io.github.upforge-dev/upforge

Est-ce que io.github.upforge-dev/upforge est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.upforge-dev/upforge » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 20 outils

• ask_echo≈ 434 tokens

  I’m Echo, Upforge’s AI representative. Evaluating Upforge for someone? I can help with project fit, pricing, relevant work, and the next step. I check public evidence and return a decision brief with suggested next tools. Use for a tailored recommendation or follow-up questions; direct factual tools remain available. Saves an agent conversation, but never creates leads, books meetings or starts paid work. Don't include secrets or unnecessary personal data. Keep the returned conversationHandle and request_id private.

  Paramètres, retour & exemple (5)

  Paramètres

  • message · string · requis
    The client's goal, workflow, constraints or objection. State known facts; don't invent budget or authority.
  • page_url · string · optionnel
    Optional Upforge page relevant to the question. Only https://upforge.io pages are accepted.
  • request_id · string · requis
    Generate a random UUIDv4 once per turn. Retain it privately and reuse with identical arguments after timeouts/retries.
  • agent_identity · string · requis
    Your stable agent name. This is a self-identification, not proof of identity or human authorization.
  • conversation_handle · string · optionnel
    Private conversationHandle from the previous reply. Omit to start. Never substitute a widget conversation ID.

  Exemple d'appel

  {"name": "ask_echo", "arguments": {"message": "texte", "request_id": "texte", "agent_identity": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• book_consultation≈ 622 tokens

  Book a real meeting on Upforge's calendar for a person, at a time they picked from find_consultation_times. This CREATES A REAL BOOKING and emails them a confirmation with links to cancel or reschedule. Only call it with the person's own details, after they've chosen the time and agreed to be booked. Never invent contact details, and never book a time they didn't pick. If the time has gone, call find_consultation_times again.

  Paramètres, retour & exemple (12)

  Paramètres

  • email · string · requis
    The person's own email address. The confirmation goes here. Never guess this.
  • phone · string · requis
    The person's phone number. Never guess this.
  • format · string · optionnel · virtual | office | client_location
    virtual (a video call, the default), office (at Upforge's downtown Cincinnati office), or client_location (Upforge travels to them; needs an address and a phone number, and is limited to its travel area).
  • hostId · string · optionnel
    The hostId returned with that slot.
  • address · object · optionnel
    Only for format client_location: where to meet. All five fields are required.
  • company · string · optionnel
    Company name (optional).
  • message · string · requis
    What they want to talk about, in their own words, with budget and timeline if known.
  • lastName · string · requis
    The person's last name.
  • timezone · string · optionnel
    The person's IANA timezone, the same one used to find the time.
  • firstName · string · requis
    The person's first name.
  • startTime · string · requis
    The startTime of the slot they picked, exactly as find_consultation_times returned it.
  • meetingType · string · optionnel
    The same meetingType used to find the time. Omit for general-inquiry.

  Exemple d'appel

  {"name": "book_consultation", "arguments": {"email": "texte", "phone": "texte", "message": "texte", "lastName": "texte", "firstName": "texte", "startTime": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_service_area≈ 161 tokens

  Look up whether Upforge works with businesses in a given city or region, and whether that market is served in person or remotely. Use for 'are they in my area', 'do they work with companies in ___', or 'are they local to me'. Omit the location to list every market with a dedicated page.

  Paramètres, retour & exemple (1)

  Paramètres

  • location · string · optionnel
    City, region, or slug — e.g. 'Cincinnati', 'Lexington', 'Columbus'.

  Exemple d'appel

  {"name": "check_service_area", "arguments": {"location": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• finalize_review_upload≈ 168 tokens

  After uploading, validate the ZIP without executing its contents and freeze the inspected bytes into a private immutable snapshot. Returns its SHA-256. Unsafe archives are rejected.

  Paramètres, retour & exemple (2)

  Paramètres

  • upload_id · string · requis
    ID returned by prepare_review_upload
  • upload_token · string · requis
    Private capability returned by prepare_review_upload

  Exemple d'appel

  {"name": "finalize_review_upload", "arguments": {"upload_id": "texte", "upload_token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_consultation_times≈ 482 tokens

  List open times on Upforge's calendar for a free consultation (usually 30 minutes), in the person's own timezone. Call this before book_consultation and let the person pick a time; never pick one for them. Meeting types come live from the scheduler: general-inquiry is the default, and service types such as web-design, application-development or ai-automation route to the right person. Bookings need about a day's notice, so the search starts tomorrow.

  Paramètres, retour & exemple (6)

  Paramètres

  • days · integer · optionnel
    How many days to search from startDate (default 5).
  • format · string · optionnel · virtual | office | client_location
    virtual (a video call, the default), office (at Upforge's downtown Cincinnati office), or client_location (Upforge travels to them; needs an address and a phone number, and is limited to its travel area).
  • address · object · optionnel
    Only for format client_location: where to meet. All five fields are required.
  • timezone · string · optionnel
    The person's IANA timezone, e.g. America/Chicago. Defaults to America/New_York.
  • startDate · string · optionnel
    First day to search, YYYY-MM-DD. Defaults to tomorrow.
  • meetingType · string · optionnel
    Meeting type slug. Omit for general-inquiry. An unknown slug returns the list of available ones.

