io.github.gbgplc/lqt

Est-ce que io.github.gbgplc/lqt est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.gbgplc/lqt » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 11 outils

• list_policies≈ 81 tokens

  List available decisioning policies (strict, shipping, standard, permissive) with their thresholds.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_policies", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• retrieve_address≈ 310 tokens

  Resolve a suggestion id from address.suggestions into its full cleansed address components (organisation, sub-building, number, street, city, province, postcode, country). Use this when you need the address itself — to fill a form or show a confirmation — rather than a decision; to verify a chosen suggestion instead, pass 'suggestion_id' to verify_address. CONSUMES A LOQATE CREDIT per call, so resolve only the one suggestion the user chose. The result is reference data, NOT a verification. Requires a Loqate API key.

  Paramètres, retour & exemple (2)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • suggestion_id · string · requis
    Id of a suggestion previously returned in address.suggestions. CONSUMES A LOQATE CREDIT. Ids are not stable over time; a stale one returns SUGGESTION_NOT_FOUND and you must search again rather than retry

  Exemple d'appel

  {"name": "retrieve_address", "arguments": {"suggestion_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• show_policy≈ 102 tokens

  Show full details for a specific decisioning policy.

  Paramètres, retour & exemple (1)

  Paramètres

  • name · string · requis
    Policy name: strict shipping standard or permissive

  Exemple d'appel

  {"name": "show_policy", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_address≈ 1821 tokens

  Verify an address against Loqate's global reference data. Returns a confidence score (0-1), verification status, and a policy-driven accept/review/reject recommendation. Set 'suggest' to also get alternative addresses suggested by Loqate whenever the address does not clear the policy; offer them to the user and verify the chosen one in a second call before treating it as good. Suggestions require a separately licensed Loqate feature enabled on the account — without it, verification still succeeds and the problem is reported in suggestions.error. Requires a Loqate API key — pass it via the 'key' field (get one at account.loqate.com).

  Paramètres, retour & exemple (53)

