io.github.neoshrek/qrverloz-mcp

Est-ce que io.github.neoshrek/qrverloz-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.neoshrek/qrverloz-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• create_qr_code≈ 210 tokens

  Create a new QR code. Authenticated users (API key required) get a permanent short URL that can be retargeted at any time without reprinting the physical QR image — limits are set by the account plan. Anonymous users receive a one-time data URI image that is not stored and cannot be updated. On success the result is a pre-formatted markdown table — display it exactly as received, do not reformat or summarise.

  Paramètres, retour & exemple (2)

  Paramètres

  • title · string · requis
    A human-readable label for the QR code
  • target_url · string · requis
    Destination URL — must start with https:// or http://

  Exemple d'appel

  {"name": "create_qr_code", "arguments": {"title": "texte", "target_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_qr_code≈ 256 tokens

  Permanently delete a QR code and its scan history. This action cannot be undone. To prevent accidental or injected deletions, you MUST supply confirm_title — the exact title of the code as returned by get_qr_code or list_qr_codes. If the title does not match the stored record, the deletion is refused. Always call get_qr_code or list_qr_codes first to retrieve the exact title before calling this tool. Requires authentication.

  Paramètres, retour & exemple (3)

  Paramètres

  • qr_code_id · string · optionnel
    Internal UUID from create_qr_code or list_qr_codes
  • short_code · string · optionnel
    Short code from the redirect URL (e.g. "abc123")
  • confirm_title · string · requis
    The exact title of the QR code to delete — must match the stored title character-for-character. This prevents blind or injected deletions.

  Exemple d'appel

  {"name": "delete_qr_code", "arguments": {"confirm_title": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_account_info≈ 95 tokens

  Get your account details: current plan, QR code usage, and which features are available. Use this before create_qr_code to check remaining capacity, or to confirm which features are active on your plan. Requires authentication.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_account_info", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_qr_code≈ 159 tokens

  Look up a single QR code by its internal ID or short code. Returns a pre-formatted markdown table with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link. Display the table exactly as received — do not reformat or summarise. Requires authentication.

  Paramètres, retour & exemple (2)

  Paramètres

  • qr_code_id · string · optionnel
    Internal UUID from create_qr_code or list_qr_codes
  • short_code · string · optionnel
    Short code from the redirect URL (e.g. "abc123")

  Exemple d'appel

  {"name": "get_qr_code", "arguments": {"qr_code_id": "texte", "short_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_qr_scans≈ 136 tokens

  Get the total lifetime scan count for a QR code. Returns a pre-formatted markdown table with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link, Total Scans. Display the table exactly as received — do not reformat or summarise. Requires authentication.

  Paramètres, retour & exemple (1)

  Paramètres

  • qr_code_id · string · requis
    Internal UUID of the QR code

  Exemple d'appel

  {"name": "get_qr_scans", "arguments": {"qr_code_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_qr_codes≈ 163 tokens

  List all QR codes in your account. Returns one pre-formatted markdown table per QR code with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link. Display each table exactly as received — do not reformat or summarise. Requires authentication.

  Paramètres, retour & exemple (2)

  Paramètres

  • page · integer · optionnel
    Page number (default: 1)
  • limit · integer · optionnel
    Items per page, max 20 (default: 20)

  Exemple d'appel

  {"name": "list_qr_codes", "arguments": {"page": 1, "limit": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_api_key≈ 170 tokens

  Get a free API token — no account or email required. The token gives you up to 5 QR codes that can be updated at any time. IMPORTANT LIFETIME WARNING: the token expires after 90 days, and QR codes are permanently deleted ~90 days after that (~180 days total). To keep codes alive permanently, claim a free account at https://qrverloz.com/claim — this must be done before the token expires. Save the returned token: it is shown only once. Add it to your MCP client config under Authorization: Bearer, then call create_qr_code.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "request_api_key", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_qr_target≈ 214 tokens

  Change the destination URL of a QR code without touching the printed image. Print once, redirect anywhere — forever. Accepts either the internal qr_code_id or the short_code from the redirect URL. On success the result is a pre-formatted markdown table — display it exactly as received, do not reformat or summarise. Requires authentication.

  Paramètres, retour & exemple (3)

  Paramètres

  • qr_code_id · string · optionnel
    Internal UUID from create_qr_code or list_qr_codes
  • short_code · string · optionnel
    Short code from the redirect URL (e.g. "abc123")
  • target_url · string · requis
    New destination URL — must start with https:// or http://

  Exemple d'appel

  {"name": "update_qr_target", "arguments": {"target_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://qrverloz.com/api/mcp