io.github.Quidli/connect-mcp

Est-ce que io.github.Quidli/connect-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.Quidli/connect-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• connect_drop≈ 1091 tokens

  Execute a Smart Send from the API key owner Connect embedded wallet. EVM: batch native or ERC-20 (need native gas plus the token). Solana (chainId 1399811149): SOL or SPL from the Solana embedded wallet; packs up to 20 native or 10 SPL recipients per transaction. Social recipient types: email, phone, telegram, discord, farcaster, twitter, github (id or username). linkedin and slack are not on /drop — use connect_lookup first, then type wallet. After connect_lookup, EVM payouts use ethWalletAddress (never solWalletAddress); Solana payouts use solWalletAddress (never ethWalletAddress). Social types on /drop resolve server-side; for type wallet, pass the resolved payout address for the target chain. Omit tokenContract or set it to null for the native token; pass an ERC-20 contract or SPL mint otherwise — do not use the zero address. Amounts are smallest-unit integer strings (ETH 18 decimals, SOL 9, USDC usually 6). Solana native (tokenContract null): no ATA. Sending to a recipient without an existing funded account requires amount ≥ 890880 lamports (rent-exempt minimum for a system account); that SOL stays with the recipient. Below that the tx fails. Sender also pays a ~5000-lamport fee. Solana SPL: tokens sit in Associated Token Accounts (ATA), not on the wallet pubkey. Recipients need not already hold the token — the API prepends CreateIdempotent. The sender (not the recipient) pays ~2039280 lamports (~0.002039 SOL) rent per newly created dest ATA, plus tx fees, on top of the token amount (which can be as small as 1 unit). A 400 "Insufficient funds" on SPL is often missing SOL for ATA rent, not missing USDC. Token-2022 is not supported; USDC mint is EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v. Always call connect_drop_balance first. Returns 201 when submitted or 202 when recipients still processing — retry with the same idempotencyKey.

  Paramètres, retour & exemple (7)

  Paramètres

  • chainId · integer · requis
    EVM chain ID or 1399811149 for Solana mainnet
  • recipients · array · requis
    Wallet or social recipients (all wallet or all social, no mix). Social types: email, phone, telegram, discord, farcaster, twitter, github (numeric id or username). linkedin and slack are not supported — use connect_lookup first, then type wallet. Optional amountInWei per recipient uses the same smallest-unit rules as amountInWeiPerRecipient. On EVM, wallet ids are 0x addresses; on Solana, base58 pubkeys. Social lookup payouts use ethWalletAddress on EVM and solWalletAddress on Solana.
  • trustFilter · object · optionnel
    Keep only recipients in the sender EAS trust graph.
  • tokenContract · string|null · optionnel
    EVM ERC-20 contract or Solana SPL mint. Omit or null for the native token (ETH/POL/AVAX, or SOL on 1399811149). Do not use the zero address.
  • idempotencyKey · string · requis
  • ignoreFailedRecipients · boolean · optionnel
    When true, send to recipients that resolved successfully and skip failed lookups.
  • amountInWeiPerRecipient · ? · optionnel
    Uniform amount in smallest units. Native ETH uses 18 decimals; SOL uses 9; ERC-20/SPL uses token decimals from connect_drop_balance (USDC usually 6). Omit when setting amountInWei on each recipient.

  Exemple d'appel

  {"name": "connect_drop", "arguments": {"chainId": 1, "recipients": [], "idempotencyKey": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_drop_balance≈ 377 tokens

  Get native and token balances for the API key owner embedded wallet. Accepts Smart Send chains and enabled delegation chains. Robinhood Chain (4663) returns ERC-20 balances from Blockscout. Monad (143) returns ERC-20 balances from Moralis; other delegation chains return native plus featured tokens. Always call before connect_drop. Zero balances are omitted, so a missing token means balance 0. EVM: confirm native gas plus the ERC-20 being sent. Solana (chainId 1399811149): SOL in this response is spendable lamports on the wallet pubkey (rent locked in existing token accounts is not included). Native SOL drop to a recipient without an existing funded account: amount itself must be ≥ 890880 lamports and sender SOL must cover amount + ~5000 lamports fee. SPL drop: token balance ≥ total amount, and SOL ≥ tx fee + ~2039280 lamports (~0.002039 SOL) per recipient that may need a new Associated Token Account — even when sending USDC. Insufficient SOL for ATA rent fails before the token transfer.

  Paramètres, retour & exemple (1)

  Paramètres

  • chainId · integer · requis
    EVM chain ID or 1399811149 for Solana mainnet (Smart Send)

  Exemple d'appel

  {"name": "connect_drop_balance", "arguments": {"chainId": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_get_chains≈ 143 tokens

  List product chains with per-feature compatibility. lookup is true for EVM catalog chains and Solana; drop is true for Smart Send chains, enabled delegation chains, and Solana (chainId 1399811149 for connect_drop / connect_drop_balance).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "connect_get_chains", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_get_price≈ 108 tokens

  Get public x402 list prices for lookup and scores (reference only; live paywall amounts are in 402 responses).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "connect_get_price", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_lookup≈ 258 tokens

  Resolve social identities to EVM and Solana wallet addresses. Resolving a recipient who has no wallet provisions one for them, so this is read-only for the caller but not for the recipient. If status is processing, retry the same payload.

  Paramètres, retour & exemple (1)

  Paramètres

  • recipients · array · requis
    Recipients to resolve to EVM/Solana wallets

  Exemple d'appel

  {"name": "connect_lookup", "arguments": {"recipients": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_lookup_exposed≈ 288 tokens

  List platforms a recipient has exposed on Connect, with enriched profile, scores, and wallet addresses. Recipient may be a social account, an exposed wallet (EVM/Solana/smart wallet), or a Connect username. May require x402 payment when the profile owner charges for lookups.

  Paramètres, retour & exemple (1)

  Paramètres

  • recipient · object · requis
    Social identity, exposed wallet (EVM/Solana/smart wallet), or Connect username whose exposed linked accounts and Connect profile should be listed

  Exemple d'appel

  {"name": "connect_lookup_exposed", "arguments": {"recipient": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_me≈ 114 tokens

  Get the Connect profile, scores, and all linked accounts for the API key owner. Use to identify which user the key belongs to.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "connect_me", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_scores_batch≈ 332 tokens

  Batch scores for linked accounts or Connect usernames. One result per request user. Optional filter sets passedFilter (quidli 0–100, neynar/lens 0–1, ethos 0–2800).

  Paramètres, retour & exemple (2)

  Paramètres

  • users · array · requis
    Users to fetch scores for
  • filter · object · optionnel

  Exemple d'appel

  {"name": "connect_scores_batch", "arguments": {"users": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_scores_by_account≈ 164 tokens

  Scores for a linked social account or wallet.

  Paramètres, retour & exemple (2)

  Paramètres

  • platform · string · requis · wallet | email | phone | telegram | discord | farcaster | twitter | github
  • identifier · string · requis

  Exemple d'appel

  {"name": "connect_scores_by_account", "arguments": {"platform": "wallet", "identifier": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_scores_by_username≈ 122 tokens

  Scores by Connect public username.

  Paramètres, retour & exemple (1)

  Paramètres

  • username · string · requis

  Exemple d'appel

  {"name": "connect_scores_by_username", "arguments": {"username": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_trust_check≈ 315 tokens

  Check whether identities sit in a trust graph at depth 1. Omit context to match any context.

  Paramètres, retour & exemple (3)

  Paramètres

  • from · object · requis
    Graph owner
  • context · string · optionnel
    If set, only this context matches
  • targets · array · requis
    Identities to test

  Exemple d'appel

  {"name": "connect_trust_check", "arguments": {"from": {}, "targets": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_trust_create≈ 344 tokens

  Create a unidirectional trust attestation on Base (EAS) from the API key owner embedded wallet to a wallet or social identity. Identical active attestations are returned without a new transaction. Requires CONNECT_API_KEY, Smart Send attestation signer enrolled, and ETH on Base for gas.

  Paramètres, retour & exemple (4)

  Paramètres

  • to · object · requis
    Identity to trust (wallet, social, or Connect username)
  • level · integer · requis
    Trust level 1–100
  • context · string · optionnel
    Optional context such as team:quidli
  • expiresIn · integer · optionnel
    Optional lifetime in seconds

  Exemple d'appel

  {"name": "connect_trust_create", "arguments": {"to": {}, "level": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_trust_graph≈ 230 tokens

  List outgoing or incoming trust edges for an identity at depth 1.

  Paramètres, retour & exemple (4)

  Paramètres

  • context · string · optionnel
  • platform · string · requis · wallet | email | phone | telegram | discord | farcaster | twitter | github
    Identity platform, or username for a Connect username
  • direction · string · optionnel · out | in
    out = who they trust (default); in = who trusts them
  • identifier · string · requis

  Exemple d'appel

  {"name": "connect_trust_graph", "arguments": {"platform": "wallet", "identifier": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_trust_revoke≈ 260 tokens

  Revoke active trust attestations from the API key owner to a target. Optional context limits which attestations are revoked. Requires CONNECT_API_KEY and ETH on Base.

  Paramètres, retour & exemple (2)

  Paramètres

  • to · object · requis
    Identity to untrust
  • context · string · optionnel
    Revoke only this context. Omit to revoke all contexts for the pair.

  Exemple d'appel

  {"name": "connect_trust_revoke", "arguments": {"to": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.connect.quid.li