io.github.velvenai/velven

Est-ce que io.github.velvenai/velven est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.velvenai/velven » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• my_spaces≈ 280 tokens

  List the spaces of the signed-in Velven account: slug, title, status, whether Velven hosts it, and its page. Needs sign-in; called without it, the app asks the person to sign in to Velven.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "my_spaces", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"handle": "texte", "spaces": []}}

• publish≈ 1332 tokens

  Publish a browser game or any other page made to play or use on Velven's hosting, from one HTML page or a small set of files (3 MB in all). Signed in: a private preview by default, or with prod: true the next live version, live on its Velven page within seconds. Not signed in: an unlisted page, live the same way, returned with a claim token that keeps it. A new space needs title and devices from the person. To update a space pass space (signed in) or claim (not signed in).

  Paramètres, retour & exemple (14)

  Paramètres

  • sdk · boolean · optionnel
    Add Velven's SDK script to the entry page. Default true.
  • spa · boolean · optionnel
    Serve the entry page for any unknown path (a single-page app).
  • clip · string · optionnel
    The video the tile plays on hover, without sound. Give the path of one of the files sent: an MP4 or WebM, up to 3 MB and 5 to 10 seconds long. Velven then records no clip of its own. Without a thumbnail, the clip's first frame is the picture. It must show the space itself. A clip outside that length is refused. If the file doesn't say its length, Velven measures it once live. It keeps the first 10 seconds of a longer clip, and drops a shorter one. A later version that names neither keeps the space's.
  • html · string · optionnel
    A whole page as one HTML string, published as index.html.
  • prod · boolean · optionnel
    Go live on the space's Velven page instead of making a preview. Signed in only. Default false.
  • claim · string · optionnel
    The claim token of an unlisted page: publishes its next version, or claims it when signed in.
  • entry · string · optionnel
    The page that opens first, if not index.html.
  • files · object · optionnel
    Files by relative path: text as a string, binary as { "base64": "..." }. Must include the entry page (index.html unless entry says otherwise). A velven.json, a dotfile, a dot-folder or node_modules, in any folder, is left out (never published; the result names the first 10 and counts the rest): send velven.json's settings as this tool's fields.
  • space · string · optionnel
    Publish a new version of this space (yours, signed in).
  • title · string · optionnel
    The space's name. Required for a new space.
  • engine · string · optionnel · three.js | r3f | babylon.js | playcanvas | a-frame | godot | unity | phaser
    What it draws with, if one of these.
  • devices · array · optionnel
    Where it can be played. Required for a new space.
  • thumbnail · string · optionnel
    The picture on the space's tile. Give the path of one of the files sent: a JPEG, PNG or WebP, up to 2 MB and 4096 pixels on each side. It's used as soon as the version is live, and Velven takes no picture of its own. It must show the space itself.
  • description · string · optionnel
    One line under the name.

  Exemple d'appel

  {"name": "publish", "arguments": {"sdk": true, "spa": true, "clip": "texte", "html": "texte", "prod": true, "claim": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"space": "texte", "terms": "texte", "reason": "texte", "status": "texte", "leftOut": [], "pageUrl": "texte", "version": 1, "claimUrl": "texte", "watchUrl": "texte", "expiresAt": "texte", "claimToken": "texte", "previewUrl": "texte"}}

• rollback≈ 306 tokens

  Make an earlier version of a hosted space live again. Only a version that was live before (rollback: true in versions) can be picked; it goes live at once. Needs sign-in.

  Paramètres, retour & exemple (2)

  Paramètres

  • space · string · requis
    The space's slug, as my_spaces or publish named it, e.g. pixel-racer.
  • version · integer · requis
    The version number to make live again.

  Exemple d'appel

  {"name": "rollback", "arguments": {"space": "texte", "version": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "pageUrl": "texte", "version": {}}}

• search_docs≈ 288 tokens

  Search Velven's documentation: publishing and hosting, velven.json, the CLI, the SDK (sign-in, leaderboards, saves, achievements, rooms), claiming a page, the agent API and limits. Returns the best matching sections with links.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    How many sections to return. Default 5.
  • query · string · requis
    What to look up, in a few words.

  Exemple d'appel

  {"name": "search_docs", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"query": "texte", "results": []}}

• versions≈ 449 tokens

  List a hosted space's versions, newest first: number, status (uploading, preview, publishing, live, refused, unjudged, replaced), size, and whether rollback can pick it. Refused versions carry the reason. Needs sign-in.

  Paramètres, retour & exemple (1)

  Paramètres

  • space · string · requis
    The space's slug, as my_spaces or publish named it, e.g. pixel-racer.

  Exemple d'appel

  {"name": "versions", "arguments": {"space": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"space": "texte", "versions": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.velven.ai/mcp