io.github.nickbasharin/aifra

Est-ce que io.github.nickbasharin/aifra est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.nickbasharin/aifra » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• create_preview≈ 959 tokens

  Prepare a new temporary static preview. Supply exactly one of small files or ZIP archive_base64. No backend/build. Requires explicit consent; returns an approval link, not a published URL. User must confirm in their browser.

  Paramètres, retour & exemple (3)

  Paramètres

  • files · array · optionnel
    One input choice: 1-500 already-built static files, at most 1 MiB decoded in total. Include index.html at the root and all needed assets. Do not also send archive_base64 or archive. For larger output use a ZIP.
  • accept_terms · boolean · requis
    Set true only after the user explicitly agrees to the current terms and public temporary preview limits. Not inferred from a request to generate a site. Preparation is not publication; the user must also personally confirm the approval URL in their browser within 2 hours.
  • archive_base64 · string · optionnel
    One input choice: actual ZIP bytes encoded as canonical standard base64, without data: prefix. At most 50 MiB (52,428,800 bytes) of decoded ZIP and 50 MiB extracted content; at most 25 MiB per file. index.html at root. No nested archives or server code. Do not also send files or archive.

  Exemple d'appel

  {"name": "create_preview", "arguments": {"accept_terms": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "preview_id": "texte", "approval_url": "texte", "operation_id": "texte", "approval_expires_at": "texte"}}

• delete_preview≈ 555 tokens

  Prepare deletion of an existing preview. Does not delete until its owner confirms in the browser holding the management key.

  Paramètres, retour & exemple (2)

  Paramètres

  • preview_id · string · requis
    Existing preview_id returned by AIfra. Do not invent it or pass a URL, alias, management key or source IP.
  • confirm_delete · boolean · requis
    Set true only after the owner explicitly asks to delete this preview. The tool only prepares deletion; final confirmation requires the browser holding its management key.

  Exemple d'appel

  {"name": "delete_preview", "arguments": {"preview_id": "texte", "confirm_delete": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "preview_id": "texte", "approval_url": "texte", "operation_id": "texte", "approval_expires_at": "texte"}}

• get_deploy_instructions≈ 347 tokens

  Explain remote browser-confirmed AIfra publication of ready static files, limits and current terms.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_deploy_instructions", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"inputs": [], "warning": "texte", "terms_url": "texte", "transport": "texte", "management": "texte", "publication": "texte", "terms_version": "texte", "max_extracted_mib": 1, "preview_ttl_hours": 1, "approval_ttl_seconds": 1, "max_active_mib_per_ip": 1, "max_active_per_browser_ip": 1}}

• get_operation_status≈ 1141 tokens

  Read whether a prepared operation is pending, complete, failed or uncertain. Returns no file content or management key. Never assume pending means published.

  Paramètres, retour & exemple (1)

  Paramètres

  • operation_id · string · requis
    Exact operation_id from a preparation response. Read status after user confirmation or on request. Only complete with a result contains the published URL; pending is not published, uncertain must not be replayed.

  Exemple d'appel

  {"name": "get_operation_status", "arguments": {"operation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "files": [], "action": "create", "digest": "texte", "result": "texte", "status": "pending", "terms_url": "texte", "preview_id": "texte", "operation_id": "texte", "terms_version": "texte", "viewer_origin": "texte", "approval_expires_at": "texte"}}

• get_preview_status≈ 573 tokens

  Read current public status, URL and server-enforced expiry of an existing preview. Only the service owner can manually extend expiry; updates never extend it.

  Paramètres, retour & exemple (1)

  Paramètres

  • preview_id · string · requis
    Existing preview_id returned by AIfra. Do not invent it or pass a URL, alias, management key or source IP.

  Exemple d'appel

  {"name": "get_preview_status", "arguments": {"preview_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "bytes": 1, "status": "texte", "expires_at": "texte", "preview_id": "texte", "files_count": 1, "ttl_seconds": 1, "updates_count": 1, "active_slots_limit": 1, "active_slots_for_ip": 1}}

• update_preview≈ 1036 tokens

  Prepare replacement of an existing temporary static preview. Supply exactly one of small files or ZIP archive_base64. No backend/build. Requires explicit consent; returns an approval link, not a published URL. User must confirm in their browser. Requires the browser holding the existing management key; expiry is unchanged.

  Paramètres, retour & exemple (4)

  Paramètres

  • files · array · optionnel
    One input choice: 1-500 already-built static files, at most 1 MiB decoded in total. Include index.html at the root and all needed assets. Do not also send archive_base64 or archive. For larger output use a ZIP.
  • preview_id · string · requis
    Existing preview_id returned by AIfra. Do not invent it or pass a URL, alias, management key or source IP.
  • accept_terms · boolean · requis
    Set true only after the user explicitly agrees to the current terms and public temporary preview limits. Not inferred from a request to generate a site. Preparation is not publication; the user must also personally confirm the approval URL in their browser within 2 hours.
  • archive_base64 · string · optionnel
    One input choice: actual ZIP bytes encoded as canonical standard base64, without data: prefix. At most 50 MiB (52,428,800 bytes) of decoded ZIP and 50 MiB extracted content; at most 25 MiB per file. index.html at root. No nested archives or server code. Do not also send files or archive.

  Exemple d'appel

  {"name": "update_preview", "arguments": {"preview_id": "texte", "accept_terms": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "preview_id": "texte", "approval_url": "texte", "operation_id": "texte", "approval_expires_at": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.aifra.ru/mcp