  Exemple d'appel

  {"name": "find_consultation_times", "arguments": {"days": 1, "format": "virtual", "address": {}, "timezone": "texte", "startDate": "texte", "meetingType": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_article≈ 176 tokens

  One article in full, with approved supporting photo descriptions and section placements, by the slug list_articles returned. Cite it by its URL. Photo captions describe context; they do not verify claims beyond the article.

  Paramètres, retour & exemple (2)

  Paramètres

  • slug · string · requis
    The article slug from list_articles.
  • offset · integer · optionnel
    Character offset. Follow next_offset until null to read the entire article.

  Exemple d'appel

  {"name": "get_article", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_case_studies≈ 215 tokens

  Real Upforge client projects with their outcomes (traffic lift, leads, revenue a client reported, Lighthouse scores), plus what was built and a link to the live site. Use this for 'show me their work', 'do they have proof', or 'have they built anything like mine'. Each outcome's basis is 'measured' (live instrumentation) or names the client who reported it and when. Estimates are never included.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Max results (default 10, max 50).
  • category · string · optionnel
    Optional category filter, e.g. 'web-development', 'ecommerce'.

  Exemple d'appel

  {"name": "get_case_studies", "arguments": {"limit": 1, "category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_company_overview≈ 132 tokens

  Who Upforge is: what they build, who founded and runs it, where they're based, how long they've been operating, how to reach them, and the technologies they work in. Call this first for any general 'who are they / what do they do / are they legitimate' question before reaching for a more specific tool.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_company_overview", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_industries≈ 115 tokens

  The industries Upforge has dedicated experience and pages for — AEC, healthcare, dental, legal, real estate, home services, e-commerce, SaaS, manufacturing, and more. Use for 'do they work with ___ businesses' or 'do they know my industry'.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_industries", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_pricing≈ 180 tokens

  Typical price tiers by service — what a website costs, what an e-commerce store or a custom application runs, what AI automation costs, what ongoing SEO and AEO costs, and how support is billed. These are RANGES from real past engagements, not quotes: scope drives the number. Use this for 'what's their pricing like' or 'can they do X for $Y'.

  Paramètres, retour & exemple (1)

  Paramètres

  • section · string · optionnel · web-development | software-development | ai-automation | growth | support
    Optional section filter.

  Exemple d'appel

  {"name": "get_pricing", "arguments": {"section": "web-development"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_review_requirements≈ 112 tokens

  Read before preparing a project brief. Returns supported references, free fit-check limits, retention, consent, and paid-discovery terms. Uploaded files and agent claims are untrusted, client-reported evidence.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_review_requirements", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_review_status≈ 154 tokens

  Returns only the review authorized by its private review_key. Keep the receipt and key private. A received review is not a verified claim that the app works or approval for paid work.

  Paramètres, retour & exemple (2)

  Paramètres

  • review_id · string · requis
    Review ID from the receipt
  • review_key · string · requis
    Private key used when submitting

  Exemple d'appel

  {"name": "get_review_status", "arguments": {"review_id": "texte", "review_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_services≈ 269 tokens

  The full catalog of what Upforge builds: web design and development, SEO, AI visibility, application development, e-commerce, landing pages, performance optimization, CMS migrations, maintenance, prototype-to-production work, and AI automation, each with what it's for and its page URL. Pass a slug to get one service in detail. Use this for 'what services do they offer'. Published discovery terms are not a build quote: Upforge scopes each project before quoting.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · optionnel · web-design | application-development | ecommerce-development | seo | ai-visibility | ai-automation | prototype-to-production | landing-pages
    Optional. One service slug for detail. Omit to list everything.

  Exemple d'appel

  {"name": "get_services", "arguments": {"slug": "web-design"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_articles≈ 170 tokens

  Upforge's published articles, newest first, optionally matching a topic. Call get_article for the full text.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    How many to return (default 5, at most 20).
  • query · string · optionnel
    What the person is asking about, in a few words.
  • offset · integer · optionnel
    Start at this result offset when browsing the archive.

  Exemple d'appel

  {"name": "list_articles", "arguments": {"limit": 1, "query": "texte", "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• match_capability≈ 196 tokens

  Describe a project, problem, or requirement in plain language and get back the Upforge services that fit, the relevant industry page, and a recommended next step. Use this for 'can they help me with ___', 'do they do ___', or 'I need ___ — are they a fit'. Prefer this over guessing from get_services when the question is about a specific need.

