io.github.reinlainer/postmd-mcp-server

Est-ce que io.github.reinlainer/postmd-mcp-server est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.reinlainer/postmd-mcp-server » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• postmd_create_document≈ 423 tokens

  Publish Markdown as a PostMD web page. No API key required — anyone can publish. Returns docCode and data.shareUrl; hand shareUrl to people. Documents have a 30-day retention period (data.retainedUntil) that extends on each read. Documents without a password can be updated or deleted by anyone; password-protected documents require the password or the owner's API key. With an API key the document belongs to that member; groupId files it into that group (key with documents:write). The returned docCode can be kept at the top of the source file in a `postmd:document` comment (format at /docs/api) so a later session finds the document.

  Paramètres, retour & exemple (6)

  Paramètres

  • title · string · optionnel
    Shown in the viewer and link previews. Defaults to fileName without .md.
  • groupId · number · optionnel
    File the document in this group instead of the default group (needs an API key).
  • fileName · string · optionnel
    Upload filename, must end in .md. Default document.md.
  • markdown · string · requis
    Full Markdown document as one UTF-8 string (the entire source, not a summary). May include graph data in an HTML comment, which the viewer draws; the format is at /docs/graph.
  • password · string · optionnel
    Readers must supply this password to see the content.
  • viewerStyle · string · optionnel
    Viewer theme: readable (default), github, minimal, report, pamphlet or dark. Unknown values fall back to readable.

  Exemple d'appel

  {"name": "postmd_create_document", "arguments": {"markdown": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• postmd_delete_document≈ 128 tokens

  Delete a document. Password-protected documents require the password or the owner's API key; documents without a password can be deleted by anyone.

  Paramètres, retour & exemple (2)

  Paramètres

  • docCode · string · requis
  • password · string · optionnel
    Document password if the document has one and you are not authenticated as its owner.

  Exemple d'appel

  {"name": "postmd_delete_document", "arguments": {"docCode": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• postmd_get_document≈ 118 tokens

  Get document metadata by docCode: title, fileName, hasPassword, viewerStyle, timestamps. Public — no API key needed. Content is not included; use postmd_get_document_raw for the Markdown source.

  Paramètres, retour & exemple (1)

  Paramètres

  • docCode · string · requis
    Document code, e.g. P-123-456-789.

  Exemple d'appel

  {"name": "postmd_get_document", "arguments": {"docCode": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• postmd_get_document_raw≈ 113 tokens

  Get the stored Markdown source of a document. Public — no API key needed. Password-protected documents need `password`.

  Paramètres, retour & exemple (2)

  Paramètres

  • docCode · string · requis
  • password · string · optionnel
    Plain document password, if the document has one.

  Exemple d'appel

  {"name": "postmd_get_document_raw", "arguments": {"docCode": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• postmd_update_document≈ 470 tokens

  Update a document. Password-protected documents require the password or the owner's API key; documents without a password can be updated by anyone. Include `markdown` to replace the stored content; any metadata field replaces that field. clearPassword removes the password. Replacing the content requires notesOnReplace.

  Paramètres, retour & exemple (9)

  Paramètres

  • title · string · optionnel
  • docCode · string · requis
  • fileName · string · optionnel
    Upload filename when replacing content. Default document.md.
  • markdown · string · optionnel
    Full new Markdown body as one UTF-8 string. Omit if only metadata changes. Adding or revising a graph means sending the whole body with the graph comment in it; the format is at /docs/graph.
  • password · string · optionnel
    Readers must supply this password to see the content.
  • viewerStyle · string · optionnel
    Viewer theme: readable (default), github, minimal, report, pamphlet or dark. Unknown values fall back to readable.
  • clearPassword · boolean · optionnel
    true removes the password.
  • notesOnReplace · string · optionnel · keep | abort
    Required when replacing the content. Notes are located by the text they quote, so replacing the body moves or loses where they point: a note whose quote is gone loses its place in the body, and one whose quote now appears elsewhere points there. keep replaces anyway and leaves the notes. abort refuses when the document has notes anchored to its text, and the answer says how many.
  • currentPassword · string · optionnel
    Current password to authenticate if the document is password-protected.

  Exemple d'appel

  {"name": "postmd_update_document", "arguments": {"docCode": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://postmd.turink.com/mcp