io.github.flow-executor/flow

Est-ce que io.github.flow-executor/flow est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.flow-executor/flow » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• flow_health≈ 57 tokens

  Check the Flow quote API health: status, chain, and latest synced block number.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "flow_health", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flow_paycheck≈ 421 tokens

  Before you pay this agent, check. PayCheck ($0.50 USDC via x402 on Base) runs Flow's whole checker stack on a payee in ONE call — the payee verdict (kind, on-chain activity, the full contract-safety engine when the payee is a contract), the wallet approval-exposure audit, contract safety, and the payee's recent USDC settlement history — and returns one finished grade (ALLOW / REVIEW / BLOCK with a 0-100 score), a verify_status (verified / failed / unverified_verifier_down), every check, the evidence under it, and a receipt. The guarantee: the report is produced before settlement; if it cannot be produced, the payment is never settled — no report, no charge. Flow Promise: pass amountUsd to declare the intended payment (up to $100) and an ALLOW grade carries bonded coverage — 25% of the payment back (max $10) from the Promise Pool if the payee settles and does not deliver within 24h (pool: GET /api/paycheck/promise; claims: POST /api/paycheck/claim). This hosted endpoint does not hold a wallet: an unpaid call returns the endpoint's x402 payment challenge itself, never an invented result. Pay it with any x402 client, or use the @flowexecutor/flow-mcp stdio package with an Early Builder Key.

  Paramètres, retour & exemple (2)

  Paramètres

  • payee · string · requis
    The payee address to grade before paying (0x…), Base
  • amountUsd · number · optionnel
    Optional: the intended payment amount in USD (> 0, up to 100). Declaring it attaches Flow Promise coverage to the receipt.

  Exemple d'appel

  {"name": "flow_paycheck", "arguments": {"payee": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flow_quote≈ 252 tokens

  Get a best-execution swap quote on Base. Compares Uniswap V3, PancakeSwap V3 and Aerodrome (plus two-hop routes via WETH), returns the winning venue, expected output, edge in bps vs the baseline, a liquidity flag (deep/watch/thin), the exact block number and timestamp, and build latency. Read-only: no funds move.

  Paramètres, retour & exemple (4)

  Paramètres

  • chainId · number · optionnel
    Chain id, defaults to 8453 (Base)
  • tokenIn · string · requis
    Input token contract address on Base (e.g. USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA4E46E)
  • amountIn · string · requis
    Human-readable input amount, e.g. "10" for 10 USDC
  • tokenOut · string · requis
    Output token contract address on Base (e.g. WETH 0x4200000000000000000000000000000000000006)

  Exemple d'appel

  {"name": "flow_quote", "arguments": {"tokenIn": "texte", "amountIn": "texte", "tokenOut": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• flow_search≈ 318 tokens

  Verified Search ($0.01 USDC via x402 on Base): web search where every result is independently checked by Flow before it reaches you — the result URL is fetched live (liveness, final HTTP status recorded) and the fetched page text is matched against the result's own title/snippet terms (content-match score). Each result carries a verify_status (verified / failed / unverified_verifier_down), its httpStatus and contentMatch, and the response carries a receipt counting checked / verified / failed. Bad results are flagged, never silently dropped. The guarantee: the search is produced before settlement; if it cannot be produced, the payment is never settled. This hosted endpoint does not hold a wallet: an unpaid call returns the endpoint's x402 payment challenge itself, never an invented result. Pay it with any x402 client, or use the @flowexecutor/flow-mcp stdio package with an Early Builder Key.

  Paramètres, retour & exemple (2)

  Paramètres

  • query · string · requis
    The search query
  • maxResults · number · optionnel
    Max results to return and verify (default 5, cap 10)

  Exemple d'appel

  {"name": "flow_search", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://flow-kg4x.vercel.app/api/mcp