  Paramètres

  • id · string · optionnel
    Your own identifier for this record, echoed back by Loqate
  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header (get one at account.loqate.com)
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive
  • address · string · optionnel
    Full address string (free-form — use this OR structured fields below)
  • contact · string · optionnel
    Contact name for the delivery
  • country · string · optionnel
    ISO 2-letter country code (e.g. US GB DE)
  • options · object · optionnel
    Loqate API options as nested JSON, e.g. {"ServerOptions": {"FieldStatus": "true"}}. Dot notation is equivalent: {"ServerOptions.FieldStatus": "true"}. Pass GeoCode here as a boolean — it is sent at the request root where Loqate expects it. In-Options booleans (Certify Version Enhance Deceased Goneaways) take JSON booleans; ServerOptions values (e.g. OutputCasing DefaultCountry) are strings. Set ServerOptions.FieldStatus to "true" to get the changes list
  • premise · string · optionnel
    Premise or house number
  • suggest · boolean · optionnel
    When true, look up alternative addresses suggested by Loqate and return them in the result as suggestions. Requires the Loqate address-suggestion feature to be enabled on the account (licensed separately from verification) — without it, verification still succeeds and the reason appears in suggestions.error. The lookup runs when the address is not accepted (review or reject) OR when it is accepted below the confidence floor (see suggest_below) — a policy accepts from its own minimum, so an accepted address is not necessarily a confident one. Address-only; off by default
  • surname · string · optionnel
    Recipient's last name
  • address2 · string · optionnel
    Second address line
  • address3 · string · optionnel
    Third address line
  • address4 · string · optionnel
    Fourth address line
  • address5 · string · optionnel
    Fifth address line
  • address6 · string · optionnel
    Sixth address line
  • address7 · string · optionnel
    Seventh address line
  • address8 · string · optionnel
    Eighth address line
  • building · string · optionnel
    Building name
  • forename · string · optionnel
    Recipient's first name
  • function · string · optionnel
    Contact's job title or function
  • latitude · string · optionnel
    Latitude, for a reverse geocode
  • locality · string · optionnel
    City or town
  • post_box · string · optionnel
    PO box
  • postcode · string · optionnel
    Postal or ZIP code
  • full_name · string · optionnel
    Recipient's full name
  • longitude · string · optionnel
    Longitude, for a reverse geocode
  • admin_area · string · optionnel
    State or province
  • department · string · optionnel
    Department within the organisation
  • verify_key · string · optionnel
    Custom address verification API key (overrides LOQATE_VERIFY_KEY env var)
  • verify_url · string · optionnel
    Custom address verification endpoint URL (overrides LOQATE_VERIFY_URL env var)
  • middle_name · string · optionnel
    Recipient's middle name
  • organization · string · optionnel
    Company or organisation name
  • sub_building · string · optionnel
    Sub-building (e.g. flat, apartment or suite)
  • thoroughfare · string · optionnel
    Street name
  • suggest_below · null|number · optionnel
    Confidence floor for suggestions (0-1). An accepted address scoring below it still gets suggestions — policies accept from their own minimum, so an accepted address is not necessarily a confident one. Omit to use the policy value (standard 0.85); 0 disables the floor so only review/reject trigger a lookup
  • suggest_limit · integer · optionnel
    Maximum number of suggestions to return (1-10, default 5). Requires suggest
  • suggestion_id · string · optionnel
    Id of a suggestion previously returned in address.suggestions. The tool retrieves that address's cleansed components from Loqate and verifies those, which is how you confirm a suggestion the user chose. Use INSTEAD OF address, not alongside it. CONSUMES A LOQATE CREDIT — pass one id, for the one suggestion that was chosen, never several. Ids are not stable over time; a stale one returns SUGGESTION_NOT_FOUND and you must search again rather than retry
  • detect_country · boolean · optionnel
    When true and no country is supplied, guess the country from the address and flag the guess in the result (country_guessed). Address-only; off by default
  • delivery_address · string · optionnel
    Full delivery address
  • delivery_address1 · string · optionnel
    Delivery address line 1
  • delivery_address2 · string · optionnel
    Delivery address line 2
  • delivery_address3 · string · optionnel
    Delivery address line 3
  • delivery_address4 · string · optionnel
    Delivery address line 4
  • delivery_address5 · string · optionnel
    Delivery address line 5
  • delivery_address6 · string · optionnel
    Delivery address line 6
  • delivery_address7 · string · optionnel
    Delivery address line 7
  • delivery_address8 · string · optionnel
    Delivery address line 8
  • dependent_locality · string · optionnel
    Dependent locality (e.g. neighbourhood)
  • sub_building_floor · string · optionnel
    Floor
  • dependent_thoroughfare · string · optionnel
    Dependent street name
  • sub_administrative_area · string · optionnel
    Sub administrative area (e.g. county)
  • double_dependent_locality · string · optionnel
    Double dependent locality
  • super_administrative_area · string · optionnel
    Super administrative area

  Exemple d'appel

  {"name": "verify_address", "arguments": {"id": "texte", "key": "texte", "policy": "texte", "address": "texte", "contact": "texte", "country": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_address_batch≈ 1399 tokens

  Verify up to 100 addresses in one call. Up to 100 records per call; the results array is in submission order and each entry carries its input index, so results can be zipped back onto rows without relying on order. One bad record fails only itself — it carries an error while the rest are verified. Suggestions are not available in batch. Records are grouped by country before being sent, as Loqate recommends, so the cost is one upstream call per distinct country in the batch rather than one per call. Set detect_country to guess the country of records that do not supply one — detection runs per record, before grouping, so a mixed batch still sends each group with the right default. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (7)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive
  • options · object · optionnel
    Loqate API options as nested JSON, applied to every record in the batch
  • addresses · null|array · requis
    Addresses to verify, up to 100. Results are returned in the same order, each carrying its input index
  • verify_key · string · optionnel
    Custom address verification API key
  • verify_url · string · optionnel
    Custom address verification endpoint URL
  • detect_country · boolean · optionnel
    When true, guess the country of any record that does not supply one, from its address text, and flag the guess in that record's result. Records are then grouped by their detected country, so a mixed-country batch each gets the right default. Off by default

  Exemple d'appel

  {"name": "verify_address_batch", "arguments": {"addresses": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_contact≈ 1756 tokens

  Verify address, email, and/or phone together. Returns individual results plus an overall recommendation (most conservative of all provided fields). Set 'suggest' to also get alternative addresses suggested by Loqate whenever the address does not clear the policy; offer them to the user and verify the chosen one in a second call before treating it as good. Suggestions require a separately licensed Loqate feature enabled on the account — without it, verification still succeeds and the problem is reported in suggestions.error. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (55)

