io.github.filipbolcek-ctrl/forest-factory

Est-ce que io.github.filipbolcek-ctrl/forest-factory est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.filipbolcek-ctrl/forest-factory » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 10 outils

• api_discover≈ 165 tokens

  Discover the callable public API behind a developer or documentation page: identify candidate API base URLs, developer portals, machine-readable API docs and authentication documentation for integration setup. Price: $0.004 USDC per successful call.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    Public HTTP(S) URL to inspect, resolve, or compare.

  Exemple d'appel

  {"name": "api_discover", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• commerce_availability≈ 203 tokens

  Resolve public product or listing availability with explicit normalized states. It reports only provider evidence and never infers inventory, reserves items or places an order. Price: $0.002 USDC per successful call.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    Public HTTP(S) URL to inspect, resolve, or compare.
  • variant · object · optionnel
    Public identifiers value used to scope this lookup.

  Exemple d'appel

  {"name": "commerce_availability", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• commerce_buyability≈ 242 tokens

  Report whether a public item appears buyable with explicit blockers such as out-of-stock or unknown. This is a preflight only: it never signs in, buys, creates an order or guarantees checkout. Price: $0.003 USDC per successful call.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
    Public HTTP(S) URL to inspect, resolve, or compare.
  • variant · object · optionnel
    Public identifiers value used to scope this lookup.
  • quantity · integer · optionnel
    Requested item quantity to validate against provider limits.

  Exemple d'appel

  {"name": "commerce_buyability", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• crypto_spot_price≈ 250 tokens

  Return one current Coinbase spot-product snapshot for an exact BASE-QUOTE product id, including venue price, 24-hour price change and provider-reported 24-hour product volume. Forest reads only Coinbase Advanced Trade public market data; it does not infer tickers, infer the provider volume denomination, aggregate venues, read an account or wallet, place orders, provide an executable quote, forecast returns or recommend a trade. Price: $0.001 USDC per successful call.

  Paramètres, retour & exemple (1)

  Paramètres

  • product · string · requis
    Public product value used to scope this lookup.

  Exemple d'appel

  {"name": "crypto_spot_price", "arguments": {"product": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• domain_preflight≈ 200 tokens

  Resolve a bare public domain into operational registration, DNS, HTTPS/TLS and mail-policy state using IANA-routed RDAP, DNS, MX/TXT/SPF/DMARC and a bounded TLS probe. No registrant personal data, vulnerability scanning, mailbox existence or deliverability claim. Provider uncertainty is explicit. Price: $0.003 USDC per successful call.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Bare DNS domain name, not a URL, path, IP address or email.

  Exemple d'appel

  {"name": "domain_preflight", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• package_preflight≈ 273 tokens

  Verify whether a specific npm or PyPI package version exists before installation, resolve the current/latest version, and report deprecation or yank state when available, plus license and runtime requirement. This is a public-registry package install preflight; it does not resolve dependency graphs or perform vulnerability analysis. Price: $0.002 USDC per successful call.

  Paramètres, retour & exemple (3)

  Paramètres

  • package · string · requis
    Public package name to inspect.
  • version · string · optionnel
    Package version whose public metadata should be checked.
  • ecosystem · string · requis · npm | pypi
    Public ecosystem value used to scope this lookup.

  Exemple d'appel

  {"name": "package_preflight", "arguments": {"package": "texte", "ecosystem": "npm"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• perp_funding≈ 248 tokens

  Return one current Hyperliquid native perpetual snapshot with hourly funding, 8-hour equivalent, simple nominal annualization of the current hourly rate, mark/oracle basis, Hyperliquid funding premium index, open interest, daily notional volume and max leverage. Forest reads only the fixed public Hyperliquid info endpoint; the annualized field is not compounded, forecast or realized return, and Forest does not trade, sign, read a wallet or recommend a position. Price: $0.002 USDC per successful call.

  Paramètres, retour & exemple (1)

  Paramètres

  • coin · string · requis
    Public coin value used to scope this lookup.

  Exemple d'appel

  {"name": "perp_funding", "arguments": {"coin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• release_asset_resolve≈ 342 tokens

  Resolve a public GitHub release into the most plausible downloadable asset for a normalized OS/architecture target, excluding source/signature/checksum files and linking checksum companions when present. Returns ambiguity instead of silently choosing tied candidates. No private repositories or customer authentication. Price: $0.003 USDC per successful call.

  Paramètres, retour & exemple (5)

  Paramètres

  • os · string · requis · windows | linux | macos | freebsd | any
    Public os value used to scope this lookup.
  • arch · string · requis · x86_64 | x86 | arm64 | armv7 | any
    Public arch value used to scope this lookup.
  • release · string · optionnel
    Release identifier used to resolve a public asset.
  • repository · string · requis
    Public owner/name repository to inspect.
  • allow_prerelease · boolean · optionnel
    Public allow prerelease value used to scope this lookup.

  Exemple d'appel

  {"name": "release_asset_resolve", "arguments": {"os": "windows", "arch": "x86_64", "repository": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• text_base64≈ 252 tokens

  Encode bounded caller-supplied UTF-8 text as standard or URL-safe Base64, or decode canonical Base64 back to valid UTF-8 text. Forest performs the transform locally with no network request and rejects invalid encodings, non-UTF-8 decoded bytes, and outputs beyond the 100 KiB byte bound. Price: $0.001 USDC per successful call.

  Paramètres, retour & exemple (3)

  Paramètres

  • mode · string · optionnel · encode | decode
    Public mode value used to scope this lookup.
  • value · string · requis
    Public value value used to scope this lookup.
  • variant · string · optionnel · standard | url-safe
    Public product options used to select an offer.

  Exemple d'appel

  {"name": "text_base64", "arguments": {"value": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• text_hash≈ 218 tokens

  Hash caller-supplied UTF-8 text deterministically with SHA-256 or SHA-512 and return both hexadecimal and Base64 digests. Input is bounded to 100 KiB, no network request or external provider is used, and Forest never treats a digest as proof of authenticity or password security. Price: $0.001 USDC per successful call.

  Paramètres, retour & exemple (2)

  Paramètres

  • text · string · requis
    Public text value used to scope this lookup.
  • algorithm · string · optionnel · sha256 | sha512
    Public algorithm value used to scope this lookup.

  Exemple d'appel

  {"name": "text_hash", "arguments": {"text": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/mcp