io.github.XLSV777/7it

Est-ce que io.github.XLSV777/7it est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.XLSV777/7it » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 21 outils

• ask_7it≈ 358 tokens

  Use this when the user has a specific question for 7IT that describe_studio does not answer. Ask 7IT Solutions, a solo senior software studio, a question about whether it fits a project, what a first phase could cover, how engagements run, or what the client owns. Answers come only from 7IT's published profile and contain no prices or commitments; questions that need a quote are passed to Lior Aharonov, who replies himself.

  Paramètres, retour & exemple (1)

  Paramètres

  • question · string · requis
    The question, in plain words. Include the business context that matters, for example the platform, the systems involved or what the app does.

  Exemple d'appel

  {"name": "ask_7it", "arguments": {"question": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"answer": "texte", "contact": "texte", "forwarded_to_founder": true}}

• check_accessibility≈ 522 tokens

  Use this when someone asks whether a website or online store is accessible, meets WCAG, or could face an ADA accessibility complaint. Runs Google Lighthouse's automated accessibility checks (axe-core rules) on the page as a phone sees it, and returns the score, each failing rule in plain English with its WCAG criterion and how many elements fail, and how the site compares with 7IT's study of US online stores. Automated checks cover only part of WCAG; this is a starting point, not a legal opinion. Takes 20 to 60 seconds.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    The page to check, for example example.com or a product page address

  Exemple d'appel

  {"name": "check_accessibility", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"host": "texte", "score": 1, "issues": [], "benchmark": "texte", "report_url": "texte", "better_than_share": 1}}

• check_ai_shopper_readiness≈ 668 tokens

  Use this when someone asks whether ChatGPT, Claude, Perplexity or other AI shopping agents can find, read and recommend their online store's products. Checks what robots.txt tells AI search crawlers versus training-only crawlers, llms.txt, agents.md, the UCP commerce discovery file, and one product page's structured data (price, currency, stock, brand, GTIN or SKU, reviews, shipping and returns). Returns the gaps with fixes, compared with 7IT's study of US online stores. Uses an identified crawler that respects robots.txt.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    The store, for example shop.example.com
  • product_url · string · optionnel
    A product page on the same store to test; otherwise one is found from the home page

  Exemple d'appel

  {"name": "check_ai_shopper_readiness", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ucp": true, "host": "texte", "fixes": [], "llms_txt": true, "readable": true, "agents_md": true, "benchmark": "texte", "report_url": "texte", "product_fields": [], "blocks_ai_search": [], "product_data_complete": true}}

• check_app_security≈ 591 tokens

  Use this when someone asks whether a website or web app is secure, safe to launch, or missing security headers. Not a penetration test, and it cannot see pages behind a login. Checks a public web app for the baseline browser protections every production app should send (Content Security Policy, HTTPS enforcement, clickjacking protection, MIME-sniffing, referrer and permissions policy, cross-origin isolation) and whether a JavaScript source map is served publicly. Reads only the public response headers any visitor's browser receives; never logs in, submits a form, calls the app's APIs, or reads its data for secrets. Useful for an app built with an AI tool (Lovable, Replit, Bolt, v0, Cursor).

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    The app’s public web address, for example myapp.com or https://myapp.lovable.app

  Exemple d'appel

  {"name": "check_app_security", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "grade": "strong", "https": true, "total": 1, "missing": [], "present": 1, "signals": [], "reachable": true, "report_url": "texte", "source_map_public": true}}

• check_email_authentication≈ 578 tokens

  Use this when someone asks why their emails land in spam, whether their domain is protected from spoofing or phishing in their name, or whether they meet the Gmail, Yahoo and Outlook rules for bulk senders. Reads the domain's public DNS records (SPF, DKIM under the common email services' selectors, the DMARC policy, BIMI, MX) and returns what is missing with the exact fix, compared with 7IT's study of US online stores. Sends no email and needs no access.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    The domain or website, for example example.com

  Exemple d'appel

  {"name": "check_email_authentication", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"mx": true, "spf": true, "bimi": true, "dmarc": true, "fixes": [], "domain": "texte", "spf_all": "texte", "benchmark": "texte", "dkim_found": true, "report_url": "texte", "dmarc_policy": "texte", "dmarc_enforced": true}}

