io.github.stea4lth/flipvo-agent-tools

Est-ce que io.github.stea4lth/flipvo-agent-tools est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.stea4lth/flipvo-agent-tools » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 13 outils

• airport_nearest≈ 798 tokens

  $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/airport/nearest. Up to 5 airports with scheduled service nearest a named place, ranked by real road drive time, with IATA codes.

  Paramètres, retour & exemple (4)

  Paramètres

  • k · integer · optionnel
    How many airports
  • near · ? · optionnel
    Disambiguation hint, e.g. 'Florida'
  • location · string · requis
  • airport_size · string · optionnel · scheduled | large
    scheduled: any airport with scheduled passenger service. large: OurAirports type large_airport with scheduled service.

  Exemple d'appel

  {"name": "airport_nearest", "arguments": {"location": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"origin": "texte", "airports": [], "attribution": "texte", "airports_data_as_of": "texte"}}

• carrier_lookup≈ 1781 tokens

  $0.03 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/carrier/lookup. US motor carrier by USDOT, MC/MX/FF docket or exact company name (FMCSA): USDOT status, out-of-service order, operating authority per docket with grant date and source (Motus, else legacy frozen 2026-05-14), BI&PD, cargo and bond required vs on file, insurance policies, BOC-3, fleet size (power_units counts every power unit, trucks and others), safety rating. Up to 10 carriers; empty is a paid 200. Not a determination: verify with FMCSA before dispatch.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · ? · optionnel
    Whole legal or DBA name; no partial match.
  • usdot · ? · optionnel
  • docket · ? · optionnel
    MC, MX or FF + digits.

  Exemple d'appel

  {"name": "carrier_lookup", "arguments": {"name": "texte", "usdot": "texte", "docket": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"source": "texte", "carriers": [], "coverage": "texte", "truncated": true, "data_as_of": "texte", "legacy_as_of": "texte"}}

• drive_matrix≈ 501 tokens

  $0.05 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/matrix. Drive-time matrix, up to 100 origin x destination elements per call.

  Paramètres, retour & exemple (3)

  Paramètres

  • near · ? · optionnel
  • origins · array · requis
  • destinations · array · requis

  Exemple d'appel

  {"name": "drive_matrix", "arguments": {"origins": [], "destinations": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "origins": [], "attribution": "texte", "destinations": []}}

• drive_time≈ 478 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/drive. Driving time/distance between two named places.

  Paramètres, retour & exemple (3)

  Paramètres

  • near · ? · optionnel
    Disambiguation hint, e.g. 'Orlando, FL'
  • origin · string · requis
  • destination · string · requis

  Exemple d'appel

  {"name": "drive_time", "arguments": {"origin": "texte", "destination": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"miles": 1, "origin": "texte", "minutes": 1, "estimated": true, "distance_m": 1, "duration_s": 1, "attribution": "texte", "destination": "texte"}}

• entity_lookup≈ 939 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/entity/lookup. State business-registry record (status, formation, registered agent; no officers, no street lines) by entity number or exact name. Served states: CO, CT, FL, NY, OR. Up to 10 entities; empty entities is a paid 200.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · ? · optionnel
  • state · string · requis · CO | CT | FL | NY | OR
  • entity_number · ? · optionnel

  Exemple d'appel

  {"name": "entity_lookup", "arguments": {"state": "CO"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"query": {}, "state": "texte", "source": "texte", "coverage": "texte", "entities": [], "truncated": true, "data_as_of": {}}}

• exclusions_screen≈ 970 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/exclusions/screen. Screens a person or business name, or an NPI, against the HHS-OIG exclusion list (LEIE, Medicare and Medicaid): potential matches only, each with name score, reasons, NPI, state, specialty, exclusion type and date. Not a determination: confirm a match on the OIG online search with the SSN or EIN. Empty candidates is a paid 200. Not for employment or credit decisions. List dates and code meanings: GET /v1/exclusions/lists (free).

  Paramètres, retour & exemple (6)

  Paramètres

  • npi · ? · optionnel
    10-digit National Provider Identifier: an exact key.
  • name · ? · optionnel
    A person or a business. Required unless npi is given.
  • limit · integer · optionnel
  • lists · ? · optionnel
    Lists to screen. Default: every loaded list.
  • state · ? · optionnel
    US state or territory code: a match ranks a candidate higher.
  • min_score · integer · optionnel
    Name score floor, 70-100.

