accueil / serveurs / Dev & Code / io.github.LarryLemonBot/gatecheck
io.github.LarryLemonBot/gatecheck
serveur MCP (Model Context Protocol) · gatecheck-larrybuildsai-mcp 0.1.1
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que io.github.LarryLemonBot/gatecheck est sûr ?
Au dernier audit MCP Hub, le serveur MCP « io.github.LarryLemonBot/gatecheck » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 6 outils
- boundary_guard_check≈ 343 tokens
Create a deterministic, read-only pre-action receipt from request, policy, and optional result evidence. Use before an agent posts, spends, lists, or writes so the decision can be audited; no external action is executed.
Paramètres, retour & exemple (4)
Paramètrespolicy· object · optionnel
Decision object, e.g. allow/retry/review/block and reason.result· object · optionnel
Optional result or dry-run summary to hash into evidence.request· object · requis
Action metadata the agent is about to perform.nextStep· string · optionnel
Optional guidance stored in the receipt.
Exemple d'appel{"name": "boundary_guard_check", "arguments": {"request": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"decision": "texte", "nextStep": "texte", "createdAt": "texte", "receiptId": "texte", "evidenceHash": "texte", "claimBoundary": "texte", "marketplacePositioning": {}}} - check_agent_tool_readiness≈ 590 tokens
GateCheck readiness: check whether an x402/agent-facing tool is ready for agent routing, marketplace listing, and paid-path monitoring, including public agent discovery surfaces (/llms.txt, /agents.txt, /.well-known/mcp.json, /mcp). Pass target plus optional tier, marketplace_url, expected_resources, and paid_path; deep/report tiers add unpaid 402 probing when paid_path is supplied. Tiers: quick $1, deep $5, report $10.
Paramètres, retour & exemple (7)
Paramètrestier· string · optionnel · quick | deep | report
Readiness depth. quick=$1, deep=$5, report=$10. Defaults to quick.method· string · optionnel · GET | HEAD | OPTIONS
Safe unpaid probe method when paid_path is supplied. Defaults to GET.target· string · requis
Target API/provider base URL to scan.expected· object · optionnel
Optional expected x402 network/asset/price metadata for paid_path probes.paid_path· string · optionnel
Optional specific paid endpoint to probe without payment for deep/report tiers.marketplace_url· string · optionnel
Optional marketplace/listing URL to compare against public metadata.expected_resources· integer · optionnel
Optional expected resource count.
Exemple d'appel{"name": "check_agent_tool_readiness", "arguments": {"target": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"scan": {}, "tier": "quick", "ready": true, "score": 1, "checks": {}, "issues": [], "report": {}, "target": "texte", "product": "texte", "priceUsd": "texte", "healthProbe": {}, "recommendedFixes": []}} - generate_trust_receipt≈ 446 tokens
Generate a deterministic trust receipt from sanitized request/policy/result/payment summaries. Do not submit raw auth headers, cookies, API keys, private keys, payment signatures, payment response headers, customer prompts, customer documents, or payer-identifying evidence.
Paramètres, retour & exemple (5)
Paramètrespolicy· object · optionnel
Sanitized policy or decision summary to hash.result· object · optionnel
Sanitized outcome/result summary to hash; omit customer data and secret-like values.payment· object · optionnel
Optional sanitized payment summary or caller-provided hashes only; do not include raw payment signatures, raw payment response headers, private keys, API keys, cookies, payer-identifying evidence, or wallet secrets.request· object · requis
Sanitized request/action summary to hash; omit raw prompts, documents, credentials, cookies, auth headers, signatures, and secrets.nextStep· string · optionnel
Optional receipt next-step guidance.
Exemple d'appel{"name": "generate_trust_receipt", "arguments": {"request": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"decision": "texte", "nextStep": "texte", "createdAt": "texte", "receiptId": "texte", "evidenceHash": "texte", "claimBoundary": "texte", "marketplacePositioning": {}}} - generate_x402_launch_pack≈ 688 tokens
Generate marketplace-safe launch assets for an x402/MCP seller: listing copy, buyer FAQ, checklist, approval packet, and claim boundaries. Pass target plus optional product_name, audience, primary_use_case, marketplace_url, and paid_path; service/premium tiers include readiness evidence. Tiers: single $9, service $29, premium $49.
Paramètres, retour & exemple (11)
Paramètrestier· string · optionnel · single | service | premium
Launch pack depth. single=$9, service=$29, premium=$49. Defaults to single.method· string · optionnel · GET | HEAD | OPTIONS
Safe unpaid probe method when paid_path is supplied. Defaults to GET.target· string · requis
Target API/provider base URL to package for launch.audience· string · optionnel
Primary buyer/audience for listing copy.expected· object · optionnel
Optional expected x402 network/asset/price metadata for paid_path probes.paid_path· string · optionnel
Optional paid endpoint to validate via unpaid 402 challenge for service/premium packs.product_name· string · optionnel
Buyer-facing product title.marketplace_url· string · optionnel
Optional marketplace/listing URL to compare against public metadata.primary_use_case· string · optionnel
Primary buyer outcome/use case.expected_resources· integer · optionnel
Optional expected resource count.desired_marketplaces· array · optionnel
Optional marketplace names to include in launch planning.
Exemple d'appel{"name": "generate_x402_launch_pack", "arguments": {"target": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"tier": "single", "report": {}, "target": "texte", "product": "texte", "priceUsd": "texte", "readiness": {}, "launchPack": {}, "productName": "texte", "claimBoundary": "texte", "readinessScore": 1, "readyForDistribution": true, "approvalRequiredBeforeDistribution": true}} - probe_x402_paid_path≈ 412 tokens
Probe a public x402 paid endpoint without signing or paying, then parse the HTTP 402 challenge. Pass target plus optional expected network/asset/price to verify payment metadata and receive a deterministic health receipt.
Paramètres, retour & exemple (4)
Paramètresmode· string · optionnel · unpaid_402 | metadata_only
Probe mode for v1. Defaults to unpaid_402.method· string · optionnel · GET | HEAD | OPTIONS
Safe unpaid probe method. Defaults to GET.target· string · requis
Specific paid endpoint URL to probe without payment.expected· object · optionnel
Optional expected x402 metadata such as network, asset, and priceUsd.
Exemple d'appel{"name": "probe_x402_paid_path", "arguments": {"target": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"checks": {}, "issues": [], "target": "texte", "healthy": true, "receipt": {}, "observed": {}, "recommendedFixes": []}} - scan_x402_resource≈ 332 tokens
Read-only scan of a public API/provider URL for x402, OpenAPI, pricing, and agent-discovery metadata. Pass url, and optionally marketplace_url plus expected_resources, to get a readiness score, issues, and fixes; no private endpoints are called.
Paramètres, retour & exemple (3)
Paramètresurl· string · requis
Target API/provider base URL to scan.marketplace_url· string · optionnel
Optional marketplace/listing URL to compare against public metadata.expected_resources· integer · optionnel
Optional expected resource count.
Exemple d'appel{"name": "scan_x402_resource", "arguments": {"url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"score": 1, "issues": [], "prices": [], "target": "texte", "nextSteps": [], "marketplacePositioning": {}}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».