policy review.

  Paramètres, retour & exemple (5)

  Paramètres

  • plan · string · requis · individual
    Plan type. Currently only 'individual' plans are supported.
  • region · string · requis · US
    Region code. Currently only 'US' is supported.
  • vendor · string · requis · 1password | adobe | amazon_music_unlimited | amazon_prime | amc_plus | apple_app_store | apple_arcade | apple_music
    Vendor identifier (lowercase, underscore-separated).
  • days_since_purchase · number · requis
    Number of days since the subscription was purchased.
  • qualifying_conditions_met · boolean · optionnel
    Required when the vendor policy has source-specific conditions such as first purchase, unused benefits, or an eligible annual plan.

  Exemple d'appel

  {"name": "refund_eligibility", "arguments": {"plan": "individual", "region": "US", "vendor": "1password", "days_since_purchase": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "vendor": "texte", "message": "texte", "verdict": "ALLOWED", "refundable": true, "source_hash": "texte", "window_days": 1, "evaluated_at": "texte", "rules_version": "texte", "policy_version": "texte", "automation_safe": true, "policy_evidence": {}}}

• return_eligibility≈ 1119 tokens

  Evaluate whether a US consumer subscription purchase can be reversed under versioned source-backed rules. Returns UNKNOWN when required conditions are absent or manual review is required.

  Paramètres, retour & exemple (5)

  Paramètres

  • plan · string · requis · individual
    Plan type. Currently only 'individual' plans are supported.
  • region · string · requis · US
    Region code. Currently only 'US' is supported.
  • vendor · string · requis · 1password | adobe | amazon_music_unlimited | amazon_prime | amc_plus | apple_app_store | apple_arcade | apple_music
    Vendor identifier (lowercase, underscore-separated).
  • days_since_purchase · number · requis
    Number of days since the subscription was purchased.
  • qualifying_conditions_met · boolean · optionnel
    Required when the vendor policy has source-specific conditions such as first purchase, unused benefits, or an eligible annual plan.

  Exemple d'appel

  {"name": "return_eligibility", "arguments": {"plan": "individual", "region": "US", "vendor": "1password", "days_since_purchase": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "method": "texte", "vendor": "texte", "message": "texte", "verdict": "RETURNABLE", "returnable": true, "return_type": "texte", "source_hash": "texte", "evaluated_at": "texte", "rules_version": "texte", "policy_version": "texte", "automation_safe": true}}

• trial_terms≈ 1176 tokens

  Evaluate a live US consumer subscription trial offer. Supply observed availability, duration, card, and auto-conversion facts; the tool returns UNKNOWN instead of inferring current offers from static data.

  Paramètres, retour & exemple (7)

  Paramètres

  • plan · string · requis · individual
    Plan type. Currently only 'individual' plans are supported.
  • region · string · requis · US
    Region code. Currently only 'US' is supported.
  • vendor · string · requis · 1password | adobe | amazon_music_unlimited | amazon_prime | amc_plus | apple_app_store | apple_arcade | apple_music
    Vendor identifier (lowercase, underscore-separated).
  • offer_confirmed · boolean · optionnel
    For account- or promotion-specific trials, whether a live offer has been confirmed for this account.
  • observed_trial_days · integer · optionnel
    Trial duration shown by the confirmed live offer. Required when offer_confirmed is true for a variable offer.
  • observed_auto_converts · boolean · optionnel
    Whether the confirmed live offer converts to a paid subscription after the trial.
  • observed_card_required · boolean · optionnel
    Whether the confirmed live offer requires a payment card.

  Exemple d'appel

  {"name": "trial_terms", "arguments": {"plan": "individual", "region": "US", "vendor": "1password"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "vendor": "texte", "message": "texte", "verdict": "TRIAL_AVAILABLE", "trial_days": 1, "source_hash": "texte", "evaluated_at": "texte", "auto_converts": true, "card_required": true, "rules_version": "texte", "policy_version": "texte", "automation_safe": true}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://policy.decide.fyi/api/mcp