  Exemple d'appel

  {"name": "exclusions_screen", "arguments": {"npi": "texte", "name": "texte", "limit": 1, "lists": "texte", "state": "texte", "min_score": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"source": "texte", "coverage": "texte", "truncated": true, "candidates": [], "data_as_of": "texte", "total_candidates": 1}}

• license_search≈ 2140 tokens

  $0.05 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/license/search. Licensed contractors by trade and city, zip or county: license number, name, license type and class, status, expiry, address. Trades CA: asbestos_lead, boiler_piping, cabinets_finish_carpentry, concrete, demolition, drywall, electrical, elevator, fencing, fire_protection, flooring, framing, general, general_engineering, glazing, hvac, insulation, landscaping, lock_security, low_voltage, manufactured_home_setup, masonry, ornamental_metal, painting, parking_highway, paving, pipeline, plastering, plumbing, pool, reinforcing_steel, residential_remodeling, roofing, sewer_septic, sheet_metal, signs, solar, steel_erection, tile, traffic_control, tree_service, water_conditioning, welding, well_drilling; CO: electrical, plumbing; FL: alarm, demolition, drywall, electrical, garage_door, gas_line, general, glazing, hvac, irrigation, low_voltage, marine, plumbing, pollutant_storage, pool, pool_specialty, residential_electrical, roofing, sheet_metal, sign_electrical, solar, specialty_structure, underground_utility, window_door; LA: asbestos_lead, commercial_general, concrete, demolition, drywall, electrical, excavation, flooring, glazing, highway_heavy, home_improvement, house_moving, hvac, insulation, landscaping, low_voltage, marine, masonry, mold_remediation, painting, paving, plastering, plumbing, pollutant_storage, pool, reinforcing_steel, residential_general, roofing, sandblasting, sheet_metal, siding, solar, steel_erection, telecommunications, underground_utility, well_drilling; MN: boiler_piping, electrical, elevator, hvac, low_voltage, manufactured_home_setup, plumbing, residential_general, residential_remodeling, roofing, sign_electrical, underground_utility, water_conditioning; NJ: alarm, electrical, home_elevation, home_improvement, hvac, locksmith, plumbing, telecommunications; OR: commercial_general, commercial_specialty, home_inspector, lead_paint, locksmith, residential_general, residential_specialty; TN: asbestos_lead, boiler_piping, commercial_general, concrete, demolition, drywall, electrical, elevator, excavation, fencing, fire_protection, flooring, framing, gas_line, glazing, highway_heavy, hvac, insulation, irrigation, landscaping, low_voltage, masonry, ornamental_metal, painting, paving, plastering, plumbing, pool, residential_general, roofing, sandblasting, scaffolding, sheet_metal, sign_electrical, signs, steel_erection, telecommunications, tile, underground_utility, welding; TX: electrical, hvac, plumbing, sign_electrical; VA: accessibility, alarm, alternative_energy, asbestos_lead, cabinets_finish_carpentry, commercial_general, commercial_improvement, concrete, drilling_blasting, drywall, electrical, elevator, environmental, farm_improvement, fire_protection, flooring, framing, gas_line, glazing, highway_heavy, home_improvement, hvac, industrial_equipment, insulation, irrigation, landscaping, low_voltage, manufactured_home_setup, marine, masonry, modular_building, painting, paving, plumbing, pool, radon_mitigation, recreational_facility, residential_general, roofing, sewer_septic, signs, steel_erection, tile, underground_utility, vessel_construction, well_drilling; WA: alarm, appliances, asbestos_lead, awnings, backflow, boiler_piping, cabinets_finish_carpentry, central_vacuum, closets, concrete, construction_cleanup, demolition, doors_gates, drain_cleaning, drilling_blasting, drywall, electrical, electrical_maintenance, elevator, excavation, fencing, fire_protection, fireproofing, flooring, framing, garage_door, general, glazing, gutters, handyman, house_moving, hvac, industrial_equipment, institutional_equipment, insulation, irrigation, landscaping, low_voltage, manufactured_home_setup, masonry, metal_fabrication, painting, paving, pest_control, plastering, plumbing, pool, pressure_washing, pump_irrigation, residential_electrical, roofing, sandblasting, scaffolding, service_station_equipment, sewer_septic, siding, sign_electrical, signs, steel_erection, stoves, suspended_ceilings, tanks, telecommunications, tile, tree_service, underground_utility, water_conditioning, welding, well_drilling, window_coverings. Up to 25 results, active first, with total_matches; empty results is a paid 200.

  Paramètres, retour & exemple (7)

  Paramètres

  • zip · ? · optionnel
    5-digit ZIP (ZIP+4 accepted; the first 5 digits match). Exactly one of city, zip or county.
  • city · ? · optionnel
    Exact match after normalizing case and spaces, on addresses in the requested state. Exactly one of city, zip or county.
  • limit · integer · optionnel
  • state · string · requis · CA | CO | FL | LA | MN | NJ | OR | TN
  • trade · string · requis
    A trade slug. Each state offers its own list: GET /v1/license/trades (free)
  • county · ? · optionnel
    Offered only where a state lists it; LA takes a parish. Exactly one of city, zip or county.
  • active_only · boolean · optionnel

  Exemple d'appel

  {"name": "license_search", "arguments": {"state": "CA", "trade": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"query": {}, "state": "texte", "source": "texte", "results": [], "coverage": "texte", "truncated": true, "data_as_of": {}, "total_matches": 1}}

• license_verify≈ 1222 tokens

  $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/license/verify. Contractor license status plus matching business-entity record. Served states: CA, CO, FL, LA, MN, NJ, OR, TN, TX, VA, WA. CA, CO, LA, MN, NJ and TN entity are always null. TX entity is always null: Texas sells its business-registry data. FL and TX also take `profession`; values at GET /v1/license/professions?state=FL|TX. Empty licenses is a paid 200.