• claim_mcp_server≈ 680 tokens

  Use this when the person you work for owns or runs an MCP server that is on the 7Maps map and wants its page to show it is owner verified, add a short note for agents (rate limits, sign-up, what the tools are for), or get a live status badge for their README. Verified owners' servers are checked every 5 minutes (uptime on the page and badge), and with alert_url the owner gets a message when the server stops answering and when it is back. First call returns the proof options (a line in /.well-known/7maps-verify.txt on the server's host, a DNS TXT record, or for io.github registry names a file in the GitHub repo); after one is in place, call again to confirm. The first verification returns an owner secret, shown once: keep it, because later changes to an already verified server (note, alerts) need it as owner_secret. If it is lost, call with recover true, put the one-time code on the host, then call with recover_check. Verifying does not change how the server is measured or ranked. No charge.

  Paramètres, retour & exemple (6)

  Paramètres

  • note · string · optionnel
    Optional plain-text note from the owner, no links, up to 280 characters
  • server · string · requis
    The MCP server address as it appears on its 7Maps page
  • recover · boolean · optionnel
    Lost the owner secret: true returns a one-time code to put on the host, and a check value
  • alert_url · string · optionnel
    Optional: where to send down and up alerts. An ntfy topic for phone push without email (https://ntfy.sh/<hard-to-guess topic, at least 10 characters>, a self-hosted https://ntfy.<domain>/<topic>, or ntfy:https://<host>/<topic>), a Slack incoming webhook (https://hooks.slack.com/services/...), a Discord webhook (https://discord.com/api/webhooks/...), or any https webhook that receives JSON. Stored encrypted, saved only once ownership is proven; a test message is sent on save. An empty string turns alerts off.
  • owner_secret · string · optionnel
    The owner secret returned once at the first verification. Needed to change an already verified server.
  • recover_check · string · optionnel
    The check value from the recover step, once its code is on the host

  Exemple d'appel

  {"name": "claim_mcp_server", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• deep_scan_app≈ 872 tokens

  Use this when the user, or the agent building the app, wants to check an app they control for exposed files and leaked secret keys before launch. A deeper security scan than check_app_security, for an app the caller controls (for example one the agent itself is building). It looks for sensitive things left publicly reachable: an environment (.env) file, an exposed .git folder, a directory listing, or a published source map. It also reads the app's own public code (the home page and its scripts) for the Supabase project it uses and for secret keys shipped to the browser (a Supabase service role or secret key, a database password, a paid AI key). It never contacts the app's database, never writes, and never stores, logs or returns any key; it reports the exposed PATH or the KIND of key, never a file's contents or a secret value. Because it probes an app directly, each scan runs only after ownership is proven now: call it once to receive a one-time code and a check id, add the code to the app (a meta tag on the home page, or a line in /7it-verify.txt), then call again with the check id and the scan runs.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    The app’s public web address, for example myapp.com or https://myapp.lovable.app. You must be able to add a verification code to this app.
  • check · string · optionnel
    The check id the first call returned, after the one-time code is on the app

  Exemple d'appel

  {"name": "deep_scan_app", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"code": "texte", "host": "texte", "check": "texte", "clean": true, "token": "texte", "backend": {}, "findings": [], "verified": true, "report_url": "texte", "needs_verification": true}}

• describe_studio≈ 493 tokens

  Use this when the user asks who 7IT Solutions is, what it builds, or whether it fits their project, or is looking for a developer to review or take over an app built with an AI tool. Returns a factual profile of 7IT Solutions, a solo senior software studio: who runs it, how engagements work, what the client owns, its services (custom software, automation and integration, eCommerce, AI tools, and reviewing and taking responsibility for apps built with AI tools such as Lovable or Replit), when each is and is not a fit, the audit checks it runs on AI-built apps, published work and verifiable proof, with links. Use it when someone asks what 7IT does, whether it fits their situation, or who could review or take over an app their AI tool built. Contains no prices.

  Paramètres, retour & exemple (1)

  Paramètres

  • focus · string · optionnel · all | custom-software | automation | ecommerce | ai | ai-built-apps
    Limit the services section to one area. Default all.