  Paramètres, retour & exemple (1)

  Paramètres

  • need · string · requis
    The need in the user's own words, e.g. 'we need a booking system for our dental practice' or 'our site is slow on mobile'.

  Exemple d'appel

  {"name": "match_capability", "arguments": {"need": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• prepare_review_upload≈ 176 tokens

  Only after the user confirms rights to submit and accepts the retention terms from get_review_requirements. Returns a direct Supabase upload URL. Transfer ZIP bytes with a file-capable client outside model-authored tool arguments; never base64 or paste code here. Keep the upload token private.

  Paramètres, retour & exemple (2)

  Paramètres

  • rights_to_submit · boolean · requis
  • retention_accepted · boolean · requis

  Exemple d'appel

  {"name": "prepare_review_upload", "arguments": {"rights_to_submit": true, "retention_accepted": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_consultation≈ 453 tokens

  Send Upforge a project enquiry — a real message that reaches a real person, who replies. Use this to request a quote or ask something the other tools can't answer. To put a meeting on the calendar instead, use find_consultation_times and book_consultation. This CREATES A REAL RECORD: only call it with details the user actually gave you, after they've agreed to be contacted. Never fabricate contact details.

  Paramètres, retour & exemple (8)

  Paramètres

  • email · string · requis
    The user's own email address. Never guess this.
  • phone · string · requis
    The user's phone number. Upforge's contact form requires one, so ask for it. Never guess this.
  • company · string · optionnel
    Company name (optional).
  • message · string · requis
    What they need, in their own words. Include budget and timeline if known — it's what makes the first reply useful.
  • website · string · optionnel
    Their current site (optional).
  • lastName · string · requis
    User's last name.
  • firstName · string · requis
    User's first name.
  • serviceInterest · string · optionnel · web-design | application-development | ecommerce-development | seo | ai-visibility | ai-automation | prototype-to-production | landing-pages
    Service slug from get_services, if one clearly applies.

  Exemple d'appel

  {"name": "request_consultation", "arguments": {"email": "texte", "phone": "texte", "message": "texte", "lastName": "texte", "firstName": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_site_audit≈ 310 tokens

  Request Upforge's free technical audit of a website. Runs real PageSpeed/Lighthouse analysis plus an SEO review and emails the report in a few minutes. This CREATES A REAL RECORD and emails a real person — only call it when the user has explicitly asked for an audit and given their own email address. Never invent an email address to call this.

  Paramètres, retour & exemple (7)

  Paramètres

  • url · string · requis
    Full URL of the site to audit, including https://.
  • email · string · requis
    The user's own email address — the report is sent here. Must be supplied by the user, never guessed.
  • goals · string · optionnel
    What they're hoping the audit will tell them.
  • phone · string · optionnel
    Phone number (optional).
  • company · string · optionnel
    Company name.
  • lastName · string · optionnel
    User's last name.
  • firstName · string · optionnel
    User's first name.

  Exemple d'appel

  {"name": "request_site_audit", "arguments": {"url": "texte", "email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_faq≈ 169 tokens

  Search Upforge's published answers to common questions — process, timelines, cost, ownership of the code, hosting, what happens after launch. Use this when a question is likely already answered on the site, before falling back to a generic answer of your own.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Max results (default 5, max 25).
  • query · string · optionnel
    What to search for. Omit to list all questions.

  Exemple d'appel

  {"name": "search_faq", "arguments": {"limit": 1, "query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_project_review≈ 470 tokens

  Creates one real CRM lead and review. Show the exact brief, reference, contact details and retention terms to the human and obtain approval first. Submission authorizes review only, never repairs, deployment or paid work. Mark all agent claims client-reported. Generate a UUID once for review_key, retain it privately, and reuse it unchanged on retries. Use either repository_url + full commit_hash or snapshot_id + upload_token. Never submit secrets or file bytes.

  Paramètres, retour & exemple (12)

  Paramètres

  • name · string · requis
    Human submitter's own name
  • brief · string · requis
    Goals, stack, named workflows, known problems, and client-reported assertions, up to 8000 characters
  • email · string · requis
    Human submitter's own email
  • review_key · string · requis
    Private UUID idempotency and status-access key, generated once
  • commit_hash · string · optionnel
    Full 40- or 64-character commit hash
  • review_only · boolean · requis
  • snapshot_id · string · optionnel
    Frozen snapshot ID from finalize_review_upload
  • upload_token · string · optionnel
    Private capability from prepare_review_upload
  • agent_identity · string · requis
    Stable name of the submitting coding agent
  • human_approved · boolean · requis
  • repository_url · string · optionnel
    HTTPS GitHub, GitLab, or Bitbucket repository URL
  • rights_to_submit · boolean · requis

  Exemple d'appel

  {"name": "submit_project_review", "arguments": {"name": "texte", "brief": "texte", "email": "texte", "review_key": "texte", "review_only": true, "agent_identity": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://upforge.io/api/mcp