io.github.santismm/agent-rescue

Est-ce que io.github.santismm/agent-rescue est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.santismm/agent-rescue » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 3 outils

• check_and_claim≈ 235 tokens

  Atomically check whether an action identified by a key was already performed, and claim it if not. Use it before performing a non-idempotent action that may have completed in an earlier attempt (a payment, a message, a write), or when you need to remember something across sessions. Returns 'claimed' if you are first and 'already_done' if not. Do not use it as a general data store or as a result cache.

  Paramètres, retour & exemple (3)

  Paramètres

  • key · string · requis
    Stable identifier for the action, e.g. 'invoice-2026-07-A491:pay'.
  • metadata · object · optionnel
    Small payload returned alongside the claim. Do not include secrets.
  • ttl_seconds · integer · optionnel
    How long the claim lasts, in seconds. Default 86400 (1 day), max 30 days.

  Exemple d'appel

  {"name": "check_and_claim", "arguments": {"key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• fetch_structured≈ 304 tokens

  Fetch a public URL and return its content as JSON validated against the schema you pass. Use it when you need data from a page and cannot parse it reliably yourself. Do not use it for URLs requiring authentication or a session, for internal networks, or when you already have the content — extract it yourself in that case. `extracted_by` tells you where the answer came from: `structured_data` when the page already published it (JSON-LD, OpenGraph, or a JSON body — exact and free) or `model` when it had to be extracted from the text. If structured extraction is unavailable, the response carries `degraded: true`, `data: null` and the page `text` for you to parse: check `degraded` before reading `data`.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · requis
    Public http(s) URL.
  • schema · object · requis
    JSON Schema of the object you want back. Missing fields come back as null.
  • instructions · string · optionnel
    Optional. What exactly to look for if the page is ambiguous.

  Exemple d'appel

  {"name": "fetch_structured", "arguments": {"url": "texte", "schema": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_capability≈ 272 tokens

  Record a specific need that none of the tools available to you can cover. Today it almost always answers that the capability is unavailable, and suggests alternatives only when they genuinely exist; its purpose is to measure what agents ask for and nobody serves. Use it when you are blocked by a missing capability — not for general questions, and not for anything you can work out by reasoning.

  Paramètres, retour & exemple (4)

  Paramètres

  • need · string · requis
    What exactly you need, in one or two sentences. Do not include personal data.
  • context · string · optionnel
    Optional. What you tried and why it did not work.
  • deadline · string · optionnel
    Optional. ISO 8601.
  • would_pay · boolean · optionnel
    Optional. Whether your policy allows paying to get this solved. Answer honestly: a false answer unlocks nothing and degrades the measurement.

  Exemple d'appel

  {"name": "request_capability", "arguments": {"need": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agent-rescue.vercel.app/api/mcp