  Paramètres, retour & exemple (4)

  Paramètres

  • name · ? · optionnel
  • state · string · requis
  • profession · ? · optionnel
    FL or TX only: a licensed profession instead of a contractor. GET /v1/license/professions?state=FL|TX (free) lists them. Omit for contractors.
  • license_number · ? · optionnel

  Exemple d'appel

  {"name": "license_verify", "arguments": {"state": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"query": {}, "state": "texte", "licenses": [], "data_as_of": {}, "attribution": "texte"}}

• nonprofit_verify≈ 996 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/nonprofit/verify. IRS nonprofit status by EIN or exact organization name: BMF exemption subsection, deductibility and foundation codes, Pub 78 listing, and automatic revocations. Up to 10 records; empty organizations is a paid 200. No legal conclusion is computed.

  Paramètres, retour & exemple (3)

  Paramètres

  • ein · ? · optionnel
    Nine digits; spaces and hyphens are stripped. Use instead of name.
  • name · ? · optionnel
    Exact organization name key. Use instead of ein.
  • state · ? · optionnel

  Exemple d'appel

  {"name": "nonprofit_verify", "arguments": {"ein": "texte", "name": "texte", "state": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"source": "texte", "coverage": "texte", "truncated": true, "data_as_of": {}, "organizations": []}}

• npi_verify≈ 1647 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/npi/verify. For 1 to 10 NPIs, the CMS NPPES status of each (active or deactivated, with deactivation and reactivation dates), provider name or organization, practice city, state and ZIP and taxonomies, plus any HHS-OIG LEIE exclusion listed under the NPI, as facts from the files: not a credential check and not a determination about the provider.

  Paramètres, retour & exemple (1)

  Paramètres

  • npis · array · requis
    1 to 10 National Provider Identifiers: 10 digits each, the last a valid check digit (Luhn over 80840 + the NPI). No duplicates.

  Exemple d'appel

  {"name": "npi_verify", "arguments": {"npis": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"source": "texte", "results": [], "coverage": "texte", "data_as_of": "texte"}}

• osha_history≈ 1586 tokens

  $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/osha/history. Returns the OSHA inspections, violations and penalties on file for an employer in a state (optional city and zip), matched by name in the US Department of Labor's inspection and violation files, as establishments with a penalty roll-up; OSHA inspections only, so an employer with none has no record and an empty result is a paid 200; it is not a determination about the employer and is not endorsed or certified by the U.S. Department of Labor.

  Paramètres, retour & exemple (6)

  Paramètres

  • zip · ? · optionnel
    Five-digit inspection site ZIP. A hard filter.
  • city · ? · optionnel
    Inspection site city, case-insensitive. A hard filter.
  • limit · integer · optionnel
    Establishments returned, 1-25.
  • state · string · requis
    US state or territory code. A hard filter on the inspection site.
  • employer · string · requis
    Employer name, with at least one word that is not a generic trade word.
  • min_score · integer · optionnel
    Name score floor, 70-100.

  Exemple d'appel

  {"name": "osha_history", "arguments": {"state": "texte", "employer": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"rollup": "texte", "source": "texte", "coverage": "texte", "truncated": true, "data_as_of": {}, "establishments": [], "total_establishments": 1}}

• pipe_check≈ 108 tokens

  $0.001 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]. Cheapest paid call: proves wallet, 402 and receipt work (x402 only).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "pipe_check", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ts": "texte", "pong": true}}

• sanctions_screen≈ 1273 tokens

  $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/sanctions/screen. Screen a name against the US OFAC SDN and Consolidated lists: potential matches with list, programs, name score and reasons; optional type, date of birth and country re-rank. Fuzzy, folds accents, any script. Not a determination: an empty candidates list is a paid 200 and certifies nothing. Not UN, EU or UK.

  Paramètres, retour & exemple (6)

  Paramètres

  • dob · ? · optionnel
    YYYY or YYYY-MM-DD, for persons.
  • name · string · requis
    Any script.
  • type · ? · optionnel
    What the party is. A mismatch ranks a candidate lower.
  • limit · integer · optionnel
  • country · ? · optionnel
    ISO 3166-1 alpha-2: a nationality or address country.
  • min_score · integer · optionnel
    Name score floor, 70-100.

  Exemple d'appel

  {"name": "sanctions_screen", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"query": "texte", "sources": [], "coverage": "texte", "truncated": true, "candidates": [], "checked_at": "texte", "data_as_of": "texte", "publication": "texte", "total_candidates": 1}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://api.flipvo.com/mcp