  Paramètres

  • id · string · optionnel
    Your own identifier for this record, echoed back by Loqate
  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • email · string · optionnel
    Email address to verify
  • phone · string · optionnel
    Phone number to verify
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive
  • address · string · optionnel
    Full address string
  • contact · string · optionnel
    Contact name for the delivery
  • country · string · optionnel
    ISO 2-letter country code
  • options · object · optionnel
    Loqate API options as nested JSON, e.g. {"ServerOptions": {"FieldStatus": "true"}}. Dot notation is equivalent: {"ServerOptions.FieldStatus": "true"}. Pass GeoCode here as a boolean — it is sent at the request root where Loqate expects it. In-Options booleans (Certify Version Enhance Deceased Goneaways) take JSON booleans; ServerOptions values (e.g. OutputCasing DefaultCountry) are strings. Set ServerOptions.FieldStatus to "true" to get the changes list
  • premise · string · optionnel
    Premise or house number
  • suggest · boolean · optionnel
    When true, look up alternative addresses suggested by Loqate and return them under address.suggestions. Requires the Loqate address-suggestion feature to be enabled on the account (licensed separately from verification). The lookup runs when the address is not accepted (review or reject) OR when it is accepted below the confidence floor (see suggest_below). Address-only — does not affect phone or email; off by default
  • surname · string · optionnel
    Recipient's last name
  • address2 · string · optionnel
    Second address line
  • address3 · string · optionnel
    Third address line
  • address4 · string · optionnel
    Fourth address line
  • address5 · string · optionnel
    Fifth address line
  • address6 · string · optionnel
    Sixth address line
  • address7 · string · optionnel
    Seventh address line
  • address8 · string · optionnel
    Eighth address line
  • building · string · optionnel
    Building name
  • forename · string · optionnel
    Recipient's first name
  • function · string · optionnel
    Contact's job title or function
  • latitude · string · optionnel
    Latitude, for a reverse geocode
  • locality · string · optionnel
    City or town
  • post_box · string · optionnel
    PO box
  • postcode · string · optionnel
    Postal or ZIP code
  • full_name · string · optionnel
    Recipient's full name
  • longitude · string · optionnel
    Longitude, for a reverse geocode
  • admin_area · string · optionnel
    State or province
  • department · string · optionnel
    Department within the organisation
  • verify_key · string · optionnel
    Custom address verification API key (overrides LOQATE_VERIFY_KEY env var)
  • verify_url · string · optionnel
    Custom address verification endpoint URL (overrides LOQATE_VERIFY_URL env var)
  • middle_name · string · optionnel
    Recipient's middle name
  • organization · string · optionnel
    Company or organisation name
  • sub_building · string · optionnel
    Sub-building (e.g. flat, apartment or suite)
  • thoroughfare · string · optionnel
    Street name
  • suggest_below · null|number · optionnel
    Confidence floor for suggestions (0-1). An accepted address scoring below it still gets suggestions. Omit to use the policy value (standard 0.85); 0 disables the floor. Address-only
  • suggest_limit · integer · optionnel
    Maximum number of suggestions to return (1-10, default 5). Requires suggest
  • suggestion_id · string · optionnel
    Id of a suggestion previously returned in address.suggestions. The tool retrieves that address's cleansed components from Loqate and verifies those, which is how you confirm a suggestion the user chose. Use INSTEAD OF address, not alongside it. CONSUMES A LOQATE CREDIT — pass one id, for the one suggestion that was chosen, never several. Ids are not stable over time; a stale one returns SUGGESTION_NOT_FOUND and you must search again rather than retry
  • detect_country · boolean · optionnel
    When true and no country is supplied, guess the country from the address and flag the guess in the result (country_guessed). Address-only — does not affect phone or email; off by default
  • delivery_address · string · optionnel
    Full delivery address
  • delivery_address1 · string · optionnel
    Delivery address line 1
  • delivery_address2 · string · optionnel
    Delivery address line 2
  • delivery_address3 · string · optionnel
    Delivery address line 3
  • delivery_address4 · string · optionnel
    Delivery address line 4
  • delivery_address5 · string · optionnel
    Delivery address line 5
  • delivery_address6 · string · optionnel
    Delivery address line 6
  • delivery_address7 · string · optionnel
    Delivery address line 7
  • delivery_address8 · string · optionnel
    Delivery address line 8
  • dependent_locality · string · optionnel
    Dependent locality (e.g. neighbourhood)
  • sub_building_floor · string · optionnel
    Floor
  • dependent_thoroughfare · string · optionnel
    Dependent street name
  • sub_administrative_area · string · optionnel
    Sub administrative area (e.g. county)
  • double_dependent_locality · string · optionnel
    Double dependent locality
  • super_administrative_area · string · optionnel
    Super administrative area

