io.github.tjcgraham-rgb/gaip-broker

Est-ce que io.github.tjcgraham-rgb/gaip-broker est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.tjcgraham-rgb/gaip-broker » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• gaip_check≈ 490 tokens

  Use this when asked whether an AI agent, MCP server or API works or has changed, e.g. before adding or paying it. Pass its `url`. Returns a verdict, fixes, dated history when observed, and a receipt. With `agent` (e.g. GPTBot): may your bot fetch it (robots.txt, AI-crawler rules)? Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (5)

  Paramètres

  • url · string · requis
    Public https link to the agent, its A2A agent card, MCP server endpoint or OpenAPI document. GAIP fetches, validates and reach-tests it; an MCP endpoint gets a read-only handshake (initialize, tools/list).
  • agent · string · optionnel
    Optional: ask "may my agent fetch this url?" instead. Your agent's user-agent token, e.g. GPTBot; GAIP reads the site's robots.txt and AI-permission files (gaip_check_permission).
  • verbose · boolean · optionnel
    Optional: true returns the full result with every underlying field. Default: a short answer.
  • intended_task · string · optionnel
    Optional: what you plan to hand it, e.g. 'weather forecast for London'. Adds task-specific evidence.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones (needed to see or remove your watches later).

  Exemple d'appel

  {"name": "gaip_check", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_diagnose≈ 482 tokens

  Use this when an agent, MCP or API call failed. Paste the `error` text and/or `http_status`; add the service `url` if known. Returns the cause, the exact fix (e.g. the missing argument) and retry_after_seconds; `keep_receipt: true` adds a dated receipt. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · optionnel
    Optional: public https URL of the agent, MCP server or API that failed.
  • error · string · optionnel
    The error you got, as text: HTTP status line, JSON-RPC/A2A/MCP error or message. Give this and/or http_status.
  • verbose · boolean · optionnel
    Optional: true returns the full result with every underlying field. Default: a short answer.
  • http_status · integer · optionnel
    Optional: the HTTP status code you got, e.g. 429.
  • keep_receipt · boolean · optionnel
    Optional: true keeps a dated GAIP receipt of this answer and returns a continuity handle. Default: GAIP keeps no record of the task (usage is counted without its content).
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones (needed to see or remove your watches later).

  Exemple d'appel

  {"name": "gaip_diagnose", "arguments": {"url": "texte", "error": "texte", "verbose": true, "http_status": 1, "keep_receipt": true, "continuity_handle": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_verify≈ 1292 tokens

  Use this when asked whether a service delivered what was promised or whether cited pages contain the quoted text. Pass `citations`, or a service `url` (+ `checks`, the `result` you got), or `claims` with `observations`. Returns a result per item. Free, no account; only delivery keeps a record. Inputs must be public and non-personal.

  Paramètres, retour & exemple (11)

  Paramètres

  • url · string · optionnel
    Claims: the agent or supplier they are about. Delivery: the public https service URL that should deliver.
  • checks · array · optionnel
    Optional (delivery): what a good response is, e.g. [{"id": "http_status_in", "allowed": [200]}, {"id": "json_parses"}]. Default: HTTP 200 and a non-empty body.
  • claims · array · optionnel
    Claims to record about `url`: each a sentence or {id, text}. Each is compared with the `observations` you supply; without them it stays UNTESTED.
  • result · object · optionnel
    Optional (delivery): the response you received. Omitted: GAIP fetches the service URL now (public replay).
  • verbose · boolean · optionnel
    Optional: true returns the full result with every underlying field. Default: a short answer.
  • metadata · object · optionnel
    Optional (claims): the published agent card, MCP or OpenAPI document.
  • terms_id · string · optionnel
    Optional (delivery): terms_id from an earlier registration, instead of url.
  • citations · array · optionnel
    Citations to check: each {url, quote?} or just a URL. GAIP fetches each page once (robots.txt respected) and looks for the quote.
  • keep_receipt · boolean · optionnel
    Optional: true keeps a dated GAIP receipt of this answer and returns a continuity handle. Default: GAIP keeps no record of the task (usage is counted without its content).
  • observations · array · optionnel
    Optional (claims): what you saw, each {claim_id, result: PASS|FAIL, detail}.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones (needed to see or remove your watches later).

  Exemple d'appel

  {"name": "gaip_verify", "arguments": {"url": "texte", "checks": [], "claims": [], "result": {}, "verbose": true, "metadata": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_watch≈ 400 tokens

  Use this when asked to keep an eye on an agent or MCP server, or to be alerted when it changes. Pass its `url`: returns feed links and its latest dated changes; add `webhook_url` for a free watch (checked every 24 h, signed webhook on change). Free, no account; with a webhook it records a watch. Inputs must be public and non-personal.

  Paramètres, retour & exemple (4)

  Paramètres

  • url · string · requis
    Public https URL of the MCP server endpoint or agent (card) to follow. No query string.
  • verbose · boolean · optionnel
    Optional: true returns the full result with every underlying field. Default: a short answer.
  • webhook_url · string · optionnel
    Optional: your own public https endpoint. GAIP then registers a watch and POSTs a signed event when the result changes.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones (needed to see or remove your watches later).

  Exemple d'appel

  {"name": "gaip_watch", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• second_look_check≈ 565 tokens

  Use this when a shopper is about to buy something an AI suggested, or asks if a price or stock claim is right. Pass the product page `url` and the `claim`. Returns what the page showed beside what the claim said, and a signed, dated receipt. Second Look by GAIP. Free, no account, no affiliate links; inputs must be public and non-personal.

  Paramètres, retour & exemple (9)

  Paramètres

  • url · string · requis
    Public https link to the product page on the shop's own site.
  • claim · string · optionnel
    What the shopper was told, in plain words, e.g. "89 GBP, in stock, size M". Only the price, stock and variant are kept; the rest is discarded.
  • price · string · optionnel
    Claimed price, e.g. "89.00" (optional).
  • variant · string · optionnel
    Claimed size, colour or option (optional).
  • verbose · boolean · optionnel
    Optional: true returns the full result with every underlying field. Default: a short answer.
  • currency · string · optionnel
    ISO currency, e.g. GBP (optional).
  • in_stock · boolean · optionnel
    Claimed stock (optional).
  • mandate_ref · string · optionnel
    Optional: your own reference to the shopper's mandate for this purchase. Kept only as a keyed hash (mandate_sha256) on the receipt, never in clear.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones (needed to see or remove your watches later).

  Exemple d'appel

  {"name": "second_look_check", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.gaipagents.com/mcp