io.github.naief9961-tech/naif-fixgraph

Est-ce que io.github.naief9961-tech/naif-fixgraph est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.naief9961-tech/naif-fixgraph » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• diagnose_issue≈ 608 tokens

  Start here. Diagnose one sanitized MCP, API, webhook, agent or integration failure for free. Returns bounded evidence plus a suggested repair service, then use quote_repair only if a priced repair is wanted. It never creates a quote, checkout, payment or repair job. It may record bounded operational attribution/telemetry, so readOnlyHint is false; it does not modify the caller system or commercial state.

  Paramètres, retour & exemple (2)

  Paramètres

  • source · string · optionnel
    Optional attribution label for the calling agent or integration; omit when no stable source label is available.
  • problem · string · requis
    One sanitized technical symptom. Include the affected component and observable error/status. Never include secrets, credentials, private keys or PII.

  Exemple d'appel

  {"name": "diagnose_issue", "arguments": {"problem": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"free": true, "error": "texte", "phase": "texte", "nextTool": "texte", "automaticQuote": true, "rawInputStored": true, "automaticPayment": true, "automaticCheckout": true, "automaticExecution": true, "suggestedProductId": "texte"}}

• prepare_repair≈ 896 tokens

  Use ONLY for the normal repair flow after quote_repair has already returned a quoteId and the caller explicitly chooses that existing quote. This tool does not create a quote: with confirm=true it records acceptance of that quote and creates checkout instructions on exactly one rail offered by it. Do NOT use this tool for owner/platform-preauthorized autonomous purchasing where the agent is allowed to choose one of the four capped micro-services and create its own quote; use request_delegated_purchase for that separate flow. APPLE_PAY returns a human handoff URL for buyer authorization; BASE_USDC and TRON_USDT return payer transfer instructions. It never sends funds, charges the caller, verifies payment or directly starts repair execution. After the buyer completes the required payment action, use verify_repair with the returned checkoutId and the same rail.

  Paramètres, retour & exemple (4)

  Paramètres

  • rail · string · requis · APPLE_PAY | BASE_USDC | TRON_USDT
    Choose exactly one id from the descriptors in quote_repair.paymentRails. Saudi quotes normally offer APPLE_PAY only.
  • source · string · optionnel
    Optional attribution label for the calling agent or integration.
  • confirm · boolean · requis
    Must be true to record explicit acceptance before checkout instructions are created.
  • quoteId · string · requis
    Exact quoteId returned by quote_repair and explicitly accepted by the caller.

  Exemple d'appel

  {"name": "prepare_repair", "arguments": {"rail": "APPLE_PAY", "confirm": true, "quoteId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"rail": "texte", "error": "texte", "phase": "texte", "quoteId": "texte", "checkout": {}, "nextTool": "texte", "fundsSent": true, "nextAction": {}, "automaticJob": true, "paymentVerified": true, "quoteAcceptance": {}, "automaticPayment": true}}

• quote_repair≈ 909 tokens

  Use only after diagnose_issue when the caller wants a priced bounded repair. Creates a new non-binding quote for the selected or automatically matched public service. Repeating the call may create a different quoteId, so it is intentionally non-idempotent. It does not accept the quote, create checkout, send payment or start execution. If the quote is accepted by the caller, pass its quoteId and one offered payment rail to prepare_repair.

  Paramètres, retour & exemple (3)

  Paramètres

  • source · string · optionnel
    Optional attribution label for the calling agent or integration.
  • productId · string · optionnel
    Optional exact public productId suggested by diagnose_issue or chosen from the catalog. Omit to let NAIF match the closest service.
  • description · string · requis
    Sanitized bounded repair need derived from diagnose_issue; describe the failure and desired repair outcome without secrets or PII.

