io.github.shisongsong/oh-my-share

Est-ce que io.github.shisongsong/oh-my-share est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.shisongsong/oh-my-share » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• delete≈ 146 tokens

  Permanently delete one of your own assets by id. Irreversible: the share URL stops working immediately and the content cannot be restored. Requires authentication and ownership; ids you do not own return an error. Use list_assets to find the id; there is no bulk delete.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    12-character asset id you own (from list_assets).

  Exemple d'appel

  {"name": "delete", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_info≈ 121 tokens

  Return Oh My Share service metadata: version, REST and MCP endpoints, feature list, and per-IP rate limits (10 uploads/hour, 500 views/hour). Read-only, no auth, cheap to call. Use it once at startup to discover capabilities; use list_assets or search_gallery for actual content.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_info", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_assets≈ 128 tokens

  List up to 50 assets owned by the authenticated user, newest first, with id, filename, timestamps and share URL. Requires an API key or signed-in session; read-only, and results are capped at 50 with no pagination. Use search_gallery for public works from other users, or view to open one of your assets.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_assets", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_gallery≈ 276 tokens

  Search public gallery works by keyword across title, description, tags and id; omit query to browse the newest works. Returns a paginated result set (items, total, page, pages) where each item has id, title, views and URLs. sort is new (newest) or hot (most liked and viewed); limit is capped at 20. No auth required. Use view to open a result, or list_assets for your own uploads.

  Paramètres, retour & exemple (4)

  Paramètres

  • page · integer · optionnel
    1-based page number. Default 1.
  • sort · string · optionnel · new | hot
    new = newest first; hot = most liked and viewed.
  • limit · integer · optionnel
    Results per page, 1 to 20. Default 10.
  • query · string · optionnel
    Keyword matched against title, description, tags and id; empty returns the newest works.

  Exemple d'appel

  {"name": "search_gallery", "arguments": {"page": 1, "sort": "new", "limit": 1, "query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• upload≈ 298 tokens

  Upload HTML or code and get a public share URL plus an edit token. Each call creates a new asset (no overwrite); content is public unless password-protected and auto-expires after expiresIn (default 7d, 0 = permanent). Anonymous uploads are rate-limited to 10 per hour per IP. Use view to read an asset back, list_assets to see your own files, or delete to remove one.

  Paramètres, retour & exemple (5)

  Paramètres

  • content · string · requis
    HTML or code to publish (required).
  • filename · string · optionnel
    Optional display filename used in the title and download name.
  • language · string · optionnel
    Content language hint, e.g. html, css, js, json, markdown. Default html.
  • password · string · optionnel
    Optional password; the web view asks for it before showing content.
  • expiresIn · string · optionnel
    Retention: 1h, 24h, 7d, 30d, 90d, or 0 for permanent. Default 7d.

  Exemple d'appel

  {"name": "upload", "arguments": {"content": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• view≈ 164 tokens

  Fetch a single asset by id and return its content, filename, creation time and share URL. Read-only and safe to retry; public assets need no auth, password-protected assets return an error with the share URL, and client-encrypted content is returned as stored. Use search_gallery to find an id, or list_assets for your own uploads.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    12-character asset id returned by upload or search_gallery.

  Exemple d'appel

  {"name": "view", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://openanthropic.com/mcp