  Exemple d'appel

  {"name": "verify_contact", "arguments": {"id": "texte", "key": "texte", "email": "texte", "phone": "texte", "policy": "texte", "address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_contact_batch≈ 1365 tokens

  Verify up to 100 contacts in one call, each with any combination of address, email and phone, returning an overall recommendation per contact. Results are in submission order and each carries its input index. One bad record fails only itself, and a field that cannot be verified does not remove the contact — the overall recommendation is drawn from whichever fields were checked. The three types run concurrently, so a full batch is paced by email at roughly 7 seconds per 100. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (7)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive
  • options · object · optionnel
    Loqate API options as nested JSON, applied to every address in the batch
  • contacts · null|array · requis
    Contacts to verify, up to 100. Results are returned in the same order, each carrying its input index
  • verify_key · string · optionnel
    Custom address verification API key
  • verify_url · string · optionnel
    Custom address verification endpoint URL
  • detect_country · boolean · optionnel
    When true, guess the country of any contact whose address does not supply one and flag the guess in that contact's address result. Off by default

  Exemple d'appel

  {"name": "verify_contact_batch", "arguments": {"contacts": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_email≈ 192 tokens

  Verify an email address via Loqate. Returns confidence, risk level, and accept/review/reject recommendation. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (3)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • email · string · requis
    Email address to verify
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive

  Exemple d'appel

  {"name": "verify_email", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_email_batch≈ 338 tokens

  Verify up to 100 email addresses in one call. Up to 100 records per call; the results array is in submission order and each entry carries its input index, so results can be zipped back onto rows without relying on order. One bad record fails only itself — it carries an error while the rest are verified. Suggestions are not available in batch. The batch endpoint returns less detail than single verification: risk, complainer and reason are absent, though the accept/review/reject recommendation and the disposable-mailbox flag are identical. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (3)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • emails · null|array · requis
    Email addresses to verify, up to 100. Results are returned in the same order, each carrying its input index
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive

  Exemple d'appel

  {"name": "verify_email_batch", "arguments": {"emails": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_phone≈ 235 tokens

  Verify a phone number via Loqate. Returns confidence, number type, carrier, and accept/review/reject recommendation. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (4)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • phone · string · requis
    Phone number (E.164 format preferred e.g. +442071234567)
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive
  • country · string · optionnel
    ISO 2-letter country code (helps with parsing if no country prefix)

  Exemple d'appel

  {"name": "verify_phone", "arguments": {"phone": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_phone_batch≈ 430 tokens

  Verify up to 100 phone numbers in one call. Up to 100 records per call; the results array is in submission order and each entry carries its input index, so results can be zipped back onto rows without relying on order. One bad record fails only itself — it carries an error while the rest are verified. Suggestions are not available in batch. Phone validation has no bulk endpoint, so numbers are checked concurrently against a shared limit. Measured at around 2.6s for 100 numbers, which is the fastest of the three batch types — email is the slowest, at roughly 7s for 100, because it probes mail servers. Requires a Loqate API key — pass it via the 'key' field.

  Paramètres, retour & exemple (3)

  Paramètres

  • key · string · optionnel
    Loqate API key — required unless the server has one configured or the request carries an Authorization: Bearer header
  • phones · null|array · requis
    Phone numbers to verify, up to 100. Results are returned in the same order, each carrying its input index
  • policy · string · optionnel
    Policy name: strict shipping standard (default) or permissive

  Exemple d'appel

  {"name": "verify_phone_batch", "arguments": {"phones": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://reach.prod.fabric.gbgplatforms.com/mcp