  Exemple d'appel

  {"name": "quote_repair", "arguments": {"description": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"eta": "texte", "error": "texte", "phase": "texte", "price": "texte", "state": "texte", "quoteId": "texte", "currency": "texte", "nextTool": "texte", "productId": "texte", "exactAmount": "texte", "productName": "texte", "automaticJob": true}}

• request_delegated_purchase≈ 1854 tokens

  Use ONLY for an owner/platform-preauthorized autonomous purchase of one of four supported micro-services under an explicit spending cap. Unlike prepare_repair, this tool does not consume an existing quoteId: it creates its own quote, accepts it, and creates checkout within the delegation. Repeating the call may create a new quote/checkout, so it is intentionally non-idempotent. Do NOT use it when quote_repair already produced a quoteId or for general repair services outside the four listed micro-services; use prepare_repair for an existing repair quote. Supports wallet rails and APPLE_PAY_AUTO. APPLE_PAY_AUTO requires one human Apple Pay approval first; when Tap returns an ACTIVE saved-card payment agreement, later purchases may be charged only within the stored cap. If provider support or authorization is missing, the flow fails closed.

  Paramètres, retour & exemple (9)

  Paramètres

  • source · string · optionnel
    Optional attribution label for the calling agent or integration.
  • productId · string · requis · json-validity-check | api-response-shape-check | json-normalizer | csv-schema-audit
    Exactly one of the four services allowed for delegated purchase. For any other repair service, use diagnose_issue → quote_repair → prepare_repair.
  • description · string · requis
    Sanitized bounded work description for the delegated micro-service; never include secrets, credentials or private keys.
  • paymentRail · string · optionnel · AUTO | BASE_USDC | TRON_USDT | APPLE_PAY_AUTO
    Delegated-purchase rail policy. AUTO chooses an eligible wallet rail; APPLE_PAY_AUTO uses or establishes the capped Tap authorization. This is not the manual rail selection for prepare_repair.
  • maxAmountUsd · number · requis
    Owner/platform per-purchase spending cap in USD-equivalent. The quote must fit inside this cap and the service launch price.
  • dailyLimitUsd · number · optionnel
    Requested daily APPLE_PAY_AUTO cap used only during first-time authorization setup; maximum 20 USD.
  • authorizeCheckout · boolean · requis
    Explicit permission for this tool to create its own quote, accept it, and create checkout within the supplied cap. If a quoteId already exists, use prepare_repair instead.
  • authorizedMerchant · string · requis
    Merchant scope explicitly authorized by the owner/platform for this delegated purchase flow.
  • applePayAuthorizationToken · string · optionnel
    Opaque token returned by the one-time APPLE_PAY_AUTO setup. Supply only a token from this delegated authorization flow; never provide card data or raw Apple Pay payloads.

  Exemple d'appel

  {"name": "request_delegated_purchase", "arguments": {"productId": "json-validity-check", "description": "texte", "maxAmountUsd": 1, "authorizeCheckout": true, "authorizedMerchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"job": "texte", "error": "texte", "state": "texte", "status": "texte", "details": "texte", "quoteId": "texte", "nextTool": "texte", "verified": true, "paymentId": "texte", "productId": "texte", "checkoutId": "texte", "payerAction": "texte"}}

• verify_repair≈ 703 tokens

  Use after the buyer completes the payment action for a checkout created by prepare_repair. APPLE_PAY verifies the existing Tap charge by checkoutId; BASE_USDC and TRON_USDT require the payer-provided txHash. A confirmed payment returns verified=true, while an already-confirmed Apple Pay checkout may return alreadyVerified=true; an unconfirmed or rejected payment returns error and/or reason without fabricating success. Verification may also return the job attached by the existing payment-completion workflow. This tool never creates or sends a transaction and never charges the buyer.

  Paramètres, retour & exemple (3)

  Paramètres

  • rail · string · requis · APPLE_PAY | BASE_USDC | TRON_USDT
    Use the same payment rail selected in prepare_repair.
  • txHash · string · optionnel
    Payer-provided transaction hash. Required for BASE_USDC and TRON_USDT after transfer submission; omit for APPLE_PAY.
  • checkoutId · string · requis
    Exact checkout ID returned by prepare_repair.

  Exemple d'appel

  {"name": "verify_repair", "arguments": {"rail": "APPLE_PAY", "checkoutId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"job": "texte", "rail": "texte", "error": "texte", "phase": "texte", "state": "texte", "reason": "texte", "verified": true, "paymentId": "texte", "checkoutId": "texte", "alreadyVerified": true}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://naifgravity.com/mcp