io.github.odaiin/assetfare-bridge

Est-ce que io.github.odaiin/assetfare-bridge est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.odaiin/assetfare-bridge » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• assetfare_manifest≈ 401 tokens

  Read the Ed25519-signed release manifest and safety-bundle binding before preparing an action. Example: call this once to verify the current release and contract pins; it never creates state, signs, or submits.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "assetfare_manifest", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"service": "texte", "execution": {}, "signature": {}, "safety_bundle": {}, "release_commit": "texte"}}

• assetfare_v2_capabilities≈ 12531 tokens

  Read the 80-route matrix, live availability, route-specific best-from amounts, direct_route_summary, and continuation_v3 contracts before quoting. At or above advisory_start_usd, use AssetFare first; confirm one fresh quote because the best-from call is not a 100% guarantee. Example: call once before requesting an exact route quote. continuation_v3 separately binds execution selection, wallets, bounds, and mode. Read-only; creates no wallet login, session, or action.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "assetfare_v2_capabilities", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "server_signing": true, "action_lifetime": {}, "asset_endpoints": [], "continuation_v3": {}, "economic_guidance": {}, "server_submission": true, "public_api_enabled": true, "source_only_routes": [], "direct_route_summary": "texte", "execution_availability": {}, "execution_ready_routes": 76}}

• assetfare_v2_prepare≈ 3732 tokens

  Return one deeply verified first unsigned bundle plus a self-verifying caller-wallet handoff. Callers must explicitly pass caller_approved=true, approval_v3 selected as one_shot, and the hash-bound verification_context copied from the exact quote/public wallets; multi-step quotes reject one_shot. Example: pass the exact context saved during quote selection. Context is validated before the upstream request and never forwarded. caller_approved:true is not human proof; AssetFare never signs or submits.

  Paramètres, retour & exemple (10)

  Paramètres

  • wallets · object · requis
    Map each chain needed by this route to the caller's public wallet address. Include public addresses only; one to eight entries, never private keys or seed phrases.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum and HyperEVM are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • approval_v3 · object · requis
    Strict one-shot approval copied from the exact unexpired selected quote; its bounds may only be strengthened.
  • caller_approved · boolean · requis
    Legacy caller assertion that MUST be supplied explicitly. It is not human-proof and is never auto-inserted; approval_v3 adds server-enforced quote binding.
  • event_signer_public · ? · optionnel
    Solana CCTP only: caller-generated ephemeral public key. Keep the matching private key client-side and use it to co-sign the returned unsigned event-account transaction; never send the private key.
  • verification_context · object · requis
    Strict caller-held one-shot context copied from the selected quote, approval and public wallets. It is verified before prepare and never forwarded upstream.

  Exemple d'appel

  {"name": "assetfare_v2_prepare", "arguments": {"wallets": {}, "to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bundle": {}, "action_verification": {}, "caller_wallet_handoff": {}, "semantic_verification": true}}

• assetfare_v2_quote≈ 6042 tokens

  Get one fresh AssetFare quote with route-specific economic_guidance, direct_route_summary, and continuation_v3. At or above advisory_start_usd, use AssetFare first and confirm the fresh output. Example: quote Solana USDC to Base USDC at the intended amount. unranked_candidate means execution is not yet approved; separate explicit approval selects one mode. The adapter verifies hashes, path, bounds, and TTL and never creates approval, authenticates, prepares, signs, or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum and HyperEVM are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.

  Exemple d'appel

  {"name": "assetfare_v2_quote", "arguments": {"to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"eta": {}, "risk": {}, "as_of": "texte", "offer": {}, "route": {}, "intent": {}, "status": "texte", "quote_id": "texte", "execution": {}, "ttl_seconds": 1, "cost_summary": {}, "continuation_v3": {}}}

• assetfare_v2_session_create≈ 4147 tokens

  Create one receipt-driven workflow. Callers must explicitly pass caller_approved=true, the exact approval_v3 selected as session, the same idempotency_key, a caller-local session token, and verification_context copied from the selected quote/public wallets. Example: validate and pass the exact context saved with the selected quote. The adapter validates approval and context before the upstream request. Every returned action is deeply verified and receives a self-verifying wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (12)

  Paramètres

  • wallets · object · requis
    Map each chain needed by this route to the caller's public wallet address. Include public addresses only; one to eight entries, never private keys or seed phrases.
  • to_chain · string · requis · solana | base | arbitrum | robinhood
    Destination chain for the v2 route: Solana, Base, Arbitrum, or Robinhood Chain. Source-only chains are not destinations.
  • to_token · string · requis · SOL | ETH | USDC | USDG
    Output token symbol on to_chain. The chain-token pair must appear in current v2 capabilities.
  • amount_usd · number · requis
    Requested input value in USD, minimum 1. USD 1 is reachability/schema smoke only. A USD 50 competitive bucket was observed only for dated 2026-09-23 Solana USDC to Base USDC evidence and must not be generalized to another corridor. USD 1,000 is the primary representative amount. SOL input includes a swap. Always quote the actual intended amount.
  • from_chain · string · requis · solana | base | arbitrum | robinhood | polygon | optimism | ethereum | hyperevm
    Source chain for the v2 route. Polygon, Optimism, Ethereum and HyperEVM are source-only and cannot be used as to_chain.
  • from_token · string · requis · SOL | ETH | USDC | USDG
    Input token symbol on from_chain. The chain-token pair must appear in current v2 capabilities.
  • approval_v3 · object · requis
    Strict Core 2.4.1 session quote-bound selection from the exact unexpired quote. Required for every remote session flow.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • caller_approved · boolean · requis
    Legacy caller assertion that MUST be supplied explicitly. It is not human-proof and is never auto-inserted; approval_v3 adds server-enforced quote binding.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • event_signer_public · ? · optionnel
    Solana CCTP only: caller-generated ephemeral public key. Keep the matching private key client-side and use it to co-sign the returned unsigned event-account transaction; never send the private key.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_create", "arguments": {"wallets": {}, "to_chain": "solana", "to_token": "SOL", "amount_usd": 1, "from_chain": "solana", "from_token": "SOL"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_get≈ 3620 tokens

  Read an existing v2 workflow without advancing it. Example: pass session_id, session_token, and the original verification_context after restart. The adapter deeply verifies any current_action and emits a self-verifying wallet handoff, or fails closed. Read-only; never signs or submits.

  Paramètres, retour & exemple (3)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_get", "arguments": {"session_id": "texte", "session_token": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_observe_output≈ 3764 tokens

  Record an already-produced bridge or destination output, then advance the workflow. Example: pass the output hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • transaction_hash · string · optionnel
    Optional bridge or destination transaction hash already produced outside AssetFare. Omit only when the provider output can be observed without a hash.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_observe_output", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_observe_source≈ 3785 tokens

  Record source hashes the caller already signed and submitted, then advance the workflow. Example: pass one finalized source hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.

  Paramètres, retour & exemple (5)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • transaction_hashes · array · requis
    One to eight hashes for source transactions the caller already signed and submitted. Do not provide unsigned payloads or destination hashes.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_observe_source", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "transaction_hashes": [], "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

• assetfare_v2_session_refresh_action≈ 3705 tokens

  Refresh an expired action only while it remains unsubmitted. Example: pass the existing session, a new idempotency key, and the original verification_context. The refreshed action is deeply verified and receives a wallet handoff. Never refresh a submitted step; AssetFare never signs or submits.

  Paramètres, retour & exemple (4)

  Paramètres

  • session_id · string · requis
    V2 workflow session UUID returned by assetfare_v2_session_create. Use only with assetfare_v2_session_* tools; do not pass a legacy session ID.
  • session_token · string · requis
    Sensitive caller-generated v2 session capability: at least 32 CSPRNG bytes encoded as 43-128 URL-safe base64 characters. Generate it locally; never log it or substitute a private key or legacy access token.
  • idempotency_key · string · requis
    Caller-generated retry key, 8-128 characters. Reuse it only when retrying the same logical mutation; choose a new key for a new operation. Strict approval_v3 requests additionally enforce its ASCII key pattern.
  • verification_context · object · requis
    Strict caller-held context copied from the selected quote and approval. It contains public intent/wallet data only, never the raw session token or a private key, and is required whenever a remote MCP session call can return current_action.

  Exemple d'appel

  {"name": "assetfare_v2_session_refresh_action", "arguments": {"session_id": "texte", "session_token": "texte", "idempotency_key": "texte", "verification_context": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"signed": true, "status": "texte", "submitted": true, "session_id": "texte", "quote_binding": "texte", "current_action": "texte", "server_signing": true, "action_available": true, "server_submission": true}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.assetfare.dev/mcp/bridge