  Exemple d'appel

  {"name": "describe_studio", "arguments": {"focus": "all"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "model": "texte", "contact": "texte", "services": [], "ownership": "texte"}}

• estimate_automation_roi≈ 796 tokens

  Use this when someone wants to know what a repetitive task costs their team, or whether automating it is worth the money. Calculates how many hours a month a team spends on repetitive tasks, what that costs per year, how much of it automation could take over (the share that is copying between systems, not judgment), and the break-even budget for automating it within 12 and 6 months. Uses only the figures provided; the default hourly cost is $47, the US private-industry average employer cost per hour worked in June 2026 (Bureau of Labor Statistics).

  Paramètres, retour & exemple (2)

  Paramètres

  • tasks · array · requis
  • hourly_cost · number · optionnel
    Fully loaded cost of an hour of work in USD. Default 47.

  Exemple d'appel

  {"name": "estimate_automation_roi", "arguments": {"tasks": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"tasks": [], "report_url": "texte", "hourly_cost": 1, "yearly_cost": 1, "hours_per_month": 1, "automatable_yearly": 1, "break_even_budget_6_months": 1, "automatable_hours_per_month": 1, "break_even_budget_12_months": 1}}

• find_tool≈ 662 tokens

  Use this when you need a tool for a job and do not know which MCP server has one: searches every tool of every public MCP server on the 7Maps map (over 200,000 tools, probed daily) and returns the best matches with an automated estimate of what each tool can do (read-only, changes data, high risk), whether its server is answering now, its handshake time, the tokens its tool list costs to load, and a page to check it. Filter to read-only tools, servers answering now, a latency or token ceiling. Copies of the same tool on several servers are collapsed. No charge. To have 7Maps pick one server and tool for you with alternatives, use route.

  Paramètres, retour & exemple (7)

  Paramètres

  • job · string · requis
    What the tool should do, in plain words, for example "send a transactional email" or "query a postgres database"
  • may · string · optionnel · read | change | any
    What the tool may do: read = read-only only; change = read or change data; any = include high-risk tools (default any)
  • limit · integer · optionnel
    How many results (default 10)
  • payment · string · optionnel · any | free_only | paid_ok
    Payment terms: any (default); free_only = only servers that declare no payment; paid_ok = servers that charge are fine, servers whose payment terms are unknown are left out. Paid servers show their declared price per call.
  • answering_now · boolean · optionnel
    Only servers that answered with tools on the last check (default true)
  • max_handshake_ms · integer · optionnel
  • max_tool_list_tokens · integer · optionnel

  Exemple d'appel

  {"name": "find_tool", "arguments": {"job": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"matched": 1, "results": [], "tools_indexed": 1}}

• get_field_kit≈ 261 tokens

  Use this after list_field_kits, to read one checklist in full. Returns one 7IT Field Kit in full: every check with the reason it matters, grouped in order, plus how to use it and the guide it comes from. Pass the slug from list_field_kits or words from the title.

  Paramètres, retour & exemple (1)

  Paramètres

  • kit · string · requis
    The kit slug (for example "webhook-reliability-checklist") or words from its title.

  Exemple d'appel

  {"name": "get_field_kit", "arguments": {"kit": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "slug": "texte", "title": "texte"}}

• get_store_speed_index≈ 504 tokens

  Use this when someone asks how fast US online stores are right now, or wants a current benchmark to compare a store against. Returns 7IT's weekly US Store Speed Index: median Google phone score, time to main content, share of stores scoring 50 or more, and median apps per store for a fixed panel of 100 US online stores, week by week, with the source link. Medians only; no store is named.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_store_speed_index", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"panel": 1, "title": "texte", "series": [], "updated": "texte", "source_url": "texte"}}

• list_field_kits≈ 376 tokens

  Use this when someone wants a working checklist for a technical job (webhooks, store speed, integrations, migrations, AI in production, security). Lists 7IT Field Kits: working checklists for custom software, eCommerce, automation, payments, AI, security and reliability work (for example webhook reliability, store speed audits, integration design, SEO-safe migrations, LLM production readiness). Each has a title, a one-line purpose, the number of checks and a link. Optionally filter by a topic word.

