io.github.zvmzaretsky/fabtally-chain

Est-ce que io.github.zvmzaretsky/fabtally-chain est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.zvmzaretsky/fabtally-chain » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• ens_expiry≈ 256 tokens

  PAID $0.001 (x402, USDC on Base). Resolve an ENS .eth or Basename .base.eth name's registration expiry ON-CHAIN (public RPC). Returns expiry date, days-left, whether it's in the 90-day grace period, the release date it becomes registrable again, and the current owner. Read-only, descriptive. Args: name. Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
    Full ENS name ending in .eth (e.g. vitalik.eth) or .base.eth (e.g. jesse.base.eth).
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID read. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "ens_expiry", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gas≈ 300 tokens

  PAID $0.001 (x402, USDC on Base). Current gas for a chain via public RPC: base fee + suggested priority + suggested max fee (gwei) at the latest block. If below_gwei is set, also returns whether the base fee is at/below your threshold right now. Read-only. Args: chain (ethereum|base|arbitrum|polygon|bsc|optimism), below_gwei (optional). Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (3)

  Paramètres

  • chain · string · requis · ethereum | base | arbitrum | polygon | bsc | optimism
    Chain to read gas for.
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID read. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
  • below_gwei · number · optionnel
    Optional threshold: return a boolean of whether base fee is at/below this many gwei now.

  Exemple d'appel

  {"name": "gas", "arguments": {"chain": "ethereum"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• oracle_health≈ 380 tokens

  PAID $0.003 (x402, USDC on Base). Chainlink price-feed health via public RPC: last-update age, latest answer (scaled by decimals), round monotonicity (is the answer current?), a stale flag vs the heartbeat, optional deviation vs a reference price, and per-factor flags. Read-only, descriptive. Args: feed_address, chain, heartbeat_seconds (optional), reference (optional). Without payment returns the x402 challenge; pass x_payment.

  Paramètres, retour & exemple (5)

  Paramètres

  • chain · string · requis · ethereum | base | arbitrum | polygon | bsc | optimism
    Chain the feed is deployed on.
  • reference · number · optionnel
    A reference price to compute deviation % against (optional).
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID read. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
  • feed_address · string · requis
    Chainlink aggregator/proxy address (0x…40-hex), e.g. ETH/USD 0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419.
  • heartbeat_seconds · number · optionnel
    The feed's heartbeat in seconds for a precise stale check (optional).

  Exemple d'appel

  {"name": "oracle_health", "arguments": {"chain": "ethereum", "feed_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• token_unlocks≈ 309 tokens

  PAID $0.003 (x402, USDC on Base). Next token vesting/unlock event(s) from DefiLlama's PUBLIC emissions dataset: upcoming unlock date(s), token amount, and % of max supply, with a human description. Cleanly says so when a token has no public unlock schedule. Read-only, descriptive — NOT a price signal. Args: token (symbol, protocol name, or contract address), chain (optional, for address lookup). Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (3)

  Paramètres

  • chain · string · optionnel
    Chain of the contract address (only used when token is an address).
  • token · string · requis
    Token symbol (e.g. ARB), protocol name (e.g. arbitrum), or contract address.
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID read. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "token_unlocks", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://chain.fabtally.com/mcp