io.github.send21io/mcp

Est-ce que io.github.send21io/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.send21io/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• create_account≈ 301 tokens

  Create a send21 account for your human owner, without a key. The owner gets an email with a link to take the account over; until they do, nothing can be created. Returns a bootstrap API key ONCE (save it and send it as Authorization: Bearer on every later call; reconnect this MCP client with it). The key can read, propose addresses and check get_account_status; it can create pay links only after the owner took the account over and approved a receiving address you proposed. Agents onboard themselves; humans approve where the money lands. If the email already has an account, ask the owner for an API key instead.

  Paramètres, retour & exemple (3)

  Paramètres

  • agentName · string|null · optionnel
    Your name as the owner will see it: letters, digits, spaces and . _ - ( ), at most 50
  • ownerEmail · string · requis
    The human owner's email address (not yours); they receive the link to take the account over
  • intendedUse · string|null · optionnel
    What you will use the account for, shown to the owner (max 300 characters)

  Exemple d'appel

  {"name": "create_account", "arguments": {"ownerEmail": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_draft≈ 600 tokens

  Create a non-custodial payment draft (you are the SENDER paying a receiver address). Amount is either exact base units (sats for BTC, micro-units for stablecoins, lamports for SOL, gwei for ETH) via amountBaseUnits, or fiat-pegged via fiatCurrency+fiatAmount with the exchange rate locked at creation. Returns the draft incl. id, amounts, fee, and status. Funds move only when the sender signs in their own wallet. send21 never holds keys. On accounts with the policy ApprovedOnly the receiver must be an address the owner approved (422 address_not_approved otherwise). Requires scope drafts:write.

  Paramètres, retour & exemple (9)

  Paramètres

  • memo · string|null · optionnel
    Free-text memo shown on the draft (max 500 chars)
  • network · string · requis
    Network: Mainnet, Solana, Ethereum, Base, Arbitrum, Polygon (test: Testnet4, Signet, Regtest, SolanaDevnet, EthereumSepolia, BaseSepolia, ArbitrumSepolia, PolygonAmoy)
  • currency · string|null · optionnel
    Asset: Btc (default), Usdc, Usdt, Eurc, Sol (native SOL on Solana), or Eth (native ETH on Ethereum, Base, Arbitrum)
  • fiatAmount · number|null · optionnel
    Fiat amount; requires fiatCurrency
  • fiatCurrency · string|null · optionnel
    Fiat currency code for fiat-pegged amount, e.g. USD
  • idempotencyKey · string|null · optionnel
    Idempotency key. A retry with the same key and the same parameters returns the original draft; the same key with another receiver, amount, currency or network is refused (422) and creates nothing
  • amountBaseUnits · integer|null · optionnel
    Exact amount in base units (sats / micro-units / lamports / gwei); omit when using fiat pricing
  • receiverAddress · string · requis
    Receiver address (Bitcoin bc1..., Solana base58, or 0x... for Ethereum, Base, Arbitrum and Polygon)
  • shortfallAbsorbUpToPercent · number|null · optionnel
    Accept short payments automatically when they are at most this percent below the amount (0 to 10); the receiver absorbs the difference. Overpayments always wait for a human.

  Exemple d'appel

  {"name": "create_draft", "arguments": {"network": "texte", "receiverAddress": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_payment_request≈ 844 tokens

  Create a payment request / checkout pay link (you are the RECEIVER asking to get paid). Price in any of 161 fiat currencies; the payer opens the returned payPath, picks one of the offered currencies (rate locks then), and pays a single QR-scannable transfer straight to your address. On accounts with the policy ApprovedOnly (see get_account_status) every address must be one of the owner's approved receiving addresses; otherwise the answer is 422 address_not_approved and nothing is created (propose it with propose_receiving_address). Requires scope drafts:write.

  Paramètres, retour & exemple (10)

  Paramètres

  • memo · string|null · optionnel
    Message shown to the payer (max 500 chars)
  • options · array · requis
    Currencies the payer may choose from, each with your receiving address
  • orderId · string|null · optionnel
    Your own order/reference id, echoed in webhooks for reconciliation
  • fiatAmount · number · requis
    Amount in the fiat currency
  • declineNote · string|null · optionnel
    What happens if the payer does not pay (plain text, max 200 chars). Shown on the pay page under the amount as "If you don't pay:". Use it when handing an over-budget purchase to a human, e.g. "The order is cancelled and the hotel room released at 18:00."
  • expiryHours · integer|null · optionnel
    Hours until the request expires (default 24)
  • fiatCurrency · string · requis
    Fiat currency the request is priced in, e.g. USD, EUR, SEK
  • idempotencyKey · string|null · optionnel
    Idempotency key. A retry with the same key and the same parameters returns the original request; the same key with another amount, currency or address is refused (422) and creates nothing
  • reuseOpenForOrder · boolean|null · optionnel
    True: if an open, unexpired request with the same orderId exists, return it instead of creating a second pay link for the same order (only when it asks for the same amount, currency and addresses). Recommended for agents that may retry with a new idempotency key.
  • shortfallAbsorbUpToPercent · number|null · optionnel
    Accept short payments automatically when they are at most this percent below the price (0 to 10); the receiver absorbs the difference. Overpayments always wait for a human. Omit to have every differing amount reviewed.

  Exemple d'appel

  {"name": "create_payment_request", "arguments": {"options": [], "fiatAmount": 1, "fiatCurrency": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_account_status≈ 89 tokens

  What stands between you and a live pay link: whether the owner's email is confirmed, the receiving-address policy, how many addresses are approved or waiting for approval, unsettled fees, your key's scopes, and the next steps. Requires scope drafts:read.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_account_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_draft≈ 70 tokens

  Get a payment draft by id, including amounts, fee, quote, and status. Requires scope drafts:read.

  Paramètres, retour & exemple (1)

  Paramètres

  • draftId · string · requis
    Draft id (GUID)

  Exemple d'appel

  {"name": "get_draft", "arguments": {"draftId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_draft_status≈ 148 tokens

  Lightweight status snapshot of a draft: status (AwaitingPayment/Seen/Confirmed/Expired/Cancelled), paying txid, confirmations, and reviewState when a transfer with a different amount arrived (pending = needs the receiver's decision and the draft is not paid; accepted; rejected; unresolved = the draft expired while undecided, the money is with the receiver). Cheap to poll. Requires scope drafts:read.

  Paramètres, retour & exemple (1)

  Paramètres

  • draftId · string · requis
    Draft id (GUID)

  Exemple d'appel

  {"name": "get_draft_status", "arguments": {"draftId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_fee_schedule≈ 57 tokens

  Get the public send21 fee schedule: tiered percent by payment size in USD, min/max fee, and dust limit. No authentication needed.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_fee_schedule", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_payment_request≈ 154 tokens

  Get a payment request by id: status (Open/Completed/Cancelled/Expired), pay path, offered currencies, and the underlying draft once the payer committed. Includes changeSignals and changeNotes: what is unusual compared with the account's paid payments (new_address, new_asset, unusual_amount), the same lines the payer sees on the pay page; empty when nothing is unusual. Requires scope drafts:read.

  Paramètres, retour & exemple (1)

  Paramètres

  • paymentRequestId · string · requis
    Payment request id (GUID)

  Exemple d'appel

  {"name": "get_payment_request", "arguments": {"paymentRequestId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_rate≈ 136 tokens

  Get the current exchange rate for an asset in a fiat currency (rate = fiat units per 1 whole asset unit, with source provenance). Assets: Btc, Usdc, Usdt, Eurc, Sol, Eth. 161 ISO 4217 fiat currencies are supported. Requires an API key.

  Paramètres, retour & exemple (2)

  Paramètres

  • asset · string · requis
    Asset: Btc, Usdc, Usdt, Eurc, Sol, or Eth
  • fiatCurrency · string · requis
    Fiat currency code, e.g. USD, EUR, SEK

  Exemple d'appel

  {"name": "get_rate", "arguments": {"asset": "texte", "fiatCurrency": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_transaction_template≈ 148 tokens

  Get the transaction template for an on-chain draft: every output to pay, plus walletcreatefundedpsbt arguments and a pay-to-many CSV on Bitcoin, or payment URIs (and calldata on EVM chains) on Solana, Ethereum, Base, Arbitrum and Polygon. The sender's own wallet funds, reviews and signs it; send21 contains no signing code. Not for Lightning drafts (pay their invoice). Requires scope drafts:read.

  Paramètres, retour & exemple (1)

  Paramètres

  • draftId · string · requis
    Draft id (GUID)

  Exemple d'appel

  {"name": "get_transaction_template", "arguments": {"draftId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_address_book≈ 70 tokens

  List the account's saved addresses (label, address, network, direction: Sending = recipients the owner pays, Receiving = the owner's own addresses). Requires scope addressbook:read.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_address_book", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_draft_quotes≈ 98 tokens

  List every quote (rate lock) of a fiat-priced draft, oldest first. Quotes never change; a re-quote adds a new one with its own id. Each has a sha256 (RFC 8785 JCS + SHA-256). Requires scope drafts:read.

  Paramètres, retour & exemple (1)

  Paramètres

  • draftId · string · requis
    Draft id (GUID)

  Exemple d'appel

  {"name": "list_draft_quotes", "arguments": {"draftId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• propose_receiving_address≈ 306 tokens

  Propose an address for the owner to approve: one of the owner's own receiving addresses (for pay links) or the address of someone the owner pays (for drafts). It is saved unapproved and the owner gets an email. On accounts with the policy ApprovedOnly, API keys can only use approved addresses, and only the owner can approve one, signed in to the send21 app with a passkey or authenticator code. No key can approve an address. Requires scope addressbook:write.

  Paramètres, retour & exemple (4)

  Paramètres

  • label · string · requis
    A label the owner will recognise, e.g. "My Phantom wallet" (unique per account)
  • address · string · requis
    The address, or for BTC over Lightning the Lightning address (name@wallet.com)
  • network · string · requis
    Network the address lives on: Mainnet (Bitcoin, also for Lightning addresses), Solana, Ethereum, Base, Arbitrum or Polygon
  • direction · string|null · optionnel
    Receiving (default): the owner's own address, for pay links. Sending: someone the owner pays, for drafts.

  Exemple d'appel

  {"name": "propose_receiving_address", "arguments": {"label": "texte", "address": "texte", "network": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_lightning_proof≈ 175 tokens

  Confirm a paid Lightning draft with its proof of payment: the 64-character preimage the paying wallet shows after a Lightning payment. Needed for drafts with a pasted bolt11 invoice, and for Lightning addresses whose provider does not report payments. send21 checks that SHA-256 of the preimage equals the invoice's payment hash; the draft then confirms within about 30 seconds. Requires scope drafts:write.

  Paramètres, retour & exemple (2)

  Paramètres

  • draftId · string · requis
    Draft id (GUID)
  • preimage · string · requis
    Payment preimage, 64 hex characters

  Exemple d'appel

  {"name": "submit_lightning_proof", "arguments": {"draftId": "texte", "preimage": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://send21.io/mcp