  Paramètres, retour & exemple (1)

  Paramètres

  • topic · string · optionnel
    Optional word to filter by, for example "shopify", "webhook" or "AI".

  Exemple d'appel

  {"name": "list_field_kits", "arguments": {"topic": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kits": []}}

• map_agent_oversight≈ 757 tokens

  Use this when someone asks which actions their AI agent or its connected tools may take on their own, which need a person's approval, and which a person must do; or how to set up human oversight, permissions or AI governance for an agent (for example under the EU AI Act). Give either the address of a public MCP server, or the list of tools the agent has (name, description and annotations). Sorts every tool into green (runs alone: reads and prepares), yellow (a person approves: sending, updating, scheduling) or red (a person does it: money, permissions, deletion, code execution, commitments), flags tools with no risk annotations, and returns a ready policy, Claude Code permission rules (allow, ask, deny) and an oversight checklist. Reads tool lists only and never calls a tool. A working checklist, not legal advice.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · optionnel
    The MCP server address, for example https://mcp.example.com/mcp
  • tools · array · optionnel
    Instead of an address: the tools the agent has, with their description and annotations
  • server_name · string · optionnel
    The name this server has in the agent setup, used in the Claude Code permission rules

  Exemple d'appel

  {"name": "map_agent_oversight", "arguments": {"url": "texte", "tools": [], "server_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"red": 1, "green": 1, "tools": [], "total": 1, "server": "texte", "yellow": 1, "checklist": [], "unlabeled": 1, "report_url": "texte", "claude_code_permissions": {}}}

• my_7maps_usage≈ 299 tokens

  Use this when the person you work for asks what 7Maps has done for them: calls made with their personal 7Maps key today, in the last 7 days and in the last 30 days, servers checked, an estimate of the tokens saved compared with finding the same thing out without 7Maps, failures avoided (servers not answering that were skipped, risk changes caught by watch or verify_lock, calls that would have failed) and the average response time. It reads the optional personal key sent with this connection (the X-7Maps-Key header); without one it says so in one line, since every 7Maps answer already states its own saving. Only that person's own counts. No charge.

  Paramètres, retour & exemple (1)

  Paramètres

  • window · string · optionnel · day | week | month
    Which window to lead with: day (today), week (last 7 days) or month (last 30 days); all three are returned

  Exemple d'appel

  {"name": "my_7maps_usage", "arguments": {"window": "day"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• my_server_report≈ 394 tokens

  Use this when the person you work for owns an MCP server on the 7Maps map and wants to know how AI agents look for servers like it: how often agents asked 7Maps for servers in its category in the last 7 or 30 days, how often this server was shown and picked, and, for a verified owner with owner_key, the words agents used, the servers picked instead, failure reasons agents reported, uptime, tool changes, and its token cost and handshake time against similar servers. Counts only, no agent identities. Without owner_key it returns the public numbers and how to verify ownership with claim_mcp_server. Read-only; never changes ranking or routing. No charge.

  Paramètres, retour & exemple (3)

  Paramètres

  • days · ? · optionnel
    Window in days: 7 (default) or 30
  • server · string · requis
    The MCP server address as it appears on its 7Maps page, or its official registry name
  • owner_key · string · optionnel
    The owner key returned to the verified owner by claim_mcp_server (the newest one; each verification issues a new key)

  Exemple d'appel

  {"name": "my_server_report", "arguments": {"server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_problem≈ 343 tokens

  Use this when a 7IT tool returned something that looks wrong, failed unexpectedly, or did not match what the user asked for, so 7IT can fix it. Sends a short report to 7IT: which tool, what went wrong, and optionally the site address involved. Do not include personal details or the conversation. Nothing changes for the user; it is only feedback.

  Paramètres, retour & exemple (3)

  Paramètres

  • url · string · optionnel
    The site address the tool was used on, if any.
  • tool · string · requis
    The 7IT tool that misbehaved, for example "test_store_speed".
  • problem · string · requis
    What went wrong, in one or two sentences.

