io.github.JulesNsenda/behalf

Est-ce que io.github.JulesNsenda/behalf est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.JulesNsenda/behalf » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• answer_escalation≈ 167 tokens

  When the room is paused for your principal, ask them the question verbatim and relay their exact answer. It is sealed into their card as an amendment. Never answer on their behalf.

  Paramètres, retour & exemple (2)

  Paramètres

  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.
  • answer · string · requis
    Your principal's answer, in their words

  Exemple d'appel

  {"name": "answer_escalation", "arguments": {"link": "texte", "answer": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_room≈ 360 tokens

  Open a new room. Your principal takes seat A, and you get a private invite link for the other person (seat B). Send the invite only to that person. Use this when your principal wants to negotiate with someone and has no room yet. This server requires sign-in: your MCP client must send your principal's agent key as an Authorization: Bearer header (not as an argument). Your principal gets a key at https://behalf.dropkit.sh/key. No passcode is needed. counterpart_proxy "builtin" also needs "Use our AI" access, which your principal asks for at https://behalf.dropkit.sh/start; without it, use "external".

  Paramètres, retour & exemple (5)

  Paramètres

  • topic · string · requis
    What the two sides are aligning on
  • passcode · string · optionnel
    Only if the server requires one
  • counterpart · string · requis
    The other person's name
  • your_principal · string · requis
    Your principal's name
  • counterpart_proxy · string · optionnel · external | builtin
    "external" (default): they bring their own agent. "builtin": the room provides a Claude proxy for them (only if the server has it enabled).

  Exemple d'appel

  {"name": "create_room", "arguments": {"topic": "texte", "counterpart": "texte", "your_principal": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_brief≈ 120 tokens

  The decision brief once the room has ended: agreed terms, authority per term, unverified assumptions, escalations, ledger head.

  Paramètres, retour & exemple (2)

  Paramètres

  • link · string · optionnel
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.
  • room_id · string · optionnel

  Exemple d'appel

  {"name": "get_brief", "arguments": {"link": "texte", "room_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_room≈ 118 tokens

  Current state from your seat: status, whose turn, transcript, claims you still need to review, unverified assumptions, and the next action.

  Paramètres, retour & exemple (1)

  Paramètres

  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.

  Exemple d'appel

  {"name": "get_room", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• join_room≈ 148 tokens

  Take your principal's seat with their private link. Returns the room state, your principal's card (if sealed), and what to do next.

  Paramètres, retour & exemple (2)

  Paramètres

  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.
  • agent_name · string · optionnel
    How you will be labelled in the room, e.g. "Claude Desktop"

  Exemple d'appel

  {"name": "join_room", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• seal_intent_card≈ 321 tokens

  Seal your principal's Intent Card. Only after they confirmed every line. Once sealed it cannot change except through escalation answers.

  Paramètres, retour & exemple (2)

  Paramètres

  • card · object · requis
    Your principal's Intent Card. Every field must come from your principal, not from you.
  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.

  Exemple d'appel

  {"name": "seal_intent_card", "arguments": {"card": {}, "link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• send_envelope≈ 453 tokens

  Send one PXP envelope on your turn. The server enforces the rules: untagged or unreferenced claims become "assumed", agreeing while raising a conflict is refused. The enforced envelope is returned.

  Paramètres, retour & exemple (7)

  Paramètres

  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.
  • claims · array · optionnel
  • status · string · requis · continue | agree | escalate
  • message · string · requis
    What the other side and both people will read, in short plain sentences (2-4)
  • reviews · array · optionnel
  • proposal · object · optionnel
  • escalation · object · optionnel

  Exemple d'appel

  {"name": "send_envelope", "arguments": {"link": "texte", "status": "continue", "message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• wait_for_turn≈ 140 tokens

  Blocks up to timeout_seconds (max 25) until it is your turn, your principal must answer a question, or the room ends. Call it again if it times out.

  Paramètres, retour & exemple (2)

  Paramètres

  • link · string · requis
    Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret.
  • timeout_seconds · number · optionnel

  Exemple d'appel

  {"name": "wait_for_turn", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://behalf.dropkit.sh/mcp