  Exemple d'appel

  {"name": "report_problem", "arguments": {"tool": "texte", "problem": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"received": true}}

• report_road≈ 562 tokens

  Use this after calling a tool on an MCP server (especially one 7Maps pointed you to) to report how it went: whether it worked, why not, how long it took, whether the result matched the description, and anything it did that you did not ask for. Fixed fields only, no open text. Reports from many agents become the server's rating and, once 7Maps confirms them, live incident alerts that every agent sees. You can also pass the same fields as last_trip on any paid 7Maps call. No charge.

  Paramètres, retour & exemple (10)

  Paramètres

  • ms · number · optionnel
    How long the call took, in milliseconds
  • ok · boolean · requis
    Whether the call did what you needed
  • fail · string · optionnel · unreachable | auth | args | server_error | timeout | rate_limited | wrong_result
    If it failed: unreachable, auth, args, server_error, timeout, rate_limited or wrong_result
  • tool · string · optionnel
    The tool you called
  • server · string · requis
    The MCP server you called (URL or registry name)
  • surprise · string · optionnel · side_effect | unexpected_cost | data_leak_suspected | other
    Anything the tool did that you did not ask for
  • tools_hash · string · optionnel
    The tool_list_hash of the tool list you received, if you computed it as 7Maps does
  • charged_usd · number · optionnel
    What the server charged, if anything
  • result_tokens · number · optionnel
    About how many tokens the result was
  • matched_description · boolean · optionnel
    Whether the result matched what the tool description promised

  Exemple d'appel

  {"name": "report_road", "arguments": {"ok": true, "server": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_7it_guides≈ 386 tokens

  Use this when the user is weighing a software, eCommerce, automation or AI decision and a cited article would help. Searches 7IT Solutions’ guides and articles on custom software, eCommerce (Shopify, WooCommerce, headless), automation and integrations (connecting CRMs, accounting tools such as QuickBooks, ERPs and online stores), payments, AI in production, security and reliability. Returns the best matches with a short excerpt and a link to cite.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    How many results to return. Default 5.
  • query · string · requis
    What to look for, for example "reliable webhooks" or "shopify vs woocommerce".

  Exemple d'appel

  {"name": "search_7it_guides", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"results": []}}

• submit_mcp_server≈ 458 tokens

  Use this when someone has built or runs an MCP server that is not in the official MCP registry (for example a small business's own server) and wants AI agents to be able to find it, or asks how to get their server listed. Give the server address, or just the business's domain and the usual endpoint paths are tried. The server is observed every 6 hours for 7 days; if it answers reliably, keeps its tools stable and describes every tool, it joins the 7Maps map that agents use to choose servers. Placement cannot be bought. Returns the status page and an optional owner-verification token. No charge.

  Paramètres, retour & exemple (6)

  Paramètres

  • url · string · requis
    The MCP server address, or the business domain (example.com)
  • about · string · optionnel
    One sentence: what the business does and for whom
  • charges · boolean · optionnel
    Whether the server charges agents (x402 or a subscription)
  • country · string · optionnel
    Where the business serves customers
  • category · string · optionnel · commerce | booking | payments | marketing | crm | documents | data | dev
    What the business does; agents also see the category its tools show
  • language · string · optionnel
    Main language of the tools and their data

  Exemple d'appel

  {"name": "submit_mcp_server", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• test_store_speed≈ 566 tokens

  Use this when someone asks how fast a website or online store loads on a phone, why it is slow, or how it compares with a competitor. Runs Google PageSpeed Insights (mobile lab test) on a public online store or website and explains the result in plain English: a 0 to 100 score, when the main content appears, responsiveness and layout shift, real-user data when Google has it, the third-party apps and trackers slowing the page (by name, with size and busy time), the platform (Shopify, WooCommerce and others), and the fixes ranked by time saved. Optionally tests up to two competitor sites for a side-by-side comparison. Takes 20 to 60 seconds. Only public web addresses are accepted.

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · requis
    The store or website to test, for example "example.com" or "https://shop.example.com/products/item".
  • competitors · array · optionnel
    Up to two competitor sites to test at the same time for comparison.

  Exemple d'appel

  {"name": "test_store_speed", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"store": {}, "benchmark": "texte", "report_url": "texte", "competitors": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://